diff --git a/.gitattributes b/.gitattributes index 624528a410c..9b4e1240e7c 100644 --- a/.gitattributes +++ b/.gitattributes @@ -1,8 +1,6 @@ # Collapsing generated schemas from PR diff by default /python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml linguist-generated=true -merge -diff -/python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.jsonschema.json linguist-generated=true -merge -diff /python-avd/pyavd/_eos_designs/schema/eos_designs.schema.yml linguist-generated=true -merge -diff -/python-avd/pyavd/_eos_designs/schema/eos_designs.jsonschema.json linguist-generated=true -merge -diff # Showing generated tables in PR diff by default by count as generated and automatically use the latest file on merge /ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/* linguist-generated=true -merge diff diff --git a/.github/.markdownlint.yaml b/.github/.markdownlint.yaml index db2a0c1275d..1804cf75dcf 100644 --- a/.github/.markdownlint.yaml +++ b/.github/.markdownlint.yaml @@ -91,3 +91,8 @@ MD049: MD050: # Strong style should be consistent style: "asterisk" + +# MD037/no-space-in-emphasis - Spaces inside emphasis markers +# This incorrectly catches stars used in table contents, so *foo | *bar is triggered to remove the space between | and *bar. +MD037: + false diff --git a/.github/workflows/pull-request-management.yml b/.github/workflows/pull-request-management.yml index e0a1c06dc73..f2c99769639 100644 --- a/.github/workflows/pull-request-management.yml +++ b/.github/workflows/pull-request-management.yml @@ -458,7 +458,7 @@ jobs: # The version conflicts with our requirements, # so we let the galaxy-importer version resolve remaining requirements. run: | - pip install "galaxy-importer==0.4.20" + pip install "galaxy-importer==0.4.25" - name: 'Build ansible package' run: make collection-build - name: 'Run galaxy-importer checks' diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index cdd64091ed1..0343bd2d1d8 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -1,7 +1,7 @@ # See https://pre-commit.com for more information # See https://pre-commit.com/hooks.html for more hooks ci: - autoupdate_commit_msg: "Bump: pre-commit autoupdate" + autoupdate_commit_msg: "CI: pre-commit autoupdate" repos: - repo: https://github.com/pre-commit/pre-commit-hooks rev: v4.6.0 @@ -75,7 +75,7 @@ repos: - repo: https://github.com/astral-sh/ruff-pre-commit # Ruff version. - rev: v0.5.7 + rev: v0.6.7 hooks: # Run the linter. - id: ruff @@ -85,7 +85,7 @@ repos: - id: ruff-format - repo: https://github.com/pycqa/pylint - rev: "v3.2.6" + rev: "v3.3.0" hooks: - id: pylint # Use pylintrc file in repository name: Check for Linting errors on Python files outside the Ansible collection. @@ -137,7 +137,6 @@ repos: ansible_collections/arista/avd/changelogs/.*| # Exclude all files in this directory ansible_collections/arista/avd/roles/.*/docs/tables/.*\.md| # Exclude all .md files in tables python-avd/pyavd/.*/schema/.*schema\.yml| # Exclude YAML schemas file - python-avd/pyavd/.*/schema/.*jsonschema\.json| # Exclude JSON schemas file python-avd/pyavd/_cv/api/.*| # Exclude auto generated files for CV API python-avd/pyavd/_cv/extra_cv_protos/.*| # Exclude extra CV proto files ansible-avd/ansible_collections/arista/avd/docs/plugins/.* | # Excluded auto generated doc for Ansible plugins @@ -206,12 +205,12 @@ repos: additional_dependencies: ['deepmerge>=1.1.0', 'PyYAML>=6.0.0', 'pydantic>=2.3.0', 'jsonschema>=4.10.3', 'referencing>=0.35.0'] - id: templates - name: Precompile eos_cli_config_gen Jinja2 + name: Precompile Jinja2 templates entry: sh -c 'python-avd/scripts/compile_templates.py' language: python - files: python-avd/pyavd/_eos_cli_config_gen/j2templates/ + files: python-avd/pyavd/(_eos_cli_config_gen|_eos_designs)/j2templates/ pass_filenames: false - additional_dependencies: ['Jinja2>=3.0.0', 'cryptography>=38.0.4', 'deepmerge>=1.1.0', 'jsonschema>=4.10.3'] + additional_dependencies: ['Jinja2>=3.0.0', 'cryptography>=38.0.4', 'deepmerge>=1.1.0'] - repo: https://github.com/igorshubovych/markdownlint-cli rev: v0.41.0 diff --git a/Makefile b/Makefile index 68f9e2c685c..e438431ad86 100644 --- a/Makefile +++ b/Makefile @@ -83,3 +83,11 @@ unit-tests: ## Run unit test cases using ansible-test. Specify `ANSIBLE_TEST_MOD integration-tests: ## Run integration test cases using ansible-test. Specify `ANSIBLE_TEST_MODE=` (default: `venv`). cd ansible_collections/arista/avd/ ; \ ansible-test integration --requirements --$(ANSIBLE_TEST_MODE) + +#################### +# Random shortcuts # +#################### + +.PHONY: config-diff +config-diff: ## Run git diff comparing molecule configs with 'devel' using our special config diff ignoring reordering of config lines. + @GIT_EXTERNAL_DIFF=development/compare.py git diff devel --ext-diff -- **/configs/*.cfg diff --git a/ansible_collections/arista/avd/docs/_media/eos_validate_state_dark.svg b/ansible_collections/arista/avd/docs/_media/eos_validate_state_dark.svg index 5e959c88300..5aab0ed9dd6 100644 --- a/ansible_collections/arista/avd/docs/_media/eos_validate_state_dark.svg +++ b/ansible_collections/arista/avd/docs/_media/eos_validate_state_dark.svg @@ -1,16 +1,21 @@ - + - - reports/<fabric_name>OutputStructuredEOS Configintended/structured_configseos_validate_stateModules:- include_vars- eos_command- assert- template- read_csvInputEOS Fabric \ No newline at end of file + reports/<fabric_name>reports/test_resultsOutputStructuredEOS ConfigANTATest Catalogintended/structured_configsintended/test_catalogseos_validate_stateANTAInputEOS FabricModules:- arista.avd.eos_validate_state_runner- arista.avd.eos_validate_state_reports \ No newline at end of file diff --git a/ansible_collections/arista/avd/docs/_media/eos_validate_state_light.svg b/ansible_collections/arista/avd/docs/_media/eos_validate_state_light.svg index ef862439da4..18990bd26b3 100644 --- a/ansible_collections/arista/avd/docs/_media/eos_validate_state_light.svg +++ b/ansible_collections/arista/avd/docs/_media/eos_validate_state_light.svg @@ -1,16 +1,21 @@ - + - - reports/<fabric_name>OutputStructuredEOS Configintended/structured_configseos_validate_stateModules:- include_vars- eos_command- assert- template- read_csvInputEOS Fabric \ No newline at end of file + reports/<fabric_name>reports/test_resultsOutputStructuredEOS ConfigANTATest Catalogintended/structured_configsintended/test_catalogseos_validate_stateANTAInputEOS FabricModules:- arista.avd.eos_validate_state_runner- arista.avd.eos_validate_state_reports \ No newline at end of file diff --git a/ansible_collections/arista/avd/docs/_media/excalidraw/eos_validate_state.excalidraw b/ansible_collections/arista/avd/docs/_media/excalidraw/eos_validate_state.excalidraw index d920b62be27..2917dcb853b 100644 --- a/ansible_collections/arista/avd/docs/_media/excalidraw/eos_validate_state.excalidraw +++ b/ansible_collections/arista/avd/docs/_media/excalidraw/eos_validate_state.excalidraw @@ -1,12 +1,12 @@ { "type": "excalidraw", "version": 2, - "source": "https://app.excalidraw.com", + "source": "https://marketplace.visualstudio.com/items?itemName=pomdtr.excalidraw-editor", "elements": [ { "type": "text", - "version": 305, - "versionNonce": 1290244063, + "version": 631, + "versionNonce": 537063454, "isDeleted": false, "id": "Zvewl9phm7Hj_-9VAcd_8", "fillStyle": "hachure", @@ -15,32 +15,70 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 824, - "y": 338.5, - "strokeColor": "#000000", + "x": 867.953125, + "y": 311.5, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 248, + "width": 246.09375, "height": 24, "seed": 57657390, "groupIds": [], - "strokeSharpness": "sharp", + "frameId": null, + "roundness": null, "boundElements": [], - "updated": 1667426926920, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 20, "fontFamily": 3, "text": "reports/", - "baseline": 19, "textAlign": "center", "verticalAlign": "top", "containerId": null, - "originalText": "reports/" + "originalText": "reports/", + "lineHeight": 1.2, + "baseline": 19 + }, + { + "type": "text", + "version": 845, + "versionNonce": 167389378, + "isDeleted": false, + "id": "9Inth4ydynMZtMvVjCJRO", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 878.8125, + "y": 472.5, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 234.375, + "height": 24, + "seed": 620633024, + "groupIds": [], + "frameId": null, + "roundness": null, + "boundElements": [], + "updated": 1723481969779, + "link": null, + "locked": false, + "fontSize": 20, + "fontFamily": 3, + "text": "reports/test_results", + "textAlign": "center", + "verticalAlign": "top", + "containerId": null, + "originalText": "reports/test_results", + "lineHeight": 1.2, + "baseline": 19 }, { "type": "image", - "version": 268, - "versionNonce": 50405777, + "version": 576, + "versionNonce": 1398392211, "isDeleted": false, "id": "ONrV9RmOMSdzu2QQkTcG3", "fillStyle": "hachure", @@ -49,17 +87,20 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 874, - "y": 251, + "x": 917, + "y": 224, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 80, "height": 80, "seed": 365633710, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426926920, + "updated": 1723475274659, "link": null, "locked": false, "status": "saved", @@ -71,8 +112,8 @@ }, { "type": "image", - "version": 342, - "versionNonce": 38288383, + "version": 650, + "versionNonce": 2084393245, "isDeleted": false, "id": "RbHSKg4hFnT2AtFR-IpS_", "fillStyle": "hachure", @@ -81,17 +122,20 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 971, - "y": 262, + "x": 1014, + "y": 235, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 58, "height": 58, "seed": 1825274994, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426926920, + "updated": 1723475274659, "link": null, "locked": false, "status": "saved", @@ -103,8 +147,8 @@ }, { "type": "rectangle", - "version": 603, - "versionNonce": 1382598513, + "version": 930, + "versionNonce": 1219181662, "isDeleted": false, "id": "wjQ2Ta9Mkx668BKIvVlse", "fillStyle": "hachure", @@ -113,24 +157,70 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 810, - "y": 247, - "strokeColor": "#000000", + "x": 853, + "y": 220, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 271.99999999999994, "height": 129, "seed": 329091950, "groupIds": [], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1667426926920, + "frameId": null, + "roundness": { + "type": 1 + }, + "boundElements": [ + { + "id": "bfvv7DKd0EaLS1Y4_bMYE", + "type": "arrow" + }, + { + "id": "b7QKUNZPjqi-PB87fiR6T", + "type": "arrow" + } + ], + "updated": 1723481969779, + "link": null, + "locked": false + }, + { + "type": "rectangle", + "version": 1151, + "versionNonce": 1476116610, + "isDeleted": false, + "id": "1l3VhcJU28xDP4qgjX8jU", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 853.9999999999999, + "y": 385, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 271.99999999999994, + "height": 129, + "seed": 1847215040, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 1 + }, + "boundElements": [ + { + "id": "b7QKUNZPjqi-PB87fiR6T", + "type": "arrow" + } + ], + "updated": 1723481969779, "link": null, "locked": false }, { "type": "text", - "version": 207, - "versionNonce": 306556433, + "version": 539, + "versionNonce": 117440670, "isDeleted": false, "id": "vlWefLF-vnBf60g0KVZWl", "fillStyle": "hachure", @@ -139,32 +229,36 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 894.4772727272726, - "y": 189.2411616161616, - "strokeColor": "#000000", + "x": 937.4772727272726, + "y": 161.2411616161616, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 100, + "width": 98.4375, "height": 34, "seed": 213473183, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426935771, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 28, "fontFamily": 3, "text": "Output", - "baseline": 27, "textAlign": "left", "verticalAlign": "top", "containerId": null, - "originalText": "Output" + "originalText": "Output", + "lineHeight": 1.2142857142857142, + "baseline": 27 }, { "type": "text", - "version": 414, - "versionNonce": 312862463, + "version": 643, + "versionNonce": 1769234498, "isDeleted": false, "id": "LiFCRqfUl5ZHGOneowZnr", "fillStyle": "hachure", @@ -173,32 +267,74 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 72.94444444444412, - "y": 235.38888888888886, - "strokeColor": "#000000", + "x": -24.149305555555884, + "y": 221.38888888888886, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 119, + "width": 117.1875, "height": 48, "seed": 1353273279, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426661509, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 20, "fontFamily": 3, "text": "Structured\nEOS Config", - "baseline": 43, "textAlign": "center", "verticalAlign": "top", "containerId": null, - "originalText": "Structured\nEOS Config" + "originalText": "Structured\nEOS Config", + "lineHeight": 1.2, + "baseline": 43 + }, + { + "type": "text", + "version": 967, + "versionNonce": 1588739294, + "isDeleted": false, + "id": "Iv0vm_mc2HZYkUa05r2z-", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 871.1319444444441, + "y": 576.3888888888889, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 140.625, + "height": 48, + "seed": 1861465024, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [], + "updated": 1723481969779, + "link": null, + "locked": false, + "fontSize": 20, + "fontFamily": 3, + "text": "ANTA\nTest Catalog", + "textAlign": "center", + "verticalAlign": "top", + "containerId": null, + "originalText": "ANTA\nTest Catalog", + "lineHeight": 1.2, + "baseline": 43 }, { "type": "image", - "version": 582, - "versionNonce": 1078938737, + "version": 787, + "versionNonce": 1935125053, "isDeleted": false, "id": "Ds0fcEqUEXRKOQHbDGdC_", "fillStyle": "hachure", @@ -207,17 +343,55 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 205.33333333333326, - "y": 229.66666666666669, + "x": 107.33333333333326, + "y": 216.66666666666669, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 75, "height": 75, "seed": 1696845745, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [], + "updated": 1723475274659, + "link": null, + "locked": false, + "status": "saved", + "fileId": "59454aaa34066d746b3f8e4fbb60176834d966fb2d98f230db8a5e74281c6504ab53a078f5a400ec77a24bb890f07aab", + "scale": [ + 1, + 1 + ] + }, + { + "type": "image", + "version": 1100, + "versionNonce": 1325196307, + "isDeleted": false, + "id": "o_11SzqOd1FdF8Okoke4e", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 1014.3333333333333, + "y": 570.6666666666667, + "strokeColor": "transparent", + "backgroundColor": "transparent", + "width": 75, + "height": 75, + "seed": 1914857536, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426661509, + "updated": 1723475274659, "link": null, "locked": false, "status": "saved", @@ -229,8 +403,8 @@ }, { "type": "rectangle", - "version": 1246, - "versionNonce": 625619889, + "version": 1475, + "versionNonce": 1245906946, "isDeleted": false, "id": "kjtD0nAV0gTQ-feRdr5XT", "fillStyle": "hachure", @@ -239,33 +413,66 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 43.66666666666674, - "y": 220.77777777777777, - "strokeColor": "#000000", + "x": -54.33333333333326, + "y": 206.77777777777777, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 279.6666666666663, "height": 143.4444444444444, "seed": 1267138527, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 1 + }, "boundElements": [ { - "id": "ePC2GkfUeCPqPocF8Sx0z", + "id": "IGeW7H-8O9p1S-sdn-inq", "type": "arrow" - }, + } + ], + "updated": 1723481969779, + "link": null, + "locked": false + }, + { + "type": "rectangle", + "version": 1782, + "versionNonce": 894628126, + "isDeleted": false, + "id": "V8LUUCYxWB9YfL-oFV-qN", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 852.6666666666667, + "y": 561.7777777777778, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 279.6666666666663, + "height": 143.4444444444444, + "seed": 96943040, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 1 + }, + "boundElements": [ { - "id": "IGeW7H-8O9p1S-sdn-inq", + "id": "urMyZgPoZUu4QHYhvXu6V", "type": "arrow" } ], - "updated": 1667426960512, + "updated": 1723481969779, "link": null, "locked": false }, { "type": "text", - "version": 75, - "versionNonce": 1584305745, + "version": 304, + "versionNonce": 845592514, "isDeleted": false, "id": "cC3QzMwRJAetFveXZ03DF", "fillStyle": "hachure", @@ -274,32 +481,74 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 59.99999999999977, - "y": 324.3333333333333, - "strokeColor": "#000000", + "x": -38.00000000000023, + "y": 310.3333333333333, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 255, + "width": 253.125, "height": 19, "seed": 1414574481, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426661509, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 16, "fontFamily": 3, "text": "intended/structured_configs", - "baseline": 15, "textAlign": "left", "verticalAlign": "top", "containerId": null, - "originalText": "intended/structured_configs" + "originalText": "intended/structured_configs", + "lineHeight": 1.1875, + "baseline": 15 + }, + { + "type": "text", + "version": 642, + "versionNonce": 374545758, + "isDeleted": false, + "id": "J9ezEbT-DVsA8zI_kYWPL", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 868.9999999999998, + "y": 665.3333333333333, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 206.25, + "height": 19, + "seed": 170614848, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [], + "updated": 1723481969779, + "link": null, + "locked": false, + "fontSize": 16, + "fontFamily": 3, + "text": "intended/test_catalogs", + "textAlign": "left", + "verticalAlign": "top", + "containerId": null, + "originalText": "intended/test_catalogs", + "lineHeight": 1.1875, + "baseline": 15 }, { "type": "text", - "version": 694, - "versionNonce": 885674929, + "version": 937, + "versionNonce": 33451906, "isDeleted": false, "id": "9G5q6wBseN-GOrCfYhK0x", "fillStyle": "hachure", @@ -308,32 +557,70 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 474, - "y": 222.25, - "strokeColor": "#000000", + "x": 437.03125, + "y": 237.25, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 213, + "width": 210.9375, "height": 24, "seed": 1650658687, "groupIds": [], - "strokeSharpness": "sharp", + "frameId": null, + "roundness": null, "boundElements": [], - "updated": 1667426919531, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 20, "fontFamily": 3, "text": "eos_validate_state", - "baseline": 19, "textAlign": "center", "verticalAlign": "top", "containerId": null, - "originalText": "eos_validate_state" + "originalText": "eos_validate_state", + "lineHeight": 1.2, + "baseline": 19 + }, + { + "type": "text", + "version": 1108, + "versionNonce": 1996734878, + "isDeleted": false, + "id": "79Hx23o18xrAzTWnZOK7I", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "dashed", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 463.6875, + "y": 288.45, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 65.625, + "height": 33.6, + "seed": 703423424, + "groupIds": [], + "frameId": null, + "roundness": null, + "boundElements": [], + "updated": 1723481969779, + "link": null, + "locked": false, + "fontSize": 28, + "fontFamily": 3, + "text": "ANTA", + "textAlign": "center", + "verticalAlign": "top", + "containerId": null, + "originalText": "ANTA", + "lineHeight": 1.2, + "baseline": 26 }, { "type": "rectangle", - "version": 1180, - "versionNonce": 1545510879, + "version": 1530, + "versionNonce": 1028206402, "isDeleted": false, "id": "87eznxqCZV8KSbFJ4bhWo", "fillStyle": "hachure", @@ -342,175 +629,223 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 421.5, - "y": 209, - "strokeColor": "#000000", + "x": 332.5, + "y": 224, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 310.9999999999999, - "height": 198.00000000000003, + "width": 420.9999999999999, + "height": 211.99999999999997, "seed": 46335391, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 1 + }, "boundElements": [ { - "id": "1iBO6zAr14kgYvu61pDU2", + "id": "IGeW7H-8O9p1S-sdn-inq", "type": "arrow" }, { - "id": "xgWEFz4E5aIAAGjFavczr", + "id": "04T4hn4rF_vCWr-SBG5nj", "type": "arrow" }, { - "id": "r-Tlu6ynVXG5bhSBg3O0p", + "id": "bfvv7DKd0EaLS1Y4_bMYE", "type": "arrow" }, { - "id": "IGeW7H-8O9p1S-sdn-inq", + "id": "b7QKUNZPjqi-PB87fiR6T", "type": "arrow" }, { - "id": "04T4hn4rF_vCWr-SBG5nj", + "id": "urMyZgPoZUu4QHYhvXu6V", "type": "arrow" } ], - "updated": 1667426969004, + "updated": 1723481969779, "link": null, "locked": false }, { "type": "text", - "version": 535, - "versionNonce": 1954985361, + "version": 307, + "versionNonce": 2056642014, "isDeleted": false, - "id": "mjc860xjyGfTVY267tJdm", + "id": "2mjlCErFCsemgFXWAtljL", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 460.25, - "y": 260, - "strokeColor": "#000000", + "x": 42.83333333333334, + "y": 159.72222222222234, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 132, - "height": 114, - "seed": 1125181393, + "width": 82.03125, + "height": 34, + "seed": 308790257, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426919531, + "updated": 1723481969779, "link": null, "locked": false, - "fontSize": 16, + "fontSize": 28, "fontFamily": 3, - "text": "Modules:\n- include_vars\n- eos_command\n- assert\n- template\n- read_csv", - "baseline": 110, + "text": "Input", "textAlign": "left", "verticalAlign": "top", "containerId": null, - "originalText": "Modules:\n- include_vars\n- eos_command\n- assert\n- template\n- read_csv" + "originalText": "Input", + "lineHeight": 1.2142857142857142, + "baseline": 27 }, { - "type": "image", - "version": 437, - "versionNonce": 76933119, + "type": "arrow", + "version": 703, + "versionNonce": 145094402, "isDeleted": false, - "id": "UUBtpMv35iVIpMo0A7WSD", + "id": "IGeW7H-8O9p1S-sdn-inq", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 571.6111111111113, - "y": 315.94444444444446, - "strokeColor": "transparent", + "x": 226.3333333333331, + "y": 261.88526021450366, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 137.7777777777776, - "height": 55.11111111111103, - "seed": 1286636351, + "width": 101.3888888888892, + "height": 9.5498759387375, + "seed": 1934903569, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426919531, + "updated": 1723481969779, "link": null, "locked": false, - "status": "saved", - "fileId": "272acf35044b9c4b6ec5531a011ca4491ffabf44498ae07fc33afea4b6c4e34d1a047734f9dec1f84773cc06fa30fc53", - "scale": [ - 1, - 1 + "startBinding": { + "elementId": "kjtD0nAV0gTQ-feRdr5XT", + "focus": -0.35197058527536684, + "gap": 1.0000000000000568 + }, + "endBinding": { + "elementId": "87eznxqCZV8KSbFJ4bhWo", + "focus": 0.30428839466292906, + "gap": 4.7777777777777715 + }, + "lastCommittedPoint": null, + "startArrowhead": null, + "endArrowhead": "triangle", + "points": [ + [ + 0, + 0 + ], + [ + 101.3888888888892, + 9.5498759387375 + ] ] }, { - "type": "text", - "version": 71, - "versionNonce": 1722046257, + "type": "arrow", + "version": 875, + "versionNonce": 907702814, "isDeleted": false, - "id": "2mjlCErFCsemgFXWAtljL", + "id": "bfvv7DKd0EaLS1Y4_bMYE", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 140.83333333333334, - "y": 173.72222222222234, - "strokeColor": "#000000", + "x": 758.333333333333, + "y": 277.88824916874535, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 84, - "height": 34, - "seed": 308790257, + "width": 88.38888888888914, + "height": 0.4760908636141039, + "seed": 1242000320, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426946562, + "updated": 1723481969779, "link": null, "locked": false, - "fontSize": 28, - "fontFamily": 3, - "text": "Input", - "baseline": 27, - "textAlign": "left", - "verticalAlign": "top", - "containerId": null, - "originalText": "Input" + "startBinding": { + "elementId": "87eznxqCZV8KSbFJ4bhWo", + "focus": -0.49724358677597774, + "gap": 4.833333333333087 + }, + "endBinding": { + "elementId": "wjQ2Ta9Mkx668BKIvVlse", + "focus": 0.0823102446439718, + "gap": 6.277777777777828 + }, + "lastCommittedPoint": null, + "startArrowhead": null, + "endArrowhead": "triangle", + "points": [ + [ + 0, + 0 + ], + [ + 88.38888888888914, + 0.4760908636141039 + ] + ] }, { "type": "arrow", - "version": 56, - "versionNonce": 1639974911, + "version": 1160, + "versionNonce": 613664450, "isDeleted": false, - "id": "IGeW7H-8O9p1S-sdn-inq", + "id": "b7QKUNZPjqi-PB87fiR6T", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 324.16666666666674, - "y": 275.9444444444445, - "strokeColor": "#000000", + "x": 758.333333333333, + "y": 382.8243533008231, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 95.55555555555554, - "height": 6.666666666666686, - "seed": 1934903569, + "width": 93.38888888888914, + "height": 67.25585419234733, + "seed": 379062336, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426960515, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { - "elementId": "kjtD0nAV0gTQ-feRdr5XT", - "focus": -0.3236394773563361, - "gap": 1 + "elementId": "87eznxqCZV8KSbFJ4bhWo", + "focus": -0.3969483523867932, + "gap": 4.833333333333087 }, "endBinding": { - "elementId": "87eznxqCZV8KSbFJ4bhWo", - "focus": 0.13123507756724545, - "gap": 1.7777777777777715 + "elementId": "1l3VhcJU28xDP4qgjX8jU", + "focus": -0.6166078436747515, + "gap": 2.2777777777776578 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -521,45 +856,48 @@ 0 ], [ - 95.55555555555554, - 6.666666666666686 + 93.38888888888914, + 67.25585419234733 ] ] }, { "type": "arrow", - "version": 173, - "versionNonce": 1645686777, + "version": 1472, + "versionNonce": 1954709086, "isDeleted": false, - "id": "04T4hn4rF_vCWr-SBG5nj", + "id": "urMyZgPoZUu4QHYhvXu6V", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 355.42504847604357, - "y": 448.16666666666674, - "strokeColor": "#000000", + "x": 735.2023006763702, + "y": 430.4510464747676, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 64.29717374617871, - "height": 79.61251473212309, - "seed": 539212657, + "width": 109.51992154585196, + "height": 200.91480089356605, + "seed": 1366162368, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939872517, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { - "elementId": "CK5D_wmQ9ss8CAzbcEVGR", - "focus": 0.19297063025457487, - "gap": 2.762626262626327 + "elementId": "FAKdhjDAfz-56GN9yNGoE", + "focus": -0.9903858087023499, + "gap": 5.776804050525129 }, "endBinding": { - "elementId": "87eznxqCZV8KSbFJ4bhWo", - "focus": 0.4602689814070621, - "gap": 1.7777777777777715 + "elementId": "V8LUUCYxWB9YfL-oFV-qN", + "focus": -0.3273723216307093, + "gap": 7.944444444444571 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -570,40 +908,55 @@ 0 ], [ - 64.29717374617871, - -79.61251473212309 + 13.18406295999364, + 176.72319594947487 + ], + [ + 109.51992154585196, + 200.91480089356605 ] ] }, { "type": "arrow", - "version": 53, - "versionNonce": 1440107569, + "version": 819, + "versionNonce": 1773248130, "isDeleted": false, - "id": "uanVVSWhcQG3v6FuTZxLf", + "id": "04T4hn4rF_vCWr-SBG5nj", "fillStyle": "hachure", "strokeWidth": 1, "strokeStyle": "solid", "roughness": 0, "opacity": 100, "angle": 0, - "x": 733.0555555555557, - "y": 314.83333333333337, - "strokeColor": "#000000", + "x": 271.38534507463396, + "y": 434.16666666666674, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 80, - "height": 0, - "seed": 1546434417, + "width": 54.336877147588325, + "height": 48.757515341534486, + "seed": 539212657, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667426988191, + "updated": 1723481969779, "link": null, "locked": false, - "startBinding": null, - "endBinding": null, + "startBinding": { + "elementId": "CK5D_wmQ9ss8CAzbcEVGR", + "focus": 0.0999854818584104, + "gap": 2.762626262626327 + }, + "endBinding": { + "elementId": "87eznxqCZV8KSbFJ4bhWo", + "focus": 0.47326254719580874, + "gap": 6.7777777777777715 + }, "lastCommittedPoint": null, - "startArrowhead": "triangle", + "startArrowhead": null, "endArrowhead": "triangle", "points": [ [ @@ -611,15 +964,15 @@ 0 ], [ - 80, - 0 + 54.336877147588325, + -48.757515341534486 ] ] }, { "type": "text", - "version": 955, - "versionNonce": 2084434391, + "version": 1179, + "versionNonce": 2057241246, "isDeleted": false, "id": "gJ7xv1_eFQtlzHy6MPDLP", "fillStyle": "hachure", @@ -628,32 +981,36 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 127.61616161616189, - "y": 455.19696969696986, - "strokeColor": "#000000", + "x": 30.52241161616189, + "y": 441.19696969696986, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", - "width": 119, + "width": 117.1875, "height": 24, "seed": 1423387575, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939872516, + "updated": 1723481969779, "link": null, "locked": false, "fontSize": 20, "fontFamily": 3, "text": "EOS Fabric", - "baseline": 19, "textAlign": "center", "verticalAlign": "top", "containerId": null, - "originalText": "EOS Fabric" + "originalText": "EOS Fabric", + "lineHeight": 1.2, + "baseline": 19 }, { "type": "rectangle", - "version": 1929, - "versionNonce": 1681128217, + "version": 2152, + "versionNonce": 1153334850, "isDeleted": false, "id": "CK5D_wmQ9ss8CAzbcEVGR", "fillStyle": "hachure", @@ -662,49 +1019,32 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": -27.227272727272293, - "y": 450.92929292929307, - "strokeColor": "#000000", + "x": -125.2272727272723, + "y": 436.92929292929307, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 429.45454545454515, "height": 256.69696969696946, "seed": 1749798713, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 1 + }, "boundElements": [ - { - "id": "UGLdyChh1cqZmqejCFnej", - "type": "arrow" - }, - { - "id": "xgWEFz4E5aIAAGjFavczr", - "type": "arrow" - }, - { - "id": "ChPJld188HfyhMgYc5Ths", - "type": "arrow" - }, - { - "id": "ShWlCDX4G5DP4GwSRjnU4", - "type": "arrow" - }, - { - "id": "t8Q3GeoxpW_ZZW0NV00vs", - "type": "arrow" - }, { "id": "04T4hn4rF_vCWr-SBG5nj", "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723481969779, "link": null, "locked": false }, { "type": "arrow", - "version": 2814, - "versionNonce": 1756619735, + "version": 3128, + "versionNonce": 1260453598, "isDeleted": false, "id": "eglN6hOyD0IlRFH-GDP70", "fillStyle": "hachure", @@ -713,24 +1053,31 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 44.597412313127506, - "y": 629.9924242424241, - "strokeColor": "#000000", + "x": -53.402587686872494, + "y": 615.9924242424241, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 61.36682070438201, "height": 85.95454545454515, "seed": 1854315735, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873123, + "updated": 1723481969779, "link": null, "locked": false, - "startBinding": null, + "startBinding": { + "elementId": "nKJzjdt2KcIXk4J4J8QAI", + "focus": -0.42190816837314804, + "gap": 1 + }, "endBinding": { "elementId": "cI--RkKeLn_xuyqpyweju", - "focus": -0.463488424172936, - "gap": 2.093434343434467 + "focus": -0.4481238485455213, + "gap": 1.0934343434345237 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -748,8 +1095,8 @@ }, { "type": "arrow", - "version": 2924, - "versionNonce": 399386905, + "version": 3237, + "versionNonce": 848913922, "isDeleted": false, "id": "gB01RK1LG4yjUQXN7Z-jq", "fillStyle": "hachure", @@ -758,24 +1105,31 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 46.40041098566212, - "y": 629.9722222222223, - "strokeColor": "#000000", + "x": -51.59958901433788, + "y": 615.9722222222223, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 229.54997156064837, "height": 85.75757575757552, "seed": 408911897, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, - "startBinding": null, + "startBinding": { + "elementId": "nKJzjdt2KcIXk4J4J8QAI", + "focus": -0.7317174294319478, + "gap": 1 + }, "endBinding": { "elementId": "xbwUcynOs_U3auH0FPw5Q", - "focus": -0.7845822652803759, - "gap": 2.270202020202248 + "focus": -0.7577290953523401, + "gap": 1.270202020202305 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -793,8 +1147,8 @@ }, { "type": "arrow", - "version": 3056, - "versionNonce": 1044094457, + "version": 3457, + "versionNonce": 1788441374, "isDeleted": false, "id": "4XD9fcdmfFUAgbj4QPmf9", "fillStyle": "hachure", @@ -803,28 +1157,31 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 137.82442972307467, - "y": 627.8333333333336, - "strokeColor": "#000000", + "x": 39.82442972307467, + "y": 613.8333333333336, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 30.529113715464064, "height": 84.46212121212113, "seed": 1063971319, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "EX1T0KTQnxrKLKRzY9FB7", - "focus": 0.29495388174639336, - "gap": 2.1111111111112564 + "focus": 0.30474657479176415, + "gap": 3.1111111111112564 }, "endBinding": { "elementId": "cI--RkKeLn_xuyqpyweju", - "focus": 0.22480242600440775, - "gap": 1.4267676767679518 + "focus": 0.21500973295903694, + "gap": 1 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -842,8 +1199,8 @@ }, { "type": "arrow", - "version": 3099, - "versionNonce": 619149017, + "version": 3493, + "versionNonce": 1010914754, "isDeleted": false, "id": "Jbf4zgVJiIMRe_1EImsQM", "fillStyle": "hachure", @@ -852,27 +1209,30 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 140.42405645310487, - "y": 627.8333333333336, - "strokeColor": "#000000", + "x": 42.42405645310487, + "y": 614.8333333333336, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 136.85421369983305, "height": 85.1111111111112, "seed": 1888097529, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "EX1T0KTQnxrKLKRzY9FB7", - "focus": -0.6232111909549859, + "focus": -0.6232111909549862, "gap": 2.1111111111112564 }, "endBinding": { "elementId": "xbwUcynOs_U3auH0FPw5Q", - "focus": -0.6468237021498814, + "focus": -0.6468237021498829, "gap": 1 }, "lastCommittedPoint": null, @@ -891,8 +1251,8 @@ }, { "type": "arrow", - "version": 2857, - "versionNonce": 2120561593, + "version": 3257, + "versionNonce": 595156830, "isDeleted": false, "id": "7Lfv7eqNbBBRAdyWGHe7I", "fillStyle": "hachure", @@ -901,29 +1261,28 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 232.47389869929225, - "y": 627.8333333333336, - "strokeColor": "#000000", + "x": 134.47389869929225, + "y": 613.8333333333336, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 124.81658905768973, "height": 85.47527494477674, "seed": 1149801239, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "MBFVWViDUYVounlMQdR4l", - "focus": 0.6643540408367982, - "gap": 2.1111111111112564 - }, - "endBinding": { - "elementId": "cI--RkKeLn_xuyqpyweju", - "focus": 0.5669201266538466, - "gap": 1 + "focus": 0.6862469019887771, + "gap": 3.1111111111112564 }, + "endBinding": null, "lastCommittedPoint": null, "startArrowhead": null, "endArrowhead": null, @@ -940,8 +1299,8 @@ }, { "type": "arrow", - "version": 2895, - "versionNonce": 1591235737, + "version": 3295, + "versionNonce": 1926581634, "isDeleted": false, "id": "lXW0FYYwj8-PE0XuyBr6B", "fillStyle": "hachure", @@ -950,29 +1309,28 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 233.95034997243442, - "y": 627.8333333333336, - "strokeColor": "#000000", + "x": 135.95034997243442, + "y": 613.8333333333336, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 43.52815041739268, "height": 85.11111111111109, "seed": 340725209, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "MBFVWViDUYVounlMQdR4l", - "focus": -0.2886540920509795, - "gap": 2.1111111111112564 - }, - "endBinding": { - "elementId": "xbwUcynOs_U3auH0FPw5Q", - "focus": -0.3746723501979243, - "gap": 1 + "focus": -0.30113509134086786, + "gap": 3.1111111111112564 }, + "endBinding": null, "lastCommittedPoint": null, "startArrowhead": null, "endArrowhead": null, @@ -989,8 +1347,8 @@ }, { "type": "arrow", - "version": 2766, - "versionNonce": 167008633, + "version": 3170, + "versionNonce": 1242678174, "isDeleted": false, "id": "lvTCIDwVaR_gIeeU7UZIm", "fillStyle": "hachure", @@ -999,28 +1357,31 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 322.0917062684032, - "y": 629.3888888888893, - "strokeColor": "#000000", + "x": 225.0917062684032, + "y": 615.3888888888893, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 213.54742165587413, "height": 85.96831910073217, "seed": 1716787255, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "N6q6jMuYMY42ZoH7CAPtg", - "focus": 0.705618245902766, - "gap": 1 + "focus": 0.7425034918044059, + "gap": 1.5555555555553724 }, "endBinding": { "elementId": "cI--RkKeLn_xuyqpyweju", - "focus": 0.7172127888880808, - "gap": 1.4761253437125674 + "focus": 0.6803275429864423, + "gap": 1 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -1038,8 +1399,8 @@ }, { "type": "arrow", - "version": 2810, - "versionNonce": 16564825, + "version": 3211, + "versionNonce": 1804881218, "isDeleted": false, "id": "edABZbeqA3uKN3ARJjskZ", "fillStyle": "hachure", @@ -1048,28 +1409,31 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 325.19453318482806, - "y": 628.8611111111112, - "strokeColor": "#000000", + "x": 227.19453318482806, + "y": 614.8611111111112, + "strokeColor": "#1e1e1e", "backgroundColor": "transparent", "width": 46.412012940873865, "height": 85.3841293690599, "seed": 1791093433, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [], - "updated": 1667939873124, + "updated": 1723481969779, "link": null, "locked": false, "startBinding": { "elementId": "N6q6jMuYMY42ZoH7CAPtg", - "focus": 0.3907835863128402, - "gap": 1.083333333333428 + "focus": 0.40377272605631326, + "gap": 2.083333333333428 }, "endBinding": { "elementId": "xbwUcynOs_U3auH0FPw5Q", - "focus": 0.3148578829795292, - "gap": 1.5325372976067797 + "focus": 0.3018687432360566, + "gap": 1 }, "lastCommittedPoint": null, "startArrowhead": null, @@ -1087,8 +1451,8 @@ }, { "type": "image", - "version": 707, - "versionNonce": 895116439, + "version": 914, + "versionNonce": 1372766099, "isDeleted": false, "id": "nKJzjdt2KcIXk4J4J8QAI", "fillStyle": "hachure", @@ -1097,17 +1461,29 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 17.05555555555543, - "y": 629.9444444444449, + "x": -80.94444444444457, + "y": 616.9444444444449, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 179435863, "groupIds": [], - "strokeSharpness": "round", - "boundElements": [], - "updated": 1667939872517, + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [ + { + "id": "eglN6hOyD0IlRFH-GDP70", + "type": "arrow" + }, + { + "id": "gB01RK1LG4yjUQXN7Z-jq", + "type": "arrow" + } + ], + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1119,8 +1495,8 @@ }, { "type": "image", - "version": 780, - "versionNonce": 794629209, + "version": 985, + "versionNonce": 2036922141, "isDeleted": false, "id": "EX1T0KTQnxrKLKRzY9FB7", "fillStyle": "hachure", @@ -1129,15 +1505,18 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 110.38888888888891, - "y": 629.9444444444449, + "x": 12.388888888888914, + "y": 616.9444444444449, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 746990489, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [ { "id": "gB01RK1LG4yjUQXN7Z-jq", @@ -1156,7 +1535,7 @@ "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1168,8 +1547,8 @@ }, { "type": "image", - "version": 744, - "versionNonce": 1398631127, + "version": 950, + "versionNonce": 1729844531, "isDeleted": false, "id": "cI--RkKeLn_xuyqpyweju", "fillStyle": "hachure", @@ -1178,15 +1557,18 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 78.16666666666629, - "y": 487.7222222222224, + "x": -19.833333333333712, + "y": 474.7222222222224, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 1727444599, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [ { "id": "gB01RK1LG4yjUQXN7Z-jq", @@ -1200,16 +1582,12 @@ "id": "4XD9fcdmfFUAgbj4QPmf9", "type": "arrow" }, - { - "id": "7Lfv7eqNbBBRAdyWGHe7I", - "type": "arrow" - }, { "id": "lvTCIDwVaR_gIeeU7UZIm", "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1221,8 +1599,8 @@ }, { "type": "image", - "version": 754, - "versionNonce": 586653657, + "version": 998, + "versionNonce": 718670717, "isDeleted": false, "id": "xbwUcynOs_U3auH0FPw5Q", "fillStyle": "hachure", @@ -1231,15 +1609,18 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 249.27777777777715, - "y": 487.7222222222224, + "x": 151.27777777777715, + "y": 474.7222222222224, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 835670137, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [ { "id": "gB01RK1LG4yjUQXN7Z-jq", @@ -1256,13 +1637,9 @@ { "id": "Jbf4zgVJiIMRe_1EImsQM", "type": "arrow" - }, - { - "id": "lXW0FYYwj8-PE0XuyBr6B", - "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1274,8 +1651,8 @@ }, { "type": "image", - "version": 706, - "versionNonce": 634176631, + "version": 911, + "versionNonce": 503330515, "isDeleted": false, "id": "MBFVWViDUYVounlMQdR4l", "fillStyle": "hachure", @@ -1284,15 +1661,18 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 203.7222222222224, - "y": 629.9444444444449, + "x": 105.7222222222224, + "y": 616.9444444444449, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 300339095, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [ { "id": "gB01RK1LG4yjUQXN7Z-jq", @@ -1311,7 +1691,7 @@ "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1323,8 +1703,8 @@ }, { "type": "image", - "version": 675, - "versionNonce": 355494745, + "version": 880, + "versionNonce": 1784779741, "isDeleted": false, "id": "N6q6jMuYMY42ZoH7CAPtg", "fillStyle": "hachure", @@ -1333,15 +1713,18 @@ "roughness": 0, "opacity": 100, "angle": 0, - "x": 297.0555555555559, - "y": 629.9444444444447, + "x": 199.05555555555588, + "y": 616.9444444444447, "strokeColor": "transparent", "backgroundColor": "transparent", "width": 54.22222222222209, "height": 54.22222222222209, "seed": 6347097, "groupIds": [], - "strokeSharpness": "round", + "frameId": null, + "roundness": { + "type": 2 + }, "boundElements": [ { "id": "gB01RK1LG4yjUQXN7Z-jq", @@ -1360,7 +1743,7 @@ "type": "arrow" } ], - "updated": 1667939872517, + "updated": 1723475274660, "link": null, "locked": false, "status": "saved", @@ -1369,6 +1752,117 @@ 1, 1 ] + }, + { + "type": "image", + "version": 945, + "versionNonce": 353887347, + "isDeleted": false, + "id": "YalrbH2HM83wQbSMKR5_J", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 540.386363636364, + "y": 271.1742424242425, + "strokeColor": "transparent", + "backgroundColor": "transparent", + "width": 67.00000000000003, + "height": 67.00000000000003, + "seed": 778405952, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [], + "updated": 1723475274660, + "link": null, + "locked": false, + "status": "saved", + "fileId": "2ddf8397516f90386a2bf31394821ccef5395b572a8885a583aac1cd10890e8ffdfb685b1aa0628f048cf7407b23d5e4", + "scale": [ + 1, + 1 + ] + }, + { + "type": "text", + "version": 1006, + "versionNonce": 9674718, + "isDeleted": false, + "id": "FAKdhjDAfz-56GN9yNGoE", + "fillStyle": "hachure", + "strokeWidth": 1, + "strokeStyle": "solid", + "roughness": 0, + "opacity": 100, + "angle": 0, + "x": 365.26136363636374, + "y": 348.6742424242425, + "strokeColor": "#1e1e1e", + "backgroundColor": "transparent", + "width": 365.625, + "height": 76, + "seed": 1579903936, + "groupIds": [], + "frameId": null, + "roundness": { + "type": 2 + }, + "boundElements": [ + { + "id": "urMyZgPoZUu4QHYhvXu6V", + "type": "arrow" + } + ], + "updated": 1723481969779, + "link": null, + "locked": false, + "fontSize": 16, + "fontFamily": 3, + "text": "Modules:\n- arista.avd.eos_validate_state_runner\n- arista.avd.eos_validate_state_reports\n", + "textAlign": "left", + "verticalAlign": "top", + "containerId": null, + "originalText": "Modules:\n- arista.avd.eos_validate_state_runner\n- arista.avd.eos_validate_state_reports\n", + "lineHeight": 1.1875, + "baseline": 72 + }, + { + "type": "image", + "version": 364, + "versionNonce": 1732229022, + "isDeleted": false, + "id": "R0IIy5UprUjs6gfn-Ootc", + "fillStyle": "solid", + "strokeWidth": 2, + "strokeStyle": "solid", + "roughness": 1, + "opacity": 100, + "angle": 0, + "x": 956.5530303030304, + "y": 389.4722222222224, + "strokeColor": "transparent", + "backgroundColor": "transparent", + "width": 70.99999999999997, + "height": 70.99999999999997, + "seed": 476415170, + "groupIds": [], + "frameId": null, + "roundness": null, + "boundElements": [], + "updated": 1723481958422, + "link": null, + "locked": false, + "status": "pending", + "fileId": "4036aba6bf285c088ccfec05ec520dccd969fdb0", + "scale": [ + 1, + 1 + ] } ], "appState": { @@ -1394,17 +1888,24 @@ "dataURL": "data:image/png;base64,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", "created": 1665613221418 }, - "272acf35044b9c4b6ec5531a011ca4491ffabf44498ae07fc33afea4b6c4e34d1a047734f9dec1f84773cc06fa30fc53": { - "mimeType": "image/svg+xml", - "id": "272acf35044b9c4b6ec5531a011ca4491ffabf44498ae07fc33afea4b6c4e34d1a047734f9dec1f84773cc06fa30fc53", - "dataURL": "data:image/svg+xml;base64,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", - "created": 1667423201729 - }, "0071d2d16a44323573c95905877cc879a3ae3c05fce4a7cddb8d15246d47a8d65569205caa825002a5516e7c6df750f1": { "mimeType": "image/png", "id": "0071d2d16a44323573c95905877cc879a3ae3c05fce4a7cddb8d15246d47a8d65569205caa825002a5516e7c6df750f1", "dataURL": "data:image/png;base64,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", "created": 1667938602528 + }, + "2ddf8397516f90386a2bf31394821ccef5395b572a8885a583aac1cd10890e8ffdfb685b1aa0628f048cf7407b23d5e4": { + "mimeType": "image/png", + "id": "2ddf8397516f90386a2bf31394821ccef5395b572a8885a583aac1cd10890e8ffdfb685b1aa0628f048cf7407b23d5e4", + "dataURL": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAGAAAABgCAYAAADimHc4AAAAAXNSR0IArs4c6QAACb1JREFUeF7tnX9wVFcVx7/nbvYHgdoqDMUpHWyltBa11TJiEbIkC9JitYBKi/1DrR1/tYw6hWxUprOMVpIUBpQZKnUcW6eVlpkOohYFd1lCMdWxQgfBYsVqa38g2iIkkH2b7D3OTUjcDSR773tvc5f47n+ZnHvOueez5/547977CEGxGgGyaj0wjgCA5R9BACAAYDkCls0HGRAAsBwBy+aDDAgAWI6AZfNBBgQAholAY3ZyiOT7mHgaJE1loqkEvhTAWABvBVALoAbAKTB1EvhlJvwDjENEOFjoEc9gXf2/Lcd4WPPVlQHLd0RDtbGbmPk2EOYAmOwxeAzgAIg2yxj9GKn6nEd9vlevDgCf3BoKXTn+TgavBujtvreyT+FfJHAXWhJ7K6TflVr7AFLZGHUVHiXQx121wKxSNzF/ttA67zGzapWTtg5ANGU2gnFP5Zp4juaCYFrQ09qQGUGbQ5qyC2DlrquECB0BIEY0GISX5Gnnamxc6Iyo3fMYswpAJDOrAHzLShCIviCbGx6yYrvIqFUAlMxsI2CRjSAwKM0tDfNt2C62aRWASKYPAHR9kUMM5rVShDahG50izEvU3wAuqkCgcrKloRYgNVW1ViwDyPwZwLSi1j8oWxJfLo5GqCmzjBk/qUSEZL57PNbf9GYldOvqtA3gbwDe0e+sFDwLa+Y9U+J8KlsjuuQpAGN0G6UrJ0lcgeb6v+vKV0IuABAA+F8GgHiTbJ53d0kXlEzfzqAtlfj1BRmQzJR0QQDONwg/AOAtAYAKRECcC6ACVoZWGWRAAMDuvqAgAxAA+L+ehvrV4bvNpMFjALdFB08Kil3sAXAcwPMg/BTCeYRmo8NrG6yuA7w6319/hAAMdvd1MN9Nc/PbvLQjAFC0ECuTAeeLswRjOc11NrmFEADwBkDFXUG4heY6v3QDwTuAxn0XheAsYgH1aPc6MC4/u3AKuXFoJOsYjgHDufYacs40WoDTpv67B7Bi51gRCjcCfO/ZbSKmtq3L+whAPdW+j+ryxi+X3AFoyk4VLLcDuNZ6FD044CsA4BgmOFNoOvImLpkDaEpfKZh+B2CCiaFqlPUZAMC8xHRWZAYglY2JM/L3ILy7GgNq6pPvAIh/RHX5O038MAIgmtL3gkm9IhwVRYZ4Er4z75/9jXExDR0ch1co7qhJiHbRB7B8R1TURl8FMF5be3ULdsmWhrHF74S5LXoMgNp76r5010yieacHoJZTpA0gtDJ9Cwv6eTmFF8r/B++K4B2IYmy0C16fjzEWmqwJtAGIxswPQLjrQglwOT+J8KlCc2LgTRvvi0xHgQ6Vq1f+/7yK4vn7y8v1SZgA+ONoGXwJaC+MeXoOUik50P/viXwDRNqBGybAT1Lc+YS/AL7WPkZEutTOBLUX/0IvL8se1GFd4qWB4DMIbdEDIFznQ+OOUNx5l64evQz4evpGIaldV2kVyx2WErfigcRfi33ktshtAD3uk9+dFHe0N5JpARCNmXtA2OiTgzbUdIDwPRkT3x58SIOzGIdQ9Dkw3umbYzlnnO5zIV0AD4LwRd8crLyiLhCOM/NzxGKXFOEtaJ5zYrBZVl3P3tjjAC/11SUKT6S6zn/p6NQCQMn0Lwj0ER2FHmSOgXirkOJnPbL7RYw7+SpSS42eq5jY7gt+tBXACpN6WrJSXE71Xa/oyGoBEMnMswBu0FHoQuYUwKvliUs24qEZ3S7qG1fhdoxBT+yHYF5mXFmngt8ZIJKZ5wFco2PbUOaArMFHcX9CrbBHpPDeyCIwrS/ek+q74bBTS7OgFnVli2YG7H4R4CvKajMQYCDDHF2M1tmeX2wPZZYZAr+pnQSpfC80gEn94rWniAbNKRY9SXHnEt26mgAy6hjR1bpKNeRekI6YiQ31/xksy4cRwRuRJQAWgmkmAHVqUntap2G70iKHKO68R9eILoA/AHi/rtIycnnJ8nq0zlfdWknhttjnAE75cD7YJ1fdqKEnKJ67XbemFgBqzDxFhIW6SsvIfVe2JL5aLMPPohano+oQxq0+2bCnhjlJc/NqdqVVtACIxvRmEH1eS+PwQnkpwpOxpm5gjsxZxCCiTwFo8EG/fRWS5lN9Lq3riB6AZPorAG3QVTqUHDN2cGuiZD3BbbE1ADd51V0l9RlhZwLNgvaxJy0ASP56toB42nMjCV+SzYnv9+vhTGwKavjoKHnIp5p1lOLOVSZx0gOQyo4TXfKk1wPVgpDoaU7sHgCwJ3IfiFabOFzlsmsp7qw08VEPgIq8D4sxyfLa4tkPt0V3AviwicNVLUvyBqrr3m/ioz6Apt2PgvkOE+WDZc+zC+FPI7Aw8uKySd3tFHeMD51rAwg1pj/NRA+beKQBYLjt4F5MjXTdDgjMoDnOC6aGtQFgxc6JIlSjntm4fivm+z4c09ZWRr4AxmKa67jasKAPQL1A9ni3wygE0AHGHW6Dr34PRgCQzNQJoM3tD2kUASgA/Bhk6Ju6z/2HipkZAEWsKbOdGB9zA+ECBqAeGh4H4yAI+0ChrVR35nU3MRhcxxgAVmYnCVHY7+ZuN98ASLqC6nNW73jwI/jmXVC/1b5dEur5jbo6UrsEAM4NlXkG9OtI7p4egnyYQTN0CQQA/ASgdKVSIpSrW8zcu6tAgVAvT4a8ViYA4DcA3Z/+EHI+bAf35kEVjCXuuyBvTe+tHQAwXQf4EPRiFQGAAID16exo7YIYjLVg2oRCuAPh7kUArwNwcUkSB2PAsJdjeOnwNlHcKbn6jNsiSwF6IgBQFIGKjQFS3Ej1Xb8tGW+2IoRLo+qtnvr2QF8JMqBSGSA+RPGukvMMnEUNRC8A9dGHAMDZaehBANq7yAz6pM0Ud0q20/OeyDIQlV4AGwpdRrPPvGag13dR24PwrwAs8L1VvbcvYgOINkKGOyC6lwB87u2LUedi+iDU0StrxTKAyCqAjC+48Cda/AbF89avW7ALIBu5BoIOe93u4hLILoo7lcg+I3esAugdB/bEtoBYezOrUeuGFabPUDz3iH/63GmyD6Adb0NPdD8YU9w1wVWtAxjrzKQZGJETOcN5aB1AbxbsjbwXTGpArtQXlIpjcAhS3Oz1Xa4r7OepVBUAeiH07RNVnxSp1E65MwCth8w1Uz06/QqgVz1VA6C/IbwnejOo96tKCQBRbw2kEwC3g+lJcG4b1eOcEzne9HuvXXUABkD0nWT8AJjVJ07UYk196OEygCYCrFazYYBOgfgUJDpBeBPERyFxFAR1Ev4g6vJHiGD1EyXlEFUtgHKOj5b/BwAskwwABAAsR8Cy+SADAgCWI2DZfJABAQDLEbBsPsiAAIDlCFg2/18wfH6Os7knOAAAAABJRU5ErkJggg==", + "created": 1665612694551 + }, + "4036aba6bf285c088ccfec05ec520dccd969fdb0": { + "mimeType": "image/svg+xml", + "id": "4036aba6bf285c088ccfec05ec520dccd969fdb0", + "dataURL": "data:image/svg+xml;base64,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", + "created": 1723481754565, + "lastRetrieved": 1723481754565 } } } diff --git a/ansible_collections/arista/avd/docs/contribution/eos_designs_internal_notes.md b/ansible_collections/arista/avd/docs/contribution/eos_designs_internal_notes.md index ab654d5f3c3..fb41f94c9e2 100644 --- a/ansible_collections/arista/avd/docs/contribution/eos_designs_internal_notes.md +++ b/ansible_collections/arista/avd/docs/contribution/eos_designs_internal_notes.md @@ -370,10 +370,6 @@ outside of that, so any inline Jinja2 could not use these values. | switch.type | fabric-topology.j2 | | switch.mpls_overlay_role |interface_descriptions/loopback_interfaces/overlay-loopback.j2 | | switch.mpls_lsr |interface_descriptions/loopback_interfaces/overlay-loopback.j2 | -| switch.mlag_peer | interface_descriptions/mlag/ethernet-interfaces.j2 | -| switch.mlag_interfaces | interface_descriptions/mlag/port-channel-interfaces.j2 | -| switch.mlag_peer | interface_descriptions/mlag/port-channel-interfaces.j2 | -| switch.mlag_port_channel_id | interface_descriptions/mlag/port-channel-interfaces.j2 | | switch.uplink_ipv4_pool | ip_addressing/avd-v2-spine-p2p-uplinks-ip.j2 | | switch.id | ip_addressing/avd-v2-spine-p2p-uplinks-ip.j2 | | switch.max_parallel_uplinks | ip_addressing/avd-v2-spine-p2p-uplinks-ip.j2 | diff --git a/ansible_collections/arista/avd/docs/contribution/input-variable-validation.md b/ansible_collections/arista/avd/docs/contribution/input-variable-validation.md index 49c944a422c..818f7a939e3 100644 --- a/ansible_collections/arista/avd/docs/contribution/input-variable-validation.md +++ b/ansible_collections/arista/avd/docs/contribution/input-variable-validation.md @@ -160,8 +160,8 @@ The meta-schema does not allow for other keys to be set in the schema. | type | String | True | | Valid Values:
- `"str"` | Type of variable using the Python short names for each type.
`str` for String | | convert_to_lower_case | Boolean | | False | | Convert string value to lower case before performing validation | | convert_types | List, items: String | | | | List of types to auto-convert from.
For type `str`, auto-conversion is supported from `bool` and `int` | -| default | String | | | | Default value | |   - \ | String | | | Valid Values:
- `"bool"`
- `"int"` | | +| default | String | | | | Default value | | format | String | | | Valid Values:
- `"ipv4"`
- `"ipv4_cidr"`
- `"ipv6"`
- `"ipv6_cidr"`
- `"ip"`
- `"cidr"`
- `"mac"` | Expected format of the string value.
`ipv4` accepts a single IPv4 address (`x.x.x.x`)
`ipv4_cidr` accepts an IPv4 CIDR (`x.x.x.x/x`)
`ipv6` accepts a single IPv6 address (`x:x::x:x`)
`ipv6_cidr` accepts an IPv6 CIDR (`x:x::x:x/x`)
`ip` accepts a single IPv4 or IPv6 address
`cidr` accepts an IPv4 or IPv6 CIDR
`mac` accepts a MAC address (`xx:xx:xx:xx:xx:xx`) | | max_length | Integer | | | | Maximum length | | min_length | Integer | | | | Minimum length | diff --git a/ansible_collections/arista/avd/docs/plugins/Filter_plugins/add_md_toc.md b/ansible_collections/arista/avd/docs/plugins/Filter_plugins/add_md_toc.md index 853a49dca8b..55e1fa46ada 100644 --- a/ansible_collections/arista/avd/docs/plugins/Filter_plugins/add_md_toc.md +++ b/ansible_collections/arista/avd/docs/plugins/Filter_plugins/add_md_toc.md @@ -42,7 +42,6 @@ The below requirements are needed on the host that executes this module. --- tasks: - name: Generate fabric documentation - tags: [build, provision, documentation] run_once: true delegate_to: localhost check_mode: no diff --git a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/configlet_build_config.md b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/configlet_build_config.md index 28011eaea67..1711f1f8a10 100644 --- a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/configlet_build_config.md +++ b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/configlet_build_config.md @@ -33,7 +33,6 @@ Build configuration to publish configlets to Cloudvision. ```yaml # tasks file for configlet_build_config - name: generate intended variables - tags: [build, provision] configlet_build_config: configlet_dir: '/path/to/configlets/folder/' configlet_prefix: 'AVD_' diff --git a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_documentation.md b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_documentation.md new file mode 100644 index 00000000000..14783d92c16 --- /dev/null +++ b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_documentation.md @@ -0,0 +1,64 @@ +--- +# This title is used for search results +title: arista.avd.eos_designs_documentation +--- + + +# eos_designs_documentation + +!!! note + Always use the FQCN (Fully Qualified Collection Name) `arista.avd.eos_designs_documentation` when using this plugin. + +Generate AVD Fabric Documentation + +## Synopsis + +The `arista.avd.eos_designs_documentation` module is an Ansible Action Plugin providing the following capabilities: + +- Generate fabric documentation using AVD facts and structured configuration files. +- Optionally include connected endpoints documentation. + +## Parameters + +| Argument | Type | Required | Default | Value Restrictions | Description | +| -------- | ---- | -------- | ------- | ------------------ | ----------- | +| structured_config_dir | str | True | None | | Path to directory containing files with AVD structured configurations. | +| structured_config_suffix | str | optional | yml | | File suffix for AVD structured configuration files. | +| fabric_documentation_file | str | True | None | | Path to output Markdown file. | +| mode | str | optional | 0o664 | | Mode of output files. | +| fabric_documentation | bool | optional | True | | Generate fabric documentation. | +| include_connected_endpoints | bool | optional | False | | Include connected endpoints in fabric documentation. | +| topology_csv_file | str | True | None | | Path to output topology CSV file. | +| topology_csv | bool | optional | False | | Generate Topology CSV with all interfaces towards other devices. | +| p2p_links_csv_file | str | True | None | | Path to output P2P links CSV file. | +| p2p_links_csv | bool | optional | False | | Generate P2P links CSV with all routed point-to-point links between devices. | + +## Examples + +```yaml +--- + +- name: Generate fabric documentation + arista.avd.eos_designs_documentation: + structured_config_dir: "{{ structured_dir }}" + structured_config_suffix: "{{ avd_structured_config_file_format }}" + fabric_documentation_file: "{{ fabric_dir }}/{{ fabric_name }}-documentation.md" + fabric_documentation: "{{ eos_designs_documentation.enable | arista.avd.default(true) }}" + include_connected_endpoints: "{{ eos_designs_documentation.connected_endpoints | arista.avd.default(false) }}" + topology_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" + topology_csv: "{{ eos_designs_documentation.topology_csv | arista.avd.default(true) }}" + p2p_links_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" + p2p_links_csv: "{{ eos_designs_documentation.p2p_links_csv | arista.avd.default(true) }}" + mode: "0o664" + delegate_to: localhost + check_mode: false + run_once: true +``` + +## Authors + +- Arista Ansible Team (@aristanetworks) diff --git a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_facts.md b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_facts.md index dcacf34e9e8..4255dc1ca26 100644 --- a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_facts.md +++ b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/eos_designs_facts.md @@ -44,14 +44,12 @@ The module is used in `arista.avd.eos_designs` to set facts for devices, which a ```yaml --- - name: Set eos_designs facts - tags: [build, provision, facts] arista.avd.eos_designs_facts: schema_id: eos_designs check_mode: False run_once: True - name: Set eos_designs facts per device - tags: [build, provision, facts] ansible.builtin.set_fact: switch: "{{ avd_switch_facts[inventory_hostname].switch }}" delegate_to: localhost diff --git a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/set_vars.md b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/set_vars.md index ca1f0c9e56b..2b4894575f5 100644 --- a/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/set_vars.md +++ b/ansible_collections/arista/avd/docs/plugins/Modules_and_action_plugins/set_vars.md @@ -27,7 +27,6 @@ Arguments are treated as one dict so all arguments will be set as vars. ```yaml - name: Remove avd_switch_facts - tags: [build, provision, facts, remove_avd_switch_facts] arista.avd.set_vars: avd_switch_facts: null run_once: true diff --git a/ansible_collections/arista/avd/docs/porting-guides/5.x.x.md b/ansible_collections/arista/avd/docs/porting-guides/5.x.x.md index 057426c3ccc..60c81f4d95a 100644 --- a/ansible_collections/arista/avd/docs/porting-guides/5.x.x.md +++ b/ansible_collections/arista/avd/docs/porting-guides/5.x.x.md @@ -54,6 +54,66 @@ ethernet_interfaces: <...> ``` +## Removal Ansible tags from AVD roles + +Support for Ansible tags across AVD roles has been replaced with variables to control this execution of various parts of AVD. + +The previous implementation of Ansible tags was not consistent and mostly undocumented. It often lead to inconsistent behaviors depending +when the tags were used with `--tags` vs. `--skip-tags`. + +AVD now supports a number of variables which allow detailed control of which areas of AVD should be executed. +Variables are only added for the roles providing multiple optional functionalities. + +| Ansible Role | Variable | Default value | Description | +| ------------ | -------- | ------------- | ----------- | +| All | `avd_verify_requirements` | `true` | Verify Ansible and Python requirements. | +| All | avd_create_directories | `true` | Create required output directories if not present. | +| `arista.avd.eos_designs` | `avd_eos_designs_debug` | `false` | Dump all vars and facts per device after generating `avd_switch_facts`. | +| `arista.avd.eos_designs` | `avd_eos_designs_structured_config` | `true` | Generate structured configuration per device. | +| `arista.avd.eos_designs` | `eos_designs_documentation.enable` | `true` | Generate fabric Markdown documentation. | +| `arista.avd.eos_designs` | `eos_designs_documentation.topology_csv` | `false` | Generate Topology CSV with all interfaces towards other devices. | +| `arista.avd.eos_designs` | `eos_designs_documentation.p2p_links_csv` | `false` | Generate P2P links CSV with all routed point-to-point links between devices. | +| `arista.avd.eos_designs` | `avd_eos_designs_unset_facts` | `true` | Unset `avd_switch_facts` to gain a small performance improvement since Ansible needs to handle fewer variables. | +| `arista.avd.eos_cli_config_gen` | `eos_cli_config_gen_configuration.enable` | `true` | Generate device EOS configurations. | +| `arista.avd.eos_cli_config_gen` | `eos_cli_config_gen_documentation.enable` | `true` | Generate device Markdown documentation. | +| `arista.avd.cvp_configlet_upload` | `execute_tasks` | `false` | Execute pending tasks on CloudVision after uploading configlets. | +| `arista.avd.dhcp_provisioner` | `avd_dhcp_provisioner_provision` | `true` | Run `arista.cvp.dhcp_configuration` in either online or offline mode. | +| `arista.avd.eos_config_deploy_cvp` | `avd_eos_config_deploy_cvp_provision` | `true` | Deploy/remove the generated configs and containers on CloudVision. | +| `arista.avd.eos_config_deploy_cvp` | `avd_eos_config_deploy_cvp_execute_existing_tasks` or `execute_tasks` | `false` | `cv_collection: v1` only
Execute *existing* tasks on CloudVision *before* uploading configlets. | +| `arista.avd.eos_config_deploy_cvp` | `avd_eos_config_deploy_cvp_execute_configlet_tasks` or `execute_tasks` | `false` | Execute pending tasks on CloudVision after uploading configlets. | +| `arista.avd.eos_config_deploy_cvp` | `avd_eos_config_deploy_cvp_execute_container_tasks` or `execute_tasks` | `false` | Execute pending tasks on CloudVision after creating containers. | +| `arista.avd.eos_config_deploy_cvp` | `avd_eos_config_deploy_cvp_execute_device_tasks` or `execute_tasks` | `false` | Execute pending tasks on CloudVision after onboarding, moving or changing devices. | +| `arista.avd.eos_validate_state` | - | - | See [here](#changes-to-role-aristaavdeos_validate_state) for details on changes in `eos_validate_state`. | + +The tasks or functions mentioned will execute when the role is imported/included if the variable is set to `true`. Otherwise it will not. + +This change may require updates to playbooks, "Makefiles" or scripts, to execute the same parts of AVD. It is still possible to skip importing a role by using +Ansible tags in the playbook. The tags will be applied to/match all tasks in the imported/included AVD role. + +The default behavior is the same as for previous versions of AVD, except for the CSV files which are no longer generated by default. + +For example to run AVD without generating documentation, the playbook can be updated like this: + +```diff + - name: Build Configurations and Documentation # (1)! + hosts: FABRIC + gather_facts: false + tasks: + + - name: Generate AVD Structured Configurations and Fabric Documentation # (2)! + ansible.builtin.import_role: + name: arista.avd.eos_designs + vars: + eos_designs_documentation: + enabled: false + + - name: Generate Device Configurations and Documentation # (3)! + ansible.builtin.import_role: + name: arista.avd.eos_cli_config_gen + vars: + generate_device_documentation: false +``` + ## Removal of Ansible plugins The following ansible plugins have been removed from the `arista.avd` Ansible collection in v5.0.0. @@ -75,7 +135,70 @@ The following ansible plugins have been removed from the `arista.avd` Ansible co TODO: Level 3 sections for each change with details on how to migrate -### AvdInterfaceDescriptions breaking changes +### Removed `redistribute igmp` from BGP vlan config belonging to a VRF with evpn multicast + +AVD versions below 5.0.0 configures `redistribute igmp` under BGP for all SVIs when `evpn_l2_multicast` is True but configuring `redistribute igmp` with both L2 and L3 EVPN Multicast enabled will take up additional control-plane and data-plane resources. + +In AVD version 5.0.0 by default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. +In order to retain the previous behavior for SVIs under BGP where both `evpn_l2_multicast` and `evpn_l3_multicast` are enabled set `always_redistribute_igmp` key to True either for all SVIs within the Tenant or for each SVIs individually. + +```diff +tenants: + - name: Tenant_B + evpn_l3_multicast: + enabled: true + <...> + evpn_l2_multicast: + enabled: true ++ always_redistribute_igmp: true + <...> + - name: Tenant_C + evpn_l3_multicast: + enabled: true + <...> + evpn_l2_multicast: + enabled: true + <...> + vrfs: + - name: TEN_C_L3_MULTICAST_ENABLED + svis: + - id: 136 + name: "L3_L2_MULTICAST_ENABLED_136" + evpn_l2_multicast: ++ always_redistribute_igmp: true +``` + +### `vrf_id` is used instead of `vrf_vni` to calculate the IP address of EVPN underlay multicast group for a VRF + +AVD versions below 5.0.0 uses `vrf_vni` in the algorithm to set the offset in order to get the IP address of EVPN underlay multicast group. + +In AVD version 5.0.0, `vrf_id` is used instead of `vrf_vni` to calculate the offset for IP address of EVPN underlay multicast group for a VRF when `evpn_l3_multicast` is enabled. The configurations will only change in case `vrf_id` and `vrf_vni` are set to different values or `evpn_l3_multicast.evpn_underlay_l3_multicast_group` is set under `vrfs`. + +To retain the previous configuration, set group ip directly under the `vrfs` using `evpn_l3_multicast.evpn_underlay_l3_multicast_group` + +```diff +tenants: + - name: Tenant_C + evpn_l3_multicast: + enabled: true + vrfs: + - name: TEN_C_L3_MULTICAST_ENABLED_130_131 + evpn_l3_multicast: + enabled: true ++ evpn_underlay_l3_multicast_group: 232.0.64.2 + <...> +``` + +### Base class for custom IP addressing `AvdIpAddressing` was moved + +The `AvdIpAddressing` class was moved from the Ansible collection to `pyavd.api.ip_addressing`. Import statements must be updated. + +```diff +- from ansible_collections.arista.avd.roles.eos_designs.python_modules.ip_addressing import AvdIpAddressing ++ from pyavd.api.ip_addressing import AvdIpAddressing +``` + +### Base class for custom interface descriptions `AvdInterfaceDescriptions` breaking changes The `AvdInterfaceDescriptions` class and the associated `InterfaceDescriptionData` data class were moved from the Ansible collection to `pyavd.api.interface_descriptions`. Import statements must be updated. @@ -124,6 +247,384 @@ The following data model keys have been removed from `eos_designs` in v5.0.0. | svi_profiles[].ipv6_address_virtual | svi_profiles[].ipv6_address_virtuals | | ptp | ptp_settings | +### The default platform settings for R3-series now have the TCAM profile "vxlan-routing" + +Starting AVD 5.0.0, the default platform settings for `7280R3`, `7500R3` and `7800R3` platforms now contain `tcam_profile: vxlan-routing` +This change is based on a new Arista best practice for VXLAN deployments with the R3-series. +Not using this TCAM profile can lead to incorrect handling of VXLAN IPv6 NS packets. + +!!! warning + Since applying a TCAM profile will cause reprogramming of the forwarding processor, it can lead to disturbances to the network services. + + Please work with your Arista account team to decide if the new default is the right choice for your network, and how to apply it. + +To retain the old configuration with no TCAM profile the default platform settings can be overridden with the new `custom_platform_settings` key: + +```diff ++custom_platform_settings: ++ - platforms: ++ - 7280R3 ++ reload_delay: ++ mlag: 900 ++ non_mlag: 1020 ++ - platforms: ++ - 7500R3 ++ - 7800R3 ++ management_interface: Management0 ++ reload_delay: ++ mlag: 900 ++ non_mlag: 1020 +``` + +### Structured Configuration merged from SVI profiles is now deep merged instead of replaced + +When merging `structured_config` from SVI profiles and parent profiles, AVD versions below 5.0.0 replaced the entire `structured_config` object with the most specific definition of `structured_config`. + +With AVD version 5.0.0 `structured_config` is now deep-merged, same as for other profiles in AVD. This allows the user to contribute different parts of the `structured_config` from profiles or parent profiles. + +Example: + +```yaml +svi_profiles: + - name: TEST1 + parent_profile: TEST2 + structured_config: + no_autostate: true + - name: TEST2 + structured_config: + description: foo + +tenants: + - name: mytenant + vrfs: + - name: myvrf + svis: + - id: 10 + profile: TEST1 + structured_config: + no_autostate: false + +``` + +With AVD versions below 5.0.0 this produced an effective `structured_config` for SVI 10 of: + +```yaml +no_autostate: false +``` + +Only the most specific entry got applied. + +With AVD version 5.0.0 the same inputs will produce an effective `structured_config` for SVI 10 of: + +```yaml +description: foo # <-- Inherited from profile which inherited from parent_profile +no_autostate: false # <-- Set on SVI, overriding the setting from svi_profile +``` + +Depending on the complexity of the deployment, it may require changes to the SVI and profiles to retain the previous configuration output. + +### MLAG L3 Peering VLAN 4093 is no longer created when `underlay_routing_protocol: 'none'` + +AVD versions below 5.0.0 created the MLAG L3 peering VLAN 4093, even when no L3 MLAG peering was created using an underlay routing protocol. +This happened in cases where `underlay_routing_protocol` was set to `none`. + +In AVD version 5.0.0 the MLAG L3 peering VLAN 4093 is not longer created when `underlay_routing_protocol` is `'none'`. +Instead an MLAG peering VLAN will be created for VRF `default`, if it is defined under network services, using the same MLAG peer VLAN logic as for +other VRFs; ` - 1 + `. + +The peer VLAN config can be retained by setting `mlag_ibgp_peering_vlan: 4093` under the VRF, by using `custom_structured_configuration` or by setting `underlay_routing_protocol` to something else than `none`. + +### BGP is now configured for Network services VRFs even if 'evpn' is not part of the address-families + +AVD versions below 5.0.0 did not generate BGP configuration for VRFs unless the node type included `evpn` or `mpls` under `default_address_families` *and* the +VRF had the same `evpn` or `mpls` defined under `address_families` (default is `['evpn']`). + +AVD version 4.6.0 introduced the toggle `new_network_services_bgp_vrf_config: ` to change this behavior by no longer requiring `evpn` +in the address-families, but instead it always configured BGP for all VRFs. This toggle has been removed in AVD 5.0.0 since this is now part of the default +behavior. + +With AVD version 5.0.0, the logic of whether to configure BGP for a network services VRF has been improved with the following rules: + +- **New**: Always/never configure BGP for the VRF according to the new optional `bgp.enabled` setting. This takes precedence over all other rules. +- **Existing**: If the VRF is part of an overlay (`evpn` or `mpls`), BGP will be configured for the VRF. +- **New**: If any BGP peers are configured under the VRF, BGP will be configured for the VRF. This is useful for L2LS designs with VRFs. +- **Improved**: If uplink type is `p2p-vrfs` *and* the VRF is included in the uplink VRFs, BGP will be configured for the VRF. + +It is possible to forcefully add or remove BGP configuration per VRF by setting: + +```yaml +: + - name: mytenant + vrfs: + - name: myvrf + bgp: + enabled: # <-- New optional setting to either always or never configure BGP for the VRF +``` + +### Default interface descriptions are changed for more consistency + +With AVD version 5.0.0 the default interface descriptions are changed to give better consistency. + +#### Router ID Loopback + +The default interface description for `Loopback0` changes to `ROUTER_ID` for all designs. +Previously this description varied depending on the network design and chosen protocols. + +The `router_id_loopback_description` or the deprecated `overlay_loopback_description` settings still takes precedence, +so no changes will be seen if either of these are set. + +The description can be reverted manually if needed: + +```diff + # Using the new 'router_id_loopback_description' which replaces the deprecated 'overlay_loopback_description' ++router_id_loopback_description: "EVPN_Overlay_Peering" +``` + +#### VTEP Loopback + +The default interface description for `Loopback1` (or the interface set with `vtep_loopback`) changes to `VXLAN_TUNNEL_SOURCE`. +Previously the description was `VTEP_VXLAN_Tunnel_Source`. + +The description can be reverted manually if needed: + +```diff ++vtep_loopback_description: "VTEP_VXLAN_Tunnel_Source" +``` + +#### Out-of-band management interface + +The default interface description for the management interface changes to `OOB_MANAGEMENT`. +Previously the description was `oob_management`. + +The description can be reverted manually if needed: + +```diff ++mgmt_interface_description: "oob_management" +``` + +#### Connected Endpoints ethernet interfaces + +The default interface description for the connected endpoints changes to `__`. +Previously the description was `_`. + +Setting the description directly on the connected endpoint adapter still takes precedence. +The description fields support templates. See the input variables documentation for available fields. + +The default descriptions can be reverted manually if needed: + +```diff ++default_connected_endpoints_description: "{endpoint}{endpoint_port?<_}" +``` + +#### Connected Endpoints port-channel interfaces + +The default interface description for the connected endpoints changes to `__`. +Previously the description was `_`, so the description field +set under `port_channel` was always added after the adapter description or name of the endpoint. + +In AVD 5.0.0 setting the `description` key under `port_channel` of the adapter will replace the full port-channel interface description. +The description fields support templates. See the input variables documentation for available fields. + +To retain the old descriptions, the value of the `description` key under `port_channel` must be *moved* to the new key +`endpoint_port_channel` for *all* adapters. Also the default description template must be updated. + +```diff + servers: + - name: server01 + adapters: + - <...> + description: My adapter description + port_channel: +- description: My description that was added after the adapter description ++ endpoint_port_channel: My description that was added after the adapter description + ++default_connected_endpoints_port_channel_description: "{adapter_description_or_endpoint}{endpoint_port_channel?<_}" +``` + +#### Network Ports ethernet interfaces + +The default interface description for the `network_ports` data model changes to ``, allowing +to use new `endpoint` key under `network_ports` which is used similar to the endpoint name under connected endpoints. +Previously there was no default description. + +Setting the description directly under `network_ports` still takes precedence. +The description fields support templates. See the input variables documentation for available fields. + +The default descriptions can be reverted manually if needed: + +```diff ++default_network_ports_description: "" +``` + +#### Network Ports port-channel interfaces + +The default interface description for port-channels under the `network_ports` data model changes to `_`, +allowing to use new `endpoint` key under `network_ports` which is used similarly to the endpoint name under connected endpoints. +Previously the description was `_`, so the description field +set under `port_channel` was always added after the `description` set directly under the `network_ports`. + +In AVD 5.0.0 setting the `description` key under `port_channel` of the network port will replace the full port-channel interface description. +The description fields support templates. See the input variables documentation for available fields. + +To retain the old descriptions, the value of the `description` key under `port_channel` must be *moved* to the new key +`endpoint_port_channel` for *all* network_ports. Also the default description template must be updated. + +```diff + network_ports: + - <...> + description: My ports description + port_channel: +- description: My description that was added after the adapter description ++ endpoint_port_channel: My description that was added after the adapter description + ++default_network_ports_port_channel_description: "{adapter_description_or_endpoint}{endpoint_port_channel?<_}" +``` + +#### MLAG peer-link ethernet interfaces + +The interface description for the MLAG peer-link ethernet interfaces changes to `MLAG_{mlag_peer}_{peer_interface}`. +Previously the description was `MLAG_PEER_{mlag_peer}_{interface}` so using the local interface instead of the peer's. Most often the MLAG interfaces are the same, so this is a minor issue. + +The description can be reverted manually if needed: + +```diff ++mlag_member_description: "MLAG_PEER_{mlag_peer}_{interface}" +``` + +#### MLAG peer-link port-channel interfaces + +The interface description for the MLAG peer-link port-channel interfaces changes to `MLAG_{mlag_peer}_{peer_interface}`. +Previously the description was `MLAG_PEER_{mlag_peer}_Po{mlag_port_channel_id}` so using the local port-channel ID instead of the peer's. Most often the MLAG interfaces are the same, so this is a minor issue. + +The description can be reverted manually if needed: + +```diff ++mlag_port_channel_description: "MLAG_PEER_{mlag_peer}_Po{mlag_port_channel_id}" +``` + +#### MLAG peer VLAN interface + +The interface description for the MLAG peer SVI changes to `MLAG`. Previously the description was `MLAG_PEER`. + +The description can be reverted manually if needed: + +```diff ++mlag_peer_svi_description: "MLAG_PEER" +``` + +The description setting supports a template. See the input variables documentation for available fields. + +#### MLAG L3 peering VLAN interface + +The interface description for the MLAG L3 peering SVI changes to `MLAG_L3`. Previously the description was `MLAG_PEER_L3_PEERING`. + +The description can be reverted manually if needed: + +```diff ++mlag_peer_l3_svi_description: "MLAG_PEER_L3_PEERING" +``` + +The description setting supports a template. See the input variables documentation for available fields. + +#### MLAG L3 VRF peering VLAN interface + +The interface description for the MLAG L3 VRF peering SVI changes to `MLAG_L3_VRF_{vrf}`. Previously the description was `MLAG_PEER_L3_iBGP: vrf {vrf}`. + +The description can be reverted manually if needed: + +```diff ++mlag_peer_l3_vrf_svi_description: "MLAG_PEER_L3_iBGP: vrf {vrf}" +``` + +The description setting supports a template. See the input variables documentation for available fields. + +### Default VLAN names are changed for more consistency + +#### MLAG peer VLAN + +The name of the MLAG peer VLAN (VLAN 4094 by default) changes to `MLAG`. Previously the name was `MLAG_PEER`. + +The name can be reverted manually if needed: + +```diff ++mlag_peer_vlan_name: "MLAG_PEER" +``` + +The setting supports a template. See the input variables documentation for available fields. + +#### MLAG L3 peering VLAN + +The name of the MLAG L3 peering VLAN (VLAN 4093 by default) changes to `MLAG_L3`. Previously the name was `LEAF_PEER_L3`. + +The name can be reverted manually if needed: + +```diff ++mlag_peer_l3_vlan_name: "LEAF_PEER_L3" +``` + +The setting supports a template. See the input variables documentation for available fields. + +#### MLAG L3 VRF peering VLAN + +The name of the MLAG L3 VRF peering VLAN changes to `MLAG_L3_VRF_{vrf}`. Previously the name was `MLAG_iBGP_{vrf}`. + +The name can be reverted manually if needed: + +```diff ++mlag_peer_l3_vrf_vlan_name: "MLAG_iBGP_{vrf}" +``` + +The setting supports a template. See the input variables documentation for available fields. + +### Default BGP peer descriptions are changed for more consistency + +#### MLAG L3 peering + +The description of the MLAG L3 BGP peers, including those in VRFs, changes to `{mlag_peer}_{peer_interface}`. Previously the description was `{mlag_peer}`. + +The description can be reverted manually if needed: + +```diff ++mlag_bgp_peer_description: "{mlag_peer}" +``` + +The setting supports a template. See the input variables documentation for available fields. + +#### Overlay peerings + +The description of the overlay BGP peers (EVPN, MPLS, WAN) changes to `{peer}{peer_interface?<_}`. Previously the description was `{peer}`. + +The description can be reverted manually if needed: + +```diff ++overlay_bgp_peer_description: "{peer}" +``` + +The setting supports a template. See the input variables documentation for available fields. + +### Combine the VLAN trunk groups used for MLAG + +With AVD version 5.0.0 a single `MLAG` trunk group is used for MLAG and MLAG L3 peerings, including the peerings in VRFs. +Previously MLAG L3 peerings used a separate `LEAF_PEER_L3` trunk group. + +The trunk group for MLAG L3 peerings can be reverted if needed: + +```diff ++trunk_groups: ++ mlag_l3: ++ name: LEAF_PEER_L3 +``` + +### `wan_mode: autovpn` renamed to `wan_mode: legacy-autovpn` + +With AVD version 5.0.0 the valid values for `wan_mode` key have changed. +If using the `autovpn` mode in AVD 4.x, the `wan_mode` key needs to be updated to `legacy-autovpn`. + +```diff +- wan_mode: autovpn ++ wan_mode: legacy-autovpn +``` + ### custom_structured_configuration_prefix no longer accepts a string Starting AVD 5.0.0, `custom_structured_configuration_prefix` only accepts a list of strings. @@ -194,6 +695,162 @@ Previously it also accepted a string, which was autoconverted to a list. + mpls_route_servers: ["20.20.20.20"] ``` +### `!RANCID-CONTENT-TYPE: arista` is no longer at the top of the generated configurations + +As of AVD 5.0.0 the `!RANCID-CONTENT-TYPE: arista` line at the top of the configuration has been removed. + +It can be added if required by using `config_comment`: + +```diff ++config_comment: "RANCID-CONTENT-TYPE: arista" +``` + +### Default value of `mlag_on_orphan_port_channel_downlink` is changed to `false` + +The default value `true` of data model `mlag_on_orphan_port_channel_downlink` has been changed to `false`, so it is now required to set `mlag_on_orphan_port_channel_downlink: true` to configure the MLAG ID on a downlink Port-Channel even if the downlink is only on one node in the MLAG pair. +By default an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. + +```diff ++ mlag_on_orphan_port_channel_downlink: true +``` + +### An error is raised if sFlow is enabled on an interface but `sflow_settings.destinations` is not set + +In AVD 4.0.0, if `sflow` was enabled on an interface but `sflow_settings.destinations` was not defined, the sFlow configuration was still generated for interfaces, although it would not work without "custom structured configuration". + +As of AVD 5.0.0, if `sflow` is enabled on an interface but `sflow_settings.destinations` is not set, an error is raised and the execution stops. + +### Default value of `isis_system_id_format` is changed to `underlay_loopback` + +In AVD 4.0.0, `node_id` was the default value of `isis_system_id_format`. +In AVD 5.0.0, this default value is changed to `underlay_loopback`. + +To retain the previous behavior set the value back to `node_id`: + +```diff ++isis_system_id_format: node_id +``` + +### Shutdown interfaces and BGP towards undeployed peers by default + +In AVD 4.0.0, the default value of `shutdown_bgp_towards_undeployed_peers` and `shutdown_interfaces_towards_undeployed_peers` was `false`. +In AVD 5.0.0, the default value of `shutdown_bgp_towards_undeployed_peers` and `shutdown_interfaces_towards_undeployed_peers` is changed to `true`. + +To retain the previous behaviour, set the value to `false`: + +```diff ++shutdown_bgp_towards_undeployed_peers: false ++shutdown_interfaces_towards_undeployed_peers: false +``` + +### Only render IGMP snooping querier version and address when enabled + +In AVD 4.0.0, the `ip igmp snooping vlan` command for version and address was rendered even when the IGMP snooping querier was not enabled. +Starting from AVD 5.0.0, the `ip igmp snooping vlan` command for version and address is rendered only when the IGMP snooping querier is enabled. + +To retain the old configuration use custom structured configuration. + +```diff +custom_structured_configuration_ip_igmp_snooping: + vlans: + - id: 1 + querier: + enabled: false + address: 192.168.255.1 + version: 3 +``` + +### Default MTU value changed from `9214` to `9194` for Dps1, WAN HA and WAN p2p uplink interfaces + +In AVD 4.0.0, the default MTU for Dps1, WAN HA and WAN p2p uplink interfaces was `9214`. +In AVD 5.0.0, the default MTU for Dps1, WAN HA and WAN p2p uplink interfaces has been changed to `9194`. + +To retain the old MTU on WAN HA interfaces use `.defaults/node_groups[]/node_groups[].nodes[]/nodes[].wan_ha.mtu` as `9214`. + +```diff +wan_router: + node_groups: + - group: SITE_HA_ENABLED + wan_ha: + enabled: true + ha_interfaces: [Ethernet52] ++ mtu: 9214 +``` + +To retain the old MTU on Dps1 interface use custom structured configuration + +```diff +custom_structured_configuration_dps_interfaces: + - name: Dps1 ++ mtu: 9214 +``` + +To retain the old MTU on WAN p2p uplink interfaces use custom_platform_settings + +```diff +custom_platform_settings: + - feature_support: + bgp_update_wait_for_convergence: true + bgp_update_wait_install: false + interface_storm_control: false + queue_monitor_length_notify: false + management_interface: Management1/1 ++ p2p_uplinks_mtu: 9214 + platforms: + - AWE-5310 + - AWE-5510 + - AWE-7250R + - AWE-7230R + - feature_support: + bgp_update_wait_for_convergence: true + bgp_update_wait_install: false + interface_storm_control: false + poe: true + queue_monitor_length_notify: false + management_interface: Management1 ++ p2p_uplinks_mtu: 9214 + platforms: + - AWE-7220R +``` + +#### Default encapsulation for WAN EVPN iBGP peerings changed to `path-selection` + +With AVD version 5.0.0 the default encapsulation used for EVPN iBGP peering between WAN routers is `path-selection`. Previously it was `vxlan`. + +!!! danger + The `path-selection` encapsulation is only supported on EOS above 4.33.0F. + + It is critical that all WAN devices use the same encapsulation. For + existing deployments it is recommended to set the encapsulation back to + `vxlan` until a migration can be done across the entire WAN network. + + Contact your Arista account team for guidance on migration. + +To retain the vxlan encapsulation on WAN EVPN iBGP peerings use `wan_encapsulation`: + +```diff ++ wan_encapsulation: vxlan +``` + +### PREVIEW WAN HA Direct Link now uses Port-Channel by default + +For WAN direct HA, AVD will now configure a port-channel by default. This feature was introduced in EOS 4.33.0F. + +To retain the previous configuration use custom_platform_settings use `use_port_channel_for_direct_ha: false` under `wan_ha`. + +```diff + wan_router: + node_groups: + - group: Site42 + cv_pathfinder_region: AVD_Land_West + cv_pathfinder_site: Site42 + wan_ha: + enabled: true ++ use_port_channel_for_direct_ha: false + ha_interfaces: [Ethernet52] + ha_ipv4_pool: 10.10.10.0/24 +``` + ## Changes to role `arista.avd.eos_cli_config_gen` TODO: Level 3 sections for each change with details on how to migrate @@ -268,6 +925,63 @@ As of AVD 5.0.0 the automatic conversion from both of the previous models has be route_map: static-to-bgp ``` +### Default EOS configuration is no longer automatically generated + +The `generate_default_config` setting controls the generation of some default EOS configurations. This was previously set to `true` by default. + +As of AVD 5.0.0 the default value of `generate_default_config` has been changed to `false` to prevent generation of any configuration not specified by the +inputs to `eos_cli_config_gen` (structured configuration). + +The following commands will be generated when `generate_default_config` is set to `true`: + +- RANCID Content Type +- Hostname +- Default configuration `no aaa root` +- Default configuration `no enable password` +- Transceiver qsfp default mode +- End of configuration delimiter + +The setting `generate_default_config` will be removed in AVD 6.0.0. + +The following `eos_cli_config_gen` inputs can be given as needed to generate the same configuration: + +```diff +-generate_default_config: true ++aaa_root: ++ disabled: true ++config_comment: "RANCID-CONTENT-TYPE: arista" ++config_end: true ++enable_password: ++ disabled: true ++hostname: "{{ inventory_hostname }}" ++transceiver_qsfp_default_mode_4x10: true +``` + +All changes except `"RANCID-CONTENT-TYPE: arista"` have been incorporated into `eos_designs`. Action is only required when using `eos_cli_config_gen` directly, +or if the `RANCID-CONTENT-TYPE: arista` is required. + +### `monitor_sessions` no longer requires both `monitor_sessions.sources` and `monitor_sessions.destinations` to be defined for generating configuration + +In AVD 4.0.0, `monitor_sessions` required both `monitor_sessions.sources` and `monitor_sessions.destinations` for configuration to be generated, but this is not required by EOS. + +As of avd 5.0.0 `monitor_sessions` configuration will be generated even if `monitor_sessions.sources` or `monitor_sessions.destinations` are not defined. To revert this behavior update your inventory to remove the configuration. + +### `router_isis.address_family_ipv4/6.enabled` is now required to generate the configuration and documentation for `router_isis` address-families + +In AVD 4.0.0, the ISIS address-family configuration and documentation were generated independently of the `router_isis.address_family_ipv4/6.enabled` key. + +As of AVD 5.0.0, `router_isis.address_family_ipv4/6.enabled` must be set to generate the configuration and documentation for `router_isis` address-families. + +```diff + router_isis: + address_family_ipv4: ++ enabled: true + <...> + address_family_ipv6: ++ enabled: true + <...> +``` + ### `ip_security.sa_policies[].esp.integrity` and `.encryption` "null" option has been replaced with "disabled" In AVD 4.0.0 we had "null" as a valid value for esp integrity and encryption to apply the null security profile and encryption under the ip-security configuration. @@ -285,6 +999,265 @@ As of AVD 5.0.0 "null" option for esp integrity and encryption has been replaced + encryption: disabled ``` +### `router_ospf.redistribute.bgp/connected/static` data model has been updated to require the `enabled` key + +To avoid ambiguous YAML data input, the data model for `router_ospf.redistribute.bgp/connected/static` has been updated to require the `enabled` key. + +=== "4.x" + +```yaml +router_ospf: + process_ids: + - id: 400 + redistribute: + bgp: {} + connected: {} + static: {} +``` + +=== "5.x" + +```yaml +router_ospf: + process_ids: + - id: 400 + redistribute: + bgp: + enabled: True + connected: + enabled: True + static: + enabled: True +``` + +The change has been incorporated into `eos_designs`, so action is only required when defining `structured_configuration` directly. + +### `router_traffic_engineering.enabled` is required + +In AVD 4.0.0, setting `enabled: true` under `router_traffic_engineering` was not +required and it was possible to render + +```eos +router traffic-engineering +``` + +using the following input + +```yaml +router_traffic_engineering: +``` + +As of AVD 5.0.0, the `enabled` keyword is required under `router_traffic_engineering`: + +```yaml +router_traffic_engineering: + enabled: true +``` + +### Removal of default type `switched` from ethernet interfaces and port-channel interfaces + +In AVD 4.0.0, we had "switched" as the default value for `ethernet_interfaces[].type` and `port_channel_interfaces[].type`. + +With AVD 5.0.0, the default value for `type` in `ethernet_interfaces` and `port_channel_interfaces` is no longer supported. The `type` key must now be explicitly defined in the input variables if it is needed in the configuration and documentation. + +### Removal of `type` key dependency for rendering ethernet/port-channel interfaces configuration and documentation + +#### `vlan_id` configuration + +In AVD 4.0.0, the configuration for `vlan_id` in ethernet interfaces and port-channel interfaces was rendered only if `ethernet_interfaces[].type` or `port_channel_interfaces[].type` was set to `l2dot1q`. + +With AVD 5.0.0, the dependency on the `type` key for rendering the configuration of `vlan_id` in ethernet and port-channel interfaces has been removed. + +```diff + ethernet_interfaces: + - name: Ethernet1.10 +- type: l2dot1q + vlan_id: 10 +! + port_channel_interfaces: + - name: Port-Channel1.10 +- type: l2dot1q + vlan_id: 10 +``` + +#### `switchport` configuration and documentation + +In AVD 4.0.0, the configuration and documentation for `switchport` in ethernet and port-channel interfaces were renderend only if `ethernet_interfaces[].type` or `port_channel_interfaces[].type` was set to `switched` along with the keys `mode`, `vlans`, `native_vlan`, `native_vlan_tag`, `trunk_groups`, `phone`, `vlan_translations`, `trunk_private_vlan_secondary`, `pvlan_mapping`. +The `no switchport` command was renderend if `ethernet_interfaces[].type` or `port_channel_interfaces[].type` was set to `routed`. + +With AVD 5.0.0, a new key for `switchport` has been introduced under ethernet and port-channel interfaces data-model, which generates the configuration and documentation for `switchport` independent of the `type` key. +The keys `mode`, `vlans`, `native_vlan`, `native_vlan_tag`, `trunk_groups`, `phone`, `vlan_translations`, `trunk_private_vlan_secondary`, `pvlan_mapping` are deprecated, to be removed in AVD 6.0.0. + +```diff + ethernet_interfaces: + - name: Ethernet10 +- type: switched +- mode: trunk +- vlans: '1-5' +- native_vlan: 20 +- native_vlan_tag: true +- trunk_groups: ['group1', 'group2'] +- trunk_private_vlan_secondary: true +- pvlan_mapping: 20-30 +- phone: +- vlan: 35 +- trunk: tagged +- vlan_translations: +- - from: 10 +- to: 20 +- direction: in +- - from: 23 +- to: 30 +- direction: out +- - from: 1 +- to: 5 +- direction: both ++ switchport: ++ mode: trunk ++ trunk: ++ allowed_vlan: 1-5 ++ native_vlan: 20 ++ native_vlan_tag: true ++ groups: ++ - group1 ++ - group2 ++ private_vlan_secondary: true ++ pvlan_mapping: 20-30 ++ access_vlan: 15 ++ phone: ++ vlan: 35 ++ trunk: tagged ++ vlan_translations: ++ direction_in: ++ - from: 10 ++ to: 20 ++ direction_out: ++ - from: 23 ++ to: 30 ++ direction_both: ++ - from: 1 ++ to: 5 +! +port_channel_interfaces: + - name: Port-Channel10 +- type: switched +- mode: trunk +- vlans: '1-5' +- native_vlan: 20 +- native_vlan_tag: true +- trunk_groups: ['group1', 'group2'] +- trunk_private_vlan_secondary: true +- pvlan_mapping: 20-30 +- phone: +- vlan: 35 +- trunk: tagged +- vlan_translations: +- - from: 10 +- to: 20 +- direction: in +- - from: 23 +- to: 30 +- direction: out +- - from: 1 +- to: 5 +- direction: both ++ switchport: ++ mode: trunk ++ trunk: ++ allowed_vlan: 1-5 ++ native_vlan: 20 ++ native_vlan_tag: true ++ groups: ++ - group1 ++ - group2 ++ private_vlan_secondary: true ++ pvlan_mapping: 20-30 ++ access_vlan: 15 ++ phone: ++ vlan: 35 ++ trunk: tagged ++ vlan_translations: ++ direction_in: ++ - from: 10 ++ to: 20 ++ direction_out: ++ - from: 23 ++ to: 30 ++ direction_both: ++ - from: 1 ++ to: 5 +``` + +The change has been incorporated into `eos_designs`, so action is only required when defining `structured_configuration` directly. + +#### `encapsulation` configuration and documentation + +In AVD 4.0.0, the configuration and documentation for `encapsulation` in ethernet and port-channel interfaces were renderend only if `ethernet_interfaces[].type` or `port_channel_interfaces[].type` was set to `l2dot1q/l3dot1q` along with the keys `encapsulation_dot1q_vlan` and `encapsulation_vlan`. + +With AVD 5.0.0, a new key for `encapsulation_dot1q` has been introduced and the schema for `encapsulation_vlan` has been modified under ethernet and port-channel interfaces data-model, which generates the configuration and documentation for `encapsulation` independent of the `type` key. +The keys `encapsulation_dot1q_vlan`, `encapsulation_vlan.client.dot1q`, `encapsulation_vlan.client.unmatched`, `encapsulation_vlan.network.dot1q` and `encapsulation_vlan.network.client` are deprecated, to be removed in AVD 6.0.0. + +```diff +ethernet_interfaces: + - name: Ethernet1.20 +- type: l3dot1q +- encapsulation_dot1q_vlan: 20 ++ encapsulation_dot1q: ++ vlan: 20 ++ inner_vlan: 12 + encapsulation_vlan: + client: +- dot1q: +- outer: 10 +- inner: 12 ++ encapsulation: dot1q ++ outer_vlan: 10 ++ inner_vlan: 12 + network: +- dot1q: +- outer: 20 +- inner: 22 ++ encapsulation: dot1q ++ outer_vlan: 20 ++ inner_vlan: 22 + - name: Ethernet1.30 + encapsulation_vlan: + client: +- unmatched: true ++ encapsulation: unmatched + +! +port_channel_interfaces: + - name: Port-Channel1.20 +- type: l3dot1q +- encapsulation_dot1q_vlan: 20 ++ encapsulation_dot1q: ++ vlan: 20 ++ inner_vlan: 12 + encapsulation_vlan: + client: +- dot1q: +- vlan: 50 ++ encapsulation: dot1q ++ vlan: 50 + network: +- client: true ++ encapsulation: client + - name: Port-Channel1.30 + encapsulation_vlan: + client: +- unmatched: true ++ encapsulation: unmatched +``` + +### Fix issues with flags, source/destination ports, and field set for TCP/UDP protocol under traffic-policies + +The change has been incorporated into `traffic-policies.j2` eos template. + +In AVD 4.0.0, configuring the `flags` for `UDP` protocol under traffic-policies was allowed and the configuration for `source/destination port` and `source/destination field-set` together was not generated for `TCP/UDP` protocol. + +As of AVD 5.0.0, the configuration of `flags` in `UDP` protocol under traffic-policies is not generated and the configuration for `source/destination port` and `field set` can be generated together for `TCP/UDP` protocol. Also, the configuration order has been fixed as per the EOS running-config. + ### Removal of deprecated data models The following data model keys have been removed from `eos_cli_config_gen` in v5.0.0. diff --git a/ansible_collections/arista/avd/docs/release-notes/5.x.x.md b/ansible_collections/arista/avd/docs/release-notes/5.x.x.md index ce2d1ca6c50..de899454566 100644 --- a/ansible_collections/arista/avd/docs/release-notes/5.x.x.md +++ b/ansible_collections/arista/avd/docs/release-notes/5.x.x.md @@ -17,6 +17,9 @@ title: Release Notes for AVD 5.x.x ### Changes to requirements - AVD v.5.0.0 requires Python version 3.10 or newer. +- AVD no longer depends on the `jsonschema` Python library. +- AVD now requires the `cvprac` Python library to be version 1.4.0 or higher.
+ The latest version can be installed with `pip install "cvprac>=1.4.0" --upgrade`. ### Removal of Ansible plugins @@ -77,14 +80,38 @@ As of AVD 5.0.0 the automatic conversion from both of the previous models has be See the [porting guide](../porting-guides/5.x.x.md#no-auto-conversion-of-old-data-model-for-router_bgpredistribute_routes-and-router_bgpvrfsredistribute_routes) for details. +#### `monitor_sessions` no longer requires both `monitor_sessions.sources` and `monitor_sessions.destinations` to be defined for generating configuration + +See the [porting_guide](../porting-guides/5.x.x.md#monitor_sessions-no-longer-requires-both-monitor_sessions.sources-and-monitor_sessions.destinations-to-be-defined-for-generating-configuration) for details. + +#### `router_isis.address_family_ipv4/6.enabled` is now `Required` to generate the configuration and documentation for router_isis address-families + +See the [porting guide](../porting-guides/5.x.x.md#router_isisaddress_family_ipv46enabled-is-now-required-to-generate-the-configuration-and-documentation-for-router_isis-address-families) for details. + #### `ip_security.sa_policies[].esp.integrity` and `.encryption` "null" option has been replaced with "disabled" See the [porting guide](../porting-guides/5.x.x.md#ip_securitysa_policiesespintegrity-and-encryption-null-option-has-been-replaced-with-disabled) for details. +#### `router_ospf.redistribute.bgp/connected/static.enabled` is required + +See the [porting guide](../porting-guides/5.x.x.md#router_ospfredistributebgpconnectedstatic-data-model-has-been-updated-to-require-the-enabled-key) for details. + +#### `router_traffic_engineering.enabled` is required + +See the [porting guide](../porting-guides/5.x.x.md#router_traffic_engineeringenabled-is-required) for details. + #### Removal of schema in JSON format The `eos_cli_config_gen.jsonschema.json` is no longer generated. This schema was not being used and had never been complete. +#### Removal of default type `switched` from ethernet interfaces and port-channel interfaces + +Starting AVD 5.0.0, the default value for `type` in `ethernet_interfaces` and `port_channel_interfaces` is no longer supported. The `type` key must now be explicitly defined in the input variables if it is needed in the configuration and documentation. + +#### Removal of `type` key dependency for rendering ethernet/port-channel interfaces configuration and documentation + +See the [porting guide](../porting-guides/5.x.x.md#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation) for details. + ### Breaking or behavioral changes in eos_designs Breaking changes may require modifications to the inventory or playbook. See the [Porting guide for AVD 5.x.x](../porting-guides/5.x.x.md) @@ -92,6 +119,14 @@ for details. TODO: add level4 sections for breaking changes outlining the change and referring to porting guide for migration. +#### Structured Configuration merged from SVI profiles is now deep merged instead of replaced + +When merging `structured_config` from SVI profiles and parent profiles, AVD versions below 5.0.0 replaced the entire `structured_config` object with the most specific definition of `structured_config`. + +With AVD version 5.0.0 `structured_config` is now deep-merged, same as for other profiles in AVD. This allows the user to contribute different parts of the `structured_config` from profiles or parent profiles. + +See the [porting guide](../porting-guides/5.x.x.md#) for details. + #### custom_structured_configuration_prefix no longer accepts a string Starting AVD 5.0.0, `custom_structured_configuration_prefix` only accepts a list of strings. @@ -106,6 +141,12 @@ Previously they also accepted a string, which was autoconverted to a list. See the [porting guide](../porting-guides/5.x.x.md#) for details. +#### Shutdown interfaces and BGP towards undeployed peers by default + +Starting AVD 5.0.0, the default value of `shutdown_bgp_towards_undeployed_peers` and `shutdown_interfaces_towards_undeployed_peers` is `true`. + +See the [porting guide](../porting-guides/5.x.x.md#default-value-of-shutdown_bgp_towards_undeployed_peers-and-shutdown_interfaces_towards_undeployed_peers-is-changed-to-true) for details. + #### mpls_route_servers no longer accepts a string Starting AVD 5.0.0, `.defaults.mpls_route_servers` only accepts a list of strings. @@ -113,6 +154,18 @@ Previously it also accepted a string, which was autoconverted to a list. See the [porting guide](../porting-guides/5.x.x.md#) for details. +#### Default MTU value changed from `9214` to `9194` for Dps1, WAN HA and WAN p2p uplink interfaces + +Starting AVD 5.0.0, the default MTU for Dps1, WAN HA and WAN p2p uplink interfaces changed from `9214` to `9194`. + +See the [porting guide](../porting-guides/5.x.x.md#default-mtu-value-changed-from-9214-to-9194-for-dps1-wan-ha-and-wan-p2p-uplink-interfaces) for details. + +#### Only render IGMP snooping querier version and address when enabled + +Starting from AVD 5.0.0, the `ip igmp snooping vlan` command for version and address is rendered only when the IGMP snooping querier is enabled. + +See the [porting guide](../porting-guides/5.x.x.md#only-render-igmp-snooping-querier-version-and-address-when-enabled) for details. + #### ipv6_virtual_router_addresses are now configured if ipv6_enable is true on SVIs For SVIs with `ipv6_virtual_router_addresses` set, AVD versions below 5.0.0 only rendered the configuration if `ipv6_address` @@ -132,6 +185,19 @@ With AVD version 5.0.0 `ipv6_address_virtuals` are only rendered in the configur The `eos_designs.jsonschema.json` is no longer generated. This schema was not being used and had never been complete. +#### Removed redistribute igmp from BGP vlan config belonging to a VRF with evpn multicast + +Having `redistribute igmp` configured for a BGP SVIs with both L2 and L3 EVPN Multicast enabled will take up additional control-plane and data-plane resources. +Starting AVD 5.0.0, by default `redistribute igmp` will only get configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + +See the [Porting guide for AVD 5.x.x](../porting-guides/5.x.x.md#removed-redistribute-igmp-from-bgp-vlan-config-belong-to-a-vrf-with-evpn-multicast) + +#### vrf_id will be used instead of vrf_vni to get the ip address of evpn underlay multicast group + +Starting AVD 5.0.0, `vrf_id` is used instead of `vrf_vni` in the algorithm to set the offset for IP address of EVPN underlay multicast group when `evpn_l3_multicast` is enabled. + +See the [Porting guide for AVD 5.x.x](../porting-guides/5.x.x.md#vrf_id-is-used-instead-of-vrf_vni-to-calculate-the-ip-address-of-evpn-underlay-multicast-group-for-a-vrf) + #### AvdInterfaceDescriptions breaking changes The class `AvdInterfaceDescriptions` was moved to `pyavd` and heavily modified. @@ -140,6 +206,46 @@ The updated version gives more flexibility to customizing interface descriptions See the [Porting guide for AVD 5.x.x](../porting-guides/5.x.x.md#avdinterfacedescriptions-breaking-changes) +#### Reference to a non-existing profile now raise an error + +With AVD version 5.0.0, if any referenced profile or parent profile is not defined, AVD will now raise an error. This helps catching typos in the input variables. + +This applies to: + +- `l3_interface_profiles` +- `port_profiles` +- `svi_profiles` + +#### `wan_mode: autovpn` renamed `wan_mode: legacy-autovpn` + +With AVD version 5.0.0 the valid values for `wan_mode` key are now `legacy-autovpn | cv-pathfinder`. + +See the [porting guide](../porting-guides/5.x.x.md#wan-mode-autovpn-renamed-wan-mode-legacy-vpn) for details. + +#### Default encapsulation for WAN EVPN iBGP peerings changed to `path-selection` + +With AVD version 5.0.0 the default encapsulation used for EVPN iBGP peering between WAN routers is `path-selection`. Previously it was `vxlan`. + +!!! danger + The `path-selection` encapsulation is only supported on EOS above 4.33.0F. + + It is critical that all WAN devices use the same encapsulation. For + existing deployments it is recommended to set the encapsulation back to + `vxlan` until a migration can be done across the entire WAN network. + + Contact your Arista account team for guidance on migration. + +See the [porting guide](../porting-guides/5.x.x.md#default-encapsulation-for-wan-evpn-ibgp-peerings-changed-to-path-selection) for details. + +#### PREVIEW WAN HA Direct Link now uses Port-Channel by default + +TODO: Keep PREVIEW changes at the end as we warn users that PREVIEW mean changes + +For WAN direct HA, AVD will now configure a port-channel by default. +This feature was introduced recently in EOS and may not be supported on your version. + +See the [porting guide](../porting-guides/5.x.x.md#preview-wan-ha-direct-link-now-uses-port-channel-by-default) for details. + ### Other breaking or behavioral changes Breaking changes may require modifications to the inventory or playbook. See the [Porting guide for AVD 5.x.x](../porting-guides/5.x.x.md) @@ -198,3 +304,41 @@ Instead use the `skip_tests` mechanism. See the [porting guide](../porting-guide #### Inband management reachability test change - Inband management reachability test has been refactored to support AVD inband management [data model](https://avd.sh/en/stable/roles/eos_designs/docs/input-variables.html#node-type-inband-management). + +### Deprecation of design.type + +The variable `design.type` is used to select between different variants of default values for `node_type_keys`. +In AVD 5.0.0 the default values of `node_type_keys` for the default `design.type` `l3ls-evpn` has been updated to combine all the default node type from all designs. +This means it is no longer needed to set the `design.type`. + +The default `node_type_keys` for the default design `l3ls-evpn` has been extended with the following node types: + +- `l2spine` copied from the `spine` type of the `l2ls` design. +- `l3spine` copied from the `l2ls` design. +- `rr`, `p` and `pe` copied from the `mpls` design. + +The `leaf` type used by the `l2ls` design is already covered by the `l2leaf` type in the `l3ls-evpn` design. + +To migrate an existing inventory using the `l2ls` design, the following changes are needed: + +```diff +# Remove the design.type setting +- design: +- type: l2ls + +# Replace the type 'spine' with 'l2spine' +- type: spine ++ type: l2spine + +- spine: ++ l2spine: + ... + +# Replace type the 'leaf' with 'l2leaf' +- type: leaf ++ type: l2leaf + +- leaf: ++ l2leaf: + ... +``` diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1A.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1A.md index 08cbf008144..12f693832ab 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1A.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.103/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.103/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.103/24 @@ -153,6 +154,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -243,7 +248,7 @@ vlan internal order ascending range 1006 1199 | 110 | IDF1-Data | - | | 120 | IDF1-Voice | - | | 130 | IDF1-Guest | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,7 +267,7 @@ vlan 130 name IDF1-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,57 +281,57 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet2 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet3 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet4 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet5 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet6 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet7 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet8 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet9 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet10 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet11 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet12 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet13 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet14 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet15 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet16 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet17 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet18 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet19 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet20 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet21 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet22 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet23 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet24 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet25 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet26 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet27 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet28 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet29 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet30 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet31 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet32 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet33 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet34 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet35 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet36 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet37 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet38 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet39 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet40 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet41 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet42 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet43 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet44 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet45 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet46 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet47 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet48 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet1 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet2 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet3 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet4 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet5 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet6 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet7 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet8 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet9 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet10 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet11 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet12 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet13 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet14 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet15 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet16 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet17 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet18 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet19 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet20 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet21 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet22 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet23 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet24 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet25 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet26 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet27 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet28 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet29 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet30 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet31 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet32 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet33 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet34 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet35 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet36 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet37 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet38 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet39 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet40 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet41 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet42 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet43 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet44 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet45 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet46 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet47 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet48 | IDF1 Standard Port | trunk phone | - | 110 | - | - | | Ethernet51 | SPINE1_Ethernet1 | *trunk | *10,110,120,130 | *- | *- | 51 | -| Ethernet53 | MLAG_PEER_LEAF1B_Ethernet53 | *trunk | *- | *- | *['MLAG'] | 53 | -| Ethernet54 | MLAG_PEER_LEAF1B_Ethernet54 | *trunk | *- | *- | *['MLAG'] | 53 | +| Ethernet53 | MLAG_LEAF1B_Ethernet53 | *trunk | *- | *- | *MLAG | 53 | +| Ethernet54 | MLAG_LEAF1B_Ethernet54 | *trunk | *- | *- | *MLAG | 53 | *Inherited from Port-Channel Interface @@ -1353,12 +1358,12 @@ interface Ethernet51 channel-group 51 mode active ! interface Ethernet53 - description MLAG_PEER_LEAF1B_Ethernet53 + description MLAG_LEAF1B_Ethernet53 no shutdown channel-group 53 mode active ! interface Ethernet54 - description MLAG_PEER_LEAF1B_Ethernet54 + description MLAG_LEAF1B_Ethernet54 no shutdown channel-group 53 mode active ``` @@ -1369,10 +1374,10 @@ interface Ethernet54 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel51 | SPINES_Po1 | switched | trunk | 10,110,120,130 | - | - | - | - | 51 | - | -| Port-Channel53 | MLAG_PEER_LEAF1B_Po53 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel51 | SPINES_Po1 | trunk | 10,110,120,130 | - | - | - | - | 51 | - | +| Port-Channel53 | MLAG_LEAF1B_Port-Channel53 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -1381,17 +1386,17 @@ interface Ethernet54 interface Port-Channel51 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 51 ! interface Port-Channel53 - description MLAG_PEER_LEAF1B_Po53 + description MLAG_LEAF1B_Port-Channel53 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -1401,7 +1406,7 @@ interface Port-Channel53 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan10 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -1421,7 +1426,7 @@ interface Vlan10 ip address 10.10.10.6/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1B.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1B.md index e74ce08e28d..ffd245861bf 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1B.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.104/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.104/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.104/24 @@ -153,6 +154,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -243,7 +248,7 @@ vlan internal order ascending range 1006 1199 | 110 | IDF1-Data | - | | 120 | IDF1-Voice | - | | 130 | IDF1-Guest | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,7 +267,7 @@ vlan 130 name IDF1-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,57 +281,57 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet2 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet3 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet4 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet5 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet6 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet7 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet8 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet9 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet10 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet11 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet12 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet13 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet14 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet15 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet16 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet17 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet18 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet19 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet20 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet21 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet22 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet23 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet24 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet25 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet26 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet27 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet28 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet29 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet30 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet31 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet32 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet33 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet34 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet35 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet36 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet37 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet38 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet39 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet40 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet41 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet42 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet43 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet44 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet45 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet46 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet47 | IDF1 Standard Port | trunk phone | - | 110 | - | - | -| Ethernet48 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet1 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet2 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet3 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet4 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet5 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet6 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet7 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet8 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet9 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet10 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet11 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet12 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet13 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet14 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet15 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet16 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet17 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet18 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet19 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet20 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet21 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet22 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet23 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet24 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet25 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet26 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet27 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet28 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet29 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet30 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet31 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet32 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet33 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet34 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet35 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet36 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet37 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet38 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet39 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet40 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet41 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet42 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet43 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet44 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet45 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet46 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet47 | IDF1 Standard Port | trunk phone | - | 110 | - | - | +| Ethernet48 | IDF1 Standard Port | trunk phone | - | 110 | - | - | | Ethernet51 | SPINE2_Ethernet1 | *trunk | *10,110,120,130 | *- | *- | 51 | -| Ethernet53 | MLAG_PEER_LEAF1A_Ethernet53 | *trunk | *- | *- | *['MLAG'] | 53 | -| Ethernet54 | MLAG_PEER_LEAF1A_Ethernet54 | *trunk | *- | *- | *['MLAG'] | 53 | +| Ethernet53 | MLAG_LEAF1A_Ethernet53 | *trunk | *- | *- | *MLAG | 53 | +| Ethernet54 | MLAG_LEAF1A_Ethernet54 | *trunk | *- | *- | *MLAG | 53 | *Inherited from Port-Channel Interface @@ -1353,12 +1358,12 @@ interface Ethernet51 channel-group 51 mode active ! interface Ethernet53 - description MLAG_PEER_LEAF1A_Ethernet53 + description MLAG_LEAF1A_Ethernet53 no shutdown channel-group 53 mode active ! interface Ethernet54 - description MLAG_PEER_LEAF1A_Ethernet54 + description MLAG_LEAF1A_Ethernet54 no shutdown channel-group 53 mode active ``` @@ -1369,10 +1374,10 @@ interface Ethernet54 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel51 | SPINES_Po1 | switched | trunk | 10,110,120,130 | - | - | - | - | 51 | - | -| Port-Channel53 | MLAG_PEER_LEAF1A_Po53 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel51 | SPINES_Po1 | trunk | 10,110,120,130 | - | - | - | - | 51 | - | +| Port-Channel53 | MLAG_LEAF1A_Port-Channel53 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -1381,17 +1386,17 @@ interface Ethernet54 interface Port-Channel51 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 51 ! interface Port-Channel53 - description MLAG_PEER_LEAF1A_Po53 + description MLAG_LEAF1A_Port-Channel53 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -1401,7 +1406,7 @@ interface Port-Channel53 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan10 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -1421,7 +1426,7 @@ interface Vlan10 ip address 10.10.10.7/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF2A.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF2A.md index 76e7ac08191..ee5256a62fe 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF2A.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.105/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.105/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.105/24 @@ -152,6 +153,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -244,246 +249,246 @@ vlan 230 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1/1 | SPINE1_Ethernet49/1 | *trunk | *10,210,220,230 | *- | *- | 11 | | Ethernet1/3 | SPINE2_Ethernet49/1 | *trunk | *10,210,220,230 | *- | *- | 11 | -| Ethernet3/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet3/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet4/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet5/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet6/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | -| Ethernet7/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet3/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet4/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet5/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet6/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/1 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/2 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/3 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/4 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/5 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/6 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/7 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/8 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/9 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/10 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/11 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/12 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/13 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/14 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/15 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/16 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/17 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/18 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/19 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/20 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/21 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/22 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/23 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/24 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/25 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/26 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/27 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/28 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/29 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/30 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/31 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/32 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/33 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/34 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/35 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/36 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/37 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/38 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/39 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/40 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/41 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/42 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/43 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/44 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/45 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/46 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/47 | IDF2 Standard Port | trunk phone | - | 210 | - | - | +| Ethernet7/48 | IDF2 Standard Port | trunk phone | - | 210 | - | - | *Inherited from Port-Channel Interface @@ -6753,9 +6758,9 @@ interface Ethernet7/48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel11 | SPINES_Po491 | switched | trunk | 10,210,220,230 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel11 | SPINES_Po491 | trunk | 10,210,220,230 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -6764,9 +6769,9 @@ interface Ethernet7/48 interface Port-Channel11 description SPINES_Po491 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3A.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3A.md index 1bdff7c68f1..02d80eb4b44 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3A.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.106/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.106/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.106/24 @@ -153,6 +154,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -243,7 +248,7 @@ vlan internal order ascending range 1006 1199 | 310 | IDF3-Data | - | | 320 | IDF3-Voice | - | | 330 | IDF3-Guest | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,7 +267,7 @@ vlan 330 name IDF3-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,109 +281,109 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | | Ethernet97/1 | SPINE1_Ethernet50/1 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/2 | SPINE2_Ethernet50/1 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/3 | LEAF3C_Ethernet97/1 | *trunk | *10,310,320,330 | *- | *- | 973 | | Ethernet97/4 | LEAF3D_Ethernet97/1 | *trunk | *10,310,320,330 | *- | *- | 974 | | Ethernet98/1 | LEAF3E_Ethernet97/1 | *trunk | *10,310,320,330 | *- | *- | 981 | -| Ethernet98/3 | MLAG_PEER_LEAF3B_Ethernet98/3 | *trunk | *- | *- | *['MLAG'] | 983 | -| Ethernet98/4 | MLAG_PEER_LEAF3B_Ethernet98/4 | *trunk | *- | *- | *['MLAG'] | 983 | +| Ethernet98/3 | MLAG_LEAF3B_Ethernet98/3 | *trunk | *- | *- | *MLAG | 983 | +| Ethernet98/4 | MLAG_LEAF3B_Ethernet98/4 | *trunk | *- | *- | *MLAG | 983 | *Inherited from Port-Channel Interface @@ -2433,12 +2438,12 @@ interface Ethernet98/1 channel-group 981 mode active ! interface Ethernet98/3 - description MLAG_PEER_LEAF3B_Ethernet98/3 + description MLAG_LEAF3B_Ethernet98/3 no shutdown channel-group 983 mode active ! interface Ethernet98/4 - description MLAG_PEER_LEAF3B_Ethernet98/4 + description MLAG_LEAF3B_Ethernet98/4 no shutdown channel-group 983 mode active ``` @@ -2449,13 +2454,13 @@ interface Ethernet98/4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel971 | SPINES_Po501 | switched | trunk | 10,310,320,330 | - | - | - | - | 971 | - | -| Port-Channel973 | LEAF3C_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 973 | - | -| Port-Channel974 | LEAF3D_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 974 | - | -| Port-Channel981 | LEAF3E_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 981 | - | -| Port-Channel983 | MLAG_PEER_LEAF3B_Po983 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel971 | SPINES_Po501 | trunk | 10,310,320,330 | - | - | - | - | 971 | - | +| Port-Channel973 | LEAF3C_Po971 | trunk | 10,310,320,330 | - | - | - | - | 973 | - | +| Port-Channel974 | LEAF3D_Po971 | trunk | 10,310,320,330 | - | - | - | - | 974 | - | +| Port-Channel981 | LEAF3E_Po971 | trunk | 10,310,320,330 | - | - | - | - | 981 | - | +| Port-Channel983 | MLAG_LEAF3B_Port-Channel983 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -2464,41 +2469,41 @@ interface Ethernet98/4 interface Port-Channel971 description SPINES_Po501 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 971 ! interface Port-Channel973 description LEAF3C_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 973 ! interface Port-Channel974 description LEAF3D_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 974 ! interface Port-Channel981 description LEAF3E_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 981 ! interface Port-Channel983 - description MLAG_PEER_LEAF3B_Po983 + description MLAG_LEAF3B_Port-Channel983 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -2508,7 +2513,7 @@ interface Port-Channel983 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan10 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -2528,7 +2533,7 @@ interface Vlan10 ip address 10.10.10.9/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3B.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3B.md index 684e73ff038..17f1052e0b3 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3B.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.107/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.107/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.107/24 @@ -153,6 +154,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -243,7 +248,7 @@ vlan internal order ascending range 1006 1199 | 310 | IDF3-Data | - | | 320 | IDF3-Voice | - | | 330 | IDF3-Guest | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,7 +267,7 @@ vlan 330 name IDF3-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,109 +281,109 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | | Ethernet97/1 | SPINE1_Ethernet51/1 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/2 | SPINE2_Ethernet51/1 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/3 | LEAF3C_Ethernet97/2 | *trunk | *10,310,320,330 | *- | *- | 973 | | Ethernet97/4 | LEAF3D_Ethernet97/2 | *trunk | *10,310,320,330 | *- | *- | 974 | | Ethernet98/1 | LEAF3E_Ethernet97/2 | *trunk | *10,310,320,330 | *- | *- | 981 | -| Ethernet98/3 | MLAG_PEER_LEAF3A_Ethernet98/3 | *trunk | *- | *- | *['MLAG'] | 983 | -| Ethernet98/4 | MLAG_PEER_LEAF3A_Ethernet98/4 | *trunk | *- | *- | *['MLAG'] | 983 | +| Ethernet98/3 | MLAG_LEAF3A_Ethernet98/3 | *trunk | *- | *- | *MLAG | 983 | +| Ethernet98/4 | MLAG_LEAF3A_Ethernet98/4 | *trunk | *- | *- | *MLAG | 983 | *Inherited from Port-Channel Interface @@ -2433,12 +2438,12 @@ interface Ethernet98/1 channel-group 981 mode active ! interface Ethernet98/3 - description MLAG_PEER_LEAF3A_Ethernet98/3 + description MLAG_LEAF3A_Ethernet98/3 no shutdown channel-group 983 mode active ! interface Ethernet98/4 - description MLAG_PEER_LEAF3A_Ethernet98/4 + description MLAG_LEAF3A_Ethernet98/4 no shutdown channel-group 983 mode active ``` @@ -2449,13 +2454,13 @@ interface Ethernet98/4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel971 | SPINES_Po501 | switched | trunk | 10,310,320,330 | - | - | - | - | 971 | - | -| Port-Channel973 | LEAF3C_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 973 | - | -| Port-Channel974 | LEAF3D_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 974 | - | -| Port-Channel981 | LEAF3E_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 981 | - | -| Port-Channel983 | MLAG_PEER_LEAF3A_Po983 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel971 | SPINES_Po501 | trunk | 10,310,320,330 | - | - | - | - | 971 | - | +| Port-Channel973 | LEAF3C_Po971 | trunk | 10,310,320,330 | - | - | - | - | 973 | - | +| Port-Channel974 | LEAF3D_Po971 | trunk | 10,310,320,330 | - | - | - | - | 974 | - | +| Port-Channel981 | LEAF3E_Po971 | trunk | 10,310,320,330 | - | - | - | - | 981 | - | +| Port-Channel983 | MLAG_LEAF3A_Port-Channel983 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -2464,41 +2469,41 @@ interface Ethernet98/4 interface Port-Channel971 description SPINES_Po501 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 971 ! interface Port-Channel973 description LEAF3C_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 973 ! interface Port-Channel974 description LEAF3D_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 974 ! interface Port-Channel981 description LEAF3E_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 981 ! interface Port-Channel983 - description MLAG_PEER_LEAF3A_Po983 + description MLAG_LEAF3A_Port-Channel983 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -2508,7 +2513,7 @@ interface Port-Channel983 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan10 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -2528,7 +2533,7 @@ interface Vlan10 ip address 10.10.10.10/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3C.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3C.md index 4158da9934d..82f52b83128 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3C.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3C.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) @@ -46,20 +47,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.108/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.108/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.108/24 @@ -150,6 +151,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -240,102 +245,102 @@ vlan 330 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | | Ethernet97/1 | LEAF3A_Ethernet97/3 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/2 | LEAF3B_Ethernet97/3 | *trunk | *10,310,320,330 | *- | *- | 971 | @@ -2383,9 +2388,9 @@ interface Ethernet97/2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel971 | IDF3_AGG_Po973 | switched | trunk | 10,310,320,330 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel971 | IDF3_AGG_Po973 | trunk | 10,310,320,330 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -2394,9 +2399,9 @@ interface Ethernet97/2 interface Port-Channel971 description IDF3_AGG_Po973 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3D.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3D.md index 579cce937ec..79870e6962e 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3D.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3D.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) @@ -46,20 +47,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.109/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.109/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.109/24 @@ -150,6 +151,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -240,102 +245,102 @@ vlan 330 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | | Ethernet97/1 | LEAF3A_Ethernet97/4 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/2 | LEAF3B_Ethernet97/4 | *trunk | *10,310,320,330 | *- | *- | 971 | @@ -2383,9 +2388,9 @@ interface Ethernet97/2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel971 | IDF3_AGG_Po974 | switched | trunk | 10,310,320,330 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel971 | IDF3_AGG_Po974 | trunk | 10,310,320,330 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -2394,9 +2399,9 @@ interface Ethernet97/2 interface Port-Channel971 description IDF3_AGG_Po974 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3E.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3E.md index 798e489e5e9..40923615ba8 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3E.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/LEAF3E.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) @@ -46,20 +47,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.110/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.110/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.110/24 @@ -150,6 +151,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -240,102 +245,102 @@ vlan 330 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | -| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet1 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet2 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet3 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet4 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet5 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet6 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet7 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet8 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet9 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet10 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet11 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet12 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet13 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet14 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet15 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet16 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet17 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet18 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet19 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet20 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet21 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet22 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet23 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet24 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet25 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet26 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet27 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet28 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet29 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet30 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet31 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet32 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet33 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet34 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet35 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet36 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet37 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet38 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet39 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet40 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet41 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet42 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet43 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet44 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet45 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet46 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet47 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet48 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet49 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet50 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet51 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet52 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet53 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet54 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet55 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet56 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet57 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet58 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet59 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet60 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet61 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet62 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet63 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet64 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet65 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet66 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet67 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet68 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet69 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet70 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet71 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet72 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet73 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet74 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet75 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet76 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet77 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet78 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet79 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet80 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet81 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet82 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet83 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet84 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet85 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet86 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet87 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet88 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet89 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet90 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet91 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet92 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet93 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet94 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet95 | IDF3 Standard Port | trunk phone | - | 310 | - | - | +| Ethernet96 | IDF3 Standard Port | trunk phone | - | 310 | - | - | | Ethernet97/1 | LEAF3A_Ethernet98/1 | *trunk | *10,310,320,330 | *- | *- | 971 | | Ethernet97/2 | LEAF3B_Ethernet98/1 | *trunk | *10,310,320,330 | *- | *- | 971 | @@ -2383,9 +2388,9 @@ interface Ethernet97/2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel971 | IDF3_AGG_Po981 | switched | trunk | 10,310,320,330 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel971 | IDF3_AGG_Po981 | trunk | 10,310,320,330 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -2394,9 +2399,9 @@ interface Ethernet97/2 interface Port-Channel971 description IDF3_AGG_Po981 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE1.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE1.md index bcd0eef74af..f0d1bcfe5b4 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE1.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -50,20 +51,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.101/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.101/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.101/24 @@ -154,6 +155,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -250,8 +255,8 @@ vlan internal order ascending range 1006 1199 | 310 | IDF3-Data | - | | 320 | IDF3-Voice | - | | 330 | IDF3-Guest | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -288,11 +293,11 @@ vlan 330 name IDF3-Guest ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,16 +315,16 @@ vlan 4094 | Ethernet49/1 | LEAF2A_Ethernet1/1 | *trunk | *10,210,220,230 | *- | *- | 491 | | Ethernet50/1 | LEAF3A_Ethernet97/1 | *trunk | *10,310,320,330 | *- | *- | 501 | | Ethernet51/1 | LEAF3B_Ethernet97/1 | *trunk | *10,310,320,330 | *- | *- | 501 | -| Ethernet55/1 | MLAG_PEER_SPINE2_Ethernet55/1 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 551 | -| Ethernet56/1 | MLAG_PEER_SPINE2_Ethernet56/1 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 551 | +| Ethernet55/1 | MLAG_SPINE2_Ethernet55/1 | *trunk | *- | *- | *MLAG | 551 | +| Ethernet56/1 | MLAG_SPINE2_Ethernet56/1 | *trunk | *- | *- | *MLAG | 551 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet52/1 | P2P_LINK_TO_WAN_Ethernet1/1 | routed | - | 10.0.0.3/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet52/1 | P2P_LINK_TO_WAN_Ethernet1/1 | - | 10.0.0.3/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -355,12 +360,12 @@ interface Ethernet52/1 ip ospf area 0.0.0.0 ! interface Ethernet55/1 - description MLAG_PEER_SPINE2_Ethernet55/1 + description MLAG_SPINE2_Ethernet55/1 no shutdown channel-group 551 mode active ! interface Ethernet56/1 - description MLAG_PEER_SPINE2_Ethernet56/1 + description MLAG_SPINE2_Ethernet56/1 no shutdown channel-group 551 mode active ``` @@ -371,12 +376,12 @@ interface Ethernet56/1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | IDF1_Po51 | switched | trunk | 10,110,120,130 | - | - | - | - | 1 | - | -| Port-Channel491 | LEAF2A_Po11 | switched | trunk | 10,210,220,230 | - | - | - | - | 491 | - | -| Port-Channel501 | IDF3_AGG_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 501 | - | -| Port-Channel551 | MLAG_PEER_SPINE2_Po551 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | IDF1_Po51 | trunk | 10,110,120,130 | - | - | - | - | 1 | - | +| Port-Channel491 | LEAF2A_Po11 | trunk | 10,210,220,230 | - | - | - | - | 491 | - | +| Port-Channel501 | IDF3_AGG_Po971 | trunk | 10,310,320,330 | - | - | - | - | 501 | - | +| Port-Channel551 | MLAG_SPINE2_Port-Channel551 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -385,34 +390,33 @@ interface Ethernet56/1 interface Port-Channel1 description IDF1_Po51 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 1 ! interface Port-Channel491 description LEAF2A_Po11 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport mlag 491 ! interface Port-Channel501 description IDF3_AGG_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 501 ! interface Port-Channel551 - description MLAG_PEER_SPINE2_Po551 + description MLAG_SPINE2_Port-Channel551 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -423,20 +427,20 @@ interface Port-Channel551 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 172.16.1.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.1.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 172.16.1.1/32 ip ospf area 0.0.0.0 @@ -458,8 +462,8 @@ interface Loopback0 | Vlan310 | IDF3-Data | default | - | False | | Vlan320 | IDF3-Voice | default | - | False | | Vlan330 | IDF3-Guest | default | - | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -545,7 +549,7 @@ interface Vlan330 ip virtual-router address 10.3.30.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.1.1.0/31 @@ -553,7 +557,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE2.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE2.md index 6de78b97af5..25b0dd11ab6 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE2.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/devices/SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) @@ -50,20 +51,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.102/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.102/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.102/24 @@ -154,6 +155,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ### AAA Authorization #### AAA Authorization Summary @@ -250,8 +255,8 @@ vlan internal order ascending range 1006 1199 | 310 | IDF3-Data | - | | 320 | IDF3-Voice | - | | 330 | IDF3-Guest | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -288,11 +293,11 @@ vlan 330 name IDF3-Guest ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,16 +315,16 @@ vlan 4094 | Ethernet49/1 | LEAF2A_Ethernet1/3 | *trunk | *10,210,220,230 | *- | *- | 491 | | Ethernet50/1 | LEAF3A_Ethernet97/2 | *trunk | *10,310,320,330 | *- | *- | 501 | | Ethernet51/1 | LEAF3B_Ethernet97/2 | *trunk | *10,310,320,330 | *- | *- | 501 | -| Ethernet55/1 | MLAG_PEER_SPINE1_Ethernet55/1 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 551 | -| Ethernet56/1 | MLAG_PEER_SPINE1_Ethernet56/1 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 551 | +| Ethernet55/1 | MLAG_SPINE1_Ethernet55/1 | *trunk | *- | *- | *MLAG | 551 | +| Ethernet56/1 | MLAG_SPINE1_Ethernet56/1 | *trunk | *- | *- | *MLAG | 551 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet52/1 | P2P_LINK_TO_WAN_Ethernet1/1 | routed | - | 10.0.0.5/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet52/1 | P2P_LINK_TO_WAN_Ethernet1/1 | - | 10.0.0.5/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -355,12 +360,12 @@ interface Ethernet52/1 ip ospf area 0.0.0.0 ! interface Ethernet55/1 - description MLAG_PEER_SPINE1_Ethernet55/1 + description MLAG_SPINE1_Ethernet55/1 no shutdown channel-group 551 mode active ! interface Ethernet56/1 - description MLAG_PEER_SPINE1_Ethernet56/1 + description MLAG_SPINE1_Ethernet56/1 no shutdown channel-group 551 mode active ``` @@ -371,12 +376,12 @@ interface Ethernet56/1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | IDF1_Po51 | switched | trunk | 10,110,120,130 | - | - | - | - | 1 | - | -| Port-Channel491 | LEAF2A_Po11 | switched | trunk | 10,210,220,230 | - | - | - | - | 491 | - | -| Port-Channel501 | IDF3_AGG_Po971 | switched | trunk | 10,310,320,330 | - | - | - | - | 501 | - | -| Port-Channel551 | MLAG_PEER_SPINE1_Po551 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | IDF1_Po51 | trunk | 10,110,120,130 | - | - | - | - | 1 | - | +| Port-Channel491 | LEAF2A_Po11 | trunk | 10,210,220,230 | - | - | - | - | 491 | - | +| Port-Channel501 | IDF3_AGG_Po971 | trunk | 10,310,320,330 | - | - | - | - | 501 | - | +| Port-Channel551 | MLAG_SPINE1_Port-Channel551 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -385,34 +390,33 @@ interface Ethernet56/1 interface Port-Channel1 description IDF1_Po51 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 1 ! interface Port-Channel491 description LEAF2A_Po11 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport mlag 491 ! interface Port-Channel501 description IDF3_AGG_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 501 ! interface Port-Channel551 - description MLAG_PEER_SPINE1_Po551 + description MLAG_SPINE1_Port-Channel551 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -423,20 +427,20 @@ interface Port-Channel551 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 172.16.1.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.1.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 172.16.1.2/32 ip ospf area 0.0.0.0 @@ -458,8 +462,8 @@ interface Loopback0 | Vlan310 | IDF3-Data | default | - | False | | Vlan320 | IDF3-Voice | default | - | False | | Vlan330 | IDF3-Guest | default | - | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -545,7 +549,7 @@ interface Vlan330 ip virtual-router address 10.3.30.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.1.1.1/31 @@ -553,7 +557,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-documentation.md index 0cdd9fe1370..98226938db2 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-documentation.md @@ -17,14 +17,14 @@ | POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | Serial Number | | --- | ---- | ---- | ------------- | -------- | -------------------------- | ------------- | -| DC1_FABRIC | leaf | LEAF1A | 172.16.100.103/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF1B | 172.16.100.104/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF2A | 172.16.100.105/24 | 720XP | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3A | 172.16.100.106/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3B | 172.16.100.107/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3C | 172.16.100.108/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3D | 172.16.100.109/24 | cEOSLab | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3E | 172.16.100.110/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF1A | 172.16.100.103/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF1B | 172.16.100.104/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF2A | 172.16.100.105/24 | 720XP | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3A | 172.16.100.106/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3B | 172.16.100.107/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3C | 172.16.100.108/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3D | 172.16.100.109/24 | cEOSLab | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3E | 172.16.100.110/24 | cEOSLab | Provisioned | - | | DC1_FABRIC | l3spine | SPINE1 | 172.16.100.101/24 | cEOSLab | Provisioned | - | | DC1_FABRIC | l3spine | SPINE2 | 172.16.100.102/24 | cEOSLab | Provisioned | - | @@ -34,37 +34,37 @@ | POD | Type | Node | Management IP | Inband Interface | | --- | ---- | ---- | ------------- | ---------------- | -| DC1_FABRIC | leaf | LEAF1A | 10.10.10.6/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF1B | 10.10.10.7/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF2A | 10.10.10.8/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF3A | 10.10.10.9/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF3B | 10.10.10.10/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF3C | 10.10.10.11/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF3D | 10.10.10.12/24 | Vlan10 | -| DC1_FABRIC | leaf | LEAF3E | 10.10.10.13/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF1A | 10.10.10.6/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF1B | 10.10.10.7/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF2A | 10.10.10.8/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF3A | 10.10.10.9/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF3B | 10.10.10.10/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF3C | 10.10.10.11/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF3D | 10.10.10.12/24 | Vlan10 | +| DC1_FABRIC | l2leaf | LEAF3E | 10.10.10.13/24 | Vlan10 | ## Fabric Topology | Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | | ---- | ---- | -------------- | --------- | ----------| -------------- | -| leaf | LEAF1A | Ethernet51 | l3spine | SPINE1 | Ethernet1 | -| leaf | LEAF1A | Ethernet53 | mlag_peer | LEAF1B | Ethernet53 | -| leaf | LEAF1A | Ethernet54 | mlag_peer | LEAF1B | Ethernet54 | -| leaf | LEAF1B | Ethernet51 | l3spine | SPINE2 | Ethernet1 | -| leaf | LEAF2A | Ethernet1/1 | l3spine | SPINE1 | Ethernet49/1 | -| leaf | LEAF2A | Ethernet1/3 | l3spine | SPINE2 | Ethernet49/1 | -| leaf | LEAF3A | Ethernet97/1 | l3spine | SPINE1 | Ethernet50/1 | -| leaf | LEAF3A | Ethernet97/2 | l3spine | SPINE2 | Ethernet50/1 | -| leaf | LEAF3A | Ethernet97/3 | leaf | LEAF3C | Ethernet97/1 | -| leaf | LEAF3A | Ethernet97/4 | leaf | LEAF3D | Ethernet97/1 | -| leaf | LEAF3A | Ethernet98/1 | leaf | LEAF3E | Ethernet97/1 | -| leaf | LEAF3A | Ethernet98/3 | mlag_peer | LEAF3B | Ethernet98/3 | -| leaf | LEAF3A | Ethernet98/4 | mlag_peer | LEAF3B | Ethernet98/4 | -| leaf | LEAF3B | Ethernet97/1 | l3spine | SPINE1 | Ethernet51/1 | -| leaf | LEAF3B | Ethernet97/2 | l3spine | SPINE2 | Ethernet51/1 | -| leaf | LEAF3B | Ethernet97/3 | leaf | LEAF3C | Ethernet97/2 | -| leaf | LEAF3B | Ethernet97/4 | leaf | LEAF3D | Ethernet97/2 | -| leaf | LEAF3B | Ethernet98/1 | leaf | LEAF3E | Ethernet97/2 | +| l2leaf | LEAF1A | Ethernet51 | l3spine | SPINE1 | Ethernet1 | +| l2leaf | LEAF1A | Ethernet53 | mlag_peer | LEAF1B | Ethernet53 | +| l2leaf | LEAF1A | Ethernet54 | mlag_peer | LEAF1B | Ethernet54 | +| l2leaf | LEAF1B | Ethernet51 | l3spine | SPINE2 | Ethernet1 | +| l2leaf | LEAF2A | Ethernet1/1 | l3spine | SPINE1 | Ethernet49/1 | +| l2leaf | LEAF2A | Ethernet1/3 | l3spine | SPINE2 | Ethernet49/1 | +| l2leaf | LEAF3A | Ethernet97/1 | l3spine | SPINE1 | Ethernet50/1 | +| l2leaf | LEAF3A | Ethernet97/2 | l3spine | SPINE2 | Ethernet50/1 | +| l2leaf | LEAF3A | Ethernet97/3 | l2leaf | LEAF3C | Ethernet97/1 | +| l2leaf | LEAF3A | Ethernet97/4 | l2leaf | LEAF3D | Ethernet97/1 | +| l2leaf | LEAF3A | Ethernet98/1 | l2leaf | LEAF3E | Ethernet97/1 | +| l2leaf | LEAF3A | Ethernet98/3 | mlag_peer | LEAF3B | Ethernet98/3 | +| l2leaf | LEAF3A | Ethernet98/4 | mlag_peer | LEAF3B | Ethernet98/4 | +| l2leaf | LEAF3B | Ethernet97/1 | l3spine | SPINE1 | Ethernet51/1 | +| l2leaf | LEAF3B | Ethernet97/2 | l3spine | SPINE2 | Ethernet51/1 | +| l2leaf | LEAF3B | Ethernet97/3 | l2leaf | LEAF3C | Ethernet97/2 | +| l2leaf | LEAF3B | Ethernet97/4 | l2leaf | LEAF3D | Ethernet97/2 | +| l2leaf | LEAF3B | Ethernet98/1 | l2leaf | LEAF3E | Ethernet97/2 | | l3spine | SPINE1 | Ethernet55/1 | mlag_peer | SPINE2 | Ethernet55/1 | | l3spine | SPINE1 | Ethernet56/1 | mlag_peer | SPINE2 | Ethernet56/1 | @@ -96,7 +96,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv b/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv deleted file mode 100644 index bfbfa894838..00000000000 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ /dev/null @@ -1 +0,0 @@ -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address diff --git a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 913e6524148..00000000000 --- a/ansible_collections/arista/avd/examples/campus-fabric/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,859 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -leaf,LEAF1A,Ethernet1,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet2,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet3,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet4,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet5,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet6,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet7,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet8,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet9,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet10,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet11,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet12,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet13,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet14,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet15,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet16,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet17,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet18,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet19,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet20,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet21,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet22,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet23,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet24,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet25,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet26,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet27,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet28,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet29,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet30,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet31,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet32,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet33,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet34,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet35,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet36,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet37,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet38,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet39,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet40,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet41,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet42,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet43,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet44,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet45,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet46,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet47,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet48,network_port,IDF1 Standard Port,,True -leaf,LEAF1A,Ethernet51,l3spine,SPINE1,Ethernet1,True -leaf,LEAF1A,Ethernet53,mlag_peer,LEAF1B,Ethernet53,True -leaf,LEAF1A,Ethernet54,mlag_peer,LEAF1B,Ethernet54,True -leaf,LEAF1B,Ethernet1,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet2,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet3,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet4,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet5,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet6,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet7,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet8,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet9,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet10,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet11,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet12,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet13,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet14,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet15,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet16,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet17,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet18,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet19,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet20,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet21,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet22,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet23,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet24,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet25,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet26,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet27,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet28,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet29,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet30,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet31,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet32,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet33,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet34,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet35,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet36,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet37,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet38,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet39,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet40,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet41,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet42,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet43,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet44,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet45,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet46,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet47,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet48,network_port,IDF1 Standard Port,,True -leaf,LEAF1B,Ethernet51,l3spine,SPINE2,Ethernet1,True -leaf,LEAF1B,Ethernet53,mlag_peer,LEAF1A,Ethernet53,True -leaf,LEAF1B,Ethernet54,mlag_peer,LEAF1A,Ethernet54,True -leaf,LEAF2A,Ethernet1/1,l3spine,SPINE1,Ethernet49/1,True -leaf,LEAF2A,Ethernet1/3,l3spine,SPINE2,Ethernet49/1,True -leaf,LEAF2A,Ethernet3/1,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/2,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/3,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/4,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/5,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/6,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/7,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/8,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/9,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/10,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/11,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/12,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/13,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/14,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/15,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/16,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/17,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/18,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/19,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/20,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/21,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/22,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/23,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/24,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/25,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/26,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/27,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/28,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/29,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/30,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/31,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/32,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/33,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/34,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/35,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/36,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/37,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/38,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/39,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/40,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/41,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/42,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/43,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/44,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/45,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/46,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/47,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet3/48,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/1,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/2,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/3,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/4,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/5,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/6,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/7,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/8,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/9,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/10,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/11,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/12,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/13,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/14,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/15,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/16,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/17,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/18,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/19,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/20,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/21,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/22,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/23,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/24,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/25,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/26,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/27,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/28,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/29,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/30,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/31,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/32,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/33,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/34,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/35,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/36,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/37,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/38,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/39,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/40,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/41,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/42,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/43,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/44,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/45,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/46,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/47,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet4/48,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/1,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/2,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/3,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/4,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/5,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/6,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/7,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/8,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/9,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/10,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/11,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/12,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/13,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/14,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/15,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/16,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/17,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/18,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/19,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/20,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/21,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/22,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/23,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/24,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/25,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/26,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/27,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/28,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/29,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/30,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/31,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/32,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/33,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/34,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/35,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/36,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/37,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/38,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/39,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/40,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/41,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/42,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/43,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/44,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/45,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/46,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/47,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet5/48,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/1,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/2,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/3,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/4,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/5,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/6,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/7,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/8,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/9,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/10,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/11,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/12,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/13,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/14,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/15,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/16,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/17,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/18,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/19,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/20,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/21,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/22,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/23,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/24,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/25,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/26,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/27,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/28,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/29,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/30,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/31,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/32,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/33,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/34,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/35,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/36,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/37,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/38,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/39,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/40,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/41,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/42,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/43,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/44,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/45,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/46,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/47,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet6/48,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/1,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/2,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/3,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/4,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/5,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/6,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/7,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/8,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/9,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/10,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/11,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/12,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/13,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/14,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/15,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/16,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/17,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/18,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/19,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/20,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/21,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/22,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/23,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/24,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/25,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/26,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/27,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/28,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/29,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/30,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/31,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/32,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/33,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/34,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/35,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/36,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/37,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/38,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/39,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/40,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/41,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/42,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/43,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/44,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/45,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/46,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/47,network_port,IDF2 Standard Port,,True -leaf,LEAF2A,Ethernet7/48,network_port,IDF2 Standard Port,,True -leaf,LEAF3A,Ethernet1,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet2,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet3,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet4,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet5,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet6,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet7,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet8,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet9,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet10,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet11,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet12,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet13,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet14,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet15,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet16,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet17,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet18,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet19,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet20,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet21,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet22,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet23,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet24,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet25,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet26,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet27,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet28,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet29,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet30,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet31,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet32,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet33,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet34,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet35,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet36,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet37,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet38,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet39,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet40,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet41,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet42,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet43,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet44,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet45,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet46,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet47,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet48,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet49,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet50,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet51,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet52,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet53,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet54,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet55,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet56,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet57,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet58,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet59,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet60,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet61,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet62,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet63,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet64,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet65,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet66,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet67,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet68,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet69,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet70,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet71,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet72,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet73,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet74,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet75,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet76,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet77,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet78,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet79,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet80,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet81,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet82,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet83,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet84,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet85,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet86,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet87,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet88,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet89,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet90,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet91,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet92,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet93,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet94,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet95,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet96,network_port,IDF3 Standard Port,,True -leaf,LEAF3A,Ethernet97/1,l3spine,SPINE1,Ethernet50/1,True -leaf,LEAF3A,Ethernet97/2,l3spine,SPINE2,Ethernet50/1,True -leaf,LEAF3A,Ethernet97/3,leaf,LEAF3C,Ethernet97/1,True -leaf,LEAF3A,Ethernet97/4,leaf,LEAF3D,Ethernet97/1,True -leaf,LEAF3A,Ethernet98/1,leaf,LEAF3E,Ethernet97/1,True -leaf,LEAF3A,Ethernet98/3,mlag_peer,LEAF3B,Ethernet98/3,True -leaf,LEAF3A,Ethernet98/4,mlag_peer,LEAF3B,Ethernet98/4,True -leaf,LEAF3B,Ethernet1,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet2,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet3,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet4,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet5,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet6,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet7,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet8,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet9,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet10,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet11,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet12,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet13,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet14,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet15,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet16,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet17,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet18,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet19,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet20,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet21,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet22,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet23,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet24,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet25,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet26,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet27,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet28,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet29,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet30,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet31,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet32,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet33,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet34,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet35,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet36,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet37,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet38,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet39,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet40,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet41,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet42,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet43,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet44,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet45,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet46,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet47,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet48,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet49,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet50,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet51,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet52,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet53,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet54,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet55,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet56,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet57,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet58,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet59,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet60,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet61,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet62,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet63,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet64,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet65,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet66,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet67,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet68,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet69,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet70,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet71,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet72,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet73,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet74,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet75,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet76,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet77,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet78,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet79,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet80,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet81,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet82,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet83,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet84,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet85,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet86,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet87,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet88,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet89,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet90,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet91,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet92,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet93,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet94,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet95,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet96,network_port,IDF3 Standard Port,,True -leaf,LEAF3B,Ethernet97/1,l3spine,SPINE1,Ethernet51/1,True -leaf,LEAF3B,Ethernet97/2,l3spine,SPINE2,Ethernet51/1,True -leaf,LEAF3B,Ethernet97/3,leaf,LEAF3C,Ethernet97/2,True -leaf,LEAF3B,Ethernet97/4,leaf,LEAF3D,Ethernet97/2,True -leaf,LEAF3B,Ethernet98/1,leaf,LEAF3E,Ethernet97/2,True -leaf,LEAF3B,Ethernet98/3,mlag_peer,LEAF3A,Ethernet98/3,True -leaf,LEAF3B,Ethernet98/4,mlag_peer,LEAF3A,Ethernet98/4,True -leaf,LEAF3C,Ethernet1,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet2,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet3,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet4,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet5,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet6,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet7,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet8,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet9,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet10,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet11,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet12,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet13,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet14,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet15,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet16,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet17,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet18,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet19,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet20,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet21,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet22,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet23,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet24,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet25,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet26,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet27,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet28,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet29,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet30,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet31,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet32,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet33,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet34,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet35,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet36,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet37,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet38,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet39,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet40,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet41,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet42,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet43,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet44,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet45,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet46,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet47,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet48,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet49,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet50,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet51,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet52,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet53,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet54,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet55,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet56,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet57,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet58,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet59,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet60,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet61,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet62,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet63,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet64,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet65,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet66,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet67,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet68,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet69,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet70,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet71,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet72,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet73,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet74,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet75,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet76,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet77,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet78,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet79,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet80,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet81,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet82,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet83,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet84,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet85,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet86,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet87,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet88,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet89,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet90,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet91,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet92,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet93,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet94,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet95,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet96,network_port,IDF3 Standard Port,,True -leaf,LEAF3C,Ethernet97/1,leaf,LEAF3A,Ethernet97/3,True -leaf,LEAF3C,Ethernet97/2,leaf,LEAF3B,Ethernet97/3,True -leaf,LEAF3D,Ethernet1,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet2,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet3,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet4,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet5,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet6,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet7,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet8,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet9,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet10,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet11,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet12,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet13,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet14,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet15,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet16,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet17,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet18,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet19,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet20,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet21,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet22,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet23,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet24,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet25,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet26,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet27,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet28,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet29,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet30,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet31,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet32,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet33,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet34,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet35,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet36,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet37,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet38,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet39,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet40,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet41,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet42,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet43,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet44,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet45,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet46,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet47,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet48,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet49,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet50,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet51,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet52,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet53,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet54,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet55,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet56,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet57,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet58,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet59,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet60,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet61,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet62,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet63,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet64,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet65,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet66,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet67,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet68,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet69,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet70,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet71,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet72,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet73,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet74,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet75,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet76,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet77,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet78,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet79,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet80,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet81,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet82,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet83,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet84,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet85,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet86,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet87,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet88,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet89,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet90,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet91,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet92,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet93,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet94,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet95,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet96,network_port,IDF3 Standard Port,,True -leaf,LEAF3D,Ethernet97/1,leaf,LEAF3A,Ethernet97/4,True -leaf,LEAF3D,Ethernet97/2,leaf,LEAF3B,Ethernet97/4,True -leaf,LEAF3E,Ethernet1,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet2,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet3,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet4,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet5,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet6,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet7,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet8,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet9,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet10,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet11,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet12,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet13,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet14,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet15,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet16,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet17,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet18,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet19,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet20,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet21,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet22,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet23,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet24,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet25,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet26,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet27,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet28,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet29,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet30,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet31,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet32,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet33,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet34,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet35,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet36,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet37,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet38,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet39,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet40,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet41,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet42,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet43,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet44,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet45,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet46,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet47,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet48,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet49,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet50,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet51,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet52,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet53,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet54,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet55,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet56,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet57,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet58,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet59,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet60,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet61,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet62,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet63,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet64,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet65,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet66,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet67,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet68,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet69,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet70,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet71,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet72,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet73,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet74,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet75,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet76,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet77,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet78,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet79,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet80,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet81,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet82,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet83,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet84,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet85,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet86,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet87,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet88,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet89,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet90,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet91,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet92,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet93,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet94,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet95,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet96,network_port,IDF3 Standard Port,,True -leaf,LEAF3E,Ethernet97/1,leaf,LEAF3A,Ethernet98/1,True -leaf,LEAF3E,Ethernet97/2,leaf,LEAF3B,Ethernet98/1,True -l3spine,SPINE1,Ethernet1,leaf,LEAF1A,Ethernet51,True -l3spine,SPINE1,Ethernet49/1,leaf,LEAF2A,Ethernet1/1,True -l3spine,SPINE1,Ethernet50/1,leaf,LEAF3A,Ethernet97/1,True -l3spine,SPINE1,Ethernet51/1,leaf,LEAF3B,Ethernet97/1,True -l3spine,SPINE1,Ethernet52/1,other,WAN,Ethernet1/1,True -l3spine,SPINE1,Ethernet55/1,mlag_peer,SPINE2,Ethernet55/1,True -l3spine,SPINE1,Ethernet56/1,mlag_peer,SPINE2,Ethernet56/1,True -l3spine,SPINE2,Ethernet1,leaf,LEAF1B,Ethernet51,True -l3spine,SPINE2,Ethernet49/1,leaf,LEAF2A,Ethernet1/3,True -l3spine,SPINE2,Ethernet50/1,leaf,LEAF3A,Ethernet97/2,True -l3spine,SPINE2,Ethernet51/1,leaf,LEAF3B,Ethernet97/2,True -l3spine,SPINE2,Ethernet52/1,other,WAN,Ethernet1/1,True -l3spine,SPINE2,Ethernet55/1,mlag_peer,SPINE1,Ethernet55/1,True -l3spine,SPINE2,Ethernet56/1,mlag_peer,SPINE1,Ethernet56/1,True diff --git a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_FABRIC.yml b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_FABRIC.yml index f30e2f834bb..9738857f968 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_FABRIC.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_FABRIC.yml @@ -3,10 +3,6 @@ fabric_name: DC1_FABRIC -# Set Design Type to L2ls -design: - type: l2ls - # Ansible connectivity definitions # eAPI connectivity via HTTPS is specified (as opposed to network_cli via SSH) ansible_connection: ansible.netcommon.httpapi @@ -45,7 +41,7 @@ l3spine: mgmt_ip: 172.16.100.102/24 # IDF - Leaf Switches -leaf: +l2leaf: defaults: platform: cEOSLab mlag_peer_ipv4_pool: 192.168.0.0/24 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_LEAFS.yml b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_LEAFS.yml index 3013d8c1508..27b2b7cb4e4 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_LEAFS.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_LEAFS.yml @@ -1,4 +1,4 @@ --- ### group_vars/DC1_LEAFS.yml -type: leaf # Must be leaf +type: l2leaf # Must be l2leaf diff --git a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_NETWORK_PORTS.yml b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_NETWORK_PORTS.yml index 420964cb9ad..2a9f9537506 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_NETWORK_PORTS.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/group_vars/DC1_NETWORK_PORTS.yml @@ -43,9 +43,10 @@ network_ports: profile: PP-DOT1X native_vlan: 110 structured_config: - phone: - trunk: untagged - vlan: 120 + switchport: + phone: + trunk: untagged + vlan: 120 dot1x: authentication_failure: action: allow @@ -61,9 +62,10 @@ network_ports: profile: PP-DOT1X native_vlan: 210 structured_config: - phone: - trunk: untagged - vlan: 220 + switchport: + phone: + trunk: untagged + vlan: 220 dot1x: authentication_failure: action: allow @@ -79,9 +81,10 @@ network_ports: profile: PP-DOT1X native_vlan: 310 structured_config: - phone: - trunk: untagged - vlan: 320 + switchport: + phone: + trunk: untagged + vlan: 320 dot1x: authentication_failure: action: allow diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1A.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1A.cfg index 1138fb6cc67..e64155dff63 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1A.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname LEAF1A ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,25 +38,27 @@ vlan 130 name IDF1-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel51 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 51 ! interface Port-Channel53 - description MLAG_PEER_LEAF1B_Po53 + description MLAG_LEAF1B_Port-Channel53 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description IDF1 Standard Port @@ -1024,17 +1026,17 @@ interface Ethernet51 channel-group 51 mode active ! interface Ethernet53 - description MLAG_PEER_LEAF1B_Ethernet53 + description MLAG_LEAF1B_Ethernet53 no shutdown channel-group 53 mode active ! interface Ethernet54 - description MLAG_PEER_LEAF1B_Ethernet54 + description MLAG_LEAF1B_Ethernet54 no shutdown channel-group 53 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.103/24 @@ -1046,7 +1048,7 @@ interface Vlan10 ip address 10.10.10.6/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1064,11 +1066,8 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1B.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1B.cfg index b750962b943..ef2cc9787ec 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1B.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF1B.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname LEAF1B ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,25 +38,27 @@ vlan 130 name IDF1-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel51 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 51 ! interface Port-Channel53 - description MLAG_PEER_LEAF1A_Po53 + description MLAG_LEAF1A_Port-Channel53 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description IDF1 Standard Port @@ -1024,17 +1026,17 @@ interface Ethernet51 channel-group 51 mode active ! interface Ethernet53 - description MLAG_PEER_LEAF1A_Ethernet53 + description MLAG_LEAF1A_Ethernet53 no shutdown channel-group 53 mode active ! interface Ethernet54 - description MLAG_PEER_LEAF1A_Ethernet54 + description MLAG_LEAF1A_Ethernet54 no shutdown channel-group 53 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.104/24 @@ -1046,7 +1048,7 @@ interface Vlan10 ip address 10.10.10.7/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1064,11 +1066,8 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF2A.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF2A.cfg index 2ed30544d85..c0821a2a68f 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF2A.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF2A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,20 +21,9 @@ hostname LEAF2A ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,12 +38,14 @@ vlan 230 ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel11 description SPINES_Po491 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport ! interface Ethernet1/1 description SPINE1_Ethernet49/1 @@ -6056,7 +6058,7 @@ interface Ethernet7/48 spanning-tree bpduguard enable ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.105/24 @@ -6071,11 +6073,8 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3A.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3A.cfg index 13600d4ac4f..88571bae807 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3A.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname LEAF3A ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,49 +38,51 @@ vlan 330 name IDF3-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel971 description SPINES_Po501 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 971 ! interface Port-Channel973 description LEAF3C_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 973 ! interface Port-Channel974 description LEAF3D_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 974 ! interface Port-Channel981 description LEAF3E_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 981 ! interface Port-Channel983 - description MLAG_PEER_LEAF3B_Po983 + description MLAG_LEAF3B_Port-Channel983 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description IDF3 Standard Port @@ -2028,17 +2030,17 @@ interface Ethernet98/1 channel-group 981 mode active ! interface Ethernet98/3 - description MLAG_PEER_LEAF3B_Ethernet98/3 + description MLAG_LEAF3B_Ethernet98/3 no shutdown channel-group 983 mode active ! interface Ethernet98/4 - description MLAG_PEER_LEAF3B_Ethernet98/4 + description MLAG_LEAF3B_Ethernet98/4 no shutdown channel-group 983 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.106/24 @@ -2050,7 +2052,7 @@ interface Vlan10 ip address 10.10.10.9/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -2068,11 +2070,8 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3B.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3B.cfg index af37722e750..d2087b4893f 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3B.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3B.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname LEAF3B ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,49 +38,51 @@ vlan 330 name IDF3-Guest ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel971 description SPINES_Po501 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 971 ! interface Port-Channel973 description LEAF3C_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 973 ! interface Port-Channel974 description LEAF3D_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 974 ! interface Port-Channel981 description LEAF3E_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 981 ! interface Port-Channel983 - description MLAG_PEER_LEAF3A_Po983 + description MLAG_LEAF3A_Port-Channel983 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description IDF3 Standard Port @@ -2028,17 +2030,17 @@ interface Ethernet98/1 channel-group 981 mode active ! interface Ethernet98/3 - description MLAG_PEER_LEAF3A_Ethernet98/3 + description MLAG_LEAF3A_Ethernet98/3 no shutdown channel-group 983 mode active ! interface Ethernet98/4 - description MLAG_PEER_LEAF3A_Ethernet98/4 + description MLAG_LEAF3A_Ethernet98/4 no shutdown channel-group 983 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.107/24 @@ -2050,7 +2052,7 @@ interface Vlan10 ip address 10.10.10.10/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -2068,11 +2070,8 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3C.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3C.cfg index b170b77e008..80706180b7a 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3C.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3C.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,20 +21,9 @@ hostname LEAF3C ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,12 +38,14 @@ vlan 330 ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel971 description IDF3_AGG_Po973 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ! interface Ethernet1 description IDF3 Standard Port @@ -1976,7 +1978,7 @@ interface Ethernet97/2 channel-group 971 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.108/24 @@ -1991,11 +1993,8 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3D.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3D.cfg index 4e0676500e0..54d1fd05b8b 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3D.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3D.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,20 +21,9 @@ hostname LEAF3D ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,12 +38,14 @@ vlan 330 ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel971 description IDF3_AGG_Po974 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ! interface Ethernet1 description IDF3 Standard Port @@ -1976,7 +1978,7 @@ interface Ethernet97/2 channel-group 971 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.109/24 @@ -1991,11 +1993,8 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3E.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3E.cfg index 6680de47f12..24c1d9c78ff 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3E.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/LEAF3E.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,20 +21,9 @@ hostname LEAF3E ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -38,12 +38,14 @@ vlan 330 ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel971 description IDF3_AGG_Po981 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport ! interface Ethernet1 description IDF3 Standard Port @@ -1976,7 +1978,7 @@ interface Ethernet97/2 channel-group 971 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.110/24 @@ -1991,11 +1993,8 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ip route 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE1.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE1.cfg index 1857235434f..8c712645f14 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE1.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname SPINE1 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -56,46 +56,47 @@ vlan 330 name IDF3-Guest ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel1 description IDF1_Po51 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 1 ! interface Port-Channel491 description LEAF2A_Po11 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport mlag 491 ! interface Port-Channel501 description IDF3_AGG_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 501 ! interface Port-Channel551 - description MLAG_PEER_SPINE2_Po551 + description MLAG_SPINE2_Port-Channel551 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description LEAF1A_Ethernet51 @@ -127,23 +128,23 @@ interface Ethernet52/1 ip ospf area 0.0.0.0 ! interface Ethernet55/1 - description MLAG_PEER_SPINE2_Ethernet55/1 + description MLAG_SPINE2_Ethernet55/1 no shutdown channel-group 551 mode active ! interface Ethernet56/1 - description MLAG_PEER_SPINE2_Ethernet56/1 + description MLAG_SPINE2_Ethernet56/1 no shutdown channel-group 551 mode active ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 172.16.1.1/32 ip ospf area 0.0.0.0 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.101/24 @@ -211,7 +212,7 @@ interface Vlan330 ip virtual-router address 10.3.30.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.1.1.0/31 @@ -219,7 +220,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -240,6 +241,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer +! router ospf 100 router-id 172.16.1.1 passive-interface default @@ -248,11 +253,4 @@ router ospf 100 max-lsa 12000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE2.cfg b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE2.cfg index fb9b4ba5b89..e4df23c03b0 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE2.cfg +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/configs/SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +21,10 @@ hostname SPINE2 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -! vlan 10 name INBAND_MGMT ! @@ -56,46 +56,47 @@ vlan 330 name IDF3-Guest ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authorization exec default local +! interface Port-Channel1 description IDF1_Po51 no shutdown - switchport switchport trunk allowed vlan 10,110,120,130 switchport mode trunk + switchport mlag 1 ! interface Port-Channel491 description LEAF2A_Po11 no shutdown - switchport switchport trunk allowed vlan 10,210,220,230 switchport mode trunk + switchport mlag 491 ! interface Port-Channel501 description IDF3_AGG_Po971 no shutdown - switchport switchport trunk allowed vlan 10,310,320,330 switchport mode trunk + switchport mlag 501 ! interface Port-Channel551 - description MLAG_PEER_SPINE1_Po551 + description MLAG_SPINE1_Port-Channel551 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description LEAF1B_Ethernet51 @@ -127,23 +128,23 @@ interface Ethernet52/1 ip ospf area 0.0.0.0 ! interface Ethernet55/1 - description MLAG_PEER_SPINE1_Ethernet55/1 + description MLAG_SPINE1_Ethernet55/1 no shutdown channel-group 551 mode active ! interface Ethernet56/1 - description MLAG_PEER_SPINE1_Ethernet56/1 + description MLAG_SPINE1_Ethernet56/1 no shutdown channel-group 551 mode active ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 172.16.1.2/32 ip ospf area 0.0.0.0 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.102/24 @@ -211,7 +212,7 @@ interface Vlan330 ip virtual-router address 10.3.30.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.1.1.1/31 @@ -219,7 +220,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -240,6 +241,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer +! router ospf 100 router-id 172.16.1.2 passive-interface default @@ -248,11 +253,4 @@ router ospf 100 max-lsa 12000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1A.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1A.yml index 1f83a0a1c0a..730de75c919 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1A.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -33,7 +39,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.103/24 @@ -56,7 +62,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -73,7 +79,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -86,26 +92,29 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel53 - description: MLAG_PEER_LEAF1B_Po53 - type: switched + description: MLAG_LEAF1B_Port-Channel53 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel51 description: SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,110,120,130 shutdown: false - mode: trunk - vlans: 10,110,120,130 mlag: 51 ethernet_interfaces: - name: Ethernet53 peer: LEAF1B peer_interface: Ethernet53 peer_type: mlag_peer - description: MLAG_PEER_LEAF1B_Ethernet53 - type: port-channel-member + description: MLAG_LEAF1B_Ethernet53 shutdown: false channel_group: id: 53 @@ -114,8 +123,7 @@ ethernet_interfaces: peer: LEAF1B peer_interface: Ethernet54 peer_type: mlag_peer - description: MLAG_PEER_LEAF1B_Ethernet54 - type: port-channel-member + description: MLAG_LEAF1B_Ethernet54 shutdown: false channel_group: id: 53 @@ -126,19 +134,22 @@ ethernet_interfaces: peer_type: l3spine description: SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 51 mode: active - name: Ethernet1 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -158,18 +169,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet2 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -189,18 +201,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet3 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -220,18 +233,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet4 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -251,18 +265,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet5 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -282,18 +297,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet6 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -313,18 +329,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet7 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -344,18 +361,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet8 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -375,18 +393,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet9 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -406,18 +425,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet10 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -437,18 +457,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet11 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -468,18 +489,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet12 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -499,18 +521,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet13 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -530,18 +553,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet14 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -561,18 +585,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet15 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -592,18 +617,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet16 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -623,18 +649,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet17 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -654,18 +681,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet18 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -685,18 +713,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet19 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -716,18 +745,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet20 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -747,18 +777,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet21 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -778,18 +809,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet22 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -809,18 +841,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet23 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -840,18 +873,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet24 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -871,18 +905,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet25 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -902,18 +937,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet26 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -933,18 +969,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet27 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -964,18 +1001,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet28 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -995,18 +1033,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet29 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1026,18 +1065,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet30 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1057,18 +1097,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet31 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1088,18 +1129,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet32 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1119,18 +1161,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet33 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1150,18 +1193,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet34 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1181,18 +1225,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet35 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1212,18 +1257,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet36 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1243,18 +1289,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet37 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1274,18 +1321,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet38 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1305,18 +1353,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet39 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1336,18 +1385,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet40 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1367,18 +1417,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet41 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1398,18 +1449,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet42 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1429,18 +1481,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet43 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1460,18 +1513,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet44 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1491,18 +1545,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet45 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1522,18 +1577,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet46 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1553,18 +1609,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet47 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1584,18 +1641,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet48 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1615,9 +1673,6 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 mlag_configuration: domain_id: IDF1 local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1B.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1B.yml index 5bd8450c742..95b927caf9d 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1B.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF1B.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -33,7 +39,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.104/24 @@ -56,7 +62,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -73,7 +79,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -86,26 +92,29 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel53 - description: MLAG_PEER_LEAF1A_Po53 - type: switched + description: MLAG_LEAF1A_Port-Channel53 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel51 description: SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,110,120,130 shutdown: false - mode: trunk - vlans: 10,110,120,130 mlag: 51 ethernet_interfaces: - name: Ethernet53 peer: LEAF1A peer_interface: Ethernet53 peer_type: mlag_peer - description: MLAG_PEER_LEAF1A_Ethernet53 - type: port-channel-member + description: MLAG_LEAF1A_Ethernet53 shutdown: false channel_group: id: 53 @@ -114,8 +123,7 @@ ethernet_interfaces: peer: LEAF1A peer_interface: Ethernet54 peer_type: mlag_peer - description: MLAG_PEER_LEAF1A_Ethernet54 - type: port-channel-member + description: MLAG_LEAF1A_Ethernet54 shutdown: false channel_group: id: 53 @@ -126,19 +134,22 @@ ethernet_interfaces: peer_type: l3spine description: SPINE2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 51 mode: active - name: Ethernet1 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -158,18 +169,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet2 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -189,18 +201,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet3 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -220,18 +233,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet4 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -251,18 +265,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet5 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -282,18 +297,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet6 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -313,18 +329,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet7 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -344,18 +361,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet8 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -375,18 +393,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet9 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -406,18 +425,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet10 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -437,18 +457,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet11 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -468,18 +489,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet12 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -499,18 +521,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet13 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -530,18 +553,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet14 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -561,18 +585,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet15 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -592,18 +617,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet16 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -623,18 +649,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet17 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -654,18 +681,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet18 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -685,18 +713,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet19 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -716,18 +745,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet20 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -747,18 +777,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet21 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -778,18 +809,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet22 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -809,18 +841,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet23 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -840,18 +873,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet24 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -871,18 +905,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet25 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -902,18 +937,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet26 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -933,18 +969,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet27 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -964,18 +1001,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet28 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -995,18 +1033,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet29 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1026,18 +1065,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet30 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1057,18 +1097,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet31 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1088,18 +1129,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet32 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1119,18 +1161,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet33 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1150,18 +1193,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet34 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1181,18 +1225,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet35 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1212,18 +1257,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet36 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1243,18 +1289,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet37 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1274,18 +1321,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet38 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1305,18 +1353,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet39 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1336,18 +1385,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet40 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1367,18 +1417,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet41 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1398,18 +1449,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet42 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1429,18 +1481,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet43 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1460,18 +1513,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet44 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1491,18 +1545,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet45 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1522,18 +1577,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet46 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1553,18 +1609,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet47 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1584,18 +1641,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 - name: Ethernet48 - peer: IDF1 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF1 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 110 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 110 + phone: + trunk: untagged + vlan: 120 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1615,9 +1673,6 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 130 - phone: - trunk: untagged - vlan: 120 mlag_configuration: domain_id: IDF1 local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF2A.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF2A.yml index 13b1be3e57a..727476492f5 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF2A.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF2A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.105/24 @@ -59,7 +65,6 @@ ethernet_interfaces: peer_type: l3spine description: SPINE1_Ethernet49/1 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -69,19 +74,22 @@ ethernet_interfaces: peer_type: l3spine description: SPINE2_Ethernet49/1 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active - name: Ethernet3/1 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -111,18 +119,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/2 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -152,18 +161,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/3 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -193,18 +203,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/4 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -234,18 +245,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/5 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -275,18 +287,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/6 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -316,18 +329,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/7 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -357,18 +371,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/8 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -398,18 +413,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/9 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -439,18 +455,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/10 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -480,18 +497,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/11 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -521,18 +539,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/12 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -562,18 +581,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/13 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -603,18 +623,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/14 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -644,18 +665,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/15 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -685,18 +707,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/16 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -726,18 +749,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/17 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -767,18 +791,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/18 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -808,18 +833,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/19 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -849,18 +875,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/20 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -890,18 +917,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/21 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -931,18 +959,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/22 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -972,18 +1001,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/23 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1013,18 +1043,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/24 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1054,18 +1085,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/25 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1095,18 +1127,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/26 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1136,18 +1169,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/27 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1177,18 +1211,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/28 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1218,18 +1253,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/29 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1259,18 +1295,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/30 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1300,18 +1337,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/31 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1341,18 +1379,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/32 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1382,18 +1421,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/33 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1423,18 +1463,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/34 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1464,18 +1505,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/35 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1505,18 +1547,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/36 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1546,18 +1589,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/37 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1587,18 +1631,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/38 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1628,18 +1673,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/39 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1669,18 +1715,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/40 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1710,18 +1757,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/41 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1751,18 +1799,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/42 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1792,18 +1841,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/43 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1833,18 +1883,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/44 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1874,18 +1925,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/45 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1915,18 +1967,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/46 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1956,18 +2009,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/47 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1997,18 +2051,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet3/48 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2038,18 +2093,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/1 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2079,18 +2135,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/2 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2120,18 +2177,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/3 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2161,18 +2219,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/4 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2202,18 +2261,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/5 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2243,18 +2303,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/6 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2284,18 +2345,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/7 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2325,18 +2387,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/8 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2366,18 +2429,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/9 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2407,18 +2471,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/10 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2448,18 +2513,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/11 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2489,18 +2555,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/12 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2530,18 +2597,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/13 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2571,18 +2639,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/14 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2612,18 +2681,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/15 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2653,18 +2723,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/16 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2694,18 +2765,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/17 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2735,18 +2807,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/18 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2776,18 +2849,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/19 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2817,18 +2891,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/20 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2858,18 +2933,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/21 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2899,18 +2975,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/22 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2940,18 +3017,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/23 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2981,18 +3059,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/24 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3022,18 +3101,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/25 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3063,18 +3143,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/26 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3104,18 +3185,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/27 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3145,18 +3227,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/28 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3186,18 +3269,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/29 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3227,18 +3311,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/30 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3268,18 +3353,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/31 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3309,18 +3395,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/32 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3350,18 +3437,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/33 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3391,18 +3479,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/34 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3432,18 +3521,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/35 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3473,18 +3563,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/36 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3514,18 +3605,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/37 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3555,18 +3647,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/38 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3596,18 +3689,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/39 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3637,18 +3731,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/40 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3678,18 +3773,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/41 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3719,18 +3815,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/42 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3760,18 +3857,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/43 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3801,18 +3899,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/44 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3842,18 +3941,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/45 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3883,18 +3983,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/46 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3924,18 +4025,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/47 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3965,18 +4067,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet4/48 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4006,18 +4109,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/1 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4047,18 +4151,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/2 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4088,18 +4193,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/3 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4129,18 +4235,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/4 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4170,18 +4277,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/5 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4211,18 +4319,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/6 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4252,18 +4361,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/7 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4293,18 +4403,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/8 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4334,18 +4445,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/9 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4375,18 +4487,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/10 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4416,18 +4529,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/11 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4457,18 +4571,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/12 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4498,18 +4613,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/13 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4539,18 +4655,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/14 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4580,18 +4697,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/15 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4621,18 +4739,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/16 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4662,18 +4781,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/17 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4703,18 +4823,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/18 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4744,18 +4865,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/19 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4785,18 +4907,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/20 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4826,18 +4949,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/21 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4867,18 +4991,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/22 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4908,18 +5033,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/23 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4949,18 +5075,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/24 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -4990,18 +5117,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/25 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5031,18 +5159,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/26 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5072,18 +5201,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/27 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5113,18 +5243,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/28 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5154,18 +5285,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/29 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5195,18 +5327,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/30 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5236,18 +5369,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/31 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5277,18 +5411,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/32 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5318,18 +5453,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/33 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5359,18 +5495,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/34 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5400,18 +5537,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/35 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5441,18 +5579,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/36 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5482,18 +5621,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/37 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5523,18 +5663,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/38 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5564,18 +5705,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/39 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5605,18 +5747,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/40 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5646,18 +5789,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/41 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5687,18 +5831,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/42 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5728,18 +5873,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/43 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5769,18 +5915,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/44 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5810,18 +5957,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/45 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5851,18 +5999,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/46 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5892,18 +6041,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/47 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5933,18 +6083,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet5/48 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -5974,18 +6125,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/1 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6015,18 +6167,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/2 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6056,18 +6209,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/3 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6097,18 +6251,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/4 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6138,18 +6293,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/5 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6179,18 +6335,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/6 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6220,18 +6377,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/7 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6261,18 +6419,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/8 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6302,18 +6461,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/9 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6343,18 +6503,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/10 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6384,18 +6545,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/11 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6425,18 +6587,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/12 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6466,18 +6629,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/13 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6507,18 +6671,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/14 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6548,18 +6713,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/15 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6589,18 +6755,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/16 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6630,18 +6797,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/17 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6671,18 +6839,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/18 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6712,18 +6881,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/19 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6753,18 +6923,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/20 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6794,18 +6965,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/21 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6835,18 +7007,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/22 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6876,18 +7049,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/23 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6917,18 +7091,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/24 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6958,18 +7133,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/25 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -6999,18 +7175,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/26 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7040,18 +7217,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/27 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7081,18 +7259,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/28 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7122,18 +7301,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/29 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7163,18 +7343,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/30 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7204,18 +7385,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/31 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7245,18 +7427,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/32 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7286,18 +7469,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/33 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7327,18 +7511,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/34 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7368,18 +7553,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/35 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7409,18 +7595,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/36 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7450,18 +7637,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/37 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7491,18 +7679,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/38 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7532,18 +7721,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/39 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7573,18 +7763,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/40 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7614,18 +7805,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/41 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7655,18 +7847,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/42 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7696,18 +7889,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/43 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7737,18 +7931,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/44 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7778,18 +7973,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/45 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7819,18 +8015,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/46 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7860,18 +8057,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/47 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7901,18 +8099,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet6/48 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7942,18 +8141,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/1 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -7983,18 +8183,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/2 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8024,18 +8225,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/3 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8065,18 +8267,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/4 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8106,18 +8309,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/5 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8147,18 +8351,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/6 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8188,18 +8393,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/7 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8229,18 +8435,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/8 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8270,18 +8477,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/9 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8311,18 +8519,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/10 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8352,18 +8561,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/11 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8393,18 +8603,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/12 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8434,18 +8645,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/13 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8475,18 +8687,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/14 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8516,18 +8729,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/15 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8557,18 +8771,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/16 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8598,18 +8813,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/17 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8639,18 +8855,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/18 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8680,18 +8897,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/19 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8721,18 +8939,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/20 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8762,18 +8981,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/21 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8803,18 +9023,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/22 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8844,18 +9065,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/23 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8885,18 +9107,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/24 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8926,18 +9149,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/25 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -8967,18 +9191,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/26 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9008,18 +9233,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/27 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9049,18 +9275,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/28 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9090,18 +9317,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/29 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9131,18 +9359,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/30 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9172,18 +9401,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/31 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9213,18 +9443,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/32 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9254,18 +9485,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/33 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9295,18 +9527,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/34 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9336,18 +9569,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/35 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9377,18 +9611,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/36 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9418,18 +9653,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/37 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9459,18 +9695,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/38 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9500,18 +9737,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/39 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9541,18 +9779,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/40 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9582,18 +9821,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/41 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9623,18 +9863,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/42 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9664,18 +9905,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/43 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9705,18 +9947,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/44 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9746,18 +9989,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/45 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9787,18 +10031,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/46 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9828,18 +10073,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/47 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9869,18 +10115,19 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 - name: Ethernet7/48 - peer: IDF2 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF2 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 210 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + trunk: untagged + vlan: 220 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -9910,16 +10157,15 @@ ethernet_interfaces: action: power-off limit: class: 4 - phone: - trunk: untagged - vlan: 220 port_channel_interfaces: - name: Port-Channel11 description: SPINES_Po491 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,210,220,230 shutdown: false - mode: trunk - vlans: 10,210,220,230 vlans: - id: 210 name: IDF2-Data diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3A.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3A.yml index 49906db65c4..7d5d688d014 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3A.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -33,7 +39,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.106/24 @@ -56,7 +62,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 310 @@ -73,7 +79,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -86,47 +92,56 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel983 - description: MLAG_PEER_LEAF3B_Po983 - type: switched + description: MLAG_LEAF3B_Port-Channel983 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel971 description: SPINES_Po501 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 971 - name: Port-Channel973 description: LEAF3C_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 973 - name: Port-Channel974 description: LEAF3D_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 974 - name: Port-Channel981 description: LEAF3E_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 981 ethernet_interfaces: - name: Ethernet98/3 peer: LEAF3B peer_interface: Ethernet98/3 peer_type: mlag_peer - description: MLAG_PEER_LEAF3B_Ethernet98/3 - type: port-channel-member + description: MLAG_LEAF3B_Ethernet98/3 shutdown: false channel_group: id: 983 @@ -135,8 +150,7 @@ ethernet_interfaces: peer: LEAF3B peer_interface: Ethernet98/4 peer_type: mlag_peer - description: MLAG_PEER_LEAF3B_Ethernet98/4 - type: port-channel-member + description: MLAG_LEAF3B_Ethernet98/4 shutdown: false channel_group: id: 983 @@ -147,7 +161,6 @@ ethernet_interfaces: peer_type: l3spine description: SPINE1_Ethernet50/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active @@ -157,49 +170,49 @@ ethernet_interfaces: peer_type: l3spine description: SPINE2_Ethernet50/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet97/3 peer: LEAF3C peer_interface: Ethernet97/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3C_Ethernet97/1 shutdown: false - type: port-channel-member channel_group: id: 973 mode: active - name: Ethernet97/4 peer: LEAF3D peer_interface: Ethernet97/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3D_Ethernet97/1 shutdown: false - type: port-channel-member channel_group: id: 974 mode: active - name: Ethernet98/1 peer: LEAF3E peer_interface: Ethernet97/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3E_Ethernet97/1 shutdown: false - type: port-channel-member channel_group: id: 981 mode: active - name: Ethernet1 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -219,18 +232,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet2 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -250,18 +264,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet3 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -281,18 +296,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet4 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -312,18 +328,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet5 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -343,18 +360,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet6 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -374,18 +392,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet7 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -405,18 +424,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet8 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -436,18 +456,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet9 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -467,18 +488,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet10 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -498,18 +520,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet11 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -529,18 +552,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet12 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -560,18 +584,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet13 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -591,18 +616,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet14 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -622,18 +648,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet15 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -653,18 +680,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet16 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -684,18 +712,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet17 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -715,18 +744,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet18 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -746,18 +776,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet19 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -777,18 +808,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet20 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -808,18 +840,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet21 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -839,18 +872,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet22 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -870,18 +904,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet23 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -901,18 +936,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet24 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -932,18 +968,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet25 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -963,18 +1000,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet26 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -994,18 +1032,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet27 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1025,18 +1064,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet28 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1056,18 +1096,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet29 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1087,18 +1128,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet30 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1118,18 +1160,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet31 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1149,18 +1192,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet32 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1180,18 +1224,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet33 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1211,18 +1256,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet34 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1242,18 +1288,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet35 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1273,18 +1320,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet36 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1304,18 +1352,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet37 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1335,18 +1384,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet38 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1366,18 +1416,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet39 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1397,18 +1448,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet40 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1428,18 +1480,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet41 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1459,18 +1512,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet42 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1490,18 +1544,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet43 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1521,18 +1576,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet44 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1552,18 +1608,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet45 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1583,18 +1640,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet46 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1614,18 +1672,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet47 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1645,18 +1704,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet48 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1676,18 +1736,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet49 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1707,18 +1768,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet50 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1738,18 +1800,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet51 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1769,18 +1832,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet52 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1800,18 +1864,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet53 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1831,18 +1896,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet54 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1862,18 +1928,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet55 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1893,18 +1960,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet56 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1924,18 +1992,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet57 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1955,18 +2024,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet58 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1986,18 +2056,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet59 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2017,18 +2088,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet60 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2048,18 +2120,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet61 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2079,18 +2152,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet62 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2110,18 +2184,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet63 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2141,18 +2216,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet64 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2172,18 +2248,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet65 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2203,18 +2280,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet66 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2234,18 +2312,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet67 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2265,18 +2344,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet68 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2296,18 +2376,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet69 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2327,18 +2408,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet70 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2358,18 +2440,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet71 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2389,18 +2472,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet72 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2420,18 +2504,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet73 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2451,18 +2536,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet74 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2482,18 +2568,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet75 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2513,18 +2600,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet76 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2544,18 +2632,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet77 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2575,18 +2664,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet78 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2606,18 +2696,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet79 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2637,18 +2728,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet80 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2668,18 +2760,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet81 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2699,18 +2792,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet82 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2730,18 +2824,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet83 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2761,18 +2856,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet84 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2792,18 +2888,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet85 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2823,18 +2920,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet86 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2854,18 +2952,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet87 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2885,18 +2984,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet88 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2916,18 +3016,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet89 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2947,18 +3048,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet90 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2978,18 +3080,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet91 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3009,18 +3112,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet92 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3040,18 +3144,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet93 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3071,18 +3176,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet94 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3102,18 +3208,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet95 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3133,18 +3240,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet96 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3164,9 +3272,6 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 mlag_configuration: domain_id: IDF3_AGG local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3B.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3B.yml index 0c193026139..f74d529477a 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3B.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3B.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -33,7 +39,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.107/24 @@ -56,7 +62,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 310 @@ -73,7 +79,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -86,47 +92,56 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel983 - description: MLAG_PEER_LEAF3A_Po983 - type: switched + description: MLAG_LEAF3A_Port-Channel983 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel971 description: SPINES_Po501 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 971 - name: Port-Channel973 description: LEAF3C_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 973 - name: Port-Channel974 description: LEAF3D_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 974 - name: Port-Channel981 description: LEAF3E_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 981 ethernet_interfaces: - name: Ethernet98/3 peer: LEAF3A peer_interface: Ethernet98/3 peer_type: mlag_peer - description: MLAG_PEER_LEAF3A_Ethernet98/3 - type: port-channel-member + description: MLAG_LEAF3A_Ethernet98/3 shutdown: false channel_group: id: 983 @@ -135,8 +150,7 @@ ethernet_interfaces: peer: LEAF3A peer_interface: Ethernet98/4 peer_type: mlag_peer - description: MLAG_PEER_LEAF3A_Ethernet98/4 - type: port-channel-member + description: MLAG_LEAF3A_Ethernet98/4 shutdown: false channel_group: id: 983 @@ -147,7 +161,6 @@ ethernet_interfaces: peer_type: l3spine description: SPINE1_Ethernet51/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active @@ -157,49 +170,49 @@ ethernet_interfaces: peer_type: l3spine description: SPINE2_Ethernet51/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet97/3 peer: LEAF3C peer_interface: Ethernet97/2 - peer_type: leaf + peer_type: l2leaf description: LEAF3C_Ethernet97/2 shutdown: false - type: port-channel-member channel_group: id: 973 mode: active - name: Ethernet97/4 peer: LEAF3D peer_interface: Ethernet97/2 - peer_type: leaf + peer_type: l2leaf description: LEAF3D_Ethernet97/2 shutdown: false - type: port-channel-member channel_group: id: 974 mode: active - name: Ethernet98/1 peer: LEAF3E peer_interface: Ethernet97/2 - peer_type: leaf + peer_type: l2leaf description: LEAF3E_Ethernet97/2 shutdown: false - type: port-channel-member channel_group: id: 981 mode: active - name: Ethernet1 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -219,18 +232,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet2 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -250,18 +264,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet3 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -281,18 +296,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet4 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -312,18 +328,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet5 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -343,18 +360,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet6 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -374,18 +392,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet7 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -405,18 +424,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet8 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -436,18 +456,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet9 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -467,18 +488,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet10 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -498,18 +520,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet11 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -529,18 +552,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet12 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -560,18 +584,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet13 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -591,18 +616,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet14 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -622,18 +648,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet15 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -653,18 +680,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet16 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -684,18 +712,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet17 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -715,18 +744,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet18 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -746,18 +776,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet19 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -777,18 +808,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet20 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -808,18 +840,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet21 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -839,18 +872,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet22 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -870,18 +904,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet23 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -901,18 +936,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet24 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -932,18 +968,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet25 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -963,18 +1000,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet26 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -994,18 +1032,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet27 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1025,18 +1064,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet28 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1056,18 +1096,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet29 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1087,18 +1128,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet30 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1118,18 +1160,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet31 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1149,18 +1192,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet32 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1180,18 +1224,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet33 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1211,18 +1256,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet34 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1242,18 +1288,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet35 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1273,18 +1320,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet36 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1304,18 +1352,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet37 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1335,18 +1384,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet38 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1366,18 +1416,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet39 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1397,18 +1448,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet40 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1428,18 +1480,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet41 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1459,18 +1512,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet42 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1490,18 +1544,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet43 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1521,18 +1576,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet44 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1552,18 +1608,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet45 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1583,18 +1640,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet46 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1614,18 +1672,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet47 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1645,18 +1704,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet48 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1676,18 +1736,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet49 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1707,18 +1768,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet50 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1738,18 +1800,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet51 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1769,18 +1832,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet52 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1800,18 +1864,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet53 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1831,18 +1896,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet54 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1862,18 +1928,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet55 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1893,18 +1960,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet56 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1924,18 +1992,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet57 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1955,18 +2024,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet58 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1986,18 +2056,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet59 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2017,18 +2088,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet60 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2048,18 +2120,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet61 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2079,18 +2152,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet62 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2110,18 +2184,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet63 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2141,18 +2216,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet64 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2172,18 +2248,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet65 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2203,18 +2280,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet66 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2234,18 +2312,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet67 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2265,18 +2344,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet68 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2296,18 +2376,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet69 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2327,18 +2408,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet70 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2358,18 +2440,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet71 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2389,18 +2472,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet72 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2420,18 +2504,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet73 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2451,18 +2536,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet74 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2482,18 +2568,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet75 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2513,18 +2600,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet76 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2544,18 +2632,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet77 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2575,18 +2664,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet78 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2606,18 +2696,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet79 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2637,18 +2728,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet80 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2668,18 +2760,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet81 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2699,18 +2792,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet82 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2730,18 +2824,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet83 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2761,18 +2856,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet84 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2792,18 +2888,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet85 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2823,18 +2920,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet86 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2854,18 +2952,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet87 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2885,18 +2984,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet88 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2916,18 +3016,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet89 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2947,18 +3048,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet90 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2978,18 +3080,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet91 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3009,18 +3112,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet92 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3040,18 +3144,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet93 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3071,18 +3176,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet94 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3102,18 +3208,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet95 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3133,18 +3240,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet96 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3164,9 +3272,6 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 mlag_configuration: domain_id: IDF3_AGG local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3C.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3C.yml index 19a950b8089..0e44e25929c 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3C.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3C.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.108/24 @@ -56,32 +62,34 @@ ethernet_interfaces: - name: Ethernet97/1 peer: LEAF3A peer_interface: Ethernet97/3 - peer_type: leaf + peer_type: l2leaf description: LEAF3A_Ethernet97/3 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet97/2 peer: LEAF3B peer_interface: Ethernet97/3 - peer_type: leaf + peer_type: l2leaf description: LEAF3B_Ethernet97/3 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet1 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -101,18 +109,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet2 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -132,18 +141,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet3 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -163,18 +173,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet4 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -194,18 +205,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet5 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -225,18 +237,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet6 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -256,18 +269,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet7 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -287,18 +301,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet8 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -318,18 +333,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet9 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -349,18 +365,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet10 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -380,18 +397,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet11 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -411,18 +429,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet12 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -442,18 +461,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet13 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -473,18 +493,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet14 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -504,18 +525,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet15 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -535,18 +557,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet16 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -566,18 +589,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet17 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -597,18 +621,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet18 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -628,18 +653,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet19 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -659,18 +685,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet20 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -690,18 +717,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet21 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -721,18 +749,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet22 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -752,18 +781,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet23 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -783,18 +813,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet24 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -814,18 +845,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet25 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -845,18 +877,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet26 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -876,18 +909,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet27 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -907,18 +941,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet28 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -938,18 +973,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet29 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -969,18 +1005,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet30 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1000,18 +1037,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet31 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1031,18 +1069,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet32 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1062,18 +1101,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet33 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1093,18 +1133,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet34 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1124,18 +1165,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet35 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1155,18 +1197,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet36 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1186,18 +1229,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet37 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1217,18 +1261,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet38 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1248,18 +1293,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet39 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1279,18 +1325,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet40 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1310,18 +1357,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet41 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1341,18 +1389,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet42 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1372,18 +1421,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet43 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1403,18 +1453,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet44 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1434,18 +1485,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet45 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1465,18 +1517,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet46 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1496,18 +1549,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet47 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1527,18 +1581,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet48 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1558,18 +1613,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet49 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1589,18 +1645,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet50 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1620,18 +1677,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet51 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1651,18 +1709,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet52 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1682,18 +1741,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet53 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1713,18 +1773,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet54 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1744,18 +1805,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet55 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1775,18 +1837,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet56 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1806,18 +1869,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet57 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1837,18 +1901,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet58 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1868,18 +1933,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet59 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1899,18 +1965,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet60 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1930,18 +1997,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet61 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1961,18 +2029,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet62 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1992,18 +2061,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet63 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2023,18 +2093,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet64 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2054,18 +2125,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet65 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2085,18 +2157,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet66 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2116,18 +2189,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet67 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2147,18 +2221,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet68 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2178,18 +2253,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet69 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2209,18 +2285,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet70 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2240,18 +2317,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet71 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2271,18 +2349,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet72 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2302,18 +2381,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet73 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2333,18 +2413,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet74 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2364,18 +2445,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet75 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2395,18 +2477,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet76 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2426,18 +2509,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet77 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2457,18 +2541,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet78 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2488,18 +2573,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet79 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2519,18 +2605,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet80 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2550,18 +2637,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet81 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2581,18 +2669,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet82 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2612,18 +2701,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet83 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2643,18 +2733,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet84 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2674,18 +2765,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet85 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2705,18 +2797,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet86 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2736,18 +2829,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet87 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2767,18 +2861,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet88 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2798,18 +2893,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet89 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2829,18 +2925,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet90 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2860,18 +2957,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet91 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2891,18 +2989,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet92 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2922,18 +3021,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet93 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2953,18 +3053,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet94 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2984,18 +3085,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet95 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3015,18 +3117,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet96 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3046,16 +3149,15 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 port_channel_interfaces: - name: Port-Channel971 description: IDF3_AGG_Po973 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 vlans: - id: 310 name: IDF3-Data diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3D.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3D.yml index 3234b10cff9..9d11992a228 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3D.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3D.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.109/24 @@ -56,32 +62,34 @@ ethernet_interfaces: - name: Ethernet97/1 peer: LEAF3A peer_interface: Ethernet97/4 - peer_type: leaf + peer_type: l2leaf description: LEAF3A_Ethernet97/4 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet97/2 peer: LEAF3B peer_interface: Ethernet97/4 - peer_type: leaf + peer_type: l2leaf description: LEAF3B_Ethernet97/4 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet1 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -101,18 +109,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet2 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -132,18 +141,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet3 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -163,18 +173,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet4 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -194,18 +205,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet5 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -225,18 +237,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet6 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -256,18 +269,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet7 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -287,18 +301,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet8 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -318,18 +333,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet9 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -349,18 +365,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet10 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -380,18 +397,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet11 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -411,18 +429,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet12 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -442,18 +461,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet13 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -473,18 +493,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet14 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -504,18 +525,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet15 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -535,18 +557,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet16 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -566,18 +589,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet17 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -597,18 +621,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet18 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -628,18 +653,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet19 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -659,18 +685,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet20 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -690,18 +717,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet21 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -721,18 +749,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet22 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -752,18 +781,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet23 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -783,18 +813,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet24 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -814,18 +845,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet25 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -845,18 +877,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet26 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -876,18 +909,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet27 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -907,18 +941,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet28 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -938,18 +973,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet29 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -969,18 +1005,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet30 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1000,18 +1037,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet31 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1031,18 +1069,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet32 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1062,18 +1101,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet33 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1093,18 +1133,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet34 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1124,18 +1165,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet35 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1155,18 +1197,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet36 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1186,18 +1229,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet37 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1217,18 +1261,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet38 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1248,18 +1293,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet39 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1279,18 +1325,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet40 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1310,18 +1357,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet41 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1341,18 +1389,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet42 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1372,18 +1421,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet43 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1403,18 +1453,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet44 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1434,18 +1485,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet45 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1465,18 +1517,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet46 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1496,18 +1549,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet47 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1527,18 +1581,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet48 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1558,18 +1613,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet49 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1589,18 +1645,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet50 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1620,18 +1677,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet51 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1651,18 +1709,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet52 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1682,18 +1741,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet53 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1713,18 +1773,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet54 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1744,18 +1805,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet55 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1775,18 +1837,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet56 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1806,18 +1869,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet57 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1837,18 +1901,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet58 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1868,18 +1933,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet59 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1899,18 +1965,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet60 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1930,18 +1997,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet61 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1961,18 +2029,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet62 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1992,18 +2061,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet63 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2023,18 +2093,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet64 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2054,18 +2125,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet65 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2085,18 +2157,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet66 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2116,18 +2189,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet67 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2147,18 +2221,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet68 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2178,18 +2253,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet69 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2209,18 +2285,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet70 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2240,18 +2317,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet71 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2271,18 +2349,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet72 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2302,18 +2381,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet73 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2333,18 +2413,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet74 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2364,18 +2445,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet75 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2395,18 +2477,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet76 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2426,18 +2509,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet77 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2457,18 +2541,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet78 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2488,18 +2573,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet79 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2519,18 +2605,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet80 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2550,18 +2637,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet81 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2581,18 +2669,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet82 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2612,18 +2701,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet83 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2643,18 +2733,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet84 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2674,18 +2765,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet85 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2705,18 +2797,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet86 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2736,18 +2829,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet87 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2767,18 +2861,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet88 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2798,18 +2893,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet89 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2829,18 +2925,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet90 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2860,18 +2957,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet91 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2891,18 +2989,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet92 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2922,18 +3021,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet93 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2953,18 +3053,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet94 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2984,18 +3085,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet95 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3015,18 +3117,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet96 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3046,16 +3149,15 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 port_channel_interfaces: - name: Port-Channel971 description: IDF3_AGG_Po974 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 vlans: - id: 310 name: IDF3-Data diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3E.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3E.yml index ad87741fefc..14c1fcc47cd 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3E.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/LEAF3E.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.110/24 @@ -56,32 +62,34 @@ ethernet_interfaces: - name: Ethernet97/1 peer: LEAF3A peer_interface: Ethernet98/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3A_Ethernet98/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet97/2 peer: LEAF3B peer_interface: Ethernet98/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3B_Ethernet98/1 shutdown: false - type: port-channel-member channel_group: id: 971 mode: active - name: Ethernet1 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -101,18 +109,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet2 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -132,18 +141,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet3 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -163,18 +173,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet4 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -194,18 +205,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet5 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -225,18 +237,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet6 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -256,18 +269,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet7 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -287,18 +301,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet8 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -318,18 +333,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet9 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -349,18 +365,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet10 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -380,18 +397,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet11 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -411,18 +429,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet12 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -442,18 +461,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet13 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -473,18 +493,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet14 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -504,18 +525,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet15 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -535,18 +557,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet16 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -566,18 +589,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet17 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -597,18 +621,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet18 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -628,18 +653,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet19 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -659,18 +685,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet20 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -690,18 +717,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet21 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -721,18 +749,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet22 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -752,18 +781,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet23 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -783,18 +813,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet24 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -814,18 +845,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet25 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -845,18 +877,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet26 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -876,18 +909,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet27 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -907,18 +941,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet28 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -938,18 +973,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet29 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -969,18 +1005,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet30 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1000,18 +1037,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet31 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1031,18 +1069,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet32 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1062,18 +1101,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet33 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1093,18 +1133,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet34 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1124,18 +1165,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet35 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1155,18 +1197,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet36 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1186,18 +1229,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet37 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1217,18 +1261,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet38 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1248,18 +1293,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet39 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1279,18 +1325,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet40 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1310,18 +1357,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet41 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1341,18 +1389,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet42 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1372,18 +1421,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet43 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1403,18 +1453,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet44 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1434,18 +1485,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet45 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1465,18 +1517,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet46 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1496,18 +1549,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet47 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1527,18 +1581,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet48 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1558,18 +1613,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet49 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1589,18 +1645,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet50 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1620,18 +1677,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet51 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1651,18 +1709,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet52 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1682,18 +1741,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet53 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1713,18 +1773,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet54 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1744,18 +1805,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet55 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1775,18 +1837,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet56 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1806,18 +1869,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet57 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1837,18 +1901,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet58 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1868,18 +1933,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet59 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1899,18 +1965,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet60 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1930,18 +1997,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet61 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1961,18 +2029,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet62 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -1992,18 +2061,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet63 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2023,18 +2093,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet64 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2054,18 +2125,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet65 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2085,18 +2157,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet66 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2116,18 +2189,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet67 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2147,18 +2221,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet68 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2178,18 +2253,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet69 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2209,18 +2285,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet70 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2240,18 +2317,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet71 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2271,18 +2349,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet72 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2302,18 +2381,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet73 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2333,18 +2413,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet74 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2364,18 +2445,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet75 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2395,18 +2477,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet76 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2426,18 +2509,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet77 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2457,18 +2541,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet78 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2488,18 +2573,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet79 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2519,18 +2605,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet80 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2550,18 +2637,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet81 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2581,18 +2669,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet82 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2612,18 +2701,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet83 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2643,18 +2733,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet84 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2674,18 +2765,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet85 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2705,18 +2797,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet86 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2736,18 +2829,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet87 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2767,18 +2861,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet88 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2798,18 +2893,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet89 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2829,18 +2925,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet90 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2860,18 +2957,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet91 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2891,18 +2989,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet92 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2922,18 +3021,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet93 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2953,18 +3053,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet94 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -2984,18 +3085,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet95 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3015,18 +3117,19 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 - name: Ethernet96 - peer: IDF3 Standard Port peer_type: network_port port_profile: PP-DOT1X description: IDF3 Standard Port shutdown: false - type: switched - mode: trunk phone - native_vlan: 310 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 310 + phone: + trunk: untagged + vlan: 320 spanning_tree_portfast: edge spanning_tree_bpduguard: enabled dot1x: @@ -3046,16 +3149,15 @@ ethernet_interfaces: authentication_failure: action: allow allow_vlan: 330 - phone: - trunk: untagged - vlan: 320 port_channel_interfaces: - name: Port-Channel971 description: IDF3_AGG_Po981 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 vlans: - id: 310 name: IDF3-Data diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE1.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE1.yml index 63948d029e2..a36d0843185 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE1.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE1.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.101/24 @@ -55,12 +61,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -95,14 +101,14 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.1.1.0/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -200,41 +206,47 @@ vlan_interfaces: - 10.10.10.1 port_channel_interfaces: - name: Port-Channel551 - description: MLAG_PEER_SPINE2_Po551 - type: switched + description: MLAG_SPINE2_Port-Channel551 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: IDF1_Po51 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,110,120,130 shutdown: false - mode: trunk - vlans: 10,110,120,130 mlag: 1 - name: Port-Channel491 description: LEAF2A_Po11 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,210,220,230 shutdown: false - mode: trunk - vlans: 10,210,220,230 mlag: 491 - name: Port-Channel501 description: IDF3_AGG_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 501 ethernet_interfaces: - name: Ethernet55/1 peer: SPINE2 peer_interface: Ethernet55/1 peer_type: mlag_peer - description: MLAG_PEER_SPINE2_Ethernet55/1 - type: port-channel-member + description: MLAG_SPINE2_Ethernet55/1 shutdown: false channel_group: id: 551 @@ -243,8 +255,7 @@ ethernet_interfaces: peer: SPINE2 peer_interface: Ethernet56/1 peer_type: mlag_peer - description: MLAG_PEER_SPINE2_Ethernet56/1 - type: port-channel-member + description: MLAG_SPINE2_Ethernet56/1 shutdown: false channel_group: id: 551 @@ -252,40 +263,36 @@ ethernet_interfaces: - name: Ethernet1 peer: LEAF1A peer_interface: Ethernet51 - peer_type: leaf + peer_type: l2leaf description: LEAF1A_Ethernet51 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet49/1 peer: LEAF2A peer_interface: Ethernet1/1 - peer_type: leaf + peer_type: l2leaf description: LEAF2A_Ethernet1/1 shutdown: false - type: port-channel-member channel_group: id: 491 mode: active - name: Ethernet50/1 peer: LEAF3A peer_interface: Ethernet97/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3A_Ethernet97/1 shutdown: false - type: port-channel-member channel_group: id: 501 mode: active - name: Ethernet51/1 peer: LEAF3B peer_interface: Ethernet97/1 - peer_type: leaf + peer_type: l2leaf description: LEAF3B_Ethernet97/1 shutdown: false - type: port-channel-member channel_group: id: 501 mode: active @@ -294,7 +301,8 @@ ethernet_interfaces: peer_interface: Ethernet1/1 peer_type: other description: P2P_LINK_TO_WAN_Ethernet1/1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.0.0.3/31 @@ -309,7 +317,7 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 172.16.1.1/32 ospf_area: 0.0.0.0 @@ -324,7 +332,8 @@ router_ospf: - Ethernet52/1 bfd_enable: false redistribute: - connected: {} + connected: + enabled: true ip_igmp_snooping: globally_enabled: true ip_virtual_router_mac_address: 00:1c:73:00:dc:01 diff --git a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE2.yml b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE2.yml index 7fca6ee23f8..11a0264e791 100644 --- a/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE2.yml +++ b/ansible_collections/arista/avd/examples/campus-fabric/intended/structured_configs/SPINE2.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -32,7 +38,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.102/24 @@ -55,12 +61,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -95,14 +101,14 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.1.1.1/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -200,41 +206,47 @@ vlan_interfaces: - 10.10.10.1 port_channel_interfaces: - name: Port-Channel551 - description: MLAG_PEER_SPINE1_Po551 - type: switched + description: MLAG_SPINE1_Port-Channel551 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: IDF1_Po51 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,110,120,130 shutdown: false - mode: trunk - vlans: 10,110,120,130 mlag: 1 - name: Port-Channel491 description: LEAF2A_Po11 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,210,220,230 shutdown: false - mode: trunk - vlans: 10,210,220,230 mlag: 491 - name: Port-Channel501 description: IDF3_AGG_Po971 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,310,320,330 shutdown: false - mode: trunk - vlans: 10,310,320,330 mlag: 501 ethernet_interfaces: - name: Ethernet55/1 peer: SPINE1 peer_interface: Ethernet55/1 peer_type: mlag_peer - description: MLAG_PEER_SPINE1_Ethernet55/1 - type: port-channel-member + description: MLAG_SPINE1_Ethernet55/1 shutdown: false channel_group: id: 551 @@ -243,8 +255,7 @@ ethernet_interfaces: peer: SPINE1 peer_interface: Ethernet56/1 peer_type: mlag_peer - description: MLAG_PEER_SPINE1_Ethernet56/1 - type: port-channel-member + description: MLAG_SPINE1_Ethernet56/1 shutdown: false channel_group: id: 551 @@ -252,40 +263,36 @@ ethernet_interfaces: - name: Ethernet1 peer: LEAF1B peer_interface: Ethernet51 - peer_type: leaf + peer_type: l2leaf description: LEAF1B_Ethernet51 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet49/1 peer: LEAF2A peer_interface: Ethernet1/3 - peer_type: leaf + peer_type: l2leaf description: LEAF2A_Ethernet1/3 shutdown: false - type: port-channel-member channel_group: id: 491 mode: active - name: Ethernet50/1 peer: LEAF3A peer_interface: Ethernet97/2 - peer_type: leaf + peer_type: l2leaf description: LEAF3A_Ethernet97/2 shutdown: false - type: port-channel-member channel_group: id: 501 mode: active - name: Ethernet51/1 peer: LEAF3B peer_interface: Ethernet97/2 - peer_type: leaf + peer_type: l2leaf description: LEAF3B_Ethernet97/2 shutdown: false - type: port-channel-member channel_group: id: 501 mode: active @@ -294,7 +301,8 @@ ethernet_interfaces: peer_interface: Ethernet1/1 peer_type: other description: P2P_LINK_TO_WAN_Ethernet1/1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.0.0.5/31 @@ -309,7 +317,7 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 172.16.1.2/32 ospf_area: 0.0.0.0 @@ -324,7 +332,8 @@ router_ospf: - Ethernet52/1 bfd_enable: false redistribute: - connected: {} + connected: + enabled: true ip_igmp_snooping: globally_enabled: true ip_virtual_router_mac_address: 00:1c:73:00:dc:01 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1a.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1a.md index 251e1facbaf..4a3aa508aa7 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1a.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1a.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,19 +254,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf1b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf1b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf1b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf1b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF1C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 10.255.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 10.255.255.3/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 10.255.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 10.255.255.3/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -282,17 +287,17 @@ interface Ethernet2 ip address 10.255.255.3/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1b_Ethernet3 + description MLAG_dc1-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1b_Ethernet4 + description MLAG_dc1-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI1 + description SERVER_dc1-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -308,40 +313,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf1b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf1-server1_PortChannel dc1-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf1b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | PortChannel dc1-leaf1-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1b_Po3 + description MLAG_dc1-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description PortChannel dc1-leaf1-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -353,8 +357,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.3/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.3/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.3/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.3/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.3/32 | @@ -362,8 +366,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -372,12 +376,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -404,10 +408,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -451,27 +455,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.96/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.96/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.96/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -709,12 +713,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.97 description dc1-leaf1b + neighbor 10.255.1.97 description dc1-leaf1b_Vlan4093 neighbor 10.255.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.0 remote-as 65100 neighbor 10.255.255.0 description dc1-spine1_Ethernet1 @@ -767,6 +771,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -775,6 +780,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1b.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1b.md index 1baac4d6361..60cbdc03afa 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1b.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1b.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,19 +254,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf1a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf1a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf1a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf1a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF1C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 10.255.255.5/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 10.255.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 10.255.255.5/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 10.255.255.7/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -282,17 +287,17 @@ interface Ethernet2 ip address 10.255.255.7/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1a_Ethernet3 + description MLAG_dc1-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1a_Ethernet4 + description MLAG_dc1-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI2 + description SERVER_dc1-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -308,40 +313,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf1a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf1-server1_PortChannel dc1-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf1a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | PortChannel dc1-leaf1-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1a_Po3 + description MLAG_dc1-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description PortChannel dc1-leaf1-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -353,8 +357,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.4/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.4/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.3/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.4/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.4/32 | @@ -362,8 +366,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -372,12 +376,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -404,10 +408,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -451,27 +455,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.97/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.97/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.97/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -709,12 +713,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.96 description dc1-leaf1a + neighbor 10.255.1.96 description dc1-leaf1a_Vlan4093 neighbor 10.255.255.4 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.4 remote-as 65100 neighbor 10.255.255.4 description dc1-spine1_Ethernet2 @@ -767,6 +771,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -775,6 +780,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1c.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1c.md index 99c7fcabb23..9b63a2d6a40 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1c.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf1c.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -104,6 +105,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -187,7 +192,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-LEAF1A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC1-LEAF1B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc1-leaf1-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc1-leaf1-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -206,7 +211,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf1-server1_iLO + description SERVER_dc1-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -220,9 +225,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_L3_LEAF1_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_L3_LEAF1_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -231,9 +236,9 @@ interface Ethernet5 interface Port-Channel1 description DC1_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2a.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2a.md index 63c55264d46..35d3baa8b4b 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2a.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2a.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,20 +254,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf2b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf2b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf2b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf2b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF2C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 10.255.255.9/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 10.255.255.11/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_dc2-leaf2a_Ethernet6 | routed | - | 172.16.100.0/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 10.255.255.9/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 10.255.255.11/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_dc2-leaf2a_Ethernet6 | - | 172.16.100.0/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -283,17 +288,17 @@ interface Ethernet2 ip address 10.255.255.11/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2b_Ethernet3 + description MLAG_dc1-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2b_Ethernet4 + description MLAG_dc1-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI1 + description SERVER_dc1-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -316,40 +321,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf2b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf2-server1_PortChannel dc1-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf2b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2b_Po3 + description MLAG_dc1-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -361,8 +365,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.5/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.5/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.5/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.5/32 | @@ -370,8 +374,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -380,12 +384,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -412,10 +416,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -459,27 +463,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.100/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.100/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.100/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -745,15 +749,15 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.101 description dc1-leaf2b + neighbor 10.255.1.101 description dc1-leaf2b_Vlan4093 neighbor 10.255.128.15 peer group EVPN-OVERLAY-CORE neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.8 remote-as 65100 neighbor 10.255.255.8 description dc1-spine1_Ethernet3 @@ -825,6 +829,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -833,6 +838,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2b.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2b.md index 7851a6b3eac..f5175ff1850 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2b.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2b.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.104/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.104/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.104/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,20 +254,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf2a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf2a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf2a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf2a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF2C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 10.255.255.13/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 10.255.255.15/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_dc2-leaf2b_Ethernet6 | routed | - | 172.16.100.2/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 10.255.255.13/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 10.255.255.15/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_dc2-leaf2b_Ethernet6 | - | 172.16.100.2/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -283,17 +288,17 @@ interface Ethernet2 ip address 10.255.255.15/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2a_Ethernet3 + description MLAG_dc1-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2a_Ethernet4 + description MLAG_dc1-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI2 + description SERVER_dc1-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -316,40 +321,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf2a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf2-server1_PortChannel dc1-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf2a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2a_Po3 + description MLAG_dc1-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -361,8 +365,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.6/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.5/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.6/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.5/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.6/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.6/32 | @@ -370,8 +374,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -380,12 +384,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -412,10 +416,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -459,27 +463,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.101/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.101/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.101/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -745,15 +749,15 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.100 description dc1-leaf2a + neighbor 10.255.1.100 description dc1-leaf2a_Vlan4093 neighbor 10.255.128.16 peer group EVPN-OVERLAY-CORE neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.12 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.12 remote-as 65100 neighbor 10.255.255.12 description dc1-spine1_Ethernet4 @@ -825,6 +829,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -833,6 +838,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2c.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2c.md index bf494b7c451..a17ebed6fbe 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2c.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-leaf2c.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -104,6 +105,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -187,7 +192,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-LEAF2A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC1-LEAF2B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc1-leaf2-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc1-leaf2-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -206,7 +211,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf2-server1_iLO + description SERVER_dc1-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -220,9 +225,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_L3_LEAF2_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_L3_LEAF2_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -231,9 +236,9 @@ interface Ethernet5 interface Port-Channel1 description DC1_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine1.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine1.md index 419e80fc964..0228d49962c 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine1.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -105,6 +106,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -148,12 +153,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 10.255.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet1 | routed | - | 10.255.255.4/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 10.255.255.8/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 10.255.255.12/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 10.255.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet1 | - | 10.255.255.4/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 10.255.255.8/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 10.255.255.12/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -196,20 +201,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.1/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ``` @@ -346,16 +351,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.1 remote-as 65101 neighbor 10.255.255.1 description dc1-leaf1a_Ethernet1 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine2.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine2.md index 35cb0fe6d8b..be9e17fc965 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine2.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc1-spine2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -105,6 +106,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -148,12 +153,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 10.255.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet2 | routed | - | 10.255.255.6/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 10.255.255.10/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 10.255.255.14/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 10.255.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet2 | - | 10.255.255.6/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 10.255.255.10/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 10.255.255.14/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -196,20 +201,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.2/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ``` @@ -346,16 +351,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.3 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.3 remote-as 65101 neighbor 10.255.255.3 description dc1-leaf1a_Ethernet2 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1a.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1a.md index f83f9ee6342..e7ccbc8528c 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1a.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1a.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.111/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.111/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.111/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,19 +254,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc2-leaf1b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc2-leaf1b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc2-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc2-leaf1b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc2-leaf1b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc2-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC2-LEAF1C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet1 | routed | - | 10.255.255.105/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet1 | routed | - | 10.255.255.107/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet1 | - | 10.255.255.105/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet1 | - | 10.255.255.107/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -282,17 +287,17 @@ interface Ethernet2 ip address 10.255.255.107/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf1b_Ethernet3 + description MLAG_dc2-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf1b_Ethernet4 + description MLAG_dc2-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf1-server1_PCI1 + description SERVER_dc2-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -308,40 +313,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc2-leaf1b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc2-leaf1-server1_PortChannel dc2-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC2-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc2-leaf1b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc2-leaf1-server1_Bond1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC2-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf1b_Po3 + description MLAG_dc2-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf1-server1_PortChannel dc2-leaf1-server1 + description SERVER_dc2-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -353,8 +357,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.13/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.129.13/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.13/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.129.13/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.13/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.13/32 | @@ -362,8 +366,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -372,12 +376,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.13/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.13/32 ! @@ -404,10 +408,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -451,27 +455,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.116/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.116/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.116/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -709,12 +713,12 @@ router bgp 65201 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.117 description dc2-leaf1b + neighbor 10.255.129.117 description dc2-leaf1b_Vlan4093 neighbor 10.255.255.104 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.104 remote-as 65200 neighbor 10.255.255.104 description dc2-spine1_Ethernet1 @@ -767,6 +771,7 @@ router bgp 65201 route-target export evpn 10:10 router-id 10.255.128.13 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.117 description dc2-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -775,6 +780,7 @@ router bgp 65201 route-target export evpn 11:11 router-id 10.255.128.13 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.117 description dc2-leaf1b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1b.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1b.md index 04b59688229..4f94f403c3b 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1b.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1b.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.112/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.112/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.112/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,19 +254,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc2-leaf1a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc2-leaf1a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc2-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc2-leaf1a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc2-leaf1a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc2-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC2-LEAF1C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet2 | routed | - | 10.255.255.109/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet2 | routed | - | 10.255.255.111/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet2 | - | 10.255.255.109/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet2 | - | 10.255.255.111/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -282,17 +287,17 @@ interface Ethernet2 ip address 10.255.255.111/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf1a_Ethernet3 + description MLAG_dc2-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf1a_Ethernet4 + description MLAG_dc2-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf1-server1_PCI2 + description SERVER_dc2-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -308,40 +313,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc2-leaf1a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc2-leaf1-server1_PortChannel dc2-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC2-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc2-leaf1a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc2-leaf1-server1_Bond1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC2-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf1a_Po3 + description MLAG_dc2-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf1-server1_PortChannel dc2-leaf1-server1 + description SERVER_dc2-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -353,8 +357,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.14/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.129.13/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.14/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.129.13/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.14/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.14/32 | @@ -362,8 +366,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -372,12 +376,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.14/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.13/32 ! @@ -404,10 +408,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -451,27 +455,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.117/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.117/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.117/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -709,12 +713,12 @@ router bgp 65201 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.116 description dc2-leaf1a + neighbor 10.255.129.116 description dc2-leaf1a_Vlan4093 neighbor 10.255.255.108 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.108 remote-as 65200 neighbor 10.255.255.108 description dc2-spine1_Ethernet2 @@ -767,6 +771,7 @@ router bgp 65201 route-target export evpn 10:10 router-id 10.255.128.14 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.116 description dc2-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -775,6 +780,7 @@ router bgp 65201 route-target export evpn 11:11 router-id 10.255.128.14 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.116 description dc2-leaf1a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1c.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1c.md index 3d4ca5f2faa..a0af2c52797 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1c.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf1c.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.161/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.161/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.161/24 @@ -104,6 +105,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -187,7 +192,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC2-LEAF1A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC2-LEAF1B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc2-leaf1-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc2-leaf1-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -206,7 +211,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc2-leaf1-server1_iLO + description SERVER_dc2-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -220,9 +225,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC2_L3_LEAF1_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC2_L3_LEAF1_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -231,9 +236,9 @@ interface Ethernet5 interface Port-Channel1 description DC2_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2a.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2a.md index cde452210af..68edb396ade 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2a.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2a.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.113/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.113/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.113/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,20 +254,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc2-leaf2b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc2-leaf2b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc2-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc2-leaf2b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc2-leaf2b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc2-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC2-LEAF2C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet3 | routed | - | 10.255.255.113/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet3 | routed | - | 10.255.255.115/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_dc1-leaf2a_Ethernet6 | routed | - | 172.16.100.1/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet3 | - | 10.255.255.113/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet3 | - | 10.255.255.115/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_dc1-leaf2a_Ethernet6 | - | 172.16.100.1/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -283,17 +288,17 @@ interface Ethernet2 ip address 10.255.255.115/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf2b_Ethernet3 + description MLAG_dc2-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf2b_Ethernet4 + description MLAG_dc2-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf2-server1_PCI1 + description SERVER_dc2-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -316,40 +321,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc2-leaf2b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc2-leaf2-server1_PortChannel dc2-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC2-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc2-leaf2b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc2-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC2-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf2b_Po3 + description MLAG_dc2-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf2-server1_PortChannel dc2-leaf2-server1 + description SERVER_dc2-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -361,8 +365,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.15/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.129.15/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.15/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.129.15/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.15/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.15/32 | @@ -370,8 +374,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -380,12 +384,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.15/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.15/32 ! @@ -412,10 +416,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -459,27 +463,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.120/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.120/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.120/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -745,15 +749,15 @@ router bgp 65202 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.5 peer group EVPN-OVERLAY-CORE neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.121 description dc2-leaf2b + neighbor 10.255.129.121 description dc2-leaf2b_Vlan4093 neighbor 10.255.255.112 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.112 remote-as 65200 neighbor 10.255.255.112 description dc2-spine1_Ethernet3 @@ -825,6 +829,7 @@ router bgp 65202 route-target export evpn 10:10 router-id 10.255.128.15 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.121 description dc2-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -833,6 +838,7 @@ router bgp 65202 route-target export evpn 11:11 router-id 10.255.128.15 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.121 description dc2-leaf2b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2b.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2b.md index f5d0a92dc23..51ec8f01b96 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2b.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2b.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.114/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.114/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.114/24 @@ -120,6 +121,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -193,12 +198,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -217,12 +222,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -231,11 +236,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -249,20 +254,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc2-leaf2a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc2-leaf2a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc2-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc2-leaf2a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc2-leaf2a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc2-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC2-LEAF2C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet4 | routed | - | 10.255.255.117/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet4 | routed | - | 10.255.255.119/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_dc1-leaf2b_Ethernet6 | routed | - | 172.16.100.3/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SPINE1_Ethernet4 | - | 10.255.255.117/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SPINE2_Ethernet4 | - | 10.255.255.119/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_dc1-leaf2b_Ethernet6 | - | 172.16.100.3/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -283,17 +288,17 @@ interface Ethernet2 ip address 10.255.255.119/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf2a_Ethernet3 + description MLAG_dc2-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf2a_Ethernet4 + description MLAG_dc2-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf2-server1_PCI2 + description SERVER_dc2-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -316,40 +321,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc2-leaf2a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc2-leaf2-server1_PortChannel dc2-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC2-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc2-leaf2a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc2-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC2-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf2a_Po3 + description MLAG_dc2-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf2-server1_PortChannel dc2-leaf2-server1 + description SERVER_dc2-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -361,8 +365,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.16/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.129.15/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.16/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.129.15/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.16/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.16/32 | @@ -370,8 +374,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -380,12 +384,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.16/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.15/32 ! @@ -412,10 +416,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -459,27 +463,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.121/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.121/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.121/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -745,15 +749,15 @@ router bgp 65202 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.6 peer group EVPN-OVERLAY-CORE neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.120 description dc2-leaf2a + neighbor 10.255.129.120 description dc2-leaf2a_Vlan4093 neighbor 10.255.255.116 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.116 remote-as 65200 neighbor 10.255.255.116 description dc2-spine1_Ethernet4 @@ -825,6 +829,7 @@ router bgp 65202 route-target export evpn 10:10 router-id 10.255.128.16 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.120 description dc2-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -833,6 +838,7 @@ router bgp 65202 route-target export evpn 11:11 router-id 10.255.128.16 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.120 description dc2-leaf2a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2c.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2c.md index ee904b3eaf9..df44b6279aa 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2c.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-leaf2c.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.162/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.162/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.162/24 @@ -104,6 +105,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -187,7 +192,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC2-LEAF2A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC2-LEAF2B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc2-leaf2-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc2-leaf2-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -206,7 +211,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc2-leaf2-server1_iLO + description SERVER_dc2-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -220,9 +225,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC2_L3_LEAF2_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC2_L3_LEAF2_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -231,9 +236,9 @@ interface Ethernet5 interface Port-Channel1 description DC2_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine1.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine1.md index d51d68f469d..c9a69b3210f 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine1.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.21/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.21/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.21/24 @@ -105,6 +106,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -148,12 +153,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-LEAF1A_Ethernet1 | routed | - | 10.255.255.104/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-LEAF1B_Ethernet1 | routed | - | 10.255.255.108/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC2-LEAF2A_Ethernet1 | routed | - | 10.255.255.112/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC2-LEAF2B_Ethernet1 | routed | - | 10.255.255.116/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-LEAF1A_Ethernet1 | - | 10.255.255.104/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-LEAF1B_Ethernet1 | - | 10.255.255.108/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC2-LEAF2A_Ethernet1 | - | 10.255.255.112/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC2-LEAF2B_Ethernet1 | - | 10.255.255.116/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -196,20 +201,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.11/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.11/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.11/32 ``` @@ -346,16 +351,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.128.13 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.13 remote-as 65201 - neighbor 10.255.128.13 description dc2-leaf1a + neighbor 10.255.128.13 description dc2-leaf1a_Loopback0 neighbor 10.255.128.14 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.14 remote-as 65201 - neighbor 10.255.128.14 description dc2-leaf1b + neighbor 10.255.128.14 description dc2-leaf1b_Loopback0 neighbor 10.255.128.15 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.128.16 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.105 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.105 remote-as 65201 neighbor 10.255.255.105 description dc2-leaf1a_Ethernet1 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine2.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine2.md index cac146e509f..b960d8930aa 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine2.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/devices/dc2-spine2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.22/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.22/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.22/24 @@ -105,6 +106,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -148,12 +153,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-LEAF1A_Ethernet2 | routed | - | 10.255.255.106/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-LEAF1B_Ethernet2 | routed | - | 10.255.255.110/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC2-LEAF2A_Ethernet2 | routed | - | 10.255.255.114/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC2-LEAF2B_Ethernet2 | routed | - | 10.255.255.118/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-LEAF1A_Ethernet2 | - | 10.255.255.106/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-LEAF1B_Ethernet2 | - | 10.255.255.110/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC2-LEAF2A_Ethernet2 | - | 10.255.255.114/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC2-LEAF2B_Ethernet2 | - | 10.255.255.118/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -196,20 +201,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.128.12/32 | +| Loopback0 | ROUTER_ID | default | 10.255.128.12/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.12/32 ``` @@ -346,16 +351,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.128.13 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.13 remote-as 65201 - neighbor 10.255.128.13 description dc2-leaf1a + neighbor 10.255.128.13 description dc2-leaf1a_Loopback0 neighbor 10.255.128.14 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.14 remote-as 65201 - neighbor 10.255.128.14 description dc2-leaf1b + neighbor 10.255.128.14 description dc2-leaf1b_Loopback0 neighbor 10.255.128.15 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.128.16 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.107 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.107 remote-as 65201 neighbor 10.255.255.107 description dc2-leaf1a_Ethernet2 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/fabric/FABRIC-documentation.md b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/fabric/FABRIC-documentation.md index 9fe9962b178..5d42891e421 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/fabric/FABRIC-documentation.md +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/documentation/fabric/FABRIC-documentation.md @@ -139,7 +139,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 10.255.1.0/27 | 32 | 4 | 12.5 % | | 10.255.129.0/27 | 32 | 4 | 12.5 % | diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml index a5be9643a79..8e7529b222e 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml @@ -23,7 +23,7 @@ servers: spanning_tree_portfast: edge # Definition of the pair of ports as port channel. port_channel: - # Description of the port channel interface. + # Optionally override the description of the port channel interface. description: PortChannel dc1-leaf1-server1 # Port channel mode for LACP. mode: active @@ -45,7 +45,6 @@ servers: mode: trunk spanning_tree_portfast: edge port_channel: - description: PortChannel dc1-leaf2-server1 mode: active - endpoint_ports: [ iLO ] @@ -77,8 +76,8 @@ servers: spanning_tree_portfast: edge # Definition of the pair of ports as port channel. port_channel: - # Description of the port channel interface. - description: PortChannel dc2-leaf1-server1 + # The port-channel name on the endpoint that will be used in the port-channel description. + endpoint_port_channel: Bond1 # Port channel mode for LACP. mode: active @@ -99,7 +98,6 @@ servers: mode: trunk spanning_tree_portfast: edge port_channel: - description: PortChannel dc2-leaf2-server1 mode: active - endpoint_ports: [ iLO ] diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/FABRIC.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/FABRIC.yml index 43a2f2489d9..97cd3195727 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/FABRIC.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/group_vars/FABRIC.yml @@ -20,6 +20,11 @@ ansible_httpapi_validate_certs: false # Common AVD group variables fabric_name: FABRIC +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true + # Define underlay and overlay routing protocol to be used underlay_routing_protocol: ebgp overlay_routing_protocol: ebgp diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1a.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1a.cfg index d15ba72bd39..30db3e942e5 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1a.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1b_Po3 + description MLAG_dc1-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description PortChannel dc1-leaf1-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.3/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1b_Ethernet3 + description MLAG_dc1-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1b_Ethernet4 + description MLAG_dc1-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI1 + description SERVER_dc1-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -119,12 +124,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -141,7 +146,7 @@ interface Loopback11 ip address 10.255.11.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -171,27 +176,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.96/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.96/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.96/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -270,12 +275,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.97 description dc1-leaf1b + neighbor 10.255.1.97 description dc1-leaf1b_Vlan4093 neighbor 10.255.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.0 remote-as 65100 neighbor 10.255.255.0 description dc1-spine1_Ethernet1 @@ -328,6 +333,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -336,13 +342,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1b.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1b.cfg index de1c25496ec..6bb24876a8d 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1b.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1a_Po3 + description MLAG_dc1-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description PortChannel dc1-leaf1-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.7/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1a_Ethernet3 + description MLAG_dc1-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1a_Ethernet4 + description MLAG_dc1-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI2 + description SERVER_dc1-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -119,12 +124,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -141,7 +146,7 @@ interface Loopback11 ip address 10.255.11.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -171,27 +176,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.97/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.97/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.97/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -270,12 +275,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.96 description dc1-leaf1a + neighbor 10.255.1.96 description dc1-leaf1a_Vlan4093 neighbor 10.255.255.4 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.4 remote-as 65100 neighbor 10.255.255.4 description dc1-spine1_Ethernet2 @@ -328,6 +333,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -336,13 +342,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1c.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1c.cfg index a8c9494d93e..6d5459e9ee5 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1c.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf1c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,12 +23,6 @@ hostname dc1-leaf1c spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -40,9 +46,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF1A_Ethernet8 @@ -55,7 +61,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf1-server1_iLO + description SERVER_dc1-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -63,7 +69,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -71,11 +77,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2a.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2a.cfg index 86f3154d3e6..1b1e3e94e77 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2a.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2b_Po3 + description MLAG_dc1-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.11/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2b_Ethernet3 + description MLAG_dc1-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2b_Ethernet4 + description MLAG_dc1-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI1 + description SERVER_dc1-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -126,12 +131,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -148,7 +153,7 @@ interface Loopback11 ip address 10.255.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -178,27 +183,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.100/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.100/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.100/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -283,15 +288,15 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.101 description dc1-leaf2b + neighbor 10.255.1.101 description dc1-leaf2b_Vlan4093 neighbor 10.255.128.15 peer group EVPN-OVERLAY-CORE neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.8 remote-as 65100 neighbor 10.255.255.8 description dc1-spine1_Ethernet3 @@ -363,6 +368,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -371,13 +377,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2b.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2b.cfg index 66b47d5f928..74dcd6fd8e1 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2b.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2a_Po3 + description MLAG_dc1-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.15/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2a_Ethernet3 + description MLAG_dc1-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2a_Ethernet4 + description MLAG_dc1-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI2 + description SERVER_dc1-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -126,12 +131,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -148,7 +153,7 @@ interface Loopback11 ip address 10.255.11.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.104/24 @@ -178,27 +183,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.101/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.101/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.101/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -283,15 +288,15 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.100 description dc1-leaf2a + neighbor 10.255.1.100 description dc1-leaf2a_Vlan4093 neighbor 10.255.128.16 peer group EVPN-OVERLAY-CORE neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.12 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.12 remote-as 65100 neighbor 10.255.255.12 description dc1-spine1_Ethernet4 @@ -363,6 +368,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -371,13 +377,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2c.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2c.cfg index 97ee3373136..d2f90011927 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2c.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-leaf2c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,12 +23,6 @@ hostname dc1-leaf2c spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -40,9 +46,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet8 @@ -55,7 +61,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf2-server1_iLO + description SERVER_dc1-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -63,7 +69,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -71,11 +77,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine1.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine1.cfg index aa9ea500cc3..6cc92cb3086 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine1.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,12 +22,6 @@ hostname dc1-spine1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -47,12 +53,12 @@ interface Ethernet4 ip address 10.255.255.12/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -89,16 +95,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.1 remote-as 65101 neighbor 10.255.255.1 description dc1-leaf1a_Ethernet1 @@ -120,11 +126,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine2.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine2.cfg index db6c8c391d2..fc76da188cf 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine2.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc1-spine2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,12 +22,6 @@ hostname dc1-spine2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -47,12 +53,12 @@ interface Ethernet4 ip address 10.255.255.14/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -89,16 +95,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.3 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.3 remote-as 65101 neighbor 10.255.255.3 description dc1-leaf1a_Ethernet2 @@ -120,11 +126,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1a.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1a.cfg index 8a58f1a2737..551a291161d 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1a.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf1b_Po3 + description MLAG_dc2-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf1-server1_PortChannel dc2-leaf1-server1 + description SERVER_dc2-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.107/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf1b_Ethernet3 + description MLAG_dc2-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf1b_Ethernet4 + description MLAG_dc2-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf1-server1_PCI1 + description SERVER_dc2-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -119,12 +124,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.13/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.13/32 ! @@ -141,7 +146,7 @@ interface Loopback11 ip address 10.255.11.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.111/24 @@ -171,27 +176,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.116/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.116/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.116/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -270,12 +275,12 @@ router bgp 65201 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.117 description dc2-leaf1b + neighbor 10.255.129.117 description dc2-leaf1b_Vlan4093 neighbor 10.255.255.104 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.104 remote-as 65200 neighbor 10.255.255.104 description dc2-spine1_Ethernet1 @@ -328,6 +333,7 @@ router bgp 65201 route-target export evpn 10:10 router-id 10.255.128.13 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.117 description dc2-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -336,13 +342,7 @@ router bgp 65201 route-target export evpn 11:11 router-id 10.255.128.13 neighbor 10.255.129.117 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.117 description dc2-leaf1b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1b.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1b.cfg index 12a16fef261..a36d9052369 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1b.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf1a_Po3 + description MLAG_dc2-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf1-server1_PortChannel dc2-leaf1-server1 + description SERVER_dc2-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.111/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf1a_Ethernet3 + description MLAG_dc2-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf1a_Ethernet4 + description MLAG_dc2-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf1-server1_PCI2 + description SERVER_dc2-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -119,12 +124,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.14/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.13/32 ! @@ -141,7 +146,7 @@ interface Loopback11 ip address 10.255.11.14/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.112/24 @@ -171,27 +176,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.117/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.117/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.117/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -270,12 +275,12 @@ router bgp 65201 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.116 description dc2-leaf1a + neighbor 10.255.129.116 description dc2-leaf1a_Vlan4093 neighbor 10.255.255.108 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.108 remote-as 65200 neighbor 10.255.255.108 description dc2-spine1_Ethernet2 @@ -328,6 +333,7 @@ router bgp 65201 route-target export evpn 10:10 router-id 10.255.128.14 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.116 description dc2-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -336,13 +342,7 @@ router bgp 65201 route-target export evpn 11:11 router-id 10.255.128.14 neighbor 10.255.129.116 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.116 description dc2-leaf1a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1c.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1c.cfg index 478bf8b0723..61a97e9a4b7 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1c.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf1c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,12 +23,6 @@ hostname dc2-leaf1c spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -40,9 +46,9 @@ vrf instance MGMT interface Port-Channel1 description DC2_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC2-LEAF1A_Ethernet8 @@ -55,7 +61,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc2-leaf1-server1_iLO + description SERVER_dc2-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -63,7 +69,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.161/24 @@ -71,11 +77,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2a.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2a.cfg index 2394515af77..b268f8af52f 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2a.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf2b_Po3 + description MLAG_dc2-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf2-server1_PortChannel dc2-leaf2-server1 + description SERVER_dc2-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.115/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf2b_Ethernet3 + description MLAG_dc2-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf2b_Ethernet4 + description MLAG_dc2-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf2-server1_PCI1 + description SERVER_dc2-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -126,12 +131,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.15/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.15/32 ! @@ -148,7 +153,7 @@ interface Loopback11 ip address 10.255.11.15/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.113/24 @@ -178,27 +183,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.120/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.120/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.120/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -283,15 +288,15 @@ router bgp 65202 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.5 peer group EVPN-OVERLAY-CORE neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.121 description dc2-leaf2b + neighbor 10.255.129.121 description dc2-leaf2b_Vlan4093 neighbor 10.255.255.112 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.112 remote-as 65200 neighbor 10.255.255.112 description dc2-spine1_Ethernet3 @@ -363,6 +368,7 @@ router bgp 65202 route-target export evpn 10:10 router-id 10.255.128.15 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.121 description dc2-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -371,13 +377,7 @@ router bgp 65202 route-target export evpn 11:11 router-id 10.255.128.15 neighbor 10.255.129.121 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.121 description dc2-leaf2b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2b.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2b.cfg index 5ed2092b0ed..af341aca51e 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2b.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,12 +24,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -31,12 +37,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -45,11 +51,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -59,29 +65,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc2-leaf2a_Po3 + description MLAG_dc2-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc2-leaf2-server1_PortChannel dc2-leaf2-server1 + description SERVER_dc2-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC2-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -99,17 +104,17 @@ interface Ethernet2 ip address 10.255.255.119/31 ! interface Ethernet3 - description MLAG_PEER_dc2-leaf2a_Ethernet3 + description MLAG_dc2-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc2-leaf2a_Ethernet4 + description MLAG_dc2-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc2-leaf2-server1_PCI2 + description SERVER_dc2-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -126,12 +131,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.16/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.129.15/32 ! @@ -148,7 +153,7 @@ interface Loopback11 ip address 10.255.11.16/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.114/24 @@ -178,27 +183,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.129.121/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.129.121/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.129.121/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -283,15 +288,15 @@ router bgp 65202 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.6 peer group EVPN-OVERLAY-CORE neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.128.11 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.11 remote-as 65200 - neighbor 10.255.128.11 description dc2-spine1 + neighbor 10.255.128.11 description dc2-spine1_Loopback0 neighbor 10.255.128.12 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.12 remote-as 65200 - neighbor 10.255.128.12 description dc2-spine2 + neighbor 10.255.128.12 description dc2-spine2_Loopback0 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.129.120 description dc2-leaf2a + neighbor 10.255.129.120 description dc2-leaf2a_Vlan4093 neighbor 10.255.255.116 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.116 remote-as 65200 neighbor 10.255.255.116 description dc2-spine1_Ethernet4 @@ -363,6 +368,7 @@ router bgp 65202 route-target export evpn 10:10 router-id 10.255.128.16 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.120 description dc2-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -371,13 +377,7 @@ router bgp 65202 route-target export evpn 11:11 router-id 10.255.128.16 neighbor 10.255.129.120 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.129.120 description dc2-leaf2a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2c.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2c.cfg index 0586aae237a..3a15b15880c 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2c.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-leaf2c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,12 +23,6 @@ hostname dc2-leaf2c spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -40,9 +46,9 @@ vrf instance MGMT interface Port-Channel1 description DC2_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC2-LEAF2A_Ethernet8 @@ -55,7 +61,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc2-leaf2-server1_iLO + description SERVER_dc2-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -63,7 +69,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.162/24 @@ -71,11 +77,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine1.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine1.cfg index b034c33701b..e69780aa1e4 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine1.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,12 +22,6 @@ hostname dc2-spine1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -47,12 +53,12 @@ interface Ethernet4 ip address 10.255.255.116/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.11/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.21/24 @@ -89,16 +95,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.128.13 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.13 remote-as 65201 - neighbor 10.255.128.13 description dc2-leaf1a + neighbor 10.255.128.13 description dc2-leaf1a_Loopback0 neighbor 10.255.128.14 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.14 remote-as 65201 - neighbor 10.255.128.14 description dc2-leaf1b + neighbor 10.255.128.14 description dc2-leaf1b_Loopback0 neighbor 10.255.128.15 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.128.16 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.105 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.105 remote-as 65201 neighbor 10.255.255.105 description dc2-leaf1a_Ethernet1 @@ -120,11 +126,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine2.cfg b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine2.cfg index 2717296ec95..ee6fb4ea2b6 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine2.cfg +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/configs/dc2-spine2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,12 +22,6 @@ hostname dc2-spine2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -47,12 +53,12 @@ interface Ethernet4 ip address 10.255.255.118/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.128.12/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.22/24 @@ -89,16 +95,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.128.13 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.13 remote-as 65201 - neighbor 10.255.128.13 description dc2-leaf1a + neighbor 10.255.128.13 description dc2-leaf1a_Loopback0 neighbor 10.255.128.14 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.14 remote-as 65201 - neighbor 10.255.128.14 description dc2-leaf1b + neighbor 10.255.128.14 description dc2-leaf1b_Loopback0 neighbor 10.255.128.15 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.15 remote-as 65202 - neighbor 10.255.128.15 description dc2-leaf2a + neighbor 10.255.128.15 description dc2-leaf2a_Loopback0 neighbor 10.255.128.16 peer group EVPN-OVERLAY-PEERS neighbor 10.255.128.16 remote-as 65202 - neighbor 10.255.128.16 description dc2-leaf2b + neighbor 10.255.128.16 description dc2-leaf2b_Loopback0 neighbor 10.255.255.107 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.107 remote-as 65201 neighbor 10.255.255.107 description dc2-leaf1a_Ethernet2 @@ -120,11 +126,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml index 77ab58044b1..57dbc47a419 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Vlan4093 - ip_address: 10.255.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.3 rd: 10.255.0.3:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3009 - name: VRF11 - router_id: 10.255.0.3 rd: 10.255.0.3:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.101/24 @@ -206,12 +214,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -221,9 +229,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -232,9 +240,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -244,12 +252,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.96/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -270,7 +278,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.96/31 @@ -290,33 +298,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.96/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1b_Po3 - type: switched + description: MLAG_dc1-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: PortChannel dc1-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -324,8 +337,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -334,8 +346,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -347,7 +358,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.1/31 - name: Ethernet2 peer: dc1-spine2 @@ -356,7 +368,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.3/31 - name: Ethernet8 peer: dc1-leaf1c @@ -364,7 +377,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -372,9 +384,8 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf1-server1_PCI1 + description: SERVER_dc1-leaf1-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -401,11 +412,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml index a8d38e816fd..06747478467 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Vlan4093 - ip_address: 10.255.255.4 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.4 rd: 10.255.0.4:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3009 - name: VRF11 - router_id: 10.255.0.4 rd: 10.255.0.4:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.102/24 @@ -206,12 +214,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -221,9 +229,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -232,9 +240,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -244,12 +252,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.97/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -270,7 +278,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.97/31 @@ -290,33 +298,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.97/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1a_Po3 - type: switched + description: MLAG_dc1-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: PortChannel dc1-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -324,8 +337,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -334,8 +346,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -347,7 +358,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.5/31 - name: Ethernet2 peer: dc1-spine2 @@ -356,7 +368,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.7/31 - name: Ethernet8 peer: dc1-leaf1c @@ -364,7 +377,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -372,9 +384,8 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf1-server1_PCI2 + description: SERVER_dc1-leaf1-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -401,11 +412,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml index 15abc53d521..3e003677ab5 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.151/24 @@ -46,7 +52,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -56,7 +61,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -64,19 +68,22 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: iLO peer_type: server - description: dc1-leaf1-server1_iLO + description: SERVER_dc1-leaf1-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF1_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml index 37907b47fdf..cacd7408e19 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Vlan4093 - ip_address: 10.255.255.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-CORE peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 172.16.100.1 remote_as: '65202' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.0.5 rd: 10.255.0.5:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3009 - name: VRF11 - router_id: 10.255.0.5 rd: 10.255.0.5:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.103/24 @@ -268,12 +276,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -283,9 +291,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -294,9 +302,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -306,12 +314,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.100/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -332,7 +340,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.100/31 @@ -352,33 +360,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.100/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2b_Po3 - type: switched + description: MLAG_dc1-leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -386,8 +399,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -396,8 +408,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -409,7 +420,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.9/31 - name: Ethernet2 peer: dc1-spine2 @@ -418,7 +430,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.11/31 - name: Ethernet8 peer: dc1-leaf2c @@ -426,7 +439,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -435,7 +447,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc2-leaf2a_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 172.16.100.0/31 @@ -443,9 +456,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf2-server1_PCI1 + description: SERVER_dc1-leaf2-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -472,11 +484,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml index 297d43be92c..bab9ca1a8ee 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Vlan4093 - ip_address: 10.255.255.12 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-CORE peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' - ip_address: 172.16.100.3 remote_as: '65202' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.0.6 rd: 10.255.0.6:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3009 - name: VRF11 - router_id: 10.255.0.6 rd: 10.255.0.6:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.104/24 @@ -268,12 +276,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -283,9 +291,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -294,9 +302,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -306,12 +314,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.101/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -332,7 +340,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.101/31 @@ -352,33 +360,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.101/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2a_Po3 - type: switched + description: MLAG_dc1-leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -386,8 +399,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -396,8 +408,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -409,7 +420,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.13/31 - name: Ethernet2 peer: dc1-spine2 @@ -418,7 +430,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.15/31 - name: Ethernet8 peer: dc1-leaf2c @@ -426,7 +439,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -435,7 +447,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc2-leaf2b_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 172.16.100.2/31 @@ -443,9 +456,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf2-server1_PCI2 + description: SERVER_dc1-leaf2-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -472,11 +484,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml index a534d1a6d24..f9a788b81a2 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.152/24 @@ -46,7 +52,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -56,7 +61,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -64,19 +68,22 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: iLO peer_type: server - description: dc1-leaf2-server1_iLO + description: SERVER_dc1-leaf2-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF2_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine1.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine1.yml index b14762b2c10..70b1720878d 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine1.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine1.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -105,7 +111,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.11/24 @@ -123,7 +129,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.0/31 - name: Ethernet2 peer: dc1-leaf1b @@ -132,7 +139,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.4/31 - name: Ethernet3 peer: dc1-leaf2a @@ -141,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.8/31 - name: Ethernet4 peer: dc1-leaf2b @@ -150,11 +159,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.12/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine2.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine2.yml index beb61c5f57f..806dc1a4ba9 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine2.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc1-spine2.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -105,7 +111,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.12/24 @@ -123,7 +129,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.2/31 - name: Ethernet2 peer: dc1-leaf1b @@ -132,7 +139,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.6/31 - name: Ethernet3 peer: dc1-leaf2a @@ -141,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.10/31 - name: Ethernet4 peer: dc1-leaf2b @@ -150,11 +159,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.14/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1a.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1a.yml index a1542643026..34a6a46d3c8 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1a.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Vlan4093 - ip_address: 10.255.255.104 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.13 rd: 10.255.128.13:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1b_Vlan3009 - name: VRF11 - router_id: 10.255.128.13 rd: 10.255.128.13:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.111/24 @@ -206,12 +214,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -221,9 +229,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -232,9 +240,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -244,12 +252,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.116/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -270,7 +278,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.116/31 @@ -290,33 +298,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.116/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf1b_Po3 - type: switched + description: MLAG_dc2-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - type: switched + description: SERVER_dc2-leaf1-server1_Bond1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -324,8 +337,7 @@ ethernet_interfaces: peer: dc2-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -334,8 +346,7 @@ ethernet_interfaces: peer: dc2-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -347,7 +358,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.105/31 - name: Ethernet2 peer: dc2-spine2 @@ -356,7 +368,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.107/31 - name: Ethernet8 peer: dc2-leaf1c @@ -364,7 +377,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF1C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -372,9 +384,8 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: PCI1 peer_type: server - description: dc2-leaf1-server1_PCI1 + description: SERVER_dc2-leaf1-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -401,11 +412,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.13/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.13/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1b.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1b.yml index e98755c9dc0..c3f453cdb4d 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1b.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Vlan4093 - ip_address: 10.255.255.108 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.14 rd: 10.255.128.14:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.14 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1a_Vlan3009 - name: VRF11 - router_id: 10.255.128.14 rd: 10.255.128.14:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.14 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.112/24 @@ -206,12 +214,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -221,9 +229,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -232,9 +240,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -244,12 +252,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.117/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -270,7 +278,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.117/31 @@ -290,33 +298,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.117/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf1a_Po3 - type: switched + description: MLAG_dc2-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - type: switched + description: SERVER_dc2-leaf1-server1_Bond1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -324,8 +337,7 @@ ethernet_interfaces: peer: dc2-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -334,8 +346,7 @@ ethernet_interfaces: peer: dc2-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -347,7 +358,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.109/31 - name: Ethernet2 peer: dc2-spine2 @@ -356,7 +368,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.111/31 - name: Ethernet8 peer: dc2-leaf1c @@ -364,7 +377,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF1C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -372,9 +384,8 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: PCI2 peer_type: server - description: dc2-leaf1-server1_PCI2 + description: SERVER_dc2-leaf1-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -401,11 +412,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.14/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.13/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1c.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1c.yml index 98a1ebfa052..38daa927d7c 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1c.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf1c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.161/24 @@ -46,7 +52,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF1A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -56,7 +61,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF1B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -64,19 +68,22 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: iLO peer_type: server - description: dc2-leaf1-server1_iLO + description: SERVER_dc2-leaf1-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC2_L3_LEAF1_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2a.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2a.yml index 6fbc188848e..71d77a73db1 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2a.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2a.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Vlan4093 - ip_address: 10.255.255.112 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-CORE peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 172.16.100.0 remote_as: '65102' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.128.15 rd: 10.255.128.15:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.15 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2b_Vlan3009 - name: VRF11 - router_id: 10.255.128.15 rd: 10.255.128.15:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.15 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.113/24 @@ -268,12 +276,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -283,9 +291,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -294,9 +302,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -306,12 +314,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.120/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -332,7 +340,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.120/31 @@ -352,33 +360,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.120/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf2b_Po3 - type: switched + description: MLAG_dc2-leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - type: switched + description: SERVER_dc2-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -386,8 +399,7 @@ ethernet_interfaces: peer: dc2-leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -396,8 +408,7 @@ ethernet_interfaces: peer: dc2-leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -409,7 +420,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.113/31 - name: Ethernet2 peer: dc2-spine2 @@ -418,7 +430,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.115/31 - name: Ethernet8 peer: dc2-leaf2c @@ -426,7 +439,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF2C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -435,7 +447,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc1-leaf2a_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 172.16.100.1/31 @@ -443,9 +456,8 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: PCI1 peer_type: server - description: dc2-leaf2-server1_PCI1 + description: SERVER_dc2-leaf2-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -472,11 +484,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.15/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.15/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2b.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2b.yml index 031ed86cf8c..7fd3b1a0106 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2b.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2b.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Vlan4093 - ip_address: 10.255.255.116 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-CORE peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' - ip_address: 172.16.100.2 remote_as: '65102' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.128.16 rd: 10.255.128.16:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.16 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2a_Vlan3009 - name: VRF11 - router_id: 10.255.128.16 rd: 10.255.128.16:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.16 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.114/24 @@ -268,12 +276,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -283,9 +291,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -294,9 +302,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -306,12 +314,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.121/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -332,7 +340,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.121/31 @@ -352,33 +360,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.121/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf2a_Po3 - type: switched + description: MLAG_dc2-leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - type: switched + description: SERVER_dc2-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -386,8 +399,7 @@ ethernet_interfaces: peer: dc2-leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -396,8 +408,7 @@ ethernet_interfaces: peer: dc2-leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -409,7 +420,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.117/31 - name: Ethernet2 peer: dc2-spine2 @@ -418,7 +430,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.119/31 - name: Ethernet8 peer: dc2-leaf2c @@ -426,7 +439,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF2C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -435,7 +447,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc1-leaf2b_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 172.16.100.3/31 @@ -443,9 +456,8 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: PCI2 peer_type: server - description: dc2-leaf2-server1_PCI2 + description: SERVER_dc2-leaf2-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -472,11 +484,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.16/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.15/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2c.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2c.yml index a9cd23427f3..7b8cfda6fb9 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2c.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-leaf2c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.162/24 @@ -46,7 +52,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -56,7 +61,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF2B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -64,19 +68,22 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: iLO peer_type: server - description: dc2-leaf2-server1_iLO + description: SERVER_dc2-leaf2-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC2_L3_LEAF2_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine1.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine1.yml index 5450de6043f..5037f0217d0 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine1.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine1.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.128.13 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Loopback0 remote_as: '65201' - ip_address: 10.255.128.14 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Loopback0 remote_as: '65201' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -105,7 +111,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.21/24 @@ -123,7 +129,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.104/31 - name: Ethernet2 peer: dc2-leaf1b @@ -132,7 +139,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.108/31 - name: Ethernet3 peer: dc2-leaf2a @@ -141,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.112/31 - name: Ethernet4 peer: dc2-leaf2b @@ -150,11 +159,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.116/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine2.yml b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine2.yml index 2bf18f88b3d..7ad798479d1 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine2.yml +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/intended/structured_configs/dc2-spine2.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.128.13 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Loopback0 remote_as: '65201' - ip_address: 10.255.128.14 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Loopback0 remote_as: '65201' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -105,7 +111,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.22/24 @@ -123,7 +129,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.106/31 - name: Ethernet2 peer: dc2-leaf1b @@ -132,7 +139,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.110/31 - name: Ethernet3 peer: dc2-leaf2a @@ -141,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.114/31 - name: Ethernet4 peer: dc2-leaf2b @@ -150,11 +159,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.118/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.12/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt index 4d13115c140..1505a6dbd0a 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt index 6806ab91b5b..7aaa88f0fe0 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt index ad8c9418234..8e538386e24 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt index 8bbeeac5130..e883324dc34 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt index ae9d8d276b8..77518b967de 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt index db005f1faae..65e5a37f542 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt index 0c31f1b03f5..52b6ac4ec0b 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt index c1ba3d9a6a7..f9566e6409c 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1a-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1a-basic-configuration.txt index ea762a71599..bc34927e26d 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1b-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1b-basic-configuration.txt index 1107e6332c6..dcd11e0e27a 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1c-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1c-basic-configuration.txt index f85b922f4ab..d15818c87a1 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf1c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2a-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2a-basic-configuration.txt index 2389e0b0d00..b86366b7cca 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2b-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2b-basic-configuration.txt index 2e2f81a9744..be53336ace0 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2c-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2c-basic-configuration.txt index b4229f9fd50..330e516eda3 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-leaf2c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine1-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine1-basic-configuration.txt index 35dc5d8b3d9..93186e75748 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine2-basic-configuration.txt b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine2-basic-configuration.txt index a10dafea566..0f63e39fa6b 100644 --- a/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/dual-dc-l3ls/switch-basic-configurations/dc2-spine2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p1.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p1.md index 1ebcdfc0be6..57b0cd8354c 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p1.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -106,6 +107,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -165,12 +170,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_pe1_Ethernet1 | routed | - | 10.255.3.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_pe2_Ethernet2 | routed | - | 10.255.3.7/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_rr1_Ethernet3 | routed | - | 10.255.3.11/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_p2_Ethernet4 | routed | - | 10.255.3.8/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_pe1_Ethernet1 | - | 10.255.3.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_pe2_Ethernet2 | - | 10.255.3.7/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_rr1_Ethernet3 | - | 10.255.3.11/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_p2_Ethernet4 | - | 10.255.3.8/31 | default | 1500 | False | - | - | ##### ISIS @@ -262,13 +267,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 10.255.0.1/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -281,12 +286,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -348,7 +353,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0001.00 | +| Net-ID | 49.0001.0102.5500.0001.00 | | Type | level-2 | | Router-ID | 10.255.0.1 | | Log Adjacency Changes | True | @@ -376,7 +381,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0000.0001.00 + net 49.0001.0102.5500.0001.00 is-type level-2 router-id ipv4 10.255.0.1 log-adjacency-changes @@ -408,10 +413,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 10.255.0.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p2.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p2.md index 9cccfd5c03f..83269c9ad4c 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p2.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -106,6 +107,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -165,12 +170,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_pe2_Ethernet1 | routed | - | 10.255.3.5/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_pe1_Ethernet2 | routed | - | 10.255.3.3/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_rr2_Ethernet3 | routed | - | 10.255.3.17/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_p1_Ethernet4 | routed | - | 10.255.3.9/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_pe2_Ethernet1 | - | 10.255.3.5/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_pe1_Ethernet2 | - | 10.255.3.3/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_rr2_Ethernet3 | - | 10.255.3.17/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_p1_Ethernet4 | - | 10.255.3.9/31 | default | 1500 | False | - | - | ##### ISIS @@ -262,13 +267,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 10.255.0.2/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -281,12 +286,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -348,7 +353,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0002.00 | +| Net-ID | 49.0001.0102.5500.0002.00 | | Type | level-2 | | Router-ID | 10.255.0.2 | | Log Adjacency Changes | True | @@ -376,7 +381,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0000.0002.00 + net 49.0001.0102.5500.0002.00 is-type level-2 router-id ipv4 10.255.0.2 log-adjacency-changes @@ -408,10 +413,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 10.255.0.2 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p3.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p3.md index d5e16cc8f89..b513b7ae049 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p3.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p3.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.13/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.13/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.13/24 @@ -106,6 +107,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -165,11 +170,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_pe3_Ethernet1 | routed | - | 10.255.3.23/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_rr1_Ethernet2 | routed | - | 10.255.3.13/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_p4_Ethernet4 | routed | - | 10.255.3.20/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_pe3_Ethernet1 | - | 10.255.3.23/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_rr1_Ethernet2 | - | 10.255.3.13/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_p4_Ethernet4 | - | 10.255.3.20/31 | default | 1500 | False | - | - | ##### ISIS @@ -243,13 +248,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 10.255.0.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -262,12 +267,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.3/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -329,7 +334,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0003.00 | +| Net-ID | 49.0001.0102.5500.0003.00 | | Type | level-2 | | Router-ID | 10.255.0.3 | | Log Adjacency Changes | True | @@ -356,7 +361,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0000.0003.00 + net 49.0001.0102.5500.0003.00 is-type level-2 router-id ipv4 10.255.0.3 log-adjacency-changes @@ -388,10 +393,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 10.255.0.3 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p4.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p4.md index 67bbe763cb6..b49b897fc05 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p4.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/p4.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.14/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.14/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.14/24 @@ -106,6 +107,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -165,11 +170,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet2 | P2P_LINK_TO_rr2_Ethernet2 | routed | - | 10.255.3.19/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_pe3_Ethernet3 | routed | - | 10.255.3.25/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_p3_Ethernet4 | routed | - | 10.255.3.21/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet2 | P2P_LINK_TO_rr2_Ethernet2 | - | 10.255.3.19/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_pe3_Ethernet3 | - | 10.255.3.25/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_p3_Ethernet4 | - | 10.255.3.21/31 | default | 1500 | False | - | - | ##### ISIS @@ -243,13 +248,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 10.255.0.4/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -262,12 +267,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.4/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -329,7 +334,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0004.00 | +| Net-ID | 49.0001.0102.5500.0004.00 | | Type | level-2 | | Router-ID | 10.255.0.4 | | Log Adjacency Changes | True | @@ -356,7 +361,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0000.0004.00 + net 49.0001.0102.5500.0004.00 is-type level-2 router-id ipv4 10.255.0.4 log-adjacency-changes @@ -388,10 +393,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 10.255.0.4 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe1.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe1.md index 3d708327340..ee34382f0ac 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe1.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -113,6 +114,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -172,19 +177,19 @@ vlan internal order ascending range 1006 1199 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet3.10 | C1_L3_SERVICE | l3dot1q | - | 10 | -| Ethernet3.20 | C2_L3_SERVICE | l3dot1q | - | 20 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet3.10 | C1_L3_SERVICE | - | 10 | - | +| Ethernet3.20 | C2_L3_SERVICE | - | 20 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_p1_Ethernet1 | routed | - | 10.255.3.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_p2_Ethernet2 | routed | - | 10.255.3.2/31 | default | 1500 | False | - | - | -| Ethernet3.10 | C1_L3_SERVICE | l3dot1q | - | 10.0.1.1/29 | C1_VRF1 | - | False | - | - | -| Ethernet3.20 | C2_L3_SERVICE | l3dot1q | - | 10.1.1.1/29 | C2_VRF1 | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_p1_Ethernet1 | - | 10.255.3.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_p2_Ethernet2 | - | 10.255.3.2/31 | default | 1500 | False | - | - | +| Ethernet3.10 | C1_L3_SERVICE | - | 10.0.1.1/29 | C1_VRF1 | - | False | - | - | +| Ethernet3.20 | C2_L3_SERVICE | - | 10.1.1.1/29 | C2_VRF1 | - | False | - | - | ##### ISIS @@ -259,13 +264,13 @@ interface Ethernet3.20 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 10.255.1.1/32 | +| Loopback0 | ROUTER_ID | default | 10.255.1.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -278,12 +283,12 @@ interface Ethernet3.20 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -395,7 +400,7 @@ router ospf 10 vrf C1_VRF1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0001.00 | +| Net-ID | 49.0001.0102.5500.1001.00 | | Type | level-2 | | Router-ID | 10.255.1.1 | | Log Adjacency Changes | True | @@ -421,7 +426,7 @@ router ospf 10 vrf C1_VRF1 ```eos ! router isis CORE - net 49.0001.0000.0001.0001.00 + net 49.0001.0102.5500.1001.00 is-type level-2 router-id ipv4 10.255.1.1 log-adjacency-changes @@ -469,13 +474,6 @@ ASN Notation: asplain | 10.255.2.2 | Inherited from peer group MPLS-OVERLAY-PEERS | default | - | Inherited from peer group MPLS-OVERLAY-PEERS | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | - | - | - | | 10.1.1.3 | 65123 | C2_VRF1 | - | standard | 100 | - | - | - | - | - | - | -#### Router BGP EVPN Address Family - -##### EVPN Peer Groups - -| Peer Group | Activate | Encapsulation | -| ---------- | -------- | ------------- | - #### Router BGP VPN-IPv4 Address Family ##### VPN-IPv4 Peer Groups @@ -508,11 +506,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -583,10 +579,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 10.255.1.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe2.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe2.md index 399ed34d73f..34fc185d927 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe2.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -113,6 +114,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -172,19 +177,19 @@ vlan internal order ascending range 1006 1199 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet4.10 | C1_L3_SERVICE | l3dot1q | - | 10 | -| Ethernet4.20 | C2_L3_SERVICE | l3dot1q | - | 20 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet4.10 | C1_L3_SERVICE | - | 10 | - | +| Ethernet4.20 | C2_L3_SERVICE | - | 20 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_p2_Ethernet1 | routed | - | 10.255.3.4/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_p1_Ethernet2 | routed | - | 10.255.3.6/31 | default | 1500 | False | - | - | -| Ethernet4.10 | C1_L3_SERVICE | l3dot1q | - | 10.0.1.2/29 | C1_VRF1 | - | False | - | - | -| Ethernet4.20 | C2_L3_SERVICE | l3dot1q | - | 10.1.1.2/29 | C2_VRF1 | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_p2_Ethernet1 | - | 10.255.3.4/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_p1_Ethernet2 | - | 10.255.3.6/31 | default | 1500 | False | - | - | +| Ethernet4.10 | C1_L3_SERVICE | - | 10.0.1.2/29 | C1_VRF1 | - | False | - | - | +| Ethernet4.20 | C2_L3_SERVICE | - | 10.1.1.2/29 | C2_VRF1 | - | False | - | - | ##### ISIS @@ -259,13 +264,13 @@ interface Ethernet4.20 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 10.255.1.2/32 | +| Loopback0 | ROUTER_ID | default | 10.255.1.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -278,12 +283,12 @@ interface Ethernet4.20 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -395,7 +400,7 @@ router ospf 10 vrf C1_VRF1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0002.00 | +| Net-ID | 49.0001.0102.5500.1002.00 | | Type | level-2 | | Router-ID | 10.255.1.2 | | Log Adjacency Changes | True | @@ -421,7 +426,7 @@ router ospf 10 vrf C1_VRF1 ```eos ! router isis CORE - net 49.0001.0000.0001.0002.00 + net 49.0001.0102.5500.1002.00 is-type level-2 router-id ipv4 10.255.1.2 log-adjacency-changes @@ -469,13 +474,6 @@ ASN Notation: asplain | 10.255.2.2 | Inherited from peer group MPLS-OVERLAY-PEERS | default | - | Inherited from peer group MPLS-OVERLAY-PEERS | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | - | - | - | | 10.1.1.3 | 65123 | C2_VRF1 | - | standard | 100 | - | - | - | - | - | - | -#### Router BGP EVPN Address Family - -##### EVPN Peer Groups - -| Peer Group | Activate | Encapsulation | -| ---------- | -------- | ------------- | - #### Router BGP VPN-IPv4 Address Family ##### VPN-IPv4 Peer Groups @@ -508,11 +506,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -583,10 +579,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 10.255.1.2 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe3.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe3.md index 25aef29d6be..40207de1934 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe3.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/pe3.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -113,6 +114,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -172,12 +177,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_p3_Ethernet1 | routed | - | 10.255.3.22/31 | default | 1500 | False | - | - | -| Ethernet2 | C1_L3_SERVICE | routed | - | 10.0.1.9/30 | C1_VRF1 | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_p4_Ethernet3 | routed | - | 10.255.3.24/31 | default | 1500 | False | - | - | -| Ethernet4 | C2_L3_SERVICE | routed | - | 10.1.1.9/30 | C2_VRF1 | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_p3_Ethernet1 | - | 10.255.3.22/31 | default | 1500 | False | - | - | +| Ethernet2 | C1_L3_SERVICE | - | 10.0.1.9/30 | C1_VRF1 | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_p4_Ethernet3 | - | 10.255.3.24/31 | default | 1500 | False | - | - | +| Ethernet4 | C2_L3_SERVICE | - | 10.1.1.9/30 | C2_VRF1 | - | False | - | - | ##### ISIS @@ -248,13 +253,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 10.255.1.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.1.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -267,12 +272,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.3/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -384,7 +389,7 @@ router ospf 10 vrf C1_VRF1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0003.00 | +| Net-ID | 49.0001.0102.5500.1003.00 | | Type | level-2 | | Router-ID | 10.255.1.3 | | Log Adjacency Changes | True | @@ -410,7 +415,7 @@ router ospf 10 vrf C1_VRF1 ```eos ! router isis CORE - net 49.0001.0000.0001.0003.00 + net 49.0001.0102.5500.1003.00 is-type level-2 router-id ipv4 10.255.1.3 log-adjacency-changes @@ -458,13 +463,6 @@ ASN Notation: asplain | 10.255.2.2 | Inherited from peer group MPLS-OVERLAY-PEERS | default | - | Inherited from peer group MPLS-OVERLAY-PEERS | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | - | - | - | | 10.1.1.10 | 65124 | C2_VRF1 | - | standard | 100 | - | - | - | - | - | - | -#### Router BGP EVPN Address Family - -##### EVPN Peer Groups - -| Peer Group | Activate | Encapsulation | -| ---------- | -------- | ------------- | - #### Router BGP VPN-IPv4 Address Family ##### VPN-IPv4 Peer Groups @@ -497,11 +495,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -572,10 +568,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 10.255.1.3 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr1.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr1.md index 3bbcdbf3ade..e5a7283054a 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr1.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -109,6 +110,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -168,11 +173,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet2 | P2P_LINK_TO_p3_Ethernet2 | routed | - | 10.255.3.12/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_p1_Ethernet3 | routed | - | 10.255.3.10/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_rr2_Ethernet4 | routed | - | 10.255.3.14/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet2 | P2P_LINK_TO_p3_Ethernet2 | - | 10.255.3.12/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_p1_Ethernet3 | - | 10.255.3.10/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_rr2_Ethernet4 | - | 10.255.3.14/31 | default | 1500 | False | - | - | ##### ISIS @@ -246,13 +251,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 10.255.2.1/32 | +| Loopback0 | ROUTER_ID | default | 10.255.2.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -265,12 +270,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.2.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -332,7 +337,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0002.0001.00 | +| Net-ID | 49.0001.0102.5500.2001.00 | | Type | level-2 | | Router-ID | 10.255.2.1 | | Log Adjacency Changes | True | @@ -359,7 +364,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0002.0001.00 + net 49.0001.0102.5500.2001.00 is-type level-2 router-id ipv4 10.255.2.1 log-adjacency-changes @@ -424,14 +429,6 @@ ASN Notation: asplain | 10.255.1.3 | Inherited from peer group MPLS-OVERLAY-PEERS | default | - | Inherited from peer group MPLS-OVERLAY-PEERS | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | - | | 10.255.2.2 | Inherited from peer group RR-OVERLAY-PEERS | default | - | Inherited from peer group RR-OVERLAY-PEERS | Inherited from peer group RR-OVERLAY-PEERS | - | Inherited from peer group RR-OVERLAY-PEERS | - | - | - | - | -#### Router BGP EVPN Address Family - -##### EVPN Peer Groups - -| Peer Group | Activate | Encapsulation | -| ---------- | -------- | ------------- | -| RR-OVERLAY-PEERS | True | default | - #### Router BGP VPN-IPv4 Address Family ##### VPN-IPv4 Peer Groups @@ -467,16 +464,13 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.1.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.1 description pe1 + neighbor 10.255.1.1 description pe1_Loopback0 neighbor 10.255.1.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.2 description pe2 + neighbor 10.255.1.2 description pe2_Loopback0 neighbor 10.255.1.3 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.3 description pe3 + neighbor 10.255.1.3 description pe3_Loopback0 neighbor 10.255.2.2 peer group RR-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn - neighbor RR-OVERLAY-PEERS activate + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -526,10 +520,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 10.255.2.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr2.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr2.md index 4f8d8ba8df6..f7272462eed 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr2.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/devices/rr2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Management Security](#management-security) - [Management Security Summary](#management-security-summary) - [Management Security Device Configuration](#management-security-device-configuration) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -109,6 +110,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Management Security ### Management Security Summary @@ -168,11 +173,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet2 | P2P_LINK_TO_p4_Ethernet2 | routed | - | 10.255.3.18/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_p2_Ethernet3 | routed | - | 10.255.3.16/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_rr1_Ethernet4 | routed | - | 10.255.3.15/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet2 | P2P_LINK_TO_p4_Ethernet2 | - | 10.255.3.18/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_p2_Ethernet3 | - | 10.255.3.16/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_rr1_Ethernet4 | - | 10.255.3.15/31 | default | 1500 | False | - | - | ##### ISIS @@ -246,13 +251,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 10.255.2.2/32 | +| Loopback0 | ROUTER_ID | default | 10.255.2.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -265,12 +270,12 @@ interface Ethernet4 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.2.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ``` ## Routing @@ -332,7 +337,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0002.0002.00 | +| Net-ID | 49.0001.0102.5500.2002.00 | | Type | level-2 | | Router-ID | 10.255.2.2 | | Log Adjacency Changes | True | @@ -359,7 +364,7 @@ ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ```eos ! router isis CORE - net 49.0001.0000.0002.0002.00 + net 49.0001.0102.5500.2002.00 is-type level-2 router-id ipv4 10.255.2.2 log-adjacency-changes @@ -424,14 +429,6 @@ ASN Notation: asplain | 10.255.1.3 | Inherited from peer group MPLS-OVERLAY-PEERS | default | - | Inherited from peer group MPLS-OVERLAY-PEERS | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | Inherited from peer group MPLS-OVERLAY-PEERS | - | - | | 10.255.2.1 | Inherited from peer group RR-OVERLAY-PEERS | default | - | Inherited from peer group RR-OVERLAY-PEERS | Inherited from peer group RR-OVERLAY-PEERS | - | Inherited from peer group RR-OVERLAY-PEERS | - | - | - | - | -#### Router BGP EVPN Address Family - -##### EVPN Peer Groups - -| Peer Group | Activate | Encapsulation | -| ---------- | -------- | ------------- | -| RR-OVERLAY-PEERS | True | default | - #### Router BGP VPN-IPv4 Address Family ##### VPN-IPv4 Peer Groups @@ -467,16 +464,13 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.1.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.1 description pe1 + neighbor 10.255.1.1 description pe1_Loopback0 neighbor 10.255.1.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.2 description pe2 + neighbor 10.255.1.2 description pe2_Loopback0 neighbor 10.255.1.3 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.3 description pe3 + neighbor 10.255.1.3 description pe3_Loopback0 neighbor 10.255.2.1 peer group RR-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 - ! - address-family evpn - neighbor RR-OVERLAY-PEERS activate + neighbor 10.255.2.1 description rr1_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -526,10 +520,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 10.255.2.2 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/fabric/FABRIC-documentation.md b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/fabric/FABRIC-documentation.md index c1e8c41e8e6..fa05f8f6ba4 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/fabric/FABRIC-documentation.md +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/documentation/fabric/FABRIC-documentation.md @@ -104,20 +104,20 @@ | POD | Node | CLNS Address | | --- | ---- | ------------ | -| FABRIC | p1 | 49.0001.0000.0000.0001.00 | -| FABRIC | p2 | 49.0001.0000.0000.0002.00 | -| FABRIC | p3 | 49.0001.0000.0000.0003.00 | -| FABRIC | p4 | 49.0001.0000.0000.0004.00 | -| FABRIC | pe1 | 49.0001.0000.0001.0001.00 | -| FABRIC | pe2 | 49.0001.0000.0001.0002.00 | -| FABRIC | pe3 | 49.0001.0000.0001.0003.00 | -| FABRIC | rr1 | 49.0001.0000.0002.0001.00 | -| FABRIC | rr2 | 49.0001.0000.0002.0002.00 | +| FABRIC | p1 | 49.0001.0102.5500.0001.00 | +| FABRIC | p2 | 49.0001.0102.5500.0002.00 | +| FABRIC | p3 | 49.0001.0102.5500.0003.00 | +| FABRIC | p4 | 49.0001.0102.5500.0004.00 | +| FABRIC | pe1 | 49.0001.0102.5500.1001.00 | +| FABRIC | pe2 | 49.0001.0102.5500.1002.00 | +| FABRIC | pe3 | 49.0001.0102.5500.1003.00 | +| FABRIC | rr1 | 49.0001.0102.5500.2001.00 | +| FABRIC | rr2 | 49.0001.0102.5500.2002.00 | ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/FABRIC.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/FABRIC.yml index 1c778e82371..5f806ae53a9 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/FABRIC.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/FABRIC.yml @@ -15,12 +15,14 @@ ansible_httpapi_use_ssl: true # Do not try to validate certs ansible_httpapi_validate_certs: false -design: - type: mpls - # Common AVD group variables fabric_name: FABRIC +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true + # Define underlay and overlay routing protocol to be used underlay_routing_protocol: isis-ldp overlay_routing_protocol: ibgp diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/WAN1.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/WAN1.yml index 58260fca314..15d7ad94c80 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/WAN1.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/group_vars/WAN1.yml @@ -82,7 +82,6 @@ rr: mpls_route_reflectors: [ rr1, rr2 ] # ISIS NET system id prefix isis_system_id_prefix: '0000.0002' - node_groups: - group: WAN1_RR1-2 nodes: diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p1.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p1.cfg index d257b019856..cfc95aa3b95 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p1.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname p1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_pe1_Ethernet1 no shutdown @@ -87,15 +96,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -105,8 +114,16 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.0.1 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0001.00 + net 49.0001.0102.5500.0001.00 is-type level-2 router-id ipv4 10.255.0.1 log-adjacency-changes @@ -116,22 +133,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.0.1 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p2.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p2.cfg index fa3dd9a8b9a..55a9fadd119 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p2.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname p2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_pe2_Ethernet1 no shutdown @@ -87,15 +96,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -105,8 +114,16 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.0.2 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0002.00 + net 49.0001.0102.5500.0002.00 is-type level-2 router-id ipv4 10.255.0.2 log-adjacency-changes @@ -116,22 +133,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.0.2 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p3.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p3.cfg index 663c04f320a..d18c12f2158 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p3.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname p3 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_pe3_Ethernet1 no shutdown @@ -70,15 +79,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.3/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.13/24 @@ -88,8 +97,16 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.0.3 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0003.00 + net 49.0001.0102.5500.0003.00 is-type level-2 router-id ipv4 10.255.0.3 log-adjacency-changes @@ -99,22 +116,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.0.3 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p4.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p4.cfg index ab6981da8fc..0cae624bc38 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p4.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/p4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname p4 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet2 description P2P_LINK_TO_rr2_Ethernet2 no shutdown @@ -70,15 +79,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.255.0.4/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.14/24 @@ -88,8 +97,16 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.0.4 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0004.00 + net 49.0001.0102.5500.0004.00 is-type level-2 router-id ipv4 10.255.0.4 log-adjacency-changes @@ -99,22 +116,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.0.4 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe1.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe1.cfg index 35f8ac62865..bfe02b59d72 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe1.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,18 +22,15 @@ hostname pe1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance C1_VRF1 ! vrf instance C2_VRF1 ! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_p1_Ethernet1 no shutdown @@ -76,15 +85,15 @@ interface Ethernet3.20 ip address 10.1.1.1/29 ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -98,6 +107,14 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.1.1 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -114,11 +131,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -149,14 +164,8 @@ router bgp 65001 address-family ipv4 neighbor 10.1.1.3 activate ! -router ospf 10 vrf C1_VRF1 - router-id 10.255.1.1 - passive-interface default - no passive-interface Ethernet3.10 - redistribute bgp -! router isis CORE - net 49.0001.0000.0001.0001.00 + net 49.0001.0102.5500.1001.00 is-type level-2 router-id ipv4 10.255.1.1 log-adjacency-changes @@ -166,22 +175,10 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default +router ospf 10 vrf C1_VRF1 router-id 10.255.1.1 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common + passive-interface default + no passive-interface Ethernet3.10 + redistribute bgp ! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe2.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe2.cfg index e8e1da4747a..3cd595ae155 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe2.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,18 +22,15 @@ hostname pe2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance C1_VRF1 ! vrf instance C2_VRF1 ! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_p2_Ethernet1 no shutdown @@ -76,15 +85,15 @@ interface Ethernet4.20 ip address 10.1.1.2/29 ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -98,6 +107,14 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.1.2 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -114,11 +131,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -149,14 +164,8 @@ router bgp 65001 address-family ipv4 neighbor 10.1.1.3 activate ! -router ospf 10 vrf C1_VRF1 - router-id 10.255.1.2 - passive-interface default - no passive-interface Ethernet4.10 - redistribute bgp -! router isis CORE - net 49.0001.0000.0001.0002.00 + net 49.0001.0102.5500.1002.00 is-type level-2 router-id ipv4 10.255.1.2 log-adjacency-changes @@ -166,22 +175,10 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default +router ospf 10 vrf C1_VRF1 router-id 10.255.1.2 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common + passive-interface default + no passive-interface Ethernet4.10 + redistribute bgp ! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe3.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe3.cfg index d849f1d8884..bf2e7d87562 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe3.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/pe3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,18 +22,15 @@ hostname pe3 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance C1_VRF1 ! vrf instance C2_VRF1 ! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet1 description P2P_LINK_TO_p3_Ethernet1 no shutdown @@ -72,15 +81,15 @@ interface Ethernet4 ip address 10.1.1.9/30 ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.1.3/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -94,6 +103,14 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.1.3 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -110,11 +127,9 @@ router bgp 65001 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.2.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 + neighbor 10.255.2.1 description rr1_Loopback0 neighbor 10.255.2.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -145,14 +160,8 @@ router bgp 65001 address-family ipv4 neighbor 10.1.1.10 activate ! -router ospf 10 vrf C1_VRF1 - router-id 10.255.1.3 - passive-interface default - no passive-interface Ethernet2 - redistribute bgp -! router isis CORE - net 49.0001.0000.0001.0003.00 + net 49.0001.0102.5500.1003.00 is-type level-2 router-id ipv4 10.255.1.3 log-adjacency-changes @@ -162,22 +171,10 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default +router ospf 10 vrf C1_VRF1 router-id 10.255.1.3 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common + passive-interface default + no passive-interface Ethernet2 + redistribute bgp ! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr1.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr1.cfg index 06e3c7c4e03..fd6e4707f16 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr1.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname rr1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet2 description P2P_LINK_TO_p3_Ethernet2 no shutdown @@ -70,15 +79,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.2.1/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -88,6 +97,14 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.2.1 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -113,16 +130,13 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.1.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.1 description pe1 + neighbor 10.255.1.1 description pe1_Loopback0 neighbor 10.255.1.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.2 description pe2 + neighbor 10.255.1.2 description pe2_Loopback0 neighbor 10.255.1.3 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.3 description pe3 + neighbor 10.255.1.3 description pe3_Loopback0 neighbor 10.255.2.2 peer group RR-OVERLAY-PEERS - neighbor 10.255.2.2 description rr2 - ! - address-family evpn - neighbor RR-OVERLAY-PEERS activate + neighbor 10.255.2.2 description rr2_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -133,7 +147,7 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS activate ! router isis CORE - net 49.0001.0000.0002.0001.00 + net 49.0001.0102.5500.2001.00 is-type level-2 router-id ipv4 10.255.2.1 log-adjacency-changes @@ -143,22 +157,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.2.1 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr2.cfg b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr2.cfg index 396d2361c2b..420589137ca 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr2.cfg +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/configs/rr2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +22,11 @@ hostname rr2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$QJUtFkyu9yoecsq.$ysGzlb2YXaIMvezqGEna7RE8CMALJHnv7Q1i.27VygyKUtSeX.n2xRTyOtCR8eOAl.4imBLyhXFc4o97P5n071 -! vrf instance MGMT ! +management security + password encryption-key common +! interface Ethernet2 description P2P_LINK_TO_p4_Ethernet2 no shutdown @@ -70,15 +79,15 @@ interface Ethernet4 isis authentication key 7 $1c$sTNAlR6rKSw= ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 10.255.2.2/32 + mpls ldp interface isis enable CORE isis passive - mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -88,6 +97,14 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +mpls ip +! +mpls ldp + router-id 10.255.2.2 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -113,16 +130,13 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 10.255.1.1 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.1 description pe1 + neighbor 10.255.1.1 description pe1_Loopback0 neighbor 10.255.1.2 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.2 description pe2 + neighbor 10.255.1.2 description pe2_Loopback0 neighbor 10.255.1.3 peer group MPLS-OVERLAY-PEERS - neighbor 10.255.1.3 description pe3 + neighbor 10.255.1.3 description pe3_Loopback0 neighbor 10.255.2.1 peer group RR-OVERLAY-PEERS - neighbor 10.255.2.1 description rr1 - ! - address-family evpn - neighbor RR-OVERLAY-PEERS activate + neighbor 10.255.2.1 description rr1_Loopback0 ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate @@ -133,7 +147,7 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS activate ! router isis CORE - net 49.0001.0000.0002.0002.00 + net 49.0001.0102.5500.2002.00 is-type level-2 router-id ipv4 10.255.2.2 log-adjacency-changes @@ -143,22 +157,4 @@ router isis CORE maximum-paths 4 ! ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.255.2.2 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - password encryption-key common -! end diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p1.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p1.yml index 95f65f2a36b..8488dc06f62 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p1.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p1.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -27,7 +33,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.11/24 @@ -39,7 +45,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 mpls: @@ -50,7 +56,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0001.00 + net: 49.0001.0102.5500.0001.00 router_id: 10.255.0.1 is_type: level-2 address_family_ipv4: @@ -70,7 +76,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_pe1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.1/31 @@ -91,7 +98,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: pe description: P2P_LINK_TO_pe2_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.7/31 @@ -112,7 +120,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_p2_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.8/31 @@ -133,7 +142,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: rr description: P2P_LINK_TO_rr1_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.11/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p2.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p2.yml index 0127fcd21d3..f2f8946740d 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p2.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p2.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -27,7 +33,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.12/24 @@ -39,7 +45,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 mpls: @@ -50,7 +56,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0002.00 + net: 49.0001.0102.5500.0002.00 router_id: 10.255.0.2 is_type: level-2 address_family_ipv4: @@ -70,7 +76,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: pe description: P2P_LINK_TO_pe1_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.3/31 @@ -91,7 +98,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_pe2_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.5/31 @@ -112,7 +120,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_p1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.9/31 @@ -133,7 +142,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: rr description: P2P_LINK_TO_rr2_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.17/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p3.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p3.yml index 6a0593b919e..9f3072f4f83 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p3.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p3.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -27,7 +33,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.13/24 @@ -39,7 +45,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.0.3/32 mpls: @@ -50,7 +56,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0003.00 + net: 49.0001.0102.5500.0003.00 router_id: 10.255.0.3 is_type: level-2 address_family_ipv4: @@ -70,7 +76,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: rr description: P2P_LINK_TO_rr1_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.13/31 @@ -91,7 +98,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_p4_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.20/31 @@ -112,7 +120,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_pe3_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.23/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p4.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p4.yml index 9eb86d5d445..f2daf8d79dc 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p4.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/p4.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -27,7 +33,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.14/24 @@ -39,7 +45,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.0.4/32 mpls: @@ -50,7 +56,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0004.00 + net: 49.0001.0102.5500.0004.00 router_id: 10.255.0.4 is_type: level-2 address_family_ipv4: @@ -70,7 +76,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: rr description: P2P_LINK_TO_rr2_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.19/31 @@ -91,7 +98,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_p3_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.21/31 @@ -112,7 +120,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: pe description: P2P_LINK_TO_pe3_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.25/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe1.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe1.yml index 152bd3f9aa8..e609439c5c8 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe1.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe1.yml @@ -22,8 +22,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '65001' - address_family_evpn: - peer_groups: [] address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -38,14 +36,13 @@ router_bgp: - ip_address: 10.255.2.1 peer_group: MPLS-OVERLAY-PEERS peer: rr1 - description: rr1 + description: rr1_Loopback0 - ip_address: 10.255.2.2 peer_group: MPLS-OVERLAY-PEERS peer: rr2 - description: rr2 + description: rr2_Loopback0 vrfs: - name: C1_VRF1 - router_id: 10.255.1.1 rd: 10.255.1.1:10 route_targets: import: @@ -56,11 +53,11 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '10:10' + router_id: 10.255.1.1 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: C2_VRF1 - router_id: 10.255.1.1 rd: 10.255.1.1:20 route_targets: import: @@ -71,6 +68,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '20:20' + router_id: 10.255.1.1 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -94,6 +92,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -116,7 +120,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.101/24 @@ -128,7 +132,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 10.255.1.1/32 mpls: @@ -139,7 +143,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0001.00 + net: 49.0001.0102.5500.1001.00 router_id: 10.255.1.1 is_type: level-2 address_family_ipv4: @@ -164,7 +168,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_p1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.0/31 @@ -185,7 +190,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: p description: P2P_LINK_TO_p2_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.2/31 @@ -206,8 +212,8 @@ ethernet_interfaces: ip_address: 10.0.1.1/29 shutdown: false description: C1_L3_SERVICE - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: C1_VRF1 ospf_area: '0' ospf_network_point_to_point: false @@ -216,11 +222,12 @@ ethernet_interfaces: ip_address: 10.1.1.1/29 shutdown: false description: C2_L3_SERVICE - type: l3dot1q - encapsulation_dot1q_vlan: 20 + encapsulation_dot1q: + vlan: 20 vrf: C2_VRF1 - name: Ethernet3 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false ip_igmp_snooping: @@ -235,6 +242,7 @@ router_ospf: no_passive_interfaces: - Ethernet3.10 redistribute: - bgp: {} + bgp: + enabled: true metadata: platform: vEOS-lab diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe2.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe2.yml index 7c8ee64cdf2..cff43edebd7 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe2.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe2.yml @@ -22,8 +22,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '65001' - address_family_evpn: - peer_groups: [] address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -38,14 +36,13 @@ router_bgp: - ip_address: 10.255.2.1 peer_group: MPLS-OVERLAY-PEERS peer: rr1 - description: rr1 + description: rr1_Loopback0 - ip_address: 10.255.2.2 peer_group: MPLS-OVERLAY-PEERS peer: rr2 - description: rr2 + description: rr2_Loopback0 vrfs: - name: C1_VRF1 - router_id: 10.255.1.2 rd: 10.255.1.2:10 route_targets: import: @@ -56,11 +53,11 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '10:10' + router_id: 10.255.1.2 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: C2_VRF1 - router_id: 10.255.1.2 rd: 10.255.1.2:20 route_targets: import: @@ -71,6 +68,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '20:20' + router_id: 10.255.1.2 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -94,6 +92,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -116,7 +120,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.102/24 @@ -128,7 +132,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 10.255.1.2/32 mpls: @@ -139,7 +143,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0002.00 + net: 49.0001.0102.5500.1002.00 router_id: 10.255.1.2 is_type: level-2 address_family_ipv4: @@ -164,7 +168,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_p2_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.4/31 @@ -185,7 +190,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: p description: P2P_LINK_TO_p1_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.6/31 @@ -206,8 +212,8 @@ ethernet_interfaces: ip_address: 10.0.1.2/29 shutdown: false description: C1_L3_SERVICE - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: C1_VRF1 ospf_area: '0' ospf_network_point_to_point: false @@ -216,11 +222,12 @@ ethernet_interfaces: ip_address: 10.1.1.2/29 shutdown: false description: C2_L3_SERVICE - type: l3dot1q - encapsulation_dot1q_vlan: 20 + encapsulation_dot1q: + vlan: 20 vrf: C2_VRF1 - name: Ethernet4 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false ip_igmp_snooping: @@ -235,6 +242,7 @@ router_ospf: no_passive_interfaces: - Ethernet4.10 redistribute: - bgp: {} + bgp: + enabled: true metadata: platform: vEOS-lab diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe3.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe3.yml index 09c237084cd..fab1c1a20ac 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe3.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/pe3.yml @@ -22,8 +22,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '65001' - address_family_evpn: - peer_groups: [] address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -38,14 +36,13 @@ router_bgp: - ip_address: 10.255.2.1 peer_group: MPLS-OVERLAY-PEERS peer: rr1 - description: rr1 + description: rr1_Loopback0 - ip_address: 10.255.2.2 peer_group: MPLS-OVERLAY-PEERS peer: rr2 - description: rr2 + description: rr2_Loopback0 vrfs: - name: C1_VRF1 - router_id: 10.255.1.3 rd: 10.255.1.3:10 route_targets: import: @@ -56,11 +53,11 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '10:10' + router_id: 10.255.1.3 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: C2_VRF1 - router_id: 10.255.1.3 rd: 10.255.1.3:20 route_targets: import: @@ -71,6 +68,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - '20:20' + router_id: 10.255.1.3 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -94,6 +92,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -116,7 +120,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.103/24 @@ -128,7 +132,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 10.255.1.3/32 mpls: @@ -139,7 +143,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0003.00 + net: 49.0001.0102.5500.1003.00 router_id: 10.255.1.3 is_type: level-2 address_family_ipv4: @@ -164,7 +168,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_p3_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.22/31 @@ -185,7 +190,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_p4_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.24/31 @@ -206,7 +212,8 @@ ethernet_interfaces: ip_address: 10.0.1.9/30 shutdown: false description: C1_L3_SERVICE - type: routed + switchport: + enabled: false vrf: C1_VRF1 ospf_area: '0' ospf_network_point_to_point: false @@ -215,7 +222,8 @@ ethernet_interfaces: ip_address: 10.1.1.9/30 shutdown: false description: C2_L3_SERVICE - type: routed + switchport: + enabled: false vrf: C2_VRF1 ip_igmp_snooping: globally_enabled: true @@ -229,6 +237,7 @@ router_ospf: no_passive_interfaces: - Ethernet2 redistribute: - bgp: {} + bgp: + enabled: true metadata: platform: vEOS-lab diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr1.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr1.yml index 6065848ba7e..adbe5c93679 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr1.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr1.yml @@ -32,10 +32,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '65001' - address_family_evpn: - peer_groups: - - name: RR-OVERLAY-PEERS - activate: true address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -52,19 +48,19 @@ router_bgp: - ip_address: 10.255.1.1 peer_group: MPLS-OVERLAY-PEERS peer: pe1 - description: pe1 + description: pe1_Loopback0 - ip_address: 10.255.1.2 peer_group: MPLS-OVERLAY-PEERS peer: pe2 - description: pe2 + description: pe2_Loopback0 - ip_address: 10.255.1.3 peer_group: MPLS-OVERLAY-PEERS peer: pe3 - description: pe3 + description: pe3_Loopback0 - ip_address: 10.255.2.2 peer_group: RR-OVERLAY-PEERS peer: rr2 - description: rr2 + description: rr2_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -76,6 +72,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -92,7 +94,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.151/24 @@ -104,7 +106,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 10.255.2.1/32 mpls: @@ -115,7 +117,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0002.0001.00 + net: 49.0001.0102.5500.2001.00 router_id: 10.255.2.1 is_type: level-2 address_family_ipv4: @@ -140,7 +142,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_p1_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.10/31 @@ -161,7 +164,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: p description: P2P_LINK_TO_p3_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.12/31 @@ -182,7 +186,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: rr description: P2P_LINK_TO_rr2_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.14/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr2.yml b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr2.yml index a3e9012403a..e0b3ea13449 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr2.yml +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/intended/structured_configs/rr2.yml @@ -32,10 +32,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '65001' - address_family_evpn: - peer_groups: - - name: RR-OVERLAY-PEERS - activate: true address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -52,19 +48,19 @@ router_bgp: - ip_address: 10.255.1.1 peer_group: MPLS-OVERLAY-PEERS peer: pe1 - description: pe1 + description: pe1_Loopback0 - ip_address: 10.255.1.2 peer_group: MPLS-OVERLAY-PEERS peer: pe2 - description: pe2 + description: pe2_Loopback0 - ip_address: 10.255.1.3 peer_group: MPLS-OVERLAY-PEERS peer: pe3 - description: pe3 + description: pe3_Loopback0 - ip_address: 10.255.2.1 peer_group: RR-OVERLAY-PEERS peer: rr1 - description: rr1 + description: rr1_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -76,6 +72,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -92,7 +94,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.152/24 @@ -104,7 +106,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 10.255.2.2/32 mpls: @@ -115,7 +117,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0002.0002.00 + net: 49.0001.0102.5500.2002.00 router_id: 10.255.2.2 is_type: level-2 address_family_ipv4: @@ -140,7 +142,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: rr description: P2P_LINK_TO_rr1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.15/31 @@ -161,7 +164,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_p2_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.16/31 @@ -182,7 +186,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: p description: P2P_LINK_TO_p4_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.255.3.18/31 diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p1-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p1-basic-configuration.txt index ce38ccb1a03..fec4c64dc18 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p2-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p2-basic-configuration.txt index fc713f9fd57..1870ede93b9 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p3-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p3-basic-configuration.txt index e7bf9776866..4979c5cac18 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p3-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p3-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p4-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p4-basic-configuration.txt index 710c83c29d8..5c2fbbb1a3d 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p4-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/p4-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe1-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe1-basic-configuration.txt index 31fff53f3ff..46bb1ef0376 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe2-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe2-basic-configuration.txt index 80906b044d6..ac94281f52a 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe3-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe3-basic-configuration.txt index eb731206cf6..9c685f6f965 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe3-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/pe3-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr1-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr1-basic-configuration.txt index b715a3c8773..f9b4182acda 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr2-basic-configuration.txt b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr2-basic-configuration.txt index 420f74472a4..22e8523c159 100644 --- a/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/isis-ldp-ipvpn/switch-basic-configurations/rr2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/README.md b/ansible_collections/arista/avd/examples/l2ls-fabric/README.md index 2f68144d492..4e2809a5221 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/README.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/README.md @@ -169,7 +169,7 @@ The tabs below show the Ansible **group_vars** used in this example. ``` === "DC1_FABRIC" - At the fabric level (DC1_FABRIC), the following variables are defined in **group_vars/DC1_FABRIC.yml**. In addition, the fabric name, design type (l2ls), spine and leaf defaults, ansible authentication, and interface links are defined at this level. Other variables you must supply include spanning-tree mode, priority, and an MLAG IP pool. + At the fabric level (DC1_FABRIC), the following variables are defined in **group_vars/DC1_FABRIC.yml**. In addition, the fabric name, spine and leaf defaults, ansible authentication, and interface links are defined at this level. Other variables you must supply include spanning-tree mode, priority, and an MLAG IP pool. Variables applied under the node key type (spine/leaf) defaults section are inherited by nodes under each type. These variables may be overwritten under the node itself. @@ -182,7 +182,7 @@ The tabs below show the Ansible **group_vars** used in this example. ``` === "DC1_SPINES" - In an L2LS design, there are two types of spine nodes: `spine` and `l3spine`. In AVD, the node type defines the functionality and the EOS CLI configuration to be generated. For an L2LS design, we will use node type: spine. Later, we will add routing to the spines by changing the node type to l3spine. + In an L2LS design, there are two types of spine nodes: `l2spine` and `l3spine`. In AVD, the node type defines the functionality and the EOS CLI configuration to be generated. For an L2LS design, we will use node type `l2spine`. Later, we will add routing to the spines by changing the node type to `l3spine`. ``` yaml --8<-- @@ -191,7 +191,7 @@ The tabs below show the Ansible **group_vars** used in this example. ``` === "DC1_LEAFS" - In an L2LS design, we have one type of leaf node: `leaf`. + In an L2LS design, we have one type of leaf node: `l2leaf`. ``` yaml --8<-- diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF1.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF1.md index a6d23d2860a..29d9c233bd1 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF1.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.105/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.105/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.105/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -258,7 +263,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 10 | BLUE-NET | - | | 20 | GREEN-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -271,7 +276,7 @@ vlan 20 name GREEN-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -287,9 +292,9 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | SPINE1_Ethernet1 | *trunk | *10,20 | *- | *- | 1 | | Ethernet2 | SPINE2_Ethernet1 | *trunk | *10,20 | *- | *- | 1 | -| Ethernet3 | HostA_Eth1 | access | 10 | - | - | - | -| Ethernet47 | MLAG_PEER_LEAF2_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_LEAF2_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet3 | SERVER_HostA_Eth1 | access | 10 | - | - | - | +| Ethernet47 | MLAG_LEAF2_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_LEAF2_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -308,7 +313,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostA_Eth1 + description SERVER_HostA_Eth1 no shutdown switchport access vlan 10 switchport mode access @@ -316,12 +321,12 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF2_Ethernet47 + description MLAG_LEAF2_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF2_Ethernet48 + description MLAG_LEAF2_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -332,10 +337,10 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | SPINES_Po1 | switched | trunk | 10,20 | - | - | - | - | 1 | - | -| Port-Channel47 | MLAG_PEER_LEAF2_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | SPINES_Po1 | trunk | 10,20 | - | - | - | - | 1 | - | +| Port-Channel47 | MLAG_LEAF2_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -344,17 +349,17 @@ interface Ethernet48 interface Port-Channel1 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF2_Po47 + description MLAG_LEAF2_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -363,7 +368,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -376,7 +381,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF2.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF2.md index 890e9ff541e..fed8e1917f0 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF2.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.106/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.106/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.106/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -258,7 +263,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 10 | BLUE-NET | - | | 20 | GREEN-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -271,7 +276,7 @@ vlan 20 name GREEN-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -287,9 +292,9 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | SPINE1_Ethernet2 | *trunk | *10,20 | *- | *- | 1 | | Ethernet2 | SPINE2_Ethernet2 | *trunk | *10,20 | *- | *- | 1 | -| Ethernet3 | HostB_Eth1 | access | 20 | - | - | - | -| Ethernet47 | MLAG_PEER_LEAF1_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_LEAF1_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet3 | SERVER_HostB_Eth1 | access | 20 | - | - | - | +| Ethernet47 | MLAG_LEAF1_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_LEAF1_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -308,7 +313,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostB_Eth1 + description SERVER_HostB_Eth1 no shutdown switchport access vlan 20 switchport mode access @@ -316,12 +321,12 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF1_Ethernet47 + description MLAG_LEAF1_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF1_Ethernet48 + description MLAG_LEAF1_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -332,10 +337,10 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | SPINES_Po1 | switched | trunk | 10,20 | - | - | - | - | 1 | - | -| Port-Channel47 | MLAG_PEER_LEAF1_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | SPINES_Po1 | trunk | 10,20 | - | - | - | - | 1 | - | +| Port-Channel47 | MLAG_LEAF1_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -344,17 +349,17 @@ interface Ethernet48 interface Port-Channel1 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF1_Po47 + description MLAG_LEAF1_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -363,7 +368,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -376,7 +381,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF3.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF3.md index 303756cc3c1..5713d7936e6 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF3.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.107/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.107/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.107/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -258,7 +263,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 10 | BLUE-NET | - | | 30 | ORANGE-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -271,7 +276,7 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -287,9 +292,9 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | SPINE1_Ethernet3 | *trunk | *10,30 | *- | *- | 1 | | Ethernet2 | SPINE2_Ethernet3 | *trunk | *10,30 | *- | *- | 1 | -| Ethernet3 | HostC_Eth1 | access | 10 | - | - | - | -| Ethernet47 | MLAG_PEER_LEAF4_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_LEAF4_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet3 | SERVER_HostC_Eth1 | access | 10 | - | - | - | +| Ethernet47 | MLAG_LEAF4_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_LEAF4_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -308,7 +313,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostC_Eth1 + description SERVER_HostC_Eth1 no shutdown switchport access vlan 10 switchport mode access @@ -316,12 +321,12 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF4_Ethernet47 + description MLAG_LEAF4_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF4_Ethernet48 + description MLAG_LEAF4_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -332,10 +337,10 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | SPINES_Po3 | switched | trunk | 10,30 | - | - | - | - | 1 | - | -| Port-Channel47 | MLAG_PEER_LEAF4_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | SPINES_Po3 | trunk | 10,30 | - | - | - | - | 1 | - | +| Port-Channel47 | MLAG_LEAF4_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -344,17 +349,17 @@ interface Ethernet48 interface Port-Channel1 description SPINES_Po3 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF4_Po47 + description MLAG_LEAF4_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -363,7 +368,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -376,7 +381,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF4.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF4.md index 73a4e24193e..5e3e19333a3 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF4.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/LEAF4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.108/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.108/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.108/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -258,7 +263,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 10 | BLUE-NET | - | | 30 | ORANGE-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -271,7 +276,7 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -287,9 +292,9 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | SPINE1_Ethernet4 | *trunk | *10,30 | *- | *- | 1 | | Ethernet2 | SPINE2_Ethernet4 | *trunk | *10,30 | *- | *- | 1 | -| Ethernet3 | Host2_Eth1 | access | 30 | - | - | - | -| Ethernet47 | MLAG_PEER_LEAF3_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_LEAF3_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet3 | SERVER_Host2_Eth1 | access | 30 | - | - | - | +| Ethernet47 | MLAG_LEAF3_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_LEAF3_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -308,7 +313,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description Host2_Eth1 + description SERVER_Host2_Eth1 no shutdown switchport access vlan 30 switchport mode access @@ -316,12 +321,12 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF3_Ethernet47 + description MLAG_LEAF3_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF3_Ethernet48 + description MLAG_LEAF3_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -332,10 +337,10 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | SPINES_Po3 | switched | trunk | 10,30 | - | - | - | - | 1 | - | -| Port-Channel47 | MLAG_PEER_LEAF3_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | SPINES_Po3 | trunk | 10,30 | - | - | - | - | 1 | - | +| Port-Channel47 | MLAG_LEAF3_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -344,17 +349,17 @@ interface Ethernet48 interface Port-Channel1 description SPINES_Po3 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF3_Po47 + description MLAG_LEAF3_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -363,7 +368,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -376,7 +381,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE1.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE1.md index fc7c95265a6..a5c5670c5b5 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE1.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.101/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.101/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.101/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -259,7 +264,7 @@ vlan internal order ascending range 1006 1199 | 10 | BLUE-NET | - | | 20 | GREEN-NET | - | | 30 | ORANGE-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -275,7 +280,7 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -293,9 +298,9 @@ vlan 4094 | Ethernet2 | LEAF2_Ethernet1 | *trunk | *10,20 | *- | *- | 1 | | Ethernet3 | LEAF3_Ethernet1 | *trunk | *10,30 | *- | *- | 3 | | Ethernet4 | LEAF4_Ethernet1 | *trunk | *10,30 | *- | *- | 3 | -| Ethernet5 | FIREWALL_Eth1 | *trunk | *10,20,30 | *- | *- | 5 | -| Ethernet47 | MLAG_PEER_SPINE2_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_SPINE2_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet5 | FIREWALL_FIREWALL_Eth1 | *trunk | *10,20,30 | *- | *- | 5 | +| Ethernet47 | MLAG_SPINE2_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_SPINE2_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -324,17 +329,17 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description FIREWALL_Eth1 + description FIREWALL_FIREWALL_Eth1 no shutdown channel-group 5 mode active ! interface Ethernet47 - description MLAG_PEER_SPINE2_Ethernet47 + description MLAG_SPINE2_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_SPINE2_Ethernet48 + description MLAG_SPINE2_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -345,12 +350,12 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | RACK1_Po1 | switched | trunk | 10,20 | - | - | - | - | 1 | - | -| Port-Channel3 | RACK2_Po1 | switched | trunk | 10,30 | - | - | - | - | 3 | - | -| Port-Channel5 | FIREWALL | switched | trunk | 10,20,30 | - | - | - | - | 5 | - | -| Port-Channel47 | MLAG_PEER_SPINE2_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | RACK1_Po1 | trunk | 10,20 | - | - | - | - | 1 | - | +| Port-Channel3 | RACK2_Po1 | trunk | 10,30 | - | - | - | - | 3 | - | +| Port-Channel5 | FIREWALL_FIREWALL | trunk | 10,20,30 | - | - | - | - | 5 | - | +| Port-Channel47 | MLAG_SPINE2_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -359,33 +364,33 @@ interface Ethernet48 interface Port-Channel1 description RACK1_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description RACK2_Po1 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 3 ! interface Port-Channel5 - description FIREWALL + description FIREWALL_FIREWALL no shutdown - switchport switchport trunk allowed vlan 10,20,30 switchport mode trunk + switchport mlag 5 ! interface Port-Channel47 - description MLAG_PEER_SPINE2_Po47 + description MLAG_SPINE2_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -394,7 +399,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -407,7 +412,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE2.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE2.md index d7fe4916e3d..a126702d827 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE2.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/devices/SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [AAA Authentication](#aaa-authentication) - [AAA Authorization](#aaa-authorization) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | oob_management | oob | MGMT | 172.16.100.102/24 | 172.16.100.1 | +| Management0 | OOB_MANAGEMENT | oob | MGMT | 172.16.100.102/24 | 172.16.100.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | oob_management | oob | MGMT | - | - | +| Management0 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.102/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin secret sha512 username arista privilege 15 role network-admin nopassword ``` +### Enable Password + +Enable password has been disabled + ### AAA Authentication #### AAA Authentication Summary @@ -259,7 +264,7 @@ vlan internal order ascending range 1006 1199 | 10 | BLUE-NET | - | | 20 | GREEN-NET | - | | 30 | ORANGE-NET | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -275,7 +280,7 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -293,9 +298,9 @@ vlan 4094 | Ethernet2 | LEAF2_Ethernet2 | *trunk | *10,20 | *- | *- | 1 | | Ethernet3 | LEAF3_Ethernet2 | *trunk | *10,30 | *- | *- | 3 | | Ethernet4 | LEAF4_Ethernet2 | *trunk | *10,30 | *- | *- | 3 | -| Ethernet5 | FIREWALL_Eth2 | *trunk | *10,20,30 | *- | *- | 5 | -| Ethernet47 | MLAG_PEER_SPINE1_Ethernet47 | *trunk | *- | *- | *['MLAG'] | 47 | -| Ethernet48 | MLAG_PEER_SPINE1_Ethernet48 | *trunk | *- | *- | *['MLAG'] | 47 | +| Ethernet5 | FIREWALL_FIREWALL_Eth2 | *trunk | *10,20,30 | *- | *- | 5 | +| Ethernet47 | MLAG_SPINE1_Ethernet47 | *trunk | *- | *- | *MLAG | 47 | +| Ethernet48 | MLAG_SPINE1_Ethernet48 | *trunk | *- | *- | *MLAG | 47 | *Inherited from Port-Channel Interface @@ -324,17 +329,17 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description FIREWALL_Eth2 + description FIREWALL_FIREWALL_Eth2 no shutdown channel-group 5 mode active ! interface Ethernet47 - description MLAG_PEER_SPINE1_Ethernet47 + description MLAG_SPINE1_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_SPINE1_Ethernet48 + description MLAG_SPINE1_Ethernet48 no shutdown channel-group 47 mode active ``` @@ -345,12 +350,12 @@ interface Ethernet48 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | RACK1_Po1 | switched | trunk | 10,20 | - | - | - | - | 1 | - | -| Port-Channel3 | RACK2_Po1 | switched | trunk | 10,30 | - | - | - | - | 3 | - | -| Port-Channel5 | FIREWALL | switched | trunk | 10,20,30 | - | - | - | - | 5 | - | -| Port-Channel47 | MLAG_PEER_SPINE1_Po47 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | RACK1_Po1 | trunk | 10,20 | - | - | - | - | 1 | - | +| Port-Channel3 | RACK2_Po1 | trunk | 10,30 | - | - | - | - | 3 | - | +| Port-Channel5 | FIREWALL_FIREWALL | trunk | 10,20,30 | - | - | - | - | 5 | - | +| Port-Channel47 | MLAG_SPINE1_Port-Channel47 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -359,33 +364,33 @@ interface Ethernet48 interface Port-Channel1 description RACK1_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description RACK2_Po1 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 3 ! interface Port-Channel5 - description FIREWALL + description FIREWALL_FIREWALL no shutdown - switchport switchport trunk allowed vlan 10,20,30 switchport mode trunk + switchport mlag 5 ! interface Port-Channel47 - description MLAG_PEER_SPINE1_Po47 + description MLAG_SPINE1_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -394,7 +399,7 @@ interface Port-Channel47 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -407,7 +412,7 @@ interface Port-Channel47 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-documentation.md index 4fd513ba3a8..99972ae2a24 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-documentation.md @@ -22,12 +22,12 @@ | POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | Serial Number | | --- | ---- | ---- | ------------- | -------- | -------------------------- | ------------- | -| DC1_FABRIC | leaf | LEAF1 | 172.16.100.105/24 | cEOS-LAB | Provisioned | - | -| DC1_FABRIC | leaf | LEAF2 | 172.16.100.106/24 | cEOS-LAB | Provisioned | - | -| DC1_FABRIC | leaf | LEAF3 | 172.16.100.107/24 | cEOS-LAB | Provisioned | - | -| DC1_FABRIC | leaf | LEAF4 | 172.16.100.108/24 | cEOS-LAB | Provisioned | - | -| DC1_FABRIC | spine | SPINE1 | 172.16.100.101/24 | cEOS-LAB | Provisioned | - | -| DC1_FABRIC | spine | SPINE2 | 172.16.100.102/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF1 | 172.16.100.105/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF2 | 172.16.100.106/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF3 | 172.16.100.107/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2leaf | LEAF4 | 172.16.100.108/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2spine | SPINE1 | 172.16.100.101/24 | cEOS-LAB | Provisioned | - | +| DC1_FABRIC | l2spine | SPINE2 | 172.16.100.102/24 | cEOS-LAB | Provisioned | - | > Provision status is based on Ansible inventory declaration and do not represent real status from CloudVision. @@ -40,20 +40,20 @@ | Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | | ---- | ---- | -------------- | --------- | ----------| -------------- | -| leaf | LEAF1 | Ethernet1 | spine | SPINE1 | Ethernet1 | -| leaf | LEAF1 | Ethernet2 | spine | SPINE2 | Ethernet1 | -| leaf | LEAF1 | Ethernet47 | mlag_peer | LEAF2 | Ethernet47 | -| leaf | LEAF1 | Ethernet48 | mlag_peer | LEAF2 | Ethernet48 | -| leaf | LEAF2 | Ethernet1 | spine | SPINE1 | Ethernet2 | -| leaf | LEAF2 | Ethernet2 | spine | SPINE2 | Ethernet2 | -| leaf | LEAF3 | Ethernet1 | spine | SPINE1 | Ethernet3 | -| leaf | LEAF3 | Ethernet2 | spine | SPINE2 | Ethernet3 | -| leaf | LEAF3 | Ethernet47 | mlag_peer | LEAF4 | Ethernet47 | -| leaf | LEAF3 | Ethernet48 | mlag_peer | LEAF4 | Ethernet48 | -| leaf | LEAF4 | Ethernet1 | spine | SPINE1 | Ethernet4 | -| leaf | LEAF4 | Ethernet2 | spine | SPINE2 | Ethernet4 | -| spine | SPINE1 | Ethernet47 | mlag_peer | SPINE2 | Ethernet47 | -| spine | SPINE1 | Ethernet48 | mlag_peer | SPINE2 | Ethernet48 | +| l2leaf | LEAF1 | Ethernet1 | l2spine | SPINE1 | Ethernet1 | +| l2leaf | LEAF1 | Ethernet2 | l2spine | SPINE2 | Ethernet1 | +| l2leaf | LEAF1 | Ethernet47 | mlag_peer | LEAF2 | Ethernet47 | +| l2leaf | LEAF1 | Ethernet48 | mlag_peer | LEAF2 | Ethernet48 | +| l2leaf | LEAF2 | Ethernet1 | l2spine | SPINE1 | Ethernet2 | +| l2leaf | LEAF2 | Ethernet2 | l2spine | SPINE2 | Ethernet2 | +| l2leaf | LEAF3 | Ethernet1 | l2spine | SPINE1 | Ethernet3 | +| l2leaf | LEAF3 | Ethernet2 | l2spine | SPINE2 | Ethernet3 | +| l2leaf | LEAF3 | Ethernet47 | mlag_peer | LEAF4 | Ethernet47 | +| l2leaf | LEAF3 | Ethernet48 | mlag_peer | LEAF4 | Ethernet48 | +| l2leaf | LEAF4 | Ethernet1 | l2spine | SPINE1 | Ethernet4 | +| l2leaf | LEAF4 | Ethernet2 | l2spine | SPINE2 | Ethernet4 | +| l2spine | SPINE1 | Ethernet47 | mlag_peer | SPINE2 | Ethernet47 | +| l2spine | SPINE1 | Ethernet48 | mlag_peer | SPINE2 | Ethernet48 | ## Fabric IP Allocation @@ -80,7 +80,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | ### VTEP Loopback Node allocation @@ -94,31 +94,30 @@ | Key | Type | Description | | --- | ---- | ----------- | | firewalls | firewall | - | -| routers | router | - | | servers | server | - | ### Firewalls -| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Type | Mode | VLANs | Profile | -| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ---- | ----- | ------- | -| FIREWALL | Eth1 | SPINE1 | Ethernet5 | FIREWALL_Eth1 | False | switched | trunk | 10,20,30 | PP-FIREWALL | -| FIREWALL | Eth2 | SPINE2 | Ethernet5 | FIREWALL_Eth2 | False | switched | trunk | 10,20,30 | PP-FIREWALL | +| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Mode | Access VLAN | Trunk Allowed VLANs | Profile | +| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ----------- | ------------------- | ------- | +| FIREWALL | Eth1 | SPINE1 | Ethernet5 | FIREWALL_FIREWALL_Eth1 | False | trunk | - | 10,20,30 | PP-FIREWALL | +| FIREWALL | Eth2 | SPINE2 | Ethernet5 | FIREWALL_FIREWALL_Eth2 | False | trunk | - | 10,20,30 | PP-FIREWALL | ### Servers -| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Type | Mode | VLANs | Profile | -| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ---- | ----- | ------- | -| Host2 | Eth1 | LEAF4 | Ethernet3 | Host2_Eth1 | False | switched | access | 30 | PP-ORANGE | -| HostA | Eth1 | LEAF1 | Ethernet3 | HostA_Eth1 | False | switched | access | 10 | PP-BLUE | -| HostB | Eth1 | LEAF2 | Ethernet3 | HostB_Eth1 | False | switched | access | 20 | PP-GREEN | -| HostC | Eth1 | LEAF3 | Ethernet3 | HostC_Eth1 | False | switched | access | 10 | PP-BLUE | +| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Mode | Access VLAN | Trunk Allowed VLANs | Profile | +| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ----------- | ------------------- | ------- | +| Host2 | Eth1 | LEAF4 | Ethernet3 | SERVER_Host2_Eth1 | False | access | 30 | - | PP-ORANGE | +| HostA | Eth1 | LEAF1 | Ethernet3 | SERVER_HostA_Eth1 | False | access | 10 | - | PP-BLUE | +| HostB | Eth1 | LEAF2 | Ethernet3 | SERVER_HostB_Eth1 | False | access | 20 | - | PP-GREEN | +| HostC | Eth1 | LEAF3 | Ethernet3 | SERVER_HostC_Eth1 | False | access | 10 | - | PP-BLUE | ### Port Profiles | Profile Name | Parent Profile | | ------------ | -------------- | -| PP-DEFAULTS | - | | PP-BLUE | PP-DEFAULTS | +| PP-DEFAULTS | - | +| PP-FIREWALL | - | | PP-GREEN | PP-DEFAULTS | | PP-ORANGE | PP-DEFAULTS | -| PP-FIREWALL | - | diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv deleted file mode 100644 index bfbfa894838..00000000000 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ /dev/null @@ -1 +0,0 @@ -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 6843a368b7a..00000000000 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,35 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -leaf,LEAF1,Ethernet1,spine,SPINE1,Ethernet1,True -leaf,LEAF1,Ethernet2,spine,SPINE2,Ethernet1,True -leaf,LEAF1,Ethernet3,server,HostA,Eth1,True -leaf,LEAF1,Ethernet47,mlag_peer,LEAF2,Ethernet47,True -leaf,LEAF1,Ethernet48,mlag_peer,LEAF2,Ethernet48,True -leaf,LEAF2,Ethernet1,spine,SPINE1,Ethernet2,True -leaf,LEAF2,Ethernet2,spine,SPINE2,Ethernet2,True -leaf,LEAF2,Ethernet3,server,HostB,Eth1,True -leaf,LEAF2,Ethernet47,mlag_peer,LEAF1,Ethernet47,True -leaf,LEAF2,Ethernet48,mlag_peer,LEAF1,Ethernet48,True -leaf,LEAF3,Ethernet1,spine,SPINE1,Ethernet3,True -leaf,LEAF3,Ethernet2,spine,SPINE2,Ethernet3,True -leaf,LEAF3,Ethernet3,server,HostC,Eth1,True -leaf,LEAF3,Ethernet47,mlag_peer,LEAF4,Ethernet47,True -leaf,LEAF3,Ethernet48,mlag_peer,LEAF4,Ethernet48,True -leaf,LEAF4,Ethernet1,spine,SPINE1,Ethernet4,True -leaf,LEAF4,Ethernet2,spine,SPINE2,Ethernet4,True -leaf,LEAF4,Ethernet3,server,Host2,Eth1,True -leaf,LEAF4,Ethernet47,mlag_peer,LEAF3,Ethernet47,True -leaf,LEAF4,Ethernet48,mlag_peer,LEAF3,Ethernet48,True -spine,SPINE1,Ethernet1,leaf,LEAF1,Ethernet1,True -spine,SPINE1,Ethernet2,leaf,LEAF2,Ethernet1,True -spine,SPINE1,Ethernet3,leaf,LEAF3,Ethernet1,True -spine,SPINE1,Ethernet4,leaf,LEAF4,Ethernet1,True -spine,SPINE1,Ethernet5,firewall,FIREWALL,Eth1,True -spine,SPINE1,Ethernet47,mlag_peer,SPINE2,Ethernet47,True -spine,SPINE1,Ethernet48,mlag_peer,SPINE2,Ethernet48,True -spine,SPINE2,Ethernet1,leaf,LEAF1,Ethernet2,True -spine,SPINE2,Ethernet2,leaf,LEAF2,Ethernet2,True -spine,SPINE2,Ethernet3,leaf,LEAF3,Ethernet2,True -spine,SPINE2,Ethernet4,leaf,LEAF4,Ethernet2,True -spine,SPINE2,Ethernet5,firewall,FIREWALL,Eth2,True -spine,SPINE2,Ethernet47,mlag_peer,SPINE1,Ethernet47,True -spine,SPINE2,Ethernet48,mlag_peer,SPINE1,Ethernet48,True diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_FABRIC.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_FABRIC.yml index 955fe969fba..672c677f7e5 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_FABRIC.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_FABRIC.yml @@ -4,10 +4,6 @@ # Set the Fabric Name - must match an Ansible Inventory Group fabric_name: DC1_FABRIC -# Set Design Type to l2ls -design: - type: l2ls - # Ansible connectivity definitions # eAPI connectivity via HTTPS is specified (as opposed to CLI via SSH) ansible_connection: ansible.netcommon.httpapi @@ -25,7 +21,7 @@ ansible_httpapi_use_ssl: true ansible_httpapi_validate_certs: false # Spine Switches (L2 only) -spine: +l2spine: defaults: platform: cEOS-LAB spanning_tree_mode: mstp @@ -43,7 +39,7 @@ spine: mgmt_ip: 172.16.100.102/24 # Leaf Switches -leaf: +l2leaf: defaults: platform: cEOS-LAB mlag_peer_ipv4_pool: 192.168.0.0/24 diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_LEAFS.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_LEAFS.yml index 3013d8c1508..27b2b7cb4e4 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_LEAFS.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_LEAFS.yml @@ -1,4 +1,4 @@ --- ### group_vars/DC1_LEAFS.yml -type: leaf # Must be leaf +type: l2leaf # Must be l2leaf diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_SPINES.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_SPINES.yml index fe2049b40a1..28cd8d656b1 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_SPINES.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/group_vars/DC1_SPINES.yml @@ -1,4 +1,4 @@ --- ### group_vars/DC1_SPINES.yml -type: spine # Must be either spine|l3spine +type: l2spine # Must be either l2spine|l3spine diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF1.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF1.cfg index 624e4f5d350..bcf6ef8e878 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF1.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname LEAF1 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -34,25 +33,28 @@ vlan 20 name GREEN-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF2_Po47 + description MLAG_LEAF2_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description SPINE1_Ethernet1 @@ -65,7 +67,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostA_Eth1 + description SERVER_HostA_Eth1 no shutdown switchport access vlan 10 switchport mode access @@ -73,23 +75,23 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF2_Ethernet47 + description MLAG_LEAF2_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF2_Ethernet48 + description MLAG_LEAF2_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.105/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -106,11 +108,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF2.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF2.cfg index f5b0f071df2..d11dfebc7fb 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF2.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname LEAF2 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -34,25 +33,28 @@ vlan 20 name GREEN-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF1_Po47 + description MLAG_LEAF1_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description SPINE1_Ethernet2 @@ -65,7 +67,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostB_Eth1 + description SERVER_HostB_Eth1 no shutdown switchport access vlan 20 switchport mode access @@ -73,23 +75,23 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF1_Ethernet47 + description MLAG_LEAF1_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF1_Ethernet48 + description MLAG_LEAF1_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.106/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -106,11 +108,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF3.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF3.cfg index cb595f8b2c9..0dda61ca1d7 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF3.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname LEAF3 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -34,25 +33,28 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description SPINES_Po3 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF4_Po47 + description MLAG_LEAF4_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description SPINE1_Ethernet3 @@ -65,7 +67,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description HostC_Eth1 + description SERVER_HostC_Eth1 no shutdown switchport access vlan 10 switchport mode access @@ -73,23 +75,23 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF4_Ethernet47 + description MLAG_LEAF4_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF4_Ethernet48 + description MLAG_LEAF4_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.107/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -106,11 +108,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF4.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF4.cfg index 66ecfbd763e..9f91c1fd549 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF4.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/LEAF4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname LEAF4 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -34,25 +33,28 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description SPINES_Po3 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 1 ! interface Port-Channel47 - description MLAG_PEER_LEAF3_Po47 + description MLAG_LEAF3_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description SPINE1_Ethernet4 @@ -65,7 +67,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description Host2_Eth1 + description SERVER_Host2_Eth1 no shutdown switchport access vlan 30 switchport mode access @@ -73,23 +75,23 @@ interface Ethernet3 spanning-tree portfast ! interface Ethernet47 - description MLAG_PEER_LEAF3_Ethernet47 + description MLAG_LEAF3_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_LEAF3_Ethernet48 + description MLAG_LEAF3_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.108/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -106,11 +108,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE1.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE1.cfg index da8f8c8b4bd..c9e4275e343 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE1.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname SPINE1 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -37,41 +36,44 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description RACK1_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description RACK2_Po1 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 3 ! interface Port-Channel5 - description FIREWALL + description FIREWALL_FIREWALL no shutdown - switchport switchport trunk allowed vlan 10,20,30 switchport mode trunk + switchport mlag 5 ! interface Port-Channel47 - description MLAG_PEER_SPINE2_Po47 + description MLAG_SPINE2_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description LEAF1_Ethernet1 @@ -94,28 +96,28 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description FIREWALL_Eth1 + description FIREWALL_FIREWALL_Eth1 no shutdown channel-group 5 mode active ! interface Ethernet47 - description MLAG_PEER_SPINE2_Ethernet47 + description MLAG_SPINE2_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_SPINE2_Ethernet48 + description MLAG_SPINE2_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.101/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -132,11 +134,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE2.cfg b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE2.cfg index 27b3b5860a5..90752bb44da 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE2.cfg +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/configs/SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. +username arista privilege 15 role network-admin nopassword +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,23 +22,10 @@ hostname SPINE2 ip name-server vrf MGMT 8.8.4.4 ip name-server vrf MGMT 8.8.8.8 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT pool.ntp.org -ntp server vrf MGMT time.google.com prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -aaa authentication policy local allow-nopassword-remote-login -aaa authorization exec default local -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eucN5ngreuExDgwS$xnD7T8jO..GBDX0DUlp.hn.W7yW94xTjSanqgaQGBzPIhDAsyAl9N4oScHvOMvf07uVBFI4mKMxwdVEUVKgY/. -username arista privilege 15 role network-admin nopassword -! vlan 10 name BLUE-NET ! @@ -37,41 +36,44 @@ vlan 30 name ORANGE-NET ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! +aaa authentication policy local allow-nopassword-remote-login +aaa authorization exec default local +! interface Port-Channel1 description RACK1_Po1 no shutdown - switchport switchport trunk allowed vlan 10,20 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description RACK2_Po1 no shutdown - switchport switchport trunk allowed vlan 10,30 switchport mode trunk + switchport mlag 3 ! interface Port-Channel5 - description FIREWALL + description FIREWALL_FIREWALL no shutdown - switchport switchport trunk allowed vlan 10,20,30 switchport mode trunk + switchport mlag 5 ! interface Port-Channel47 - description MLAG_PEER_SPINE1_Po47 + description MLAG_SPINE1_Port-Channel47 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description LEAF1_Ethernet2 @@ -94,28 +96,28 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description FIREWALL_Eth2 + description FIREWALL_FIREWALL_Eth2 no shutdown channel-group 5 mode active ! interface Ethernet47 - description MLAG_PEER_SPINE1_Ethernet47 + description MLAG_SPINE1_Ethernet47 no shutdown channel-group 47 mode active ! interface Ethernet48 - description MLAG_PEER_SPINE1_Ethernet48 + description MLAG_SPINE1_Ethernet48 no shutdown channel-group 47 mode active ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.100.102/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -132,11 +134,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.100.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT pool.ntp.org +ntp server vrf MGMT time.google.com prefer ! end diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF1.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF1.yml index a136903b46a..4d14cfca557 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF1.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF1.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.105/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -69,33 +75,36 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.0/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_LEAF2_Po47 - type: switched + description: MLAG_LEAF2_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20 shutdown: false - mode: trunk - vlans: 10,20 mlag: 1 ethernet_interfaces: - name: Ethernet47 peer: LEAF2 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_LEAF2_Ethernet47 - type: port-channel-member + description: MLAG_LEAF2_Ethernet47 shutdown: false channel_group: id: 47 @@ -104,8 +113,7 @@ ethernet_interfaces: peer: LEAF2 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_LEAF2_Ethernet48 - type: port-channel-member + description: MLAG_LEAF2_Ethernet48 shutdown: false channel_group: id: 47 @@ -113,20 +121,18 @@ ethernet_interfaces: - name: Ethernet1 peer: SPINE1 peer_interface: Ethernet1 - peer_type: spine + peer_type: l2spine description: SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: SPINE2 peer_interface: Ethernet1 - peer_type: spine + peer_type: l2spine description: SPINE2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -135,11 +141,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: PP-BLUE - description: HostA_Eth1 + description: SERVER_HostA_Eth1 shutdown: false - type: switched - mode: access - vlans: '10' + switchport: + enabled: true + mode: access + access_vlan: '10' spanning_tree_portfast: edge mlag_configuration: domain_id: RACK1 diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF2.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF2.yml index 7e338933ecd..75310f12866 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF2.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF2.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.106/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -69,33 +75,36 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.1/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_LEAF1_Po47 - type: switched + description: MLAG_LEAF1_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20 shutdown: false - mode: trunk - vlans: 10,20 mlag: 1 ethernet_interfaces: - name: Ethernet47 peer: LEAF1 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_LEAF1_Ethernet47 - type: port-channel-member + description: MLAG_LEAF1_Ethernet47 shutdown: false channel_group: id: 47 @@ -104,8 +113,7 @@ ethernet_interfaces: peer: LEAF1 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_LEAF1_Ethernet48 - type: port-channel-member + description: MLAG_LEAF1_Ethernet48 shutdown: false channel_group: id: 47 @@ -113,20 +121,18 @@ ethernet_interfaces: - name: Ethernet1 peer: SPINE1 peer_interface: Ethernet2 - peer_type: spine + peer_type: l2spine description: SPINE1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: SPINE2 peer_interface: Ethernet2 - peer_type: spine + peer_type: l2spine description: SPINE2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -135,11 +141,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: PP-GREEN - description: HostB_Eth1 + description: SERVER_HostB_Eth1 shutdown: false - type: switched - mode: access - vlans: '20' + switchport: + enabled: true + mode: access + access_vlan: '20' spanning_tree_portfast: edge mlag_configuration: domain_id: RACK1 diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF3.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF3.yml index 9ae76a6a229..8db7b84de10 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF3.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF3.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.107/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -69,33 +75,36 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.4/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_LEAF4_Po47 - type: switched + description: MLAG_LEAF4_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: SPINES_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,30 shutdown: false - mode: trunk - vlans: 10,30 mlag: 1 ethernet_interfaces: - name: Ethernet47 peer: LEAF4 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_LEAF4_Ethernet47 - type: port-channel-member + description: MLAG_LEAF4_Ethernet47 shutdown: false channel_group: id: 47 @@ -104,8 +113,7 @@ ethernet_interfaces: peer: LEAF4 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_LEAF4_Ethernet48 - type: port-channel-member + description: MLAG_LEAF4_Ethernet48 shutdown: false channel_group: id: 47 @@ -113,20 +121,18 @@ ethernet_interfaces: - name: Ethernet1 peer: SPINE1 peer_interface: Ethernet3 - peer_type: spine + peer_type: l2spine description: SPINE1_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: SPINE2 peer_interface: Ethernet3 - peer_type: spine + peer_type: l2spine description: SPINE2_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -135,11 +141,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: PP-BLUE - description: HostC_Eth1 + description: SERVER_HostC_Eth1 shutdown: false - type: switched - mode: access - vlans: '10' + switchport: + enabled: true + mode: access + access_vlan: '10' spanning_tree_portfast: edge mlag_configuration: domain_id: RACK2 diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF4.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF4.yml index 773c8b1a531..b33c74ce8cd 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF4.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/LEAF4.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.108/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -69,33 +75,36 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.5/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_LEAF3_Po47 - type: switched + description: MLAG_LEAF3_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: SPINES_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,30 shutdown: false - mode: trunk - vlans: 10,30 mlag: 1 ethernet_interfaces: - name: Ethernet47 peer: LEAF3 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_LEAF3_Ethernet47 - type: port-channel-member + description: MLAG_LEAF3_Ethernet47 shutdown: false channel_group: id: 47 @@ -104,8 +113,7 @@ ethernet_interfaces: peer: LEAF3 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_LEAF3_Ethernet48 - type: port-channel-member + description: MLAG_LEAF3_Ethernet48 shutdown: false channel_group: id: 47 @@ -113,20 +121,18 @@ ethernet_interfaces: - name: Ethernet1 peer: SPINE1 peer_interface: Ethernet4 - peer_type: spine + peer_type: l2spine description: SPINE1_Ethernet4 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: SPINE2 peer_interface: Ethernet4 - peer_type: spine + peer_type: l2spine description: SPINE2_Ethernet4 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -135,11 +141,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: PP-ORANGE - description: Host2_Eth1 + description: SERVER_Host2_Eth1 shutdown: false - type: switched - mode: access - vlans: '30' + switchport: + enabled: true + mode: access + access_vlan: '30' spanning_tree_portfast: edge mlag_configuration: domain_id: RACK2 diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE1.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE1.yml index 866bc543e19..2a728155343 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE1.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE1.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.101/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -72,47 +78,54 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.0/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_SPINE2_Po47 - type: switched + description: MLAG_SPINE2_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: RACK1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20 shutdown: false - mode: trunk - vlans: 10,20 mlag: 1 - name: Port-Channel3 description: RACK2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,30 shutdown: false - mode: trunk - vlans: 10,30 mlag: 3 - name: Port-Channel5 - description: FIREWALL - type: switched + description: FIREWALL_FIREWALL shutdown: false - mode: trunk - vlans: 10,20,30 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20,30 mlag: 5 ethernet_interfaces: - name: Ethernet47 peer: SPINE2 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_SPINE2_Ethernet47 - type: port-channel-member + description: MLAG_SPINE2_Ethernet47 shutdown: false channel_group: id: 47 @@ -121,8 +134,7 @@ ethernet_interfaces: peer: SPINE2 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_SPINE2_Ethernet48 - type: port-channel-member + description: MLAG_SPINE2_Ethernet48 shutdown: false channel_group: id: 47 @@ -130,40 +142,36 @@ ethernet_interfaces: - name: Ethernet1 peer: LEAF1 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: LEAF2 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet3 peer: LEAF3 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: LEAF3_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active - name: Ethernet4 peer: LEAF4 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: LEAF4_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -172,9 +180,8 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: firewall port_profile: PP-FIREWALL - description: FIREWALL_Eth1 + description: FIREWALL_FIREWALL_Eth1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active diff --git a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE2.yml b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE2.yml index 33f713b7937..ce8ce792a8e 100644 --- a/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE2.yml +++ b/ansible_collections/arista/avd/examples/l2ls-fabric/intended/structured_configs/SPINE2.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 8.8.4.4 vrf: MGMT @@ -35,7 +41,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.100.102/24 @@ -58,7 +64,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 @@ -72,47 +78,54 @@ vlans: tenant: MY_FABRIC vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 192.168.0.1/31 port_channel_interfaces: - name: Port-Channel47 - description: MLAG_PEER_SPINE1_Po47 - type: switched + description: MLAG_SPINE1_Port-Channel47 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: RACK1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20 shutdown: false - mode: trunk - vlans: 10,20 mlag: 1 - name: Port-Channel3 description: RACK2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,30 shutdown: false - mode: trunk - vlans: 10,30 mlag: 3 - name: Port-Channel5 - description: FIREWALL - type: switched + description: FIREWALL_FIREWALL shutdown: false - mode: trunk - vlans: 10,20,30 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,20,30 mlag: 5 ethernet_interfaces: - name: Ethernet47 peer: SPINE1 peer_interface: Ethernet47 peer_type: mlag_peer - description: MLAG_PEER_SPINE1_Ethernet47 - type: port-channel-member + description: MLAG_SPINE1_Ethernet47 shutdown: false channel_group: id: 47 @@ -121,8 +134,7 @@ ethernet_interfaces: peer: SPINE1 peer_interface: Ethernet48 peer_type: mlag_peer - description: MLAG_PEER_SPINE1_Ethernet48 - type: port-channel-member + description: MLAG_SPINE1_Ethernet48 shutdown: false channel_group: id: 47 @@ -130,40 +142,36 @@ ethernet_interfaces: - name: Ethernet1 peer: LEAF1 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: LEAF2 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet3 peer: LEAF3 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: LEAF3_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active - name: Ethernet4 peer: LEAF4 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: LEAF4_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -172,9 +180,8 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: firewall port_profile: PP-FIREWALL - description: FIREWALL_Eth2 + description: FIREWALL_FIREWALL_Eth2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/README.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/README.md index 20c01994de7..860ccdd9428 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/README.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/README.md @@ -611,7 +611,7 @@ As an example, here is the configuration for `dc1-leaf1-server1`: mode: trunk # (7)! spanning_tree_portfast: edge # (8)! port_channel: # (9)! - description: PortChannel dc1-leaf1-server1 + endpoint_port_channel: Bond1 mode: active - endpoint_ports: [ iLO ] @@ -630,7 +630,7 @@ As an example, here is the configuration for `dc1-leaf1-server1`: 6. `native_vlan` specifies the native VLAN when the switch port mode is set to trunk. 7. `mode` is set to trunk for the dual-attached server ports and access for the iLO port. 8. `spanning_tree_portfast` defines whether the switch port should be a spanning tree edge or network port. -9. `port_channel` defines the description and mode for the port-channel. +9. `port_channel` defines the port-channel name on the endpoint that will be used in the port-channel description and mode for the port-channel. ## The playbooks diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1a.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1a.md index d1210c95a07..12e9530062d 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1a.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1a.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.101/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -254,12 +259,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -278,12 +283,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -292,11 +297,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,19 +315,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf1b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf1b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf1b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf1b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf1-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF1C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 10.255.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 10.255.255.3/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 10.255.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 10.255.255.3/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -343,17 +348,17 @@ interface Ethernet2 ip address 10.255.255.3/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1b_Ethernet3 + description MLAG_dc1-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1b_Ethernet4 + description MLAG_dc1-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI1 + description SERVER_dc1-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -369,40 +374,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf1b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf1-server1_PortChannel dc1-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf1b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf1-server1_Bond1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1b_Po3 + description MLAG_dc1-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description SERVER_dc1-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -414,8 +418,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.3/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.3/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.3/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.3/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.3/32 | @@ -423,8 +427,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -433,12 +437,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -465,10 +469,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -512,27 +516,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.96/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.96/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.96/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -770,12 +774,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.97 description dc1-leaf1b + neighbor 10.255.1.97 description dc1-leaf1b_Vlan4093 neighbor 10.255.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.0 remote-as 65100 neighbor 10.255.255.0 description dc1-spine1_Ethernet1 @@ -828,6 +832,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -836,6 +841,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1b.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1b.md index 37177d8bbba..3301679c2f5 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1b.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1b.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.102/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -254,12 +259,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -278,12 +283,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -292,11 +297,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,19 +315,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf1a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf1a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf1a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf1a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf1-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF1C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 10.255.255.5/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 10.255.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 10.255.255.5/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 10.255.255.7/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -343,17 +348,17 @@ interface Ethernet2 ip address 10.255.255.7/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1a_Ethernet3 + description MLAG_dc1-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1a_Ethernet4 + description MLAG_dc1-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI2 + description SERVER_dc1-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -369,40 +374,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf1a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf1-server1_PortChannel dc1-leaf1-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF1C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf1a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf1-server1_Bond1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF1C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1a_Po3 + description MLAG_dc1-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description SERVER_dc1-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -414,8 +418,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.4/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.3/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.4/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.3/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.4/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.4/32 | @@ -423,8 +427,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -433,12 +437,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -465,10 +469,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -512,27 +516,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.97/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.97/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.97/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -770,12 +774,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.96 description dc1-leaf1a + neighbor 10.255.1.96 description dc1-leaf1a_Vlan4093 neighbor 10.255.255.4 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.4 remote-as 65100 neighbor 10.255.255.4 description dc1-spine1_Ethernet2 @@ -828,6 +832,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -836,6 +841,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1c.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1c.md index 01594525a4b..15321e70367 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1c.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf1c.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.151/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -146,6 +147,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -248,7 +253,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-LEAF1A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC1-LEAF1B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc1-leaf1-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc1-leaf1-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -267,7 +272,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf1-server1_iLO + description SERVER_dc1-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -281,9 +286,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_L3_LEAF1_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_L3_LEAF1_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -292,9 +297,9 @@ interface Ethernet5 interface Port-Channel1 description DC1_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2a.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2a.md index e1409b9f658..f70503bdbf7 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2a.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2a.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.103/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -254,12 +259,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -278,12 +283,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -292,11 +297,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,19 +315,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf2b_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf2b_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf2b_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf2b_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf2-server1_PCI1 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF2C_Ethernet1 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 10.255.255.9/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 10.255.255.11/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 10.255.255.9/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 10.255.255.11/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -343,17 +348,17 @@ interface Ethernet2 ip address 10.255.255.11/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2b_Ethernet3 + description MLAG_dc1-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2b_Ethernet4 + description MLAG_dc1-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI1 + description SERVER_dc1-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -369,40 +374,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf2b_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf2-server1_PortChannel dc1-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf2b_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2b_Po3 + description MLAG_dc1-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -414,8 +418,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.5/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.5/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.5/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.5/32 | @@ -423,8 +427,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -433,12 +437,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -465,10 +469,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -512,27 +516,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.100/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.100/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.100/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -770,12 +774,12 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.101 description dc1-leaf2b + neighbor 10.255.1.101 description dc1-leaf2b_Vlan4093 neighbor 10.255.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.8 remote-as 65100 neighbor 10.255.255.8 description dc1-spine1_Ethernet3 @@ -828,6 +832,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -836,6 +841,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2b.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2b.md index 9c02397d70e..f1718038118 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2b.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2b.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.104/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.104/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.104/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -254,12 +259,12 @@ vlan internal order ascending range 1006 1199 | 12 | VRF10_VLAN12 | - | | 21 | VRF11_VLAN21 | - | | 22 | VRF11_VLAN22 | - | -| 3009 | MLAG_iBGP_VRF10 | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_VRF11 | LEAF_PEER_L3 | +| 3009 | MLAG_L3_VRF_VRF10 | MLAG | +| 3010 | MLAG_L3_VRF_VRF11 | MLAG | | 3401 | L2_VLAN3401 | - | | 3402 | L2_VLAN3402 | - | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -278,12 +283,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -292,11 +297,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -310,19 +315,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_dc1-leaf2a_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_dc1-leaf2a_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet5 | dc1-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | +| Ethernet3 | MLAG_dc1-leaf2a_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_dc1-leaf2a_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet5 | SERVER_dc1-leaf2-server1_PCI2 | *trunk | *11-12,21-22 | *4092 | *- | 5 | | Ethernet8 | DC1-LEAF2C_Ethernet2 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 8 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 10.255.255.13/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 10.255.255.15/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 10.255.255.13/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 10.255.255.15/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -343,17 +348,17 @@ interface Ethernet2 ip address 10.255.255.15/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2a_Ethernet3 + description MLAG_dc1-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2a_Ethernet4 + description MLAG_dc1-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI2 + description SERVER_dc1-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -369,40 +374,39 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_dc1-leaf2a_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | dc1-leaf2-server1_PortChannel dc1-leaf2-server1 | switched | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | -| Port-Channel8 | DC1-LEAF2C_Po1 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_dc1-leaf2a_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel5 | SERVER_dc1-leaf2-server1 | trunk | 11-12,21-22 | 4092 | - | - | - | 5 | - | +| Port-Channel8 | DC1-LEAF2C_Po1 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | 8 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2a_Po3 + description MLAG_dc1-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ``` @@ -414,8 +418,8 @@ interface Port-Channel8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.6/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 10.255.1.5/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.6/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 10.255.1.5/32 | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | 10.255.10.6/32 | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | 10.255.11.6/32 | @@ -423,8 +427,8 @@ interface Port-Channel8 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback10 | VRF10_VTEP_DIAGNOSTICS | VRF10 | - | | Loopback11 | VRF11_VTEP_DIAGNOSTICS | VRF11 | - | @@ -433,12 +437,12 @@ interface Port-Channel8 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -465,10 +469,10 @@ interface Loopback11 | Vlan12 | VRF10_VLAN12 | VRF10 | - | False | | Vlan21 | VRF11_VLAN21 | VRF11 | - | False | | Vlan22 | VRF11_VLAN22 | VRF11 | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf VRF10 | VRF10 | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf VRF11 | VRF11 | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_VRF10 | VRF10 | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_VRF11 | VRF11 | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -512,27 +516,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.101/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.101/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.101/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -770,12 +774,12 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.100 description dc1-leaf2a + neighbor 10.255.1.100 description dc1-leaf2a_Vlan4093 neighbor 10.255.255.12 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.12 remote-as 65100 neighbor 10.255.255.12 description dc1-spine1_Ethernet4 @@ -828,6 +832,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -836,6 +841,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3010 redistribute connected ``` diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2c.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2c.md index 811941e9a18..b9ffa08ffee 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2c.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-leaf2c.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.152/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -146,6 +147,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -248,7 +253,7 @@ vlan 3402 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-LEAF2A_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | | Ethernet2 | DC1-LEAF2B_Ethernet8 | *trunk | *11-12,21-22,3401-3402 | *- | *- | 1 | -| Ethernet5 | dc1-leaf2-server1_iLO | access | 11 | - | - | - | +| Ethernet5 | SERVER_dc1-leaf2-server1_iLO | access | 11 | - | - | - | *Inherited from Port-Channel Interface @@ -267,7 +272,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf2-server1_iLO + description SERVER_dc1-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -281,9 +286,9 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_L3_LEAF2_Po8 | switched | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_L3_LEAF2_Po8 | trunk | 11-12,21-22,3401-3402 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -292,9 +297,9 @@ interface Ethernet5 interface Port-Channel1 description DC1_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine1.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine1.md index 9982ea519e8..128f6954713 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine1.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.11/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,12 +214,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 10.255.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet1 | routed | - | 10.255.255.4/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 10.255.255.8/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 10.255.255.12/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 10.255.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet1 | - | 10.255.255.4/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 10.255.255.8/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 10.255.255.12/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -257,20 +262,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.1/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ``` @@ -407,16 +412,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.1 remote-as 65101 neighbor 10.255.255.1 description dc1-leaf1a_Ethernet1 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine2.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine2.md index 5d5978c488b..24d60292d4b 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine2.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/devices/dc1-spine2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 172.16.1.12/24 | 172.16.1.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username ansible privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,12 +214,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 10.255.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet2 | routed | - | 10.255.255.6/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 10.255.255.10/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 10.255.255.14/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 10.255.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF1B_Ethernet2 | - | 10.255.255.6/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 10.255.255.10/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 10.255.255.14/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -257,20 +262,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 10.255.0.2/32 | +| Loopback0 | ROUTER_ID | default | 10.255.0.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ``` @@ -407,16 +412,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.3 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.3 remote-as 65101 neighbor 10.255.255.3 description dc1-leaf1a_Ethernet2 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/fabric/FABRIC-documentation.md b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/fabric/FABRIC-documentation.md index 72422c8b22c..8b5de7687d8 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/fabric/FABRIC-documentation.md +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/documentation/fabric/FABRIC-documentation.md @@ -95,7 +95,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 10.255.1.0/27 | 32 | 4 | 12.5 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml index 4b745a18966..a7fe951dae4 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/CONNECTED_ENDPOINTS.yml @@ -21,8 +21,8 @@ servers: spanning_tree_portfast: edge # Definition of the pair of ports as port channel. port_channel: - # Description of the port channel interface. - description: PortChannel dc1-leaf1-server1 + # The port-channel name on the endpoint that will be used in the port-channel description. + endpoint_port_channel: Bond1 # Port channel mode for LACP. mode: active @@ -43,7 +43,6 @@ servers: mode: trunk spanning_tree_portfast: edge port_channel: - description: PortChannel dc1-leaf2-server1 mode: active - endpoint_ports: [ iLO ] diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/FABRIC.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/FABRIC.yml index db4e87c2f93..01a07191d04 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/FABRIC.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/group_vars/FABRIC.yml @@ -18,6 +18,11 @@ ansible_httpapi_validate_certs: false # Common AVD group variables fabric_name: FABRIC +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true + # Define underlay and overlay routing protocol to be used underlay_routing_protocol: ebgp overlay_routing_protocol: ebgp diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1a.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1a.cfg index fc5f29fead2..4eb889f7e11 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1a.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,19 +25,10 @@ service routing protocols model multi-agent hostname dc1-leaf1a ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -39,12 +42,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -53,11 +56,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -67,29 +70,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1b_Po3 + description MLAG_dc1-leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description SERVER_dc1-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -107,17 +109,17 @@ interface Ethernet2 ip address 10.255.255.3/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1b_Ethernet3 + description MLAG_dc1-leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1b_Ethernet4 + description MLAG_dc1-leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI1 + description SERVER_dc1-leaf1-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -127,12 +129,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -149,7 +151,7 @@ interface Loopback11 ip address 10.255.11.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.101/24 @@ -179,27 +181,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.96/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.96/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.96/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -243,6 +245,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -278,12 +283,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.97 description dc1-leaf1b + neighbor 10.255.1.97 description dc1-leaf1b_Vlan4093 neighbor 10.255.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.0 remote-as 65100 neighbor 10.255.255.0 description dc1-spine1_Ethernet1 @@ -336,6 +341,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3009 redistribute connected ! vrf VRF11 @@ -344,13 +350,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.3 neighbor 10.255.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.97 description dc1-leaf1b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1b.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1b.cfg index 004f516eb7e..e4b571b359e 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1b.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,19 +25,10 @@ service routing protocols model multi-agent hostname dc1-leaf1b ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -39,12 +42,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -53,11 +56,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -67,29 +70,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf1a_Po3 + description MLAG_dc1-leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf1-server1_PortChannel dc1-leaf1-server1 + description SERVER_dc1-leaf1-server1_Bond1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF1C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -107,17 +109,17 @@ interface Ethernet2 ip address 10.255.255.7/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf1a_Ethernet3 + description MLAG_dc1-leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf1a_Ethernet4 + description MLAG_dc1-leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf1-server1_PCI2 + description SERVER_dc1-leaf1-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -127,12 +129,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.3/32 ! @@ -149,7 +151,7 @@ interface Loopback11 ip address 10.255.11.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.102/24 @@ -179,27 +181,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.97/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.97/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.97/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -243,6 +245,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -278,12 +283,12 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.96 description dc1-leaf1a + neighbor 10.255.1.96 description dc1-leaf1a_Vlan4093 neighbor 10.255.255.4 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.4 remote-as 65100 neighbor 10.255.255.4 description dc1-spine1_Ethernet2 @@ -336,6 +341,7 @@ router bgp 65101 route-target export evpn 10:10 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3009 redistribute connected ! vrf VRF11 @@ -344,13 +350,7 @@ router bgp 65101 route-target export evpn 11:11 router-id 10.255.0.4 neighbor 10.255.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.96 description dc1-leaf1a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1c.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1c.cfg index e0ecb58adef..4df040fd98a 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1c.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf1c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,18 +25,9 @@ service routing protocols model multi-agent hostname dc1-leaf1c ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -48,9 +51,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_L3_LEAF1_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF1A_Ethernet8 @@ -63,7 +66,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf1-server1_iLO + description SERVER_dc1-leaf1-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -71,7 +74,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.151/24 @@ -79,11 +82,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer ! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2a.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2a.cfg index e6165396c57..5eec9675cb8 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2a.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2a.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,19 +25,10 @@ service routing protocols model multi-agent hostname dc1-leaf2a ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -39,12 +42,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -53,11 +56,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -67,29 +70,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2b_Po3 + description MLAG_dc1-leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -107,17 +109,17 @@ interface Ethernet2 ip address 10.255.255.11/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2b_Ethernet3 + description MLAG_dc1-leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2b_Ethernet4 + description MLAG_dc1-leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI1 + description SERVER_dc1-leaf2-server1_PCI1 no shutdown channel-group 5 mode active ! @@ -127,12 +129,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -149,7 +151,7 @@ interface Loopback11 ip address 10.255.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.103/24 @@ -179,27 +181,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.100/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.100/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.100/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -243,6 +245,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -278,12 +283,12 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.101 description dc1-leaf2b + neighbor 10.255.1.101 description dc1-leaf2b_Vlan4093 neighbor 10.255.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.8 remote-as 65100 neighbor 10.255.255.8 description dc1-spine1_Ethernet3 @@ -336,6 +341,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3009 redistribute connected ! vrf VRF11 @@ -344,13 +350,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.5 neighbor 10.255.1.101 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.101 description dc1-leaf2b_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2b.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2b.cfg index 607d2f5d12e..f7b6a136abb 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2b.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2b.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,19 +25,10 @@ service routing protocols model multi-agent hostname dc1-leaf2b ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -39,12 +42,12 @@ vlan 22 name VRF11_VLAN22 ! vlan 3009 - name MLAG_iBGP_VRF10 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF10 + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_VRF11 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF11 + trunk group MLAG ! vlan 3401 name L2_VLAN3401 @@ -53,11 +56,11 @@ vlan 3402 name L2_VLAN3402 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -67,29 +70,28 @@ vrf instance VRF10 vrf instance VRF11 ! interface Port-Channel3 - description MLAG_PEER_dc1-leaf2a_Po3 + description MLAG_dc1-leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 - description dc1-leaf2-server1_PortChannel dc1-leaf2-server1 + description SERVER_dc1-leaf2-server1 no shutdown - switchport - switchport trunk allowed vlan 11-12,21-22 switchport trunk native vlan 4092 + switchport trunk allowed vlan 11-12,21-22 switchport mode trunk + switchport mlag 5 spanning-tree portfast ! interface Port-Channel8 description DC1-LEAF2C_Po1 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport mlag 8 ! interface Ethernet1 @@ -107,17 +109,17 @@ interface Ethernet2 ip address 10.255.255.15/31 ! interface Ethernet3 - description MLAG_PEER_dc1-leaf2a_Ethernet3 + description MLAG_dc1-leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_dc1-leaf2a_Ethernet4 + description MLAG_dc1-leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet5 - description dc1-leaf2-server1_PCI2 + description SERVER_dc1-leaf2-server1_PCI2 no shutdown channel-group 5 mode active ! @@ -127,12 +129,12 @@ interface Ethernet8 channel-group 8 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.255.1.5/32 ! @@ -149,7 +151,7 @@ interface Loopback11 ip address 10.255.11.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.104/24 @@ -179,27 +181,27 @@ interface Vlan22 ip address virtual 10.10.22.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf VRF10 + description MLAG_L3_VRF_VRF10 no shutdown mtu 1500 vrf VRF10 ip address 10.255.1.101/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf VRF11 + description MLAG_L3_VRF_VRF11 no shutdown mtu 1500 vrf VRF11 ip address 10.255.1.101/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.1.101/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -243,6 +245,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -278,12 +283,12 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65100 - neighbor 10.255.0.1 description dc1-spine1 + neighbor 10.255.0.1 description dc1-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65100 - neighbor 10.255.0.2 description dc1-spine2 + neighbor 10.255.0.2 description dc1-spine2_Loopback0 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.1.100 description dc1-leaf2a + neighbor 10.255.1.100 description dc1-leaf2a_Vlan4093 neighbor 10.255.255.12 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.12 remote-as 65100 neighbor 10.255.255.12 description dc1-spine1_Ethernet4 @@ -336,6 +341,7 @@ router bgp 65102 route-target export evpn 10:10 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3009 redistribute connected ! vrf VRF11 @@ -344,13 +350,7 @@ router bgp 65102 route-target export evpn 11:11 router-id 10.255.0.6 neighbor 10.255.1.100 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.1.100 description dc1-leaf2a_Vlan3010 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2c.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2c.cfg index 636f4a59430..f22b153697b 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2c.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-leaf2c.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,18 +25,9 @@ service routing protocols model multi-agent hostname dc1-leaf2c ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vlan 11 name VRF10_VLAN11 ! @@ -48,9 +51,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_L3_LEAF2_Po8 no shutdown - switchport switchport trunk allowed vlan 11-12,21-22,3401-3402 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet8 @@ -63,7 +66,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet5 - description dc1-leaf2-server1_iLO + description SERVER_dc1-leaf2-server1_iLO no shutdown switchport access vlan 11 switchport mode access @@ -71,7 +74,7 @@ interface Ethernet5 spanning-tree portfast ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.152/24 @@ -79,11 +82,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer ! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine1.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine1.cfg index a5e3a1d98b2..5059261e172 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine1.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,17 +25,8 @@ service routing protocols model multi-agent hostname dc1-spine1 ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -55,12 +58,12 @@ interface Ethernet4 ip address 10.255.255.12/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.11/24 @@ -73,6 +76,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -97,16 +103,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.1 remote-as 65101 neighbor 10.255.255.1 description dc1-leaf1a_Ethernet1 @@ -128,11 +134,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine2.cfg b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine2.cfg index 2b82cf5ab1e..5dbbf9c1443 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine2.cfg +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/configs/dc1-spine2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.1.12:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,17 +25,8 @@ service routing protocols model multi-agent hostname dc1-spine2 ip name-server vrf MGMT 192.168.1.1 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 0.pool.ntp.org prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$7u4j1rkb3VELgcZE$EJt2Qff8kd/TapRoci0XaIZsL4tFzgq1YZBLD9c6f/knXzvcYY0NcMKndZeCv0T268knGKhOEwZAxqKjlMm920 -! vrf instance MGMT ! interface Ethernet1 @@ -55,12 +58,12 @@ interface Ethernet4 ip address 10.255.255.14/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 172.16.1.12/24 @@ -73,6 +76,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 172.16.1.1 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 0.pool.ntp.org prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -97,16 +103,16 @@ router bgp 65100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.0.3 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.3 remote-as 65101 - neighbor 10.255.0.3 description dc1-leaf1a + neighbor 10.255.0.3 description dc1-leaf1a_Loopback0 neighbor 10.255.0.4 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.4 remote-as 65101 - neighbor 10.255.0.4 description dc1-leaf1b + neighbor 10.255.0.4 description dc1-leaf1b_Loopback0 neighbor 10.255.0.5 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.5 remote-as 65102 - neighbor 10.255.0.5 description dc1-leaf2a + neighbor 10.255.0.5 description dc1-leaf2a_Loopback0 neighbor 10.255.0.6 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.6 remote-as 65102 - neighbor 10.255.0.6 description dc1-leaf2b + neighbor 10.255.0.6 description dc1-leaf2b_Loopback0 neighbor 10.255.255.3 peer group IPv4-UNDERLAY-PEERS neighbor 10.255.255.3 remote-as 65101 neighbor 10.255.255.3 description dc1-leaf1a_Ethernet2 @@ -128,11 +134,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/cvp/cvp_configlets.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/cvp/cvp_configlets.yml index 243d348ab96..f1576f06cef 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/cvp/cvp_configlets.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/cvp/cvp_configlets.yml @@ -38,7 +38,7 @@ cvp_configlets: 10.255.1.3/32\n!\ninterface Loopback10\n description VRF10_VTEP_DIAGNOSTICS\n \ no shutdown\n vrf VRF10\n ip address 10.255.10.3/32\n!\ninterface Loopback11\n \ description VRF11_VTEP_DIAGNOSTICS\n no shutdown\n vrf VRF11\n ip address - 10.255.11.3/32\n!\ninterface Management1\n description oob_management\n no + 10.255.11.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.101/24\n!\ninterface Vlan11\n description VRF10_VLAN11\n no shutdown\n vrf VRF10\n ip address virtual 10.10.11.1/24\n!\ninterface Vlan12\n description VRF10_VLAN12\n no shutdown\n vrf VRF10\n ip address @@ -149,7 +149,7 @@ cvp_configlets: 10.255.1.3/32\n!\ninterface Loopback10\n description VRF10_VTEP_DIAGNOSTICS\n \ no shutdown\n vrf VRF10\n ip address 10.255.10.4/32\n!\ninterface Loopback11\n \ description VRF11_VTEP_DIAGNOSTICS\n no shutdown\n vrf VRF11\n ip address - 10.255.11.4/32\n!\ninterface Management1\n description oob_management\n no + 10.255.11.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.102/24\n!\ninterface Vlan11\n description VRF10_VLAN11\n no shutdown\n vrf VRF10\n ip address virtual 10.10.11.1/24\n!\ninterface Vlan12\n description VRF10_VLAN12\n no shutdown\n vrf VRF10\n ip address @@ -241,7 +241,7 @@ cvp_configlets: shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description dc1-leaf1-server1_iLO\n no shutdown\n switchport access vlan 11\n switchport mode access\n switchport\n spanning-tree portfast\n!\ninterface Management1\n - \ description oob_management\n no shutdown\n vrf MGMT\n ip address 172.16.1.151/24\nno + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.151/24\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 172.16.1.1\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" @@ -284,7 +284,7 @@ cvp_configlets: 10.255.1.5/32\n!\ninterface Loopback10\n description VRF10_VTEP_DIAGNOSTICS\n \ no shutdown\n vrf VRF10\n ip address 10.255.10.5/32\n!\ninterface Loopback11\n \ description VRF11_VTEP_DIAGNOSTICS\n no shutdown\n vrf VRF11\n ip address - 10.255.11.5/32\n!\ninterface Management1\n description oob_management\n no + 10.255.11.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.103/24\n!\ninterface Vlan11\n description VRF10_VLAN11\n no shutdown\n vrf VRF10\n ip address virtual 10.10.11.1/24\n!\ninterface Vlan12\n description VRF10_VLAN12\n no shutdown\n vrf VRF10\n ip address @@ -395,7 +395,7 @@ cvp_configlets: 10.255.1.5/32\n!\ninterface Loopback10\n description VRF10_VTEP_DIAGNOSTICS\n \ no shutdown\n vrf VRF10\n ip address 10.255.10.6/32\n!\ninterface Loopback11\n \ description VRF11_VTEP_DIAGNOSTICS\n no shutdown\n vrf VRF11\n ip address - 10.255.11.6/32\n!\ninterface Management1\n description oob_management\n no + 10.255.11.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.104/24\n!\ninterface Vlan11\n description VRF10_VLAN11\n no shutdown\n vrf VRF10\n ip address virtual 10.10.11.1/24\n!\ninterface Vlan12\n description VRF10_VLAN12\n no shutdown\n vrf VRF10\n ip address @@ -487,7 +487,7 @@ cvp_configlets: shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description dc1-leaf2-server1_iLO\n no shutdown\n switchport access vlan 11\n switchport mode access\n switchport\n spanning-tree portfast\n!\ninterface Management1\n - \ description oob_management\n no shutdown\n vrf MGMT\n ip address 172.16.1.152/24\nno + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.152/24\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 172.16.1.1\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" @@ -509,7 +509,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n \ ip address 10.255.255.12/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 10.255.0.1/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 172.16.1.11/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.11/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 10.255.0.0/27 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 172.16.1.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter @@ -560,7 +560,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n \ ip address 10.255.255.14/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 10.255.0.2/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 172.16.1.12/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 172.16.1.12/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 10.255.0.0/27 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 172.16.1.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml index 6aaa03bde73..7ba85345934 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Vlan4093 - ip_address: 10.255.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.3 rd: 10.255.0.3:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3009 - name: VRF11 - router_id: 10.255.0.3 rd: 10.255.0.3:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -177,6 +179,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -206,7 +214,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.101/24 @@ -227,12 +235,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -242,9 +250,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -253,9 +261,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -265,12 +273,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.96/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -291,7 +299,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.96/31 @@ -311,33 +319,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.96/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1b_Po3 - type: switched + description: MLAG_dc1-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: SERVER_dc1-leaf1-server1_Bond1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -345,8 +358,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -355,8 +367,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -368,7 +379,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.1/31 - name: Ethernet2 peer: dc1-spine2 @@ -377,7 +389,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.3/31 - name: Ethernet8 peer: dc1-leaf1c @@ -385,7 +398,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -393,9 +405,8 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf1-server1_PCI1 + description: SERVER_dc1-leaf1-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -422,11 +433,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml index 66299b634bd..4b64499de94 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Vlan4093 - ip_address: 10.255.255.4 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.4 rd: 10.255.0.4:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3009 - name: VRF11 - router_id: 10.255.0.4 rd: 10.255.0.4:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -177,6 +179,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -206,7 +214,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.102/24 @@ -227,12 +235,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -242,9 +250,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -253,9 +261,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -265,12 +273,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.97/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -291,7 +299,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.97/31 @@ -311,33 +319,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.97/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1a_Po3 - type: switched + description: MLAG_dc1-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: SERVER_dc1-leaf1-server1_Bond1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -345,8 +358,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -355,8 +367,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -368,7 +379,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.5/31 - name: Ethernet2 peer: dc1-spine2 @@ -377,7 +389,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.7/31 - name: Ethernet8 peer: dc1-leaf1c @@ -385,7 +398,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -393,9 +405,8 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf1-server1_PCI2 + description: SERVER_dc1-leaf1-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -422,11 +433,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml index 89bd6af8501..e0ba851da88 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf1c.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -42,7 +48,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.151/24 @@ -67,7 +73,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -77,7 +82,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -85,19 +89,22 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: iLO peer_type: server - description: dc1-leaf1-server1_iLO + description: SERVER_dc1-leaf1-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF1_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml index 1514ab6e562..677430f7da8 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Vlan4093 - ip_address: 10.255.255.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.5 rd: 10.255.0.5:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3009 - name: VRF11 - router_id: 10.255.0.5 rd: 10.255.0.5:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -177,6 +179,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -206,7 +214,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.103/24 @@ -227,12 +235,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -242,9 +250,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -253,9 +261,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -265,12 +273,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.100/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -291,7 +299,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.100/31 @@ -311,33 +319,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.100/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2b_Po3 - type: switched + description: MLAG_dc1-leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -345,8 +358,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -355,8 +367,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -368,7 +379,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.9/31 - name: Ethernet2 peer: dc1-spine2 @@ -377,7 +389,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.11/31 - name: Ethernet8 peer: dc1-leaf2c @@ -385,7 +398,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -393,9 +405,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf2-server1_PCI1 + description: SERVER_dc1-leaf2-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -422,11 +433,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml index 8b0f46acdea..902d2ea443f 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Vlan4093 - ip_address: 10.255.255.12 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.6 rd: 10.255.0.6:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3009 - name: VRF11 - router_id: 10.255.0.6 rd: 10.255.0.6:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -177,6 +179,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -206,7 +214,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.104/24 @@ -227,12 +235,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -242,9 +250,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -253,9 +261,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -265,12 +273,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.101/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -291,7 +299,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.101/31 @@ -311,33 +319,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.101/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2a_Po3 - type: switched + description: MLAG_dc1-leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -345,8 +358,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -355,8 +367,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -368,7 +379,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.13/31 - name: Ethernet2 peer: dc1-spine2 @@ -377,7 +389,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.15/31 - name: Ethernet8 peer: dc1-leaf2c @@ -385,7 +398,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -393,9 +405,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf2-server1_PCI2 + description: SERVER_dc1-leaf2-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -422,11 +433,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml index a41fff4a5b6..e63b243227f 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-leaf2c.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -42,7 +48,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.152/24 @@ -67,7 +73,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -77,7 +82,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -85,19 +89,22 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: iLO peer_type: server - description: dc1-leaf2-server1_iLO + description: SERVER_dc1-leaf2-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF2_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine1.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine1.yml index 5377ee2bb5d..9c9bbf5c0fd 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine1.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine1.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -99,6 +99,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -118,7 +124,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.11/24 @@ -144,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.0/31 - name: Ethernet2 peer: dc1-leaf1b @@ -153,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.4/31 - name: Ethernet3 peer: dc1-leaf2a @@ -162,7 +170,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.8/31 - name: Ethernet4 peer: dc1-leaf2b @@ -171,11 +180,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.12/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine2.yml b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine2.yml index 701251c7ef4..9dbdc766e71 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine2.yml +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/intended/structured_configs/dc1-spine2.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -99,6 +99,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.1.1 vrf: MGMT @@ -118,7 +124,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.12/24 @@ -144,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.2/31 - name: Ethernet2 peer: dc1-leaf1b @@ -153,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.6/31 - name: Ethernet3 peer: dc1-leaf2a @@ -162,7 +170,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.10/31 - name: Ethernet4 peer: dc1-leaf2b @@ -171,11 +180,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.14/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt index 2f4f47def07..7d78f6c76fa 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt index 132d99a3d25..7d4ae96c08f 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt index 099a5ac9c44..87df924c9d0 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf1c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt index 7d0dab359fc..2dac1e4571d 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2a-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt index 109934e865e..a757d372536 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2b-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt index 9a2c21df566..4daf170ea69 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-leaf2c-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt index aa3ec23c9d6..eb3b17e40b4 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine1-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt index 01b385a437f..35d7974edf9 100644 --- a/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt +++ b/ansible_collections/arista/avd/examples/single-dc-l3ls/switch-basic-configurations/dc1-spine2-basic-configuration.txt @@ -12,7 +12,7 @@ vrf instance MGMT ! ! Defines the settings for the Management1 interface through which Ansible reaches the device interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ! IP address - must be set uniquely per device diff --git a/ansible_collections/arista/avd/galaxy.yml b/ansible_collections/arista/avd/galaxy.yml index 8cbe6bb946e..364c700ea31 100644 --- a/ansible_collections/arista/avd/galaxy.yml +++ b/ansible_collections/arista/avd/galaxy.yml @@ -9,7 +9,7 @@ namespace: arista name: avd # The version of the collection. Must be compatible with semantic versioning -version: 5.0.0-dev2 +version: 5.0.0-dev8 # The path to the Markdown (.md) readme file. This path is relative to the root of the collection readme: README.md diff --git a/ansible_collections/arista/avd/media/l2ls-topology.svg b/ansible_collections/arista/avd/media/l2ls-topology.svg index bc1ae125273..9329262b75c 100644 --- a/ansible_collections/arista/avd/media/l2ls-topology.svg +++ b/ansible_collections/arista/avd/media/l2ls-topology.svg @@ -1 +1 @@ - \ No newline at end of file + \ No newline at end of file diff --git a/ansible_collections/arista/avd/media/wan_direct_ha_no_lan.png b/ansible_collections/arista/avd/media/wan_direct_ha_no_lan.png index a432ff94970..4cb249fbee0 100644 Binary files a/ansible_collections/arista/avd/media/wan_direct_ha_no_lan.png and b/ansible_collections/arista/avd/media/wan_direct_ha_no_lan.png differ diff --git a/ansible_collections/arista/avd/media/wan_ebgp_lan_ha.png b/ansible_collections/arista/avd/media/wan_ebgp_lan_ha.png index 064ca774ffb..fc5cf666919 100644 Binary files a/ansible_collections/arista/avd/media/wan_ebgp_lan_ha.png and b/ansible_collections/arista/avd/media/wan_ebgp_lan_ha.png differ diff --git a/ansible_collections/arista/avd/media/wan_ebgp_lan_ha_direct.png b/ansible_collections/arista/avd/media/wan_ebgp_lan_ha_direct.png index 6607b8ae323..561855696f2 100644 Binary files a/ansible_collections/arista/avd/media/wan_ebgp_lan_ha_direct.png and b/ansible_collections/arista/avd/media/wan_ebgp_lan_ha_direct.png differ diff --git a/ansible_collections/arista/avd/media/wan_ebgp_lan_single_router.png b/ansible_collections/arista/avd/media/wan_ebgp_lan_single_router.png index b77bd592644..3c19b65a12c 100644 Binary files a/ansible_collections/arista/avd/media/wan_ebgp_lan_single_router.png and b/ansible_collections/arista/avd/media/wan_ebgp_lan_single_router.png differ diff --git a/ansible_collections/arista/avd/media/wan_lan_common.png b/ansible_collections/arista/avd/media/wan_lan_common.png index dc580ee4ef5..6bfa177b2d8 100644 Binary files a/ansible_collections/arista/avd/media/wan_lan_common.png and b/ansible_collections/arista/avd/media/wan_lan_common.png differ diff --git a/ansible_collections/arista/avd/molecule/cv_workflow/intended/structured_configs/cvp/cvp_configlets.yml b/ansible_collections/arista/avd/molecule/cv_workflow/intended/structured_configs/cvp/cvp_configlets.yml index ea422a6e50f..db238f2298e 100644 --- a/ansible_collections/arista/avd/molecule/cv_workflow/intended/structured_configs/cvp/cvp_configlets.yml +++ b/ansible_collections/arista/avd/molecule/cv_workflow/intended/structured_configs/cvp/cvp_configlets.yml @@ -18,7 +18,7 @@ cvp_configlets: shutdown\n channel-group 2 mode active\n!\ninterface Ethernet3\n description S1-SPINE2_Ethernet2\n no shutdown\n channel-group 2 mode active\n!\ninterface Ethernet6\n description MLAG_PEER_s1-leaf2_Ethernet6\n no shutdown\n channel-group - 1 mode active\n!\ninterface Management0\n description oob_management\n no + 1 mode active\n!\ninterface Management0\n description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.12/24\n!\ninterface Vlan4094\n description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.1.253.4/31\n!\nmlag configuration\n domain-id RACK1\n local-interface Vlan4094\n peer-address @@ -44,7 +44,7 @@ cvp_configlets: shutdown\n channel-group 2 mode active\n!\ninterface Ethernet3\n description S1-SPINE2_Ethernet3\n no shutdown\n channel-group 2 mode active\n!\ninterface Ethernet6\n description MLAG_PEER_s1-leaf1_Ethernet6\n no shutdown\n channel-group - 1 mode active\n!\ninterface Management0\n description oob_management\n no + 1 mode active\n!\ninterface Management0\n description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.13/24\n!\ninterface Vlan4094\n description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.1.253.5/31\n!\nmlag configuration\n domain-id RACK1\n local-interface Vlan4094\n peer-address @@ -70,7 +70,7 @@ cvp_configlets: shutdown\n channel-group 2 mode active\n!\ninterface Ethernet3\n description S1-SPINE2_Ethernet4\n no shutdown\n channel-group 2 mode active\n!\ninterface Ethernet6\n description MLAG_PEER_s1-leaf4_Ethernet6\n no shutdown\n channel-group - 1 mode active\n!\ninterface Management0\n description oob_management\n no + 1 mode active\n!\ninterface Management0\n description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.14/24\n!\ninterface Vlan4094\n description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.1.253.8/31\n!\nmlag configuration\n domain-id RACK2\n local-interface Vlan4094\n peer-address @@ -96,7 +96,7 @@ cvp_configlets: shutdown\n channel-group 2 mode active\n!\ninterface Ethernet3\n description S1-SPINE2_Ethernet5\n no shutdown\n channel-group 2 mode active\n!\ninterface Ethernet6\n description MLAG_PEER_s1-leaf3_Ethernet6\n no shutdown\n channel-group - 1 mode active\n!\ninterface Management0\n description oob_management\n no + 1 mode active\n!\ninterface Management0\n description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.15/24\n!\ninterface Vlan4094\n description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip address 10.1.253.9/31\n!\nmlag configuration\n domain-id RACK2\n local-interface Vlan4094\n peer-address @@ -130,7 +130,7 @@ cvp_configlets: Ethernet6\n description MLAG_PEER_s1-spine2_Ethernet6\n no shutdown\n channel-group 1 mode active\n!\ninterface Loopback0\n description Router_ID\n no shutdown\n \ ip address 10.1.252.1/32\n ip ospf area 0.0.0.0\n!\ninterface Management0\n - \ description oob_management\n no shutdown\n ip address 192.168.0.10/24\n!\ninterface + \ description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.10/24\n!\ninterface Vlan10\n description Ten\n no shutdown\n ip address 10.10.10.2/24\n ip virtual-router address 10.10.10.1\n!\ninterface Vlan20\n description Twenty\n \ no shutdown\n ip address 10.20.20.2/24\n ip virtual-router address 10.20.20.1\n!\ninterface @@ -171,7 +171,7 @@ cvp_configlets: Ethernet6\n description MLAG_PEER_s1-spine1_Ethernet6\n no shutdown\n channel-group 1 mode active\n!\ninterface Loopback0\n description Router_ID\n no shutdown\n \ ip address 10.1.252.2/32\n ip ospf area 0.0.0.0\n!\ninterface Management0\n - \ description oob_management\n no shutdown\n ip address 192.168.0.11/24\n!\ninterface + \ description OOB_MANAGEMENT\n no shutdown\n ip address 192.168.0.11/24\n!\ninterface Vlan10\n description Ten\n no shutdown\n ip address 10.10.10.3/24\n ip virtual-router address 10.10.10.1\n!\ninterface Vlan20\n description Twenty\n \ no shutdown\n ip address 10.20.20.3/24\n ip virtual-router address 10.20.20.1\n!\ninterface diff --git a/ansible_collections/arista/avd/molecule/dhcp_configuration/inventory/group_vars/DC1_SERVERS.yml b/ansible_collections/arista/avd/molecule/dhcp_configuration/inventory/group_vars/DC1_SERVERS.yml index b58556dfdb7..5e97397d9ba 100644 --- a/ansible_collections/arista/avd/molecule/dhcp_configuration/inventory/group_vars/DC1_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/dhcp_configuration/inventory/group_vars/DC1_SERVERS.yml @@ -26,7 +26,6 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_B port_channel: - description: PortChanne1 mode: active - name: server02 @@ -41,7 +40,6 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_B port_channel: - description: PortChanne1 mode: active - name: server03 @@ -52,7 +50,6 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: TENANT_A_B port_channel: - description: PortChanne1 mode: active - name: server04 @@ -63,5 +60,4 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: TENANT_A_B port_channel: - description: PortChanne1 mode: active diff --git a/ansible_collections/arista/avd/molecule/dhcp_provisioning/inventory/group_vars/DC1_SERVERS.yml b/ansible_collections/arista/avd/molecule/dhcp_provisioning/inventory/group_vars/DC1_SERVERS.yml index fc12da1838e..3c3c213bdb4 100644 --- a/ansible_collections/arista/avd/molecule/dhcp_provisioning/inventory/group_vars/DC1_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/dhcp_provisioning/inventory/group_vars/DC1_SERVERS.yml @@ -22,7 +22,6 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_B port_channel: - description: PortChanne1 mode: active - name: server02_SINGLE_NODE_TRUNK @@ -51,5 +50,4 @@ servers: ethernet_segment: short_esi: '0303:0202:0101' port_channel: - description: PortChanne1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa-2.md index cadde1f0ac8..c03631aea92 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa.md index f8b46532894..45c329a6987 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aaa.md @@ -23,20 +23,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -80,11 +80,11 @@ Global timeout: 10 seconds ```eos ! +tacacs-server timeout 10 tacacs-server host 10.10.10.157 single-connection vrf mgt key 7 tacacs-server host 10.10.10.249 timeout 23 key 7 tacacs-server host 10.10.10.158 key 7 tacacs-server host 10.10.10.159 key 8a -tacacs-server timeout 10 ``` ### RADIUS Server diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/acl.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/acl.md index b4bad296b90..ca71f07d403 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/acl.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/acl.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/address-locking.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/address-locking.md index 8045c382446..1e828e6228d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/address-locking.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/address-locking.md @@ -23,20 +23,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -101,9 +101,9 @@ address locking | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | Address Locking Interface Testing 1 | access | - | - | - | - | -| Ethernet2 | Address Locking Interface Testing 2 | access | - | - | - | - | -| Ethernet3 | Address Locking Interface Testing 3 | access | - | - | - | - | +| Ethernet1 | Address Locking Interface Testing 1 | - | - | - | - | - | +| Ethernet2 | Address Locking Interface Testing 2 | - | - | - | - | - | +| Ethernet3 | Address Locking Interface Testing 3 | - | - | - | - | - | *Inherited from Port-Channel Interface diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/agents.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/agents.md index 9d63d731fbe..ada2c84605c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/agents.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/agents.md @@ -43,20 +43,20 @@ agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=true | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aliases.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aliases.md index fa1d5d01ac0..2dc16425862 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aliases.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/aliases.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/application-traffic-recognition.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/application-traffic-recognition.md index b9ff137eba6..722dadc78cd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/application-traffic-recognition.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/application-traffic-recognition.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/arp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/arp.md index fe65f42326e..d623139ab64 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/arp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/arp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/as-path.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/as-path.md index 4bdfd9a5f6c..c68d34cbcd7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/as-path.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/as-path.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/banners_without_eof.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/banners_without_eof.md index 1ec1ee8caba..091b093266c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/banners_without_eof.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/banners_without_eof.md @@ -22,20 +22,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/base.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/base.md index 2f93c07f9c1..e860537ec3e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/base.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/base.md @@ -22,20 +22,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/boot.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/boot.md index 97b6093d6f1..84072045575 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/boot.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/boot.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/class-maps.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/class-maps.md index afbf95ad5ba..3d37d324532 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/class-maps.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/class-maps.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/clock.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/clock.md index fcc93a95c4d..e87c99d8e48 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/clock.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/clock.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/config-comment.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/config-comment.md index 1d84c733b44..bfaeb257e76 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/config-comment.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/config-comment.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/custom-templates.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/custom-templates.md index 509b3e16bb7..702672bf807 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/custom-templates.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/custom-templates.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx-2.md index f16c3795fbb..34080e9e05a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -45,8 +45,10 @@ CVX is disabled ! cvx shutdown + ! service mcs shutdown + ! service vxlan shutdown ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx.md index 308bd7b7e58..0d0d5256752 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/cvx.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -59,9 +59,11 @@ cvx no shutdown peer host 1.1.1.1 peer host 2.2.2.2 + ! service mcs redis password 7 no shutdown + ! service vxlan no shutdown vtep mac-learning control-plane diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemon_terminattr.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemon_terminattr.md index e6e287f49f3..2165f085a58 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemon_terminattr.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemon_terminattr.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemons.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemons.md index fe4de36862c..ed767810802 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemons.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/daemons.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-relay.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-relay.md index 9a21d870ca2..d926e75e3b8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-relay.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-relay.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -53,8 +53,8 @@ interface Management1 ```eos ! dhcp relay - server dhcp-relay-server1 - server dhcp-relay-server2 tunnel requests disabled mlag peer-link requests disabled + server dhcp-relay-server1 + server dhcp-relay-server2 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-servers.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-servers.md index 11da4654f74..b8cb54277d3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-servers.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dhcp-servers.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dns-ntp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dns-ntp.md index 2fa58819253..936ad869c24 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dns-ntp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dns-ntp.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/domain-list.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/domain-list.md index ed82e66b6d6..f54cb6028dc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/domain-list.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/domain-list.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x-2.md index d242cc7e38c..ddf0281cbc6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x.md index e1f562cff7c..46eba01e76e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dot1x.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dps-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dps-interfaces.md index 8225779a051..f324654c3b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dps-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/dps-interfaces.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/enable-password.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/enable-password.md index 0310adf0bba..940c15ccf86 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/enable-password.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/enable-password.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/eos_cli_config_gen_configuration.enable.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/eos_cli_config_gen_configuration.enable.md new file mode 100644 index 00000000000..13949926c0d --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/eos_cli_config_gen_configuration.enable.md @@ -0,0 +1,34 @@ +# eos_cli_config_gen_configuration.enable + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/errdisable.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/errdisable.md index 4ff36cf2488..955ad5bdc35 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/errdisable.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/errdisable.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md index 6c5c0ab64a1..d894d76019e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md @@ -33,20 +33,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -87,89 +87,117 @@ sFlow is disabled. | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet2 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | -| Ethernet6 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | -| Ethernet7 | Molecule L2 | access | - | - | - | - | -| Ethernet11 | interface_in_mode_access_accepting_tagged_LACP | access | 200 | - | - | - | -| Ethernet12 | interface_with_dot1q_tunnel | dot1q-tunnel | 300 | - | - | - | -| Ethernet13 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | -| Ethernet14 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | -| Ethernet15 | PVLAN Promiscuous Access - only one secondary | access | 110 | - | - | - | -| Ethernet16 | PVLAN Promiscuous Trunk - vlan translation out | trunk | 110-112 | - | - | - | -| Ethernet17 | PVLAN Secondary Trunk | trunk | 110-112 | - | - | - | -| Ethernet19 | Switched port with no LLDP rx/tx | access | 110 | - | - | - | -| Ethernet21 | 200MBit/s shape | access | - | - | - | - | -| Ethernet22 | 10% shape | access | - | - | - | - | -| Ethernet23 | Error-correction encoding | access | - | - | - | - | -| Ethernet24 | Disable error-correction encoding | access | - | - | - | - | -| Ethernet25 | Molecule MAC | access | - | - | - | - | -| Ethernet27 | EVPN-Vxlan single-active redundancy | access | - | - | - | - | -| Ethernet28 | EVPN-MPLS multihoming | access | - | - | - | - | -| Ethernet29 | DOT1X Testing - auto phone true | access | - | - | - | - | -| Ethernet30 | DOT1X Testing - force-authorized phone false | access | - | - | - | - | -| Ethernet31 | DOT1X Testing - force-unauthorized - no phone | access | - | - | - | - | -| Ethernet32 | DOT1X Testing - auto reauthentication | access | - | - | - | - | -| Ethernet33 | DOT1X Testing - pae mode authenticator | access | - | - | - | - | -| Ethernet34 | DOT1X Testing - authentication_failure allow | access | - | - | - | - | -| Ethernet35 | DOT1X Testing - authentication_failure drop | access | - | - | - | - | -| Ethernet36 | DOT1X Testing - host-mode single-host | access | - | - | - | - | -| Ethernet37 | DOT1X Testing - host-mode multi-host | access | - | - | - | - | -| Ethernet38 | DOT1X Testing - host-mode multi-host authenticated | access | - | - | - | - | -| Ethernet39 | DOT1X Testing - mac_based_authentication host-mode common true | access | - | - | - | - | -| Ethernet40 | DOT1X Testing - mac_based_authentication always | access | - | - | - | - | -| Ethernet41 | DOT1X Testing - mac_based_authentication always and host-mode common | access | - | - | - | - | -| Ethernet42 | DOT1X Testing - mac_based_authentication | access | - | - | - | - | -| Ethernet43 | DOT1X Testing - timeout values | access | - | - | - | - | -| Ethernet44 | DOT1X Testing - reauthorization_request_limit | access | - | - | - | - | -| Ethernet45 | DOT1X Testing - all features | access | - | - | - | - | -| Ethernet46 | native-vlan-tag-precedence | trunk | - | tag | - | - | -| Ethernet48 | Load Interval | access | - | - | - | - | -| Ethernet50 | SFlow Interface Testing - SFlow ingress enabled | access | - | - | - | - | -| Ethernet51 | SFlow Interface Testing - SFlow egress enabled | access | - | - | - | - | -| Ethernet52 | SFlow Interface Testing - SFlow ingress and egress unmodified enabled | access | - | - | - | - | -| Ethernet53 | SFlow Interface Testing - SFlow ingress and egress disabled | access | - | - | - | - | -| Ethernet54 | SFlow Interface Testing - SFlow ingress and egress unmodified disabled | access | - | - | - | - | -| Ethernet56 | Interface with poe commands and limit in class | access | - | - | - | - | -| Ethernet57 | Interface with poe commands and limit in watts | access | - | - | - | - | -| Ethernet58 | Interface with poe disabled and no other poe keys | access | - | - | - | - | -| Ethernet60 | IP NAT Testing | access | - | - | - | - | -| Ethernet61 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | -| Ethernet62 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | -| Ethernet67 | Custom_Transceiver_Frequency | access | - | - | - | - | -| Ethernet68 | Custom_Transceiver_Frequency | access | - | - | - | - | -| Ethernet69 | IP NAT service-profile | access | - | - | - | - | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | dot1q-tunnel | 110-111,200,210-211 | tag | g1, g2 | - | +| Ethernet2 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | trunk | - | 5 | - | - | +| Ethernet5 | Molecule Routing | - | 220 | - | - | - | +| Ethernet6 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | +| Ethernet7 | Molecule L2 | - | - | - | - | - | +| Ethernet11 | interface_in_mode_access_accepting_tagged_LACP | access | 200 | - | - | - | +| Ethernet12 | interface_with_dot1q_tunnel | dot1q-tunnel | 300 | - | - | - | +| Ethernet13 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | +| Ethernet14 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | +| Ethernet15 | PVLAN Promiscuous Access - only one secondary | access | 110 | - | - | - | +| Ethernet16 | PVLAN Promiscuous Trunk - vlan translation out | trunk | 110-112 | - | - | - | +| Ethernet17 | PVLAN Secondary Trunk | trunk | 110-112 | - | - | - | +| Ethernet19 | Switched port with no LLDP rx/tx | access | 110 | - | - | - | +| Ethernet21 | 200MBit/s shape | - | - | - | - | - | +| Ethernet22 | 10% shape | - | - | - | - | - | +| Ethernet23 | Error-correction encoding | - | - | - | - | - | +| Ethernet24 | Disable error-correction encoding | - | - | - | - | - | +| Ethernet25 | Molecule MAC | - | - | - | - | - | +| Ethernet27 | EVPN-Vxlan single-active redundancy | - | - | - | - | - | +| Ethernet28 | EVPN-MPLS multihoming | - | - | - | - | - | +| Ethernet29 | DOT1X Testing - auto phone true | - | - | - | - | - | +| Ethernet30 | DOT1X Testing - force-authorized phone false | - | - | - | - | - | +| Ethernet31 | DOT1X Testing - force-unauthorized - no phone | - | - | - | - | - | +| Ethernet32 | DOT1X Testing - auto reauthentication | - | - | - | - | - | +| Ethernet33 | DOT1X Testing - pae mode authenticator | - | - | - | - | - | +| Ethernet34 | DOT1X Testing - authentication_failure allow | - | - | - | - | - | +| Ethernet35 | DOT1X Testing - authentication_failure drop | - | - | - | - | - | +| Ethernet36 | DOT1X Testing - host-mode single-host | - | - | - | - | - | +| Ethernet37 | DOT1X Testing - host-mode multi-host | - | - | - | - | - | +| Ethernet38 | DOT1X Testing - host-mode multi-host authenticated | - | - | - | - | - | +| Ethernet39 | DOT1X Testing - mac_based_authentication host-mode common true | - | - | - | - | - | +| Ethernet40 | DOT1X Testing - mac_based_authentication always | - | - | - | - | - | +| Ethernet41 | DOT1X Testing - mac_based_authentication always and host-mode common | - | - | - | - | - | +| Ethernet42 | DOT1X Testing - mac_based_authentication | - | - | - | - | - | +| Ethernet43 | DOT1X Testing - timeout values | - | - | - | - | - | +| Ethernet44 | DOT1X Testing - reauthorization_request_limit | - | - | - | - | - | +| Ethernet45 | DOT1X Testing - all features | - | - | - | - | - | +| Ethernet46 | native-vlan-tag-precedence | trunk | - | tag | - | - | +| Ethernet48 | Load Interval | - | - | - | - | - | +| Ethernet50 | SFlow Interface Testing - SFlow ingress enabled | - | - | - | - | - | +| Ethernet51 | SFlow Interface Testing - SFlow egress enabled | - | - | - | - | - | +| Ethernet52 | SFlow Interface Testing - SFlow ingress and egress unmodified enabled | - | - | - | - | - | +| Ethernet53 | SFlow Interface Testing - SFlow ingress and egress disabled | - | - | - | - | - | +| Ethernet54 | SFlow Interface Testing - SFlow ingress and egress unmodified disabled | - | - | - | - | - | +| Ethernet56 | Interface with poe commands and limit in class | - | - | - | - | - | +| Ethernet57 | Interface with poe commands and limit in watts | - | - | - | - | - | +| Ethernet58 | Interface with poe disabled and no other poe keys | - | - | - | - | - | +| Ethernet60 | IP NAT Testing | - | - | - | - | - | +| Ethernet61 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | +| Ethernet62 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | +| Ethernet67 | Custom_Transceiver_Frequency | - | - | - | - | - | +| Ethernet68 | Custom_Transceiver_Frequency | - | - | - | - | - | +| Ethernet69 | IP NAT service-profile | - | - | - | - | - | *Inherited from Port-Channel Interface ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | l3dot1q | - | 101 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | - | 101 | - | +| Ethernet67.1 | Test_encapsulation_dot1q | - | 4 | 34 | ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -| Ethernet26.1 | TENANT_A pseudowire 1 interface | l2dot1q | - | True | - | - | - | False | - | - | - | -| Ethernet26.100 | TENANT_A pseudowire 1 interface | l2dot1q | - | False | 100 | - | - | True | - | - | - | -| Ethernet26.200 | TENANT_A pseudowire 2 interface | l2dot1q | - | False | 200 | - | - | False | - | - | - | -| Ethernet26.300 | TENANT_A pseudowire 3 interface | l2dot1q | - | False | 300 | - | - | False | 400 | - | - | -| Ethernet26.400 | TENANT_A pseudowire 3 interface | l2dot1q | - | False | - | 400 | 20 | False | - | 401 | 21 | -| Ethernet26.500 | TENANT_A pseudowire 3 interface | l2dot1q | - | False | - | 500 | 50 | True | - | - | - | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- |------------ | ---------------------- | ---------------------- | +| Ethernet26.1 | TENANT_A pseudowire 1 interface | - | unmatched | - | - | - | - | - | - | - | - | - | +| Ethernet26.100 | TENANT_A pseudowire 1 interface | 10 | dot1q | - | 100 | - | - | client | - | - | - | - | +| Ethernet26.200 | TENANT_A pseudowire 2 interface | - | dot1q | - | 200 | - | - | - | - | - | - | - | +| Ethernet26.300 | TENANT_A pseudowire 3 interface | - | dot1q | - | 300 | - | - | dot1q | - | 400 | - | - | +| Ethernet26.400 | TENANT_A pseudowire 3 interface | - | dot1q | - | - | 400 | 20 | dot1q | - | - | 401 | 21 | +| Ethernet26.500 | TENANT_A pseudowire 3 interface | - | dot1q | - | - | 500 | 50 | client | - | - | - | - | +| Ethernet68.1 | Test_encapsulation_vlan1 | - | dot1q | dot1q | - | 23 | 45 | dot1ad | dot1ad | - | 32 | 54 | +| Ethernet68.2 | Test_encapsulation_vlan2 | - | dot1q | - | 10 | - | - | dot1q | - | - | 32 | 54 | +| Ethernet68.3 | Test_encapsulation_vlan3 | - | dot1ad | - | 12 | - | - | dot1q | - | 25 | - | - | +| Ethernet68.4 | Test_encapsulation_vlan4 | - | dot1ad | dot1q | - | 35 | 60 | dot1q | dot1ad | - | 53 | 6 | +| Ethernet68.5 | Test_encapsulation_vlan5 | - | dot1ad | - | - | 35 | 60 | dot1ad | - | - | 52 | 62 | +| Ethernet68.6 | Test_encapsulation_vlan6 | - | dot1ad | - | - | 35 | 60 | client | - | - | - | - | +| Ethernet68.7 | Test_encapsulation_vlan7 | - | untagged | - | - | - | - | dot1ad | - | - | 35 | 60 | +| Ethernet68.8 | Test_encapsulation_vlan8 | - | untagged | - | - | - | - | dot1q | - | - | 35 | 60 | +| Ethernet68.9 | Test_encapsulation_vlan9 | - | untagged | - | - | - | - | untagged | - | - | - | - | +| Ethernet68.10 | Test_encapsulation_vlan9 | - | dot1q | - | - | 14 | 11 | client inner | - | - | - | - | ##### Private VLAN | Interface | PVLAN Mapping | Secondary Trunk | | --------- | ------------- | ----------------| +| Ethernet1 | 20-30 | True | +| Ethernet2 | - | False | | Ethernet15 | 111 | - | | Ethernet17 | - | True | ##### VLAN Translations -| Interface | From VLAN ID(s) | To VLAN ID | Direction | -| --------- | --------------- | -----------| --------- | -| Ethernet16 | 111-112 | 110 | out | +| Interface | Direction | From VLAN ID(s) | To VLAN ID | From Inner VLAN ID | To Inner VLAN ID | Network | Dot1q-tunnel | +| --------- | --------- | --------------- | ---------- | ------------------ | ---------------- | ------- | ------------ | +| Ethernet1 | both | 12 | 20 | - | - | - | - | +| Ethernet1 | both | 24 | 46 | 78 | - | True | - | +| Ethernet1 | both | 24 | 46 | 78 | - | False | - | +| Ethernet1 | both | 43 | 30 | - | - | - | True | +| Ethernet1 | in | 10 | 24 | - | - | - | - | +| Ethernet1 | in | 23 | 45 | - | - | - | True | +| Ethernet1 | in | 37 | 49 | 56 | - | - | - | +| Ethernet1 | out | 10 | 45 | - | 34 | - | - | +| Ethernet1 | out | 34 | 50 | - | - | - | - | +| Ethernet1 | out | 45 | all | - | - | - | True | +| Ethernet1 | out | 55 | - | - | - | - | - | +| Ethernet3 | out | 23 | 50 | - | - | - | True | +| Ethernet16 | out | 111-112 | 110 | - | - | - | - | ##### TCP MSS Clamping @@ -199,6 +227,7 @@ sFlow is disabled. | Interface | Mode | Native VLAN | Phone VLAN | Phone VLAN Mode | | --------- | ---- | ----------- | ---------- | --------------- | +| Ethernet1 | dot1q-tunnel | 5 | 110 | tagged | | Ethernet13 | trunk phone | 100 | 70 | untagged | | Ethernet61 | trunk phone | 100 | 70 | untagged phone | | Ethernet62 | trunk phone | 100 | 70 | tagged phone | @@ -216,19 +245,19 @@ sFlow is disabled. ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 172.31.128.1/31 | default | 1500 | - | - | - | -| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | l3dot1q | - | 172.31.128.1/31 | default | - | - | - | - | -| Ethernet9 | interface_with_mpls_enabled | routed | - | 172.31.128.9/31 | default | - | - | - | - | -| Ethernet10 | interface_with_mpls_disabled | routed | - | 172.31.128.10/31 | default | - | - | - | - | -| Ethernet18 | PBR Description | routed | - | 192.0.2.1/31 | default | 1500 | - | - | - | -| Ethernet47 | IP Helper | routed | - | 172.31.255.1/31 | default | - | - | - | - | -| Ethernet63 | DHCP client interface | routed | - | dhcp | default | - | - | - | - | -| Ethernet64 | DHCP server interface | routed | - | 192.168.42.42/24 | default | - | - | - | - | -| Ethernet65 | Multiple VRIDs | routed | - | 192.0.2.2/25 | default | - | False | - | - | -| Ethernet66 | Multiple VRIDs and tracking | routed | - | 192.0.2.2/25 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 172.31.128.1/31 | default | 1500 | - | - | - | +| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | - | 172.31.128.1/31 | default | - | - | - | - | +| Ethernet9 | interface_with_mpls_enabled | - | 172.31.128.9/31 | default | - | - | - | - | +| Ethernet10 | interface_with_mpls_disabled | - | 172.31.128.10/31 | default | - | - | - | - | +| Ethernet18 | PBR Description | - | 192.0.2.1/31 | default | 1500 | - | - | - | +| Ethernet47 | IP Helper | - | 172.31.255.1/31 | default | - | - | - | - | +| Ethernet63 | DHCP client interface | - | dhcp | default | - | - | - | - | +| Ethernet64 | DHCP server interface | - | 192.168.42.42/24 | default | - | - | - | - | +| Ethernet65 | Multiple VRIDs | - | 192.0.2.2/25 | default | - | False | - | - | +| Ethernet66 | Multiple VRIDs and tracking | - | 192.0.2.2/25 | default | - | False | - | - | ##### IP NAT: Source Static @@ -289,14 +318,14 @@ sFlow is disabled. ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 2002:ABDC::1/64 | default | 1500 | - | - | - | - | - | -| Ethernet4 | Molecule IPv6 | routed | - | 2020::2020/64 | default | 9100 | True | True | True | IPv6_ACL_IN | IPv6_ACL_OUT | -| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | l3dot1q | - | 2002:ABDC::1/64 | default | - | - | - | - | - | - | -| Ethernet55 | DHCPv6 Relay Testing | routed | - | a0::1/64 | default | - | False | - | - | - | - | -| Ethernet65 | Multiple VRIDs | routed | - | 2001:db8::2/64 | default | - | False | - | - | - | - | -| Ethernet66 | Multiple VRIDs and tracking | routed | - | 2001:db8::2/64 | default | - | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 2002:ABDC::1/64 | default | 1500 | - | - | - | - | - | +| Ethernet4 | Molecule IPv6 | - | 2020::2020/64 | default | 9100 | True | True | True | IPv6_ACL_IN | IPv6_ACL_OUT | +| Ethernet8.101 | to WAN-ISP-01 Ethernet2.101 - VRF-C1 | - | 2002:ABDC::1/64 | default | - | - | - | - | - | - | +| Ethernet55 | DHCPv6 Relay Testing | - | a0::1/64 | default | - | False | - | - | - | - | +| Ethernet65 | Multiple VRIDs | - | 2001:db8::2/64 | default | - | False | - | - | - | - | +| Ethernet66 | Multiple VRIDs and tracking | - | 2001:db8::2/64 | default | - | False | - | - | - | - | ##### VRRP Details @@ -361,35 +390,39 @@ interface Ethernet1 l2 mtu 8000 l2 mru 8000 bgp session tracker ST1 + switchport access vlan 200 + switchport trunk native vlan tag + switchport phone vlan 110 + switchport phone trunk tagged + switchport vlan translation in required + switchport dot1q vlan tag required + switchport trunk allowed vlan 110-111,210-211 + switchport mode dot1q-tunnel + switchport dot1q ethertype 1536 + switchport vlan forwarding accept all + switchport trunk group g1 + switchport trunk group g2 no switchport - switchport tap native vlan 10 - switchport tap identity 3 inner 5 - switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab - switchport tap mpls pop all - switchport tap encapsulation gre strip - switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip - switchport tap encapsulation gre protocol 0x0001 strip - switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0010 strip - switchport tap encapsulation gre destination 2.1.1.3 source 2.1.1.4 strip - switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip - switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet - switchport tool mpls pop all - switchport tool encapsulation vn-tag strip - switchport tool encapsulation dot1br strip - switchport tap allowed vlan 25 - switchport tool allowed vlan 23 - switchport tool identity qinq - switchport tool identity dot1q source dzgre port - switchport tap truncation 150 - switchport tool truncation - switchport tap default group g1 group g2 group g3 - switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 - switchport tap default interface ethernet4 - switchport tap default interface port-channel10 - switchport tool group set group1 group2 group3 - switchport tool dot1q remove outer 1 - switchport tool dzgre preserve + switchport source-interface tx + switchport vlan translation 12 20 + switchport vlan translation 24 inner 78 network 46 + switchport vlan translation 24 inner 78 46 + switchport vlan translation 43 dot1q-tunnel 30 + switchport vlan translation in 10 24 + switchport vlan translation in 37 inner 56 49 + switchport vlan translation in 23 dot1q-tunnel 45 + switchport vlan translation out 34 50 + switchport vlan translation out 10 45 inner 34 + switchport vlan translation out 45 dot1q-tunnel all + switchport trunk private-vlan secondary + switchport pvlan mapping 20-30 ip address 172.31.255.1/31 + switchport backup-link Ethernet5 prefer vlan 10 + switchport backup preemption-delay 35 + switchport backup mac-move-burst 20 + switchport backup mac-move-burst-interval 30 + switchport backup initial-mac-move-delay 10 + switchport backup dest-macaddr 01:00:00:00:00:00 ip verify unicast source reachable-via rx bfd interval 500 min-rx 500 multiplier 5 bfd echo @@ -407,6 +440,7 @@ interface Ethernet1 ip igmp host-proxy version 2 tcp mss ceiling ipv4 70 ipv6 75 egress switchport port-security + switchport port-security mac-address maximum disabled priority-flow-control on priority-flow-control priority 5 drop link tracking group EVPN_MH_ES1 upstream @@ -417,6 +451,7 @@ interface Ethernet1 ! interface Ethernet2 description SRV-POD02_Eth1 + switchport dot1q vlan tag disallowed switchport trunk allowed vlan 110-111,210-211 switchport mode trunk switchport @@ -437,9 +472,13 @@ interface Ethernet2 interface Ethernet3 description P2P_LINK_TO_DC1-SPINE2_Ethernet2 mtu 1500 + switchport trunk native vlan 5 + switchport mode trunk no switchport + switchport vlan translation out 23 dot1q-tunnel 50 no snmp trap link-change ip address 172.31.128.1/31 + switchport backup-link Ethernet4 ipv6 enable ipv6 address 2002:ABDC::1/64 ipv6 nd prefix 2345:ABCD:3FE0::1/96 infinite 50 no-autoconfig @@ -461,13 +500,6 @@ interface Ethernet4 shutdown mtu 9100 no switchport - switchport tap identity 5 - switchport tap mac-address dest 01:00:00:00:00:00 - switchport tap encapsulation vxlan strip - switchport tool identity dot1q - switchport tool identity qinq source dzgre policy inner port - switchport tap truncation - switchport tool truncation 160 snmp trap link-change ipv6 enable ipv6 address 2020::2020/64 @@ -482,6 +514,7 @@ interface Ethernet4 multicast ipv6 boundary ff00::/16 out multicast ipv6 boundary ff01::/16 out multicast ipv4 static + switchport port-security violation protect priority-flow-control on spanning-tree guard none ! @@ -489,6 +522,7 @@ interface Ethernet5 description Molecule Routing no shutdown mtu 9100 + switchport access vlan 220 no switchport ip ospf cost 99 ip ospf network point-to-point @@ -622,10 +656,11 @@ interface Ethernet15 ! interface Ethernet16 description PVLAN Promiscuous Trunk - vlan translation out - switchport vlan translation out 111-112 110 + switchport vlan translation out required switchport trunk allowed vlan 110-112 switchport mode trunk switchport + switchport vlan translation out 111-112 110 ! interface Ethernet17 description PVLAN Secondary Trunk @@ -694,6 +729,7 @@ interface Ethernet26.1 ! interface Ethernet26.100 description TENANT_A pseudowire 1 interface + vlan id 10 encapsulation vlan client dot1q 100 network client ! @@ -710,12 +746,12 @@ interface Ethernet26.300 interface Ethernet26.400 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 400 inner 20 network dot1q outer 21 inner 401 + client dot1q outer 400 inner 20 network dot1q outer 401 inner 21 ! interface Ethernet26.500 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 500 inner 50 + client dot1q outer 500 inner 50 network client ! interface Ethernet27 description EVPN-Vxlan single-active redundancy @@ -1040,6 +1076,10 @@ interface Ethernet67 switchport transceiver frequency 190050.000 ! +interface Ethernet67.1 + description Test_encapsulation_dot1q + encapsulation dot1q vlan 4 inner 34 +! interface Ethernet68 description Custom_Transceiver_Frequency no shutdown @@ -1047,10 +1087,123 @@ interface Ethernet68 transceiver media override 100gbase-ar4 transceiver frequency 190080.000 ghz ! +interface Ethernet68.1 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q outer 23 inner dot1q 45 network dot1ad outer 32 inner dot1ad 54 +! +interface Ethernet68.2 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q 10 network dot1q outer 32 inner 54 +! +interface Ethernet68.3 + description Test_encapsulation_vlan3 + encapsulation vlan + client dot1ad 12 network dot1q 25 +! +interface Ethernet68.4 + description Test_encapsulation_vlan4 + encapsulation vlan + client dot1ad outer 35 inner dot1q 60 network dot1q outer 53 inner dot1ad 6 +! +interface Ethernet68.5 + description Test_encapsulation_vlan5 + encapsulation vlan + client dot1ad outer 35 inner 60 network dot1ad outer 52 inner 62 +! +interface Ethernet68.6 + description Test_encapsulation_vlan6 + encapsulation vlan + client dot1ad outer 35 inner 60 network client +! +interface Ethernet68.7 + description Test_encapsulation_vlan7 + encapsulation vlan + client untagged network dot1ad outer 35 inner 60 +! +interface Ethernet68.8 + description Test_encapsulation_vlan8 + encapsulation vlan + client untagged network dot1q outer 35 inner 60 +! +interface Ethernet68.9 + description Test_encapsulation_vlan9 + encapsulation vlan + client untagged network untagged +! +interface Ethernet68.10 + description Test_encapsulation_vlan9 + encapsulation vlan + client dot1q outer 14 inner 11 network client inner +! interface Ethernet69 description IP NAT service-profile switchport ip nat service-profile TEST-NAT-PROFILE +! +interface Ethernet70 + description dot1x_aaa_unresponsive + no shutdown + dot1x aaa unresponsive phone action apply cached-results timeout 10 hours else traffic allow + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet71 + description dot1x_aaa_unresponsive1 + no shutdown + dot1x aaa unresponsive phone action apply cached-results timeout 10 hours + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet72 + description dot1x_aaa_unresponsive2 + no shutdown + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet73 + description Switchport_tap_tool + switchport tap native vlan 10 + switchport tap identity 3 inner 5 + switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab + switchport tap mpls pop all + switchport tap encapsulation gre strip + switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip + switchport tap encapsulation gre protocol 0x0001 strip + switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0010 strip + switchport tap encapsulation gre destination 2.1.1.3 source 2.1.1.4 strip + switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip + switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet + switchport tool mpls pop all + switchport tool encapsulation vn-tag strip + switchport tool encapsulation dot1br strip + switchport tap allowed vlan 25 + switchport tool allowed vlan 23 + switchport tool identity qinq + switchport tool identity dot1q source dzgre port + switchport tap truncation 150 + switchport tool truncation + switchport tap default group g1 group g2 group g3 + switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 + switchport tap default interface ethernet4 + switchport tap default interface port-channel10 + switchport tool group set group1 group2 group3 + switchport tool dot1q remove outer 1 + switchport tool dzgre preserve +! +interface Ethernet74 + description Test_tap_tool + switchport tap identity 5 + switchport tap mac-address dest 01:00:00:00:00:00 + switchport tap encapsulation vxlan strip + switchport tool identity dot1q + switchport tool identity qinq source dzgre policy inner port + switchport tap truncation + switchport tool truncation 160 ``` ## BFD @@ -1105,6 +1258,9 @@ interface Ethernet69 | Ethernet43 | - | - | - | - | - | - | - | - | | Ethernet44 | - | - | - | - | - | - | - | - | | Ethernet45 | authenticator | auto | - | True | allow vlan 800 | multi-host | True | True | +| Ethernet70 | - | - | - | - | - | - | - | - | +| Ethernet71 | - | - | - | - | - | - | - | - | +| Ethernet72 | - | - | - | - | - | - | - | - | ## Power Over Ethernet (PoE) diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-handlers.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-handlers.md index 8e71fbd4fa2..c50247b08ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-handlers.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-handlers.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -80,11 +80,11 @@ event-handler trigger-on-boot action increment device-health metric Metric1 ! event-handler trigger-on-counters + action log trigger on-counters poll interval 10 condition ( Arad*.IptCrcErrCnt.delta > 100 ) and ( Arad*.UcFifoFullDrop.delta > 100 ) granularity per-source - action log ! event-handler trigger-on-counters2 trigger on-counters @@ -100,10 +100,10 @@ event-handler trigger-on-intf event-handler trigger-on-intf2 ! event-handler trigger-on-logging + action increment device-health metric Metric2 trigger on-logging poll interval 10 regex ab* - action increment device-health metric Metric2 ! event-handler trigger-on-logging2 trigger on-logging diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-monitor.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-monitor.md index 26c1b487ebf..9d0556b45c3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-monitor.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/event-monitor.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking-2.md index 054a4f79617..5480303686b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking.md index 3fb992a1d8f..135d8c5c618 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/flow-tracking.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -93,52 +93,62 @@ Software export of IPFIX data records enabled. ```eos ! -flow tracking sampled - encapsulation ipv4 ipv6 mpls - sample 666 - hardware offload ipv4 - hardware offload threshold minimum 2 samples +flow tracking hardware tracker T1 record export on inactive timeout 3666 record export on interval 5666 - record export mpls + ! tracker T2 exporter T2-E1 collector 42.42.42.42 - flow table size 614400 entries + ! tracker T3 exporter T3-E1 + ! exporter T3-E2 collector 10.10.10.10 port 777 + ! exporter T3-E3 collector this.is.my.awesome.collector.dns.name port 888 format ipfix version 10 local interface Management1 template interval 424242 + ! exporter T3-E4 collector dead:beef::cafe - flow table size 100000 entries + record format ipfix standard timestamps counters no shutdown ! -flow tracking hardware +flow tracking sampled + encapsulation ipv4 ipv6 mpls + sample 666 + hardware offload ipv4 + hardware offload threshold minimum 2 samples tracker T1 record export on inactive timeout 3666 record export on interval 5666 + record export mpls + ! tracker T2 + flow table size 614400 entries exporter T2-E1 collector 42.42.42.42 + ! tracker T3 + flow table size 100000 entries exporter T3-E1 + ! exporter T3-E2 collector 10.10.10.10 port 777 + ! exporter T3-E3 collector this.is.my.awesome.collector.dns.name port 888 format ipfix version 10 local interface Management1 template interval 424242 + ! exporter T3-E4 collector dead:beef::cafe - record format ipfix standard timestamps counters no shutdown ``` @@ -168,9 +178,9 @@ interface Dps1 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet40 | - | access | - | - | - | - | -| Ethernet41 | - | access | - | - | - | - | -| Ethernet42 | - | access | - | - | - | - | +| Ethernet40 | - | - | - | - | - | - | +| Ethernet41 | - | - | - | - | - | - | +| Ethernet42 | - | - | - | - | - | - | *Inherited from Port-Channel Interface @@ -199,9 +209,9 @@ interface Ethernet42 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel42 | - | switched | access | - | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel42 | - | - | - | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/groups.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/groups.md index 09aba96c83b..394fb35257f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/groups.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/groups.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -83,8 +83,8 @@ group interface QSFP_Interface_Group group interface SFP_Interface_Group interface Ethernet10-20 interface Ethernet30-48 - maintenance profile interface downlink-interfaces - maintenance profile interface ix-interfaces maintenance profile bgp downlink-neighbors maintenance profile bgp local-ix + maintenance profile interface downlink-interfaces + maintenance profile interface ix-interfaces ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware-counter.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware-counter.md index 259762f1333..217e54b532e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware-counter.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware-counter.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware.md index 4078a18a5e0..6d85f0180ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hardware.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hide-passwords.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hide-passwords.md index ee0514f8a96..b205a6ab7e1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hide-passwords.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hide-passwords.md @@ -25,20 +25,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hostname.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hostname.md index 4fc41c013a9..0c46dd6f616 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hostname.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/hostname.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/igmp-snooping.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/igmp-snooping.md index 05afc981c9e..653cdbaeb30 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/igmp-snooping.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/igmp-snooping.md @@ -23,20 +23,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-defaults.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-defaults.md index be9208a9e81..36cb96d3111 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-defaults.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-defaults.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -64,7 +64,7 @@ switchport default mode routed ```eos ! interface defaults + mtu 9000 ethernet shutdown - mtu 9000 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-profiles.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-profiles.md index 555fbdc0ef3..14cdaabd4e5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-profiles.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/interface-profiles.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-access-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-access-lists.md index 39e699f287c..008019438e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-access-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-access-lists.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-client-source-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-client-source-interfaces.md index 728a910ad4c..e33a18d6ef3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-client-source-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-client-source-interfaces.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -58,19 +58,19 @@ interface Management1 ```eos ! +ip ftp client source-interface Ethernet10 ip ftp client source-interface Loopback0 vrf default ip ftp client source-interface Management0 vrf MGMT -ip ftp client source-interface Ethernet10 ip http client local-interface Loopback0 vrf default ip http client local-interface Management0 vrf MGMT ip http client local-interface Ethernet10 ip ssh client source-interface Ethernet10 ip ssh client source-interface Loopback0 vrf default ip ssh client source-interface Management0 vrf MGMT +ip telnet client source-interface Ethernet10 ip telnet client source-interface Loopback0 vrf default ip telnet client source-interface Management0 vrf MGMT -ip telnet client source-interface Ethernet10 +ip tftp client source-interface Ethernet10 ip tftp client source-interface Loopback0 vrf default ip tftp client source-interface Management0 vrf MGMT -ip tftp client source-interface Ethernet10 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-community-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-community-lists.md index bc0bcb7e7c9..06ab0113944 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-community-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-community-lists.md @@ -5,7 +5,6 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Filters](#filters) - - [Community-lists](#community-lists) - [IP Community-lists](#ip-community-lists-1) ## Management @@ -18,43 +17,26 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` ## Filters -### Community-lists - -#### Community-lists Summary - -| Name | Action | -| -------- | ------ | -| TEST1 | permit 1000:1000 | -| TEST2 | permit 2000:3000 | - -#### Community-lists Device Configuration - -```eos -! -ip community-list TEST1 permit 1000:1000 -ip community-list TEST2 permit 2000:3000 -``` - ### IP Community-lists #### IP Community-lists Summary diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-relay.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-relay.md index 19c4ee97a7e..e9a88e94df1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-relay.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-relay.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-snooping.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-snooping.md index f1cd093dc49..4e239a7193a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-snooping.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-dhcp-snooping.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists-regexp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists-regexp.md index 8c2c9a21ee6..7724efd82c3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists-regexp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists-regexp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists.md index 03b2a28122a..1a895bc57b1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-extended-community-lists.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-igmp-snooping-enable.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-igmp-snooping-enable.md index 36fe8660913..07dd8eac85d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-igmp-snooping-enable.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-igmp-snooping-enable.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-nat.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-nat.md index 4bae4e89ce0..8ba53e1cd70 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-nat.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-nat.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -148,10 +148,10 @@ NAT profile VRF is: TEST ```eos ! -ip nat translation address selection any ip nat translation address selection hash field source-ip -ip nat translation udp-timeout 3600 +ip nat translation address selection any ip nat translation tcp-timeout 7200 +ip nat translation udp-timeout 3600 ip nat translation max-entries 100000 ip nat translation low-mark 50 ip nat translation max-entries 1000 host @@ -195,7 +195,7 @@ ip nat profile NAT-PROFILE-NO-VRF-2 ip nat destination dynamic access-list ACL5 pool POOL5 priority 4294967295 comment Priority high end ip nat destination dynamic access-list ACL6 pool POOL6 comment Priority default ! -ip nat profile NAT-PROFILE-TEST-VRF vrf NAT-PROFILE-TEST-VRF +ip nat profile NAT-PROFILE-TEST-VRF vrf TEST ! ip nat pool prefix_16 prefix-length 16 range 10.0.0.1 10.0.255.254 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-radius-source-interface.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-radius-source-interface.md index 9b4f917b5e5..1ba72b371e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-radius-source-interface.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-radius-source-interface.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing-fib.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing-fib.md index bb37857e0d3..c7f04c85d95 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing-fib.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing-fib.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing.md index 374d86fdbd3..34013b9f882 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-routing.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-security.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-security.md index f4ae837efbe..eac950b80d2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-security.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-security.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -62,6 +62,7 @@ interface Management1 | SA-4 | md5 | 3des | - | - | | SA-5 | sha512 | - | - | - | | SA-6 | sha384 | - | - | - | +| SA-7 | - | - | - | - | ### IPSec profiles @@ -70,6 +71,7 @@ interface Management1 | Profile-1 | IKE-1 | SA-1 | start | - | - | - | transport | - | | Profile-2 | - | SA-2 | start | - | - | - | tunnel | False | | Profile-3 | - | SA-3 | start | - | - | - | tunnel | True | +| Profile-4 | - | - | - | - | - | - | - | - | ### Key controller @@ -82,12 +84,11 @@ interface Management1 ```eos ! ip security - ! ike policy IKE-1 - local-id 192.168.100.1 ike-lifetime 24 encryption aes256 dh-group 20 + local-id 192.168.100.1 ! ike policy IKE-2 ! @@ -107,14 +108,14 @@ ip security pfs dh-group 14 ! sa policy SA-3 - esp integrity null esp encryption null + esp integrity null sa lifetime 8 hours pfs dh-group 17 ! sa policy SA-4 - esp integrity md5 esp encryption 3des + esp integrity md5 ! sa policy SA-5 esp integrity sha512 @@ -122,6 +123,8 @@ ip security sa policy SA-6 esp integrity sha384 ! + sa policy SA-7 + ! profile Profile-1 ike-policy IKE-1 sa-policy SA-1 @@ -143,6 +146,8 @@ ip security flow parallelization encapsulation udp mode tunnel ! + profile Profile-4 + ! key controller profile Profile-1 hardware encryption disabled diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-tacacs-source-interface.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-tacacs-source-interface.md index fb5009dd81a..f9fad3133c3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-tacacs-source-interface.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-tacacs-source-interface.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-virtual-router-mac-address.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-virtual-router-mac-address.md index 091214ec5c0..c18f5601e0d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-virtual-router-mac-address.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ip-virtual-router-mac-address.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-access-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-access-lists.md index 9984bdd11fb..d33f6052d63 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-access-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-access-lists.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-dhcp-relay.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-dhcp-relay.md index 83c6f9146b4..2e0c7ac50ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-dhcp-relay.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-dhcp-relay.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-neighbors.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-neighbors.md index 84224034e3e..d52513d677e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-neighbors.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-neighbors.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-static-routes.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-static-routes.md index ab085a4256c..ccf0efe96be 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-static-routes.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ipv6-static-routes.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/l2-protocol-forwarding.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/l2-protocol-forwarding.md index 0d3ee11f6d9..ff205910a65 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/l2-protocol-forwarding.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/l2-protocol-forwarding.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -122,7 +122,7 @@ l2-protocol | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet1 | L2PF test | access | - | - | - | - | +| Ethernet1 | L2PF test | - | - | - | - | - | *Inherited from Port-Channel Interface @@ -142,9 +142,9 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | L2PF test | switched | access | - | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | L2PF test | - | - | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lacp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lacp.md index a30db9c7d83..40b0e8f8b38 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lacp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lacp.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -48,7 +48,7 @@ interface Management1 ```eos ! +lacp system-priority 0 lacp port-id range 1 128 no lacp rate-limit default -lacp system-priority 0 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/link-tracking-groups.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/link-tracking-groups.md index 801d340ca90..0276617573a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/link-tracking-groups.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/link-tracking-groups.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lldp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lldp.md index 62e47fa12b3..f313f6a8ba9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lldp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/lldp.md @@ -20,20 +20,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -69,13 +69,13 @@ LLDP is **disabled** globally. Local interface configs will not apply. ```eos ! -no lldp run lldp timer 30 lldp hold-time 90 -lldp management-address 192.168.1.1/24 -lldp management-address vrf Management no lldp tlv transmit system-capabilities lldp tlv transmit system-description +no lldp run +lldp management-address 192.168.1.1/24 +lldp management-address vrf Management ``` ## Interfaces @@ -88,8 +88,8 @@ lldp tlv transmit system-description | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet2 | Switched port with no LLDP rx/tx | access | 110 | - | - | - | -| Ethernet3 | No special LLDP settings | access | 110 | - | - | - | +| Ethernet2 | Switched port with no LLDP rx/tx | access | 110 | - | - | - | +| Ethernet3 | No special LLDP settings | access | 110 | - | - | - | *Inherited from Port-Channel Interface diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/load-interval.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/load-interval.md index 3085c39bdd7..03af9feee66 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/load-interval.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/load-interval.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/local-users.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/local-users.md index ff3427de457..0dc99603f88 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/local-users.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/local-users.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-match-list.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-match-list.md index 4451f135697..654d6c48612 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-match-list.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-match-list.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-minimal.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-minimal.md index 9b96988b89e..744fc471f35 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-minimal.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging-minimal.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -53,8 +53,11 @@ interface Management1 ```eos ! +no logging repeat-messages logging buffered 64000 logging console informational logging monitor debugging logging facility syslog +! +logging event link-status global ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging.md index f8529b4f9f1..775a2f4cbe0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/logging.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -87,11 +87,15 @@ interface Management1 ```eos ! +logging event storm-control discards global +logging event storm-control discards interval 10 +! +logging event congestion-drops interval 10 +! +logging repeat-messages logging buffered 1000000 warnings no logging trap logging console errors -logging event storm-control discards global -logging event storm-control discards interval 10 logging synchronous level critical logging host 20.20.20.7 logging host 50.50.50.7 100 200 protocol tcp @@ -111,7 +115,10 @@ logging format timestamp traditional year timezone logging format rfc5424 logging source-interface Loopback0 logging vrf mgt source-interface Management0 +! logging level AAA warnings logging level ACL critical logging level BGP 0 +! +no logging event link-status global ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/loopbacks-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/loopbacks-interfaces.md index e2bbe7d707e..6c1cbfaf34a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/loopbacks-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/loopbacks-interfaces.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -93,12 +93,12 @@ interface Loopback99 ip address 192.168.1.1/32 secondary ipv6 enable ipv6 address 2002::CAFE/64 + mpls ldp interface isis enable ISIS_TEST isis bfd - isis passive isis metric 100 + isis passive isis network point-to-point - mpls ldp interface ! interface Loopback100 description TENANT_A_PROJECT02_VTEP_DIAGNOSTICS diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-access-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-access-lists.md index 7676823604a..2ed4f8af15a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-access-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-access-lists.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-address-table.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-address-table.md index b4acb4ea1d9..155e5794fe8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-address-table.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-address-table.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-security-eth-po-entropy.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-security-eth-po-entropy.md index 3d3dddeaf61..c280b261eac 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-security-eth-po-entropy.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mac-security-eth-po-entropy.md @@ -25,20 +25,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -65,6 +65,7 @@ interface Management1 management security entropy source hardware password encryption-key common + ! ssl profile SSL_PROFILE tls versions 1.1 1.2 certificate SSL_CERT key SSL_KEY @@ -86,9 +87,9 @@ management security ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | - | routed | - | 1.1.1.1/24 | default | - | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | - | - | 1.1.1.1/24 | default | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -111,9 +112,9 @@ interface Ethernet3 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | L2-PORT | switched | trunk | 1-5 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | L2-PORT | trunk | 1-5 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -121,9 +122,9 @@ interface Ethernet3 ! interface Port-Channel3 description L2-PORT - switchport switchport trunk allowed vlan 1-5 switchport mode trunk + switchport ``` ## MACsec @@ -202,9 +203,11 @@ mac security traffic unprotected allow sci l2-protocol lldp bypass unauthorized + ! profile A2 key 1234b 7 traffic unprotected allow active-sak + ! profile A3 cipher aes256-gcm-xpn key ab 7 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/maintenance.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/maintenance.md index 13c56c1c1c4..b8912fd84ec 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/maintenance.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/maintenance.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md index 0bd9266d4bd..7837ac0fc91 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md index 25485a3a7ae..3b333c9a620 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -61,9 +61,9 @@ HTTPS certificate and private key are configured. ! management api http-commands protocol https - protocol https ssl profile SSL_PROFILE no protocol http default-services + protocol https ssl profile SSL_PROFILE no shutdown ! vrf default diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md index 24e80fd1f0f..f2f442fb399 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md index 95fa4fb36c2..8717795921b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md index 4965b3f4709..e270c26a1b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md index b2a83ac5b21..4e515cbd228 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md index 458c3f75803..55a3a897a23 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -53,22 +53,26 @@ Provider eos-native is configured. ```eos ! management api gnmi - transport grpc-tunnel onetarget + transport grpc-tunnel multipletargets no shutdown vrf management tunnel ssl profile ssl_profile gnmi ssl profile ssl_profile destination 10.1.1.100 port 10000 local interface Management1 port 10001 - target testid100 - transport grpc-tunnel multipletargets + target testid1 testid2 testid3 testid4 + ! + transport grpc-tunnel noserialnotargets + ! + transport grpc-tunnel onetarget no shutdown vrf management tunnel ssl profile ssl_profile gnmi ssl profile ssl_profile destination 10.1.1.100 port 10000 local interface Management1 port 10001 - target testid1 testid2 testid3 testid4 + target testid100 + ! transport grpc-tunnel serialandtargets no shutdown vrf management @@ -77,7 +81,7 @@ management api gnmi destination 10.1.1.100 port 10000 local interface Management1 port 10001 target serial-number testid10 testid20 - transport grpc-tunnel noserialnotargets + ! transport grpc-tunnel serialonly target serial-number provider eos-native diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md index 6a383789e2b..dd270376d1a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -55,6 +55,7 @@ management api gnmi vrf MGMT ip access-group acl1 notification timestamp send-time + ! transport grpc mytransport port 6032 ip access-group acl1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md index 73773aacd4c..4bc256017ef 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -53,6 +53,7 @@ management api gnmi transport grpc MGMT vrf MGMT ip access-group ACL-GNMI + ! transport grpc MONITORING port 6031 vrf MONITORING diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md index 4f65bb1a942..181cb0e18f7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md @@ -16,7 +16,7 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | | Management0 | - | oob | default | 10.0.0.0 | - | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | | Management42 | - | oob | default | - | - | | Vlan123 | inband_management | inband | default | 10.73.0.123/24 | 10.73.0.1 | @@ -25,7 +25,7 @@ | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | | Management0 | - | oob | default | - | - | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | | Management42 | - | oob | default | - | - | | Vlan123 | inband_management | inband | default | - | - | @@ -38,7 +38,7 @@ interface Management0 ip address 10.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-security.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-security.md index 7bd45ed9822..604ddd7269c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-security.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-security.md @@ -25,20 +25,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -126,9 +126,10 @@ interface Management1 management security entropy source hardware haveged cpu jitter entropy source hardware exclusive + password minimum length 17 password encryption-key common password encryption reversible aes-256-gcm - password minimum length 17 + ! password policy AVD_POLICY minimum digits 1 minimum length 2 @@ -147,30 +148,39 @@ management security ! session shared-secret profile profile2 secret Secret4 0 receive-lifetime 2024-12-20 10:00:00 2025-12-20 10:00:00 transmit-lifetime 2024-12-20 10:00:00 2025-12-20 10:00:00 + ! ssl profile certificate-profile certificate eAPI.crt key eAPI.key crl ca.crl crl intermediate.crl + ! ssl profile cipher-list-profile cipher-list ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384 + ! ssl profile test1-chain-cert chain certificate test-chain-cert1.crt chain certificate test-chain-cert2.crt chain certificate requirement basic-constraint ca true + ! ssl profile test1-trust-cert trust certificate test-trust1.crt trust certificate test-trust2.crt trust certificate requirement basic-constraint ca true trust certificate policy expiry-date ignore + ! ssl profile test2-chain-cert chain certificate requirement include root-ca + ! ssl profile test2-trust-cert trust certificate system trust certificate requirement hostname fqdn + ! ssl profile tls-single-version-profile-as-float tls versions 1.0 + ! ssl profile tls-single-version-profile-as-string tls versions 1.1 + ! ssl profile tls-versions-profile tls versions 1.0 1.1 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh-custom-cipher.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh-custom-cipher.md index e8026fca85c..7e60e52387e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh-custom-cipher.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh-custom-cipher.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -75,13 +75,13 @@ management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in idle-timeout 15 - connection limit 55 cipher aes256-cbc aes256-ctr aes256-gcm@openssh.com key-exchange ecdh-sha2-nistp521 mac hmac-sha2-512 hmac-sha2-512-etm@openssh.com hostkey server ecdsa-nistp256 ecdsa-nistp521 - hostkey server cert sshkey.cert + connection limit 55 no shutdown + hostkey server cert sshkey.cert ! vrf mgt no shutdown diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh.md index 5d1f52b08a1..99e3a1b6fb8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-ssh.md @@ -16,26 +16,32 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` ### Management SSH +#### Authentication Settings + +| Authentication protocols | Empty passwords | +| ------------------------ | --------------- | +| keyboard-interactive, password, public-key | permit | + #### IPv4 ACL | IPv4 ACL | VRF | @@ -75,12 +81,14 @@ management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in idle-timeout 15 - connection limit 50 + authentication protocol keyboard-interactive password public-key connection per-host 10 - client-alive interval 666 - client-alive count-max 42 fips restrictions hostkey client strict-checking + connection limit 50 + authentication empty-passwords permit + client-alive interval 666 + client-alive count-max 42 no shutdown log-level debug ! diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-tech-support.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-tech-support.md index 81c12952547..0f8fb280a02 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-tech-support.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-tech-support.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -64,14 +64,14 @@ interface Management1 ! management tech-support policy show tech-support - exclude command show platform fap ip route - exclude command show platform fap ipv6 route exclude command show ip bgp vrf all + exclude command show ip route vrf all detail exclude command show ipv6 bgp vrf all + exclude command show ipv6 route vrf all detail exclude command show kernel ip route vrf all exclude command show kernel ipv6 route vrf all - exclude command show ip route vrf all detail - exclude command show ipv6 route vrf all detail + exclude command show platform fap ip route + exclude command show platform fap ipv6 route exclude command json show version detail include command show version detail | grep TerminAttr exit diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/match-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/match-lists.md index 3c874633d71..e6e57d396a3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/match-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/match-lists.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -64,14 +64,14 @@ interface Management1 ```eos ! +match-list input string molecule + 10 match regex ^.*MOLECULE.*$ + 20 match regex ^.*TESTING.*$ +! match-list input prefix-ipv4 molecule_v4 match prefix-ipv4 10.10.10.0/24 match prefix-ipv4 10.10.20.0/24 ! match-list input prefix-ipv6 molecule_v6 match prefix-ipv6 2001:0DB8::/32 -! -match-list input string molecule - 10 match regex ^.*MOLECULE.*$ - 20 match regex ^.*TESTING.*$ ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mcs-client.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mcs-client.md index 26a14fe3583..f9ad4783c4b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mcs-client.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mcs-client.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mlag-configuration.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mlag-configuration.md index 801491b348d..ba9312c9894 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mlag-configuration.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mlag-configuration.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity-2.md new file mode 100644 index 00000000000..f9dca7962e9 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity-2.md @@ -0,0 +1,64 @@ +# monitor-connectivity-2 + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Monitor Connectivity](#monitor-connectivity) + - [Global Configuration](#global-configuration) + - [Monitor Connectivity Device Configuration](#monitor-connectivity-device-configuration) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Monitor Connectivity + +### Global Configuration + +#### Interface Sets + +| Name | Interfaces | +| ---- | ---------- | +| HOST_SET2 | Loopback2-4, Loopback10-12 | + +#### Probing Configuration + +| Enabled | Interval | Default Interface Set | Address Only | +| ------- | -------- | --------------------- | ------------ | +| False | 5 | HOST_SET2 | False | + +### Monitor Connectivity Device Configuration + +```eos +! +monitor connectivity + interval 5 + shutdown + interface set HOST_SET2 Loopback2-4, Loopback10-12 + local-interfaces HOST_SET2 default +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity.md index 578f001e15a..ac25a28047a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-connectivity.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -61,6 +61,7 @@ interface Management1 | server1 | server1_connectivity_monitor | 10.10.10.1 | HOST_SET | True | https://server1.local.com | | server2 | server2_connectivity_monitor | 10.10.10.2 | HOST_SET | True | https://server2.local.com | | server3 | server3_connectivity_monitor | 10.10.10.3 | HOST_SET | False | - | +| server4 | - | - | - | True | - | ### VRF Configuration @@ -68,6 +69,7 @@ interface Management1 | ---- | ----------- | --------------------- | ------------ | | blue | - | VRF_GLOBAL_SET | False | | red | vrf_connectivity_monitor | VRF_GLOBAL_SET | True | +| yellow | - | - | True | #### Vrf blue Configuration @@ -81,7 +83,9 @@ interface Management1 | Host Name | Description | IPv4 Address | Probing Interface Set | Address Only | URL | | --------- | ----------- | ------------ | --------------------- | ------------ | --- | -| server4 | server4_connectivity_monitor | 10.10.20.1 | VRF_HOST_SET | False | https://server2.local.com | +| server4 | server4_connectivity_monitor | 10.10.20.1 | VRF_GLOBAL_SET | False | https://server2.local.com | +| server5 | server5_connectivity_monitor | 10.10.20.11 | VRF_GLOBAL_SET | True | https://server5.local.com | +| server6 | - | - | - | True | - | #### Vrf red Configuration @@ -98,11 +102,53 @@ interface Management1 | --------- | ----------- | ------------ | --------------------- | ------------ | --- | | server2 | server2_connectivity_monitor | 10.10.20.1 | VRF_HOST_SET | True | https://server2.local.com | +#### Vrf yellow Configuration + +##### Interface Sets + +| Name | Interfaces | +| ---- | ---------- | + ### Monitor Connectivity Device Configuration ```eos ! monitor connectivity + vrf blue + interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 + local-interfaces VRF_GLOBAL_SET default + ! + host server4 + description + server4_connectivity_monitor + local-interfaces VRF_GLOBAL_SET + ip 10.10.20.1 + url https://server2.local.com + ! + host server5 + description + server5_connectivity_monitor + local-interfaces VRF_GLOBAL_SET address-only + ip 10.10.20.11 + url https://server5.local.com + ! + host server6 + ! + vrf red + interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 + interface set VRF_HOST_SET Loopback12-14, 19-23 + description + vrf_connectivity_monitor + local-interfaces VRF_GLOBAL_SET address-only default + ! + host server2 + description + server2_connectivity_monitor + local-interfaces VRF_HOST_SET address-only + ip 10.10.20.1 + url https://server2.local.com + ! + vrf yellow interval 5 no shutdown interface set GLOBAL_SET Ethernet1-4 @@ -128,27 +174,6 @@ monitor connectivity server3_connectivity_monitor local-interfaces HOST_SET ip 10.10.10.3 - vrf blue - interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 - local-interfaces VRF_GLOBAL_SET default - ! - host server4 - description - server4_connectivity_monitor - local-interfaces VRF_HOST_SET - ip 10.10.20.1 - url https://server2.local.com - vrf red - interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 - interface set VRF_HOST_SET Loopback12-14, 19-23 - local-interfaces VRF_GLOBAL_SET address-only default - description - vrf_connectivity_monitor - ! - host server2 - description - server2_connectivity_monitor - local-interfaces VRF_HOST_SET address-only - ip 10.10.20.1 - url https://server2.local.com + ! + host server4 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-layer1.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-layer1.md index dcd3af21ff3..6a0020dcc85 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-layer1.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-layer1.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-session-default-encapsulation-gre.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-session-default-encapsulation-gre.md new file mode 100644 index 00000000000..39031798432 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-session-default-encapsulation-gre.md @@ -0,0 +1,55 @@ +# monitor-session-default-encapsulation-gre + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Monitoring](#monitoring) + - [Monitor Sessions](#monitor-sessions) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Monitoring + +### Monitor Sessions + +#### Monitor Sessions Summary + +##### Monitor Session Default Settings + +| Settings | Values | +| -------- | ------ | +| Encapsulation GRE Payload | inner-packet | + +#### Monitor Sessions Device Configuration + +```eos +! +monitor session default encapsulation gre payload inner-packet +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-sessions.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-sessions.md index 8e5158793af..4141714e799 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-sessions.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-sessions.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -80,6 +80,20 @@ interface Management1 | Access Group Name | ipv4ACL | | Sample | 50 | +##### myMonitoringSession3 + +####### myMonitoringSession3 Sources + +| Sources | Direction | Access Group Type | Access Group Name | Access Group Priority | +| ------- | --------- | ----------------- | ----------------- | --------------------- | +| Ethernet20 | both | ip | ipv4ACL | 10 | + +####### myMonitoringSession3 Destinations and Session Settings + +| Settings | Values | +| -------- | ------ | +| Destinations | - | + #### Monitor Sessions Device Configuration ```eos @@ -87,16 +101,17 @@ interface Management1 monitor session myMonitoringSession1 source Ethernet0 ipv6 access-group ipv6ACL monitor session myMonitoringSession1 source Ethernet5 both ip access-group ipv4ACL priority 10 monitor session myMonitoringSession1 destination Ethernet48 -monitor session myMonitoringSession1 encapsulation gre metadata tx -monitor session myMonitoringSession1 header remove size 32 monitor session myMonitoringSession1 truncate +monitor session myMonitoringSession1 header remove size 32 +monitor session myMonitoringSession1 encapsulation gre metadata tx +monitor session myMonitoringSession2 ip access-group ipv4ACL monitor session myMonitoringSession2 source Ethernet3, Ethernet5 rx monitor session myMonitoringSession2 source Ethernet10-15 rx monitor session myMonitoringSession2 source Ethernet12 rx monitor session myMonitoringSession2 source Ethernet18 tx mac access-group macACL priority 100 monitor session myMonitoringSession2 destination Cpu monitor session myMonitoringSession2 destination Ethernet50 -monitor session myMonitoringSession2 encapsulation gre metadata tx -monitor session myMonitoringSession2 ip access-group ipv4ACL monitor session myMonitoringSession2 sample 50 +monitor session myMonitoringSession2 encapsulation gre metadata tx +monitor session myMonitoringSession3 source Ethernet20 both ip access-group ipv4ACL priority 10 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-influx.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-influx.md index 221109f3352..0491df9d30d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-influx.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-influx.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-postcard-policy.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-postcard-policy.md index fe17f700690..4dc64c8658f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-postcard-policy.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/monitor-telemetry-postcard-policy.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-2.md index da7e2b13ac8..fc946b56c34 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-3.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-3.md index 2fe23da78af..d8608e69a60 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-3.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls-3.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -56,6 +56,6 @@ interface Management1 mpls ip ! mpls ldp - interface disabled default router-id 192.168.1.2 + interface disabled default ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls.md index d7497eb95d8..873a6158a63 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/mpls.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -54,9 +54,9 @@ interface Management1 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | - | routed | - | 192.168.100.1/31 | default | - | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | - | - | 192.168.100.1/31 | default | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -117,10 +117,10 @@ interface Loopback0 mpls ip ! mpls ldp - interface disabled default router-id 192.168.1.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ! mpls icmp fragmentation-needed tunneling ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/none_configuration.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/none_configuration.md index efcedc0e2b2..39c8ec9e711 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/none_configuration.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/none_configuration.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ntp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ntp.md index e3862cec77c..9ba4b10c873 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ntp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ntp.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/object-tracking.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/object-tracking.md index 808096ca195..649e732def6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/object-tracking.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/object-tracking.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/patch-panel.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/patch-panel.md index 0ecf9a779e5..121a5efcd3f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/patch-panel.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/patch-panel.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -59,13 +59,13 @@ patch panel connector interface recovery review delay 10 900 connector interface patch bgp vpws remote-failure errdisable ! - patch TEN_B_site2_site5_eline - connector 1 interface Ethernet5 - connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_B_site2_site5_eline - ! patch TEN_A_site2_site5_eline shutdown connector 1 interface Ethernet6 dot1q vlan 123 connector 2 pseudowire ldp LDP_PW_1 ! + patch TEN_B_site2_site5_eline + connector 1 interface Ethernet5 + connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_B_site2_site5_eline + ! ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/peer-filters.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/peer-filters.md index 0464da47435..78592bcd060 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/peer-filters.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/peer-filters.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/platform.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/platform.md index 918715dc75c..65c6ffe3b10 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/platform.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/platform.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/poe.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/poe.md index 986ff6f9750..33fabaf00c1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/poe.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/poe.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps-pbr.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps-pbr.md index d5641a66614..fdb97d6047d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps-pbr.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps-pbr.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps.md index d0b84faa583..357ac841ac5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/policy-maps.md @@ -20,20 +20,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md index 18cae210f44..e482465635f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md @@ -28,20 +28,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -73,8 +73,8 @@ sFlow is disabled. | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_DC1-LEAF1B_Ethernet3 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-LEAF1B_Ethernet4 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | +| Ethernet3 | MLAG_PEER_DC1-LEAF1B_Ethernet3 | *trunk | *2-4094 | *- | *LEAF_PEER_L3, MLAG | 3 | +| Ethernet4 | MLAG_PEER_DC1-LEAF1B_Ethernet4 | *trunk | *2-4094 | *- | *LEAF_PEER_L3, MLAG | 3 | | Ethernet5 | DC1-AGG01_Ethernet1 | *trunk | *110,201 | *- | *- | 5 | | Ethernet10/1 | LAG Member | *access | *110 | *- | *- | 101 | | Ethernet10/2 | LAG Member | *trunk | *110-112 | *- | *- | 102 | @@ -82,7 +82,7 @@ sFlow is disabled. | Ethernet10/4 | LAG Member LACP fallback | *trunk | *112 | *- | *- | 104 | | Ethernet11/2 | LAG Member LACP fallback LLDP ZTP VLAN | *trunk | *112 | *- | *- | 112 | | Ethernet15 | DC1-AGG03_Ethernet1 | *trunk | *110,201 | *- | *- | 15 | -| Ethernet16 | DC1-AGG04_Ethernet1 | *trunk | *110,201 | *- | *- | 16 | +| Ethernet16 | DC1-AGG04_Ethernet1 | *trunk | *110,201 | *10 | *- | 16 | | Ethernet18 | LAG Member | *access | *110 | *- | *- | 109 | | Ethernet50 | SRV-POD03_Eth1 | *trunk | *110,201 | *- | *- | 5 | @@ -99,12 +99,13 @@ sFlow is disabled. | Interface | Mode | Native VLAN | Phone VLAN | Phone VLAN Mode | | --------- | ---- | ----------- | ---------- | --------------- | | Port-Channel12 | trunk phone | 100 | 70 | untagged | +| Port-Channel100 | dot1q-tunnel | 5 | 110 | tagged | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet17 | LAG Member | *routed | 17 | *192.0.2.3/31 | **default | **- | **- | **- | **- | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet17 | LAG Member | 17 | *192.0.2.3/31 | **default | **- | **- | **- | **- | *Inherited from Port-Channel Interface @@ -214,66 +215,91 @@ interface Ethernet50 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_DC1-LEAF1B_Po3 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel5 | DC1_L2LEAF1_Po1 | switched | trunk | 110,201 | - | - | - | - | 5 | - | -| Port-Channel10 | SRV01_bond0 | switched | trunk | 2-3000 | - | - | - | - | - | 0000:0000:0404:0404:0303 | -| Port-Channel12 | interface_in_mode_access_with_voice | switched | trunk phone | - | 100 | - | - | - | - | - | -| Port-Channel13 | EVPN-Vxlan single-active redundancy | switched | access | - | - | - | - | - | - | 0000:0000:0000:0102:0304 | -| Port-Channel14 | EVPN-MPLS multihoming | switched | access | - | - | - | - | - | - | 0000:0000:0000:0102:0305 | -| Port-Channel15 | DC1_L2LEAF3_Po1 | switched | trunk | 110,201 | - | - | - | - | 15 | - | -| Port-Channel16 | DC1_L2LEAF4_Po1 | switched | trunk | 110,201 | - | - | - | - | 16 | - | -| Port-Channel20 | Po_in_mode_access_accepting_tagged_LACP_frames | switched | access | 200 | - | - | - | - | - | - | -| Port-Channel50 | SRV-POD03_PortChanne1 | switched | trunk | 1-4000 | - | - | - | - | - | 0000:0000:0303:0202:0101 | -| Port-Channel51 | ipv6_prefix | switched | trunk | 1-500 | - | - | - | - | - | - | -| Port-Channel101 | PVLAN Promiscuous Access - only one secondary | switched | access | 110 | - | - | - | - | - | - | -| Port-Channel102 | PVLAN Promiscuous Trunk - vlan translation out | switched | trunk | 110-112 | - | - | - | - | - | - | -| Port-Channel103 | PVLAN Secondary Trunk | switched | trunk | 110-112 | - | - | - | - | - | - | -| Port-Channel104 | LACP fallback individual | switched | trunk | 112 | - | - | 300 | individual | - | - | -| Port-Channel105 | bpdu disabled | switched | access | - | - | - | - | - | - | - | -| Port-Channel106 | bpdu enabled | switched | access | - | - | - | - | - | - | - | -| Port-Channel107 | bpdu true | switched | access | - | - | - | - | - | - | - | -| Port-Channel108 | bpdu false | switched | access | - | - | - | - | - | - | - | -| Port-Channel109 | Molecule ACLs | switched | access | 110 | - | - | - | - | - | - | -| Port-Channel112 | LACP fallback individual | switched | trunk | 112 | - | - | 5 | individual | - | - | -| Port-Channel115 | native-vlan-tag-precedence | switched | trunk | - | tag | - | - | - | - | - | -| Port-Channel121 | access_port_with_no_vlans | switched | access | - | - | - | - | - | - | - | -| Port-Channel122 | trunk_port_with_no_vlans | switched | trunk | - | - | - | - | - | - | - | -| Port-Channel130 | IP NAT Testing | switched | access | - | - | - | - | - | - | - | -| Port-Channel131 | dot1q-tunnel mode | switched | dot1q-tunnel | 115 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_PEER_DC1-LEAF1B_Po3 | trunk | 2-4094 | - | LEAF_PEER_L3, MLAG | - | - | - | - | +| Port-Channel5 | DC1_L2LEAF1_Po1 | trunk | 110,201 | - | - | - | - | 5 | - | +| Port-Channel10 | SRV01_bond0 | trunk | 2-3000 | - | - | - | - | - | 0000:0000:0404:0404:0303 | +| Port-Channel12 | interface_in_mode_access_with_voice | trunk phone | - | 100 | - | - | - | - | - | +| Port-Channel13 | EVPN-Vxlan single-active redundancy | - | - | - | - | - | - | - | 0000:0000:0000:0102:0304 | +| Port-Channel14 | EVPN-MPLS multihoming | - | - | - | - | - | - | - | 0000:0000:0000:0102:0305 | +| Port-Channel15 | DC1_L2LEAF3_Po1 | trunk | 110,201 | - | - | - | - | 15 | - | +| Port-Channel16 | DC1_L2LEAF4_Po1 | trunk | 110,201 | 10 | - | - | - | 16 | - | +| Port-Channel20 | Po_in_mode_access_accepting_tagged_LACP_frames | access | 200 | - | - | - | - | - | - | +| Port-Channel50 | SRV-POD03_PortChanne1 | trunk | 1-4000 | - | - | - | - | - | 0000:0000:0303:0202:0101 | +| Port-Channel51 | ipv6_prefix | trunk | 1-500 | - | - | - | - | - | - | +| Port-Channel100 | - | dot1q-tunnel | 10-11,200 | tag | g1, g2 | - | - | - | - | +| Port-Channel101 | PVLAN Promiscuous Access - only one secondary | access | 110 | - | - | - | - | - | - | +| Port-Channel102 | PVLAN Promiscuous Trunk - vlan translation out | trunk | 110-112 | - | - | - | - | - | - | +| Port-Channel103 | PVLAN Secondary Trunk | trunk | 110-112 | - | - | - | - | - | - | +| Port-Channel104 | LACP fallback individual | trunk | 112 | - | - | 300 | individual | - | - | +| Port-Channel105 | bpdu disabled | - | - | - | - | - | - | - | - | +| Port-Channel106 | bpdu enabled | - | - | - | - | - | - | - | - | +| Port-Channel107 | bpdu true | - | - | - | - | - | - | - | - | +| Port-Channel108 | bpdu false | - | - | - | - | - | - | - | - | +| Port-Channel109 | Molecule ACLs | access | 110 | - | - | - | - | - | - | +| Port-Channel112 | LACP fallback individual | trunk | 112 | - | - | 5 | individual | - | - | +| Port-Channel115 | native-vlan-tag-precedence | trunk | - | tag | - | - | - | - | - | +| Port-Channel121 | access_port_with_no_vlans | access | - | - | - | - | - | - | - | +| Port-Channel122 | trunk_port_with_no_vlans | trunk | - | - | - | - | - | - | - | +| Port-Channel130 | IP NAT Testing | - | - | - | - | - | - | - | - | +| Port-Channel131 | dot1q-tunnel mode | dot1q-tunnel | 115 | - | - | - | - | - | - | ##### Encapsulation Dot1q -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Port-Channel8.101 | to Dev02 Port-Channel8.101 - VRF-C1 | l3dot1q | - | 101 | -| Port-Channel100.101 | IFL for TENANT01 | l3dot1q | - | 101 | -| Port-Channel100.102 | IFL for TENANT02 | l3dot1q | - | 102 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Port-Channel8.101 | to Dev02 Port-Channel8.101 - VRF-C1 | - | 101 | - | +| Port-Channel100.101 | IFL for TENANT01 | - | 101 | - | +| Port-Channel100.102 | IFL for TENANT02 | - | 102 | 110 | ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -| Port-Channel111.1 | TENANT_A pseudowire 1 interface | l2dot1q | - | True | - | - | - | False | - | - | - | -| Port-Channel111.100 | TENANT_A pseudowire 2 interface | l2dot1q | - | False | 100 | - | - | True | - | - | - | -| Port-Channel111.200 | TENANT_A pseudowire 3 interface | l2dot1q | - | False | 200 | - | - | False | - | - | - | -| Port-Channel111.300 | TENANT_A pseudowire 4 interface | l2dot1q | - | False | 300 | - | - | False | 400 | - | - | -| Port-Channel111.400 | TENANT_A pseudowire 3 interface | l2dot1q | - | False | - | 400 | 20 | False | - | 401 | 21 | -| Port-Channel111.1000 | L2 Subinterface | l2dot1q | 1000 | False | 100 | - | - | True | - | - | - | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- | ------------ | ---------------------- | ---------------------- | +| Port-Channel111.1 | TENANT_A pseudowire 1 interface | - | unmatched | - | - | - | - | - | - | - | - | - | +| Port-Channel111.100 | TENANT_A pseudowire 2 interface | - | dot1q | - | 100 | - | - | client | - | - | - | - | +| Port-Channel111.200 | TENANT_A pseudowire 3 interface | - | dot1q | - | 200 | - | - | - | - | - | - | - | +| Port-Channel111.300 | TENANT_A pseudowire 4 interface | - | dot1q | - | 300 | - | - | dot1q | - | 400 | - | - | +| Port-Channel111.400 | TENANT_A pseudowire 3 interface | - | dot1q | - | - | 400 | 20 | dot1q | - | - | 401 | 21 | +| Port-Channel111.1000 | L2 Subinterface | 1000 | dot1q | - | 100 | - | - | client | - | - | - | - | +| Port-Channel131.1 | Test_encapsulation_vlan1 | - | dot1q | dot1q | - | 23 | 45 | dot1ad | dot1ad | - | 32 | 54 | +| Port-Channel131.2 | Test_encapsulation_vlan2 | - | dot1q | - | 10 | - | - | dot1q | - | - | 32 | 54 | +| Port-Channel131.3 | Test_encapsulation_vlan3 | - | dot1ad | - | 12 | - | - | dot1q | - | 25 | - | - | +| Port-Channel131.4 | Test_encapsulation_vlan4 | - | dot1ad | dot1q | - | 35 | 60 | dot1q | dot1ad | - | 53 | 6 | +| Port-Channel131.5 | Test_encapsulation_vlan5 | - | dot1ad | - | - | 35 | 60 | dot1ad | - | - | 52 | 62 | +| Port-Channel131.6 | Test_encapsulation_vlan6 | - | dot1ad | - | - | 35 | 60 | client | - | - | - | - | +| Port-Channel131.7 | Test_encapsulation_vlan7 | - | untagged | - | - | - | - | dot1ad | - | - | 35 | 60 | +| Port-Channel131.8 | Test_encapsulation_vlan8 | - | untagged | - | - | - | - | dot1q | - | - | 35 | 60 | +| Port-Channel131.9 | Test_encapsulation_vlan9 | - | untagged | - | - | - | - | untagged | - | - | - | - | +| Port-Channel131.10 | Test_encapsulation_vlan9 | - | dot1q | - | - | 14 | 11 | client inner | - | - | - | - | ##### Private VLAN | Interface | PVLAN Mapping | Secondary Trunk | | --------- | ------------- | ----------------| +| Port-Channel15 | - | False | +| Port-Channel100 | 20-30 | True | | Port-Channel101 | 111 | - | | Port-Channel103 | - | True | ##### VLAN Translations -| Interface | From VLAN ID(s) | To VLAN ID | Direction | -| --------- | --------------- | -----------| --------- | -| Port-Channel102 | 111-112 | 110 | out | +| Interface | Direction | From VLAN ID(s) | To VLAN ID | From Inner VLAN ID | To Inner VLAN ID | Network | Dot1q-tunnel | +| --------- | --------- | --------------- | ---------- | ------------------ | ---------------- | ------- | ------------ | +| Port-Channel16 | out | 23 | 22 | - | - | - | True | +| Port-Channel100 | both | 12 | 20 | - | - | - | - | +| Port-Channel100 | both | 23 | 42 | 74 | - | False | - | +| Port-Channel100 | both | 24 | 46 | 78 | - | True | - | +| Port-Channel100 | both | 43 | 30 | - | - | - | True | +| Port-Channel100 | in | 23 | 45 | - | - | - | True | +| Port-Channel100 | in | 34 | 23 | - | - | - | - | +| Port-Channel100 | in | 37 | 49 | - | 56 | - | - | +| Port-Channel100 | out | 10 | 45 | - | 34 | - | - | +| Port-Channel100 | out | 34 | 50 | - | - | - | - | +| Port-Channel100 | out | 45 | all | - | - | - | True | +| Port-Channel100 | out | 55 | - | - | - | - | - | +| Port-Channel102 | out | 111-112 | 110 | - | - | - | - | ##### EVPN Multihoming @@ -308,16 +334,16 @@ interface Ethernet50 ##### IPv4 -| Interface | Description | Type | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | ---- | ------- | ---------- | --- | --- | -------- | ------ | ------- | -| Port-Channel8.101 | to Dev02 Port-Channel8.101 - VRF-C1 | routed | - | 10.1.2.3/31 | default | - | - | - | - | -| Port-Channel9 | - | routed | - | 10.9.2.3/31 | default | - | - | - | - | -| Port-Channel17 | PBR Description | routed | - | 192.0.2.3/31 | default | - | - | - | - | -| Port-Channel99 | MCAST | routed | - | 192.0.2.10/31 | default | - | - | - | - | -| Port-Channel100.101 | IFL for TENANT01 | routed | - | 10.1.1.3/31 | default | 1500 | - | - | - | -| Port-Channel100.102 | IFL for TENANT02 | routed | - | 10.1.2.3/31 | C2 | 1500 | - | - | - | -| Port-Channel113 | interface_with_mpls_enabled | routed | - | 172.31.128.9/31 | default | - | - | - | - | -| Port-Channel114 | interface_with_mpls_disabled | routed | - | 172.31.128.10/31 | default | - | - | - | - | +| Interface | Description | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------- | ---------- | --- | --- | -------- | ------ | ------- | +| Port-Channel8.101 | to Dev02 Port-Channel8.101 - VRF-C1 | - | 10.1.2.3/31 | default | - | - | - | - | +| Port-Channel9 | - | - | 10.9.2.3/31 | default | - | - | - | - | +| Port-Channel17 | PBR Description | - | 192.0.2.3/31 | default | - | - | - | - | +| Port-Channel99 | MCAST | - | 192.0.2.10/31 | default | - | - | - | - | +| Port-Channel100.101 | IFL for TENANT01 | - | 10.1.1.3/31 | default | 1500 | - | - | - | +| Port-Channel100.102 | IFL for TENANT02 | - | 10.1.2.3/31 | C2 | 1500 | - | - | - | +| Port-Channel113 | interface_with_mpls_enabled | - | 172.31.128.9/31 | default | - | - | - | - | +| Port-Channel114 | interface_with_mpls_disabled | - | 172.31.128.10/31 | default | - | - | - | - | ##### IP NAT: Source Static @@ -355,20 +381,20 @@ interface Ethernet50 ! interface Port-Channel3 description MLAG_PEER_DC1-LEAF1B_Po3 - switchport switchport trunk allowed vlan 2-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport no snmp trap link-change shape rate 200000 kbps ! interface Port-Channel5 description DC1_L2LEAF1_Po1 bgp session tracker ST2 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport ip igmp host-proxy ip igmp host-proxy 239.0.0.1 ip igmp host-proxy 239.0.0.2 exclude 10.0.2.1 @@ -397,6 +423,7 @@ interface Port-Channel5 interface Port-Channel8 description to Dev02 Port-channel 8 no switchport + switchport port-security violation protect ! interface Port-Channel8.101 description to Dev02 Port-Channel8.101 - VRF-C1 @@ -414,9 +441,9 @@ interface Port-Channel9 ! interface Port-Channel10 description SRV01_bond0 - switchport switchport trunk allowed vlan 2-3000 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0404:0404:0303 route-target import 04:04:03:03:02:02 @@ -424,11 +451,11 @@ interface Port-Channel10 ! interface Port-Channel12 description interface_in_mode_access_with_voice - switchport switchport trunk native vlan 100 switchport phone vlan 70 switchport phone trunk untagged switchport mode trunk phone + switchport ! interface Port-Channel13 description EVPN-Vxlan single-active redundancy @@ -452,21 +479,27 @@ interface Port-Channel14 ! interface Port-Channel15 description DC1_L2LEAF3_Po1 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport mlag 15 spanning-tree guard loop link tracking group EVPN_MH_ES2 upstream ! interface Port-Channel16 description DC1_L2LEAF4_Po1 - switchport + switchport trunk native vlan 10 + switchport dot1q vlan tag disallowed switchport trunk allowed vlan 110,201 switchport mode trunk + switchport + switchport vlan translation out 23 dot1q-tunnel 22 snmp trap link-change mlag 16 + switchport port-security violation protect log + switchport port-security mac-address maximum 100 spanning-tree guard none + switchport backup-link Port-Channel100.102 prefer vlan 20 ! interface Port-Channel17 description PBR Description @@ -476,15 +509,16 @@ interface Port-Channel17 ! interface Port-Channel20 description Po_in_mode_access_accepting_tagged_LACP_frames - switchport switchport access vlan 200 + switchport mode access + switchport l2-protocol encapsulation dot1q vlan 200 ! interface Port-Channel50 description SRV-POD03_PortChanne1 - switchport switchport trunk allowed vlan 1-4000 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -492,9 +526,15 @@ interface Port-Channel50 ! interface Port-Channel51 description ipv6_prefix - switchport switchport trunk allowed vlan 1-500 switchport mode trunk + switchport + switchport port-security + no switchport port-security mac-address maximum disabled + switchport port-security vlan 1 mac-address maximum 3 + switchport port-security vlan 2 mac-address maximum 3 + switchport port-security vlan 3 mac-address maximum 3 + switchport port-security vlan default mac-address maximum 2 ipv6 nd prefix a1::/64 infinite infinite no-autoconfig ! interface Port-Channel99 @@ -510,40 +550,47 @@ interface Port-Channel99 ! interface Port-Channel100 logging event link-status + switchport access vlan 200 + switchport trunk native vlan tag + switchport phone vlan 110 + switchport phone trunk tagged + switchport vlan translation in required + switchport dot1q vlan tag required + switchport trunk allowed vlan 10-11 + switchport mode dot1q-tunnel + switchport dot1q ethertype 1536 + switchport vlan forwarding accept all + switchport trunk group g1 + switchport trunk group g2 no switchport - switchport tap native vlan 10 - switchport tap identity 3 - switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab - switchport tap mpls pop all - switchport tap encapsulation gre strip - switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip - switchport tap encapsulation gre protocol 0x0010 strip - switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0001 strip - switchport tap encapsulation gre destination 1.1.1.3 source 1.1.1.4 strip - switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip - switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet - switchport tool mpls pop all - switchport tool encapsulation vn-tag strip - switchport tool encapsulation dot1br strip - switchport tap allowed vlan 25 - switchport tool allowed vlan 23 - switchport tool identity qinq - switchport tool identity qinq source dzgre port inner policy - switchport tap truncation - switchport tool truncation 160 - switchport tap default group g1 group g2 group g3 - switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 - switchport tap default interface ethernet4 - switchport tap default interface port-channel10 - switchport tool group set group1 group2 group3 - switchport tool dot1q remove outer 1-2 - switchport tool dzgre preserve + switchport source-interface tx multicast + switchport vlan translation 12 20 + switchport vlan translation 23 inner 74 42 + switchport vlan translation 24 inner 78 network 46 + switchport vlan translation 43 dot1q-tunnel 30 + switchport vlan translation in 34 23 + switchport vlan translation in 37 inner 56 49 + switchport vlan translation in 23 dot1q-tunnel 45 + switchport vlan translation out 34 50 + switchport vlan translation out 10 45 inner 34 + switchport vlan translation out 45 dot1q-tunnel all + switchport trunk private-vlan secondary + switchport pvlan mapping 20-30 + switchport port-security + switchport port-security mac-address maximum disabled + switchport backup-link Port-channel51 + switchport backup preemption-delay 35 + switchport backup mac-move-burst 20 + switchport backup mac-move-burst-interval 30 + switchport backup initial-mac-move-delay 10 + switchport backup dest-macaddr 01:00:00:00:00:00 ! interface Port-Channel100.101 description IFL for TENANT01 logging event link-status mtu 1500 encapsulation dot1q vlan 101 + ip address 10.1.1.3/31 switchport tap identity 3 inner 10 switchport tap mac-address dest 01:00:00:00:00:00 switchport tap encapsulation vxlan strip @@ -551,43 +598,44 @@ interface Port-Channel100.101 switchport tool identity dot1q source dzgre policy switchport tap truncation 120 switchport tool truncation - ip address 10.1.1.3/31 ! interface Port-Channel100.102 description IFL for TENANT02 no logging event link-status logging event storm-control discards mtu 1500 - encapsulation dot1q vlan 102 + encapsulation dot1q vlan 102 inner 110 vrf C2 ip address 10.1.2.3/31 ! interface Port-Channel101 description PVLAN Promiscuous Access - only one secondary - switchport switchport access vlan 110 + switchport mode access + switchport switchport pvlan mapping 111 no qos trust ! interface Port-Channel102 description PVLAN Promiscuous Trunk - vlan translation out - switchport + switchport vlan translation out required switchport trunk allowed vlan 110-112 switchport mode trunk + switchport switchport vlan translation out 111-112 110 ! interface Port-Channel103 description PVLAN Secondary Trunk - switchport switchport trunk allowed vlan 110-112 switchport mode trunk + switchport switchport trunk private-vlan secondary ! interface Port-Channel104 description LACP fallback individual - switchport switchport trunk allowed vlan 112 switchport mode trunk + switchport port-channel lacp fallback timeout 300 port-channel lacp fallback individual ! @@ -615,8 +663,9 @@ interface Port-Channel108 ! interface Port-Channel109 description Molecule ACLs - switchport switchport access vlan 110 + switchport mode access + switchport ip access-group IPV4_ACL_IN in ip access-group IPV4_ACL_OUT out ipv6 access-group IPV6_ACL_IN in @@ -663,7 +712,7 @@ interface Port-Channel111.300 interface Port-Channel111.400 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 400 inner 20 network dot1q outer 21 inner 401 + client dot1q outer 400 inner 20 network dot1q outer 401 inner 21 ! interface Port-Channel111.1000 description L2 Subinterface @@ -677,9 +726,9 @@ interface Port-Channel111.1000 ! interface Port-Channel112 description LACP fallback individual - switchport switchport trunk allowed vlan 112 switchport mode trunk + switchport port-channel lacp fallback timeout 5 port-channel lacp fallback individual ! @@ -700,9 +749,9 @@ interface Port-Channel114 ! interface Port-Channel115 description native-vlan-tag-precedence - switchport switchport trunk native vlan tag switchport mode trunk + switchport ! interface Port-Channel117 description interface_with_sflow_ingress_egress_enabled @@ -730,12 +779,13 @@ interface Port-Channel120 ! interface Port-Channel121 description access_port_with_no_vlans + switchport mode access switchport ! interface Port-Channel122 description trunk_port_with_no_vlans - switchport switchport mode trunk + switchport ! interface Port-Channel130 description IP NAT Testing @@ -747,9 +797,89 @@ interface Port-Channel130 ! interface Port-Channel131 description dot1q-tunnel mode - switchport switchport access vlan 115 switchport mode dot1q-tunnel + switchport +! +interface Port-Channel131.1 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q outer 23 inner dot1q 45 network dot1ad outer 32 inner dot1ad 54 +! +interface Port-Channel131.2 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q 10 network dot1q outer 32 inner 54 +! +interface Port-Channel131.3 + description Test_encapsulation_vlan3 + encapsulation vlan + client dot1ad 12 network dot1q 25 +! +interface Port-Channel131.4 + description Test_encapsulation_vlan4 + encapsulation vlan + client dot1ad outer 35 inner dot1q 60 network dot1q outer 53 inner dot1ad 6 +! +interface Port-Channel131.5 + description Test_encapsulation_vlan5 + encapsulation vlan + client dot1ad outer 35 inner 60 network dot1ad outer 52 inner 62 +! +interface Port-Channel131.6 + description Test_encapsulation_vlan6 + encapsulation vlan + client dot1ad outer 35 inner 60 network client +! +interface Port-Channel131.7 + description Test_encapsulation_vlan7 + encapsulation vlan + client untagged network dot1ad outer 35 inner 60 +! +interface Port-Channel131.8 + description Test_encapsulation_vlan8 + encapsulation vlan + client untagged network dot1q outer 35 inner 60 +! +interface Port-Channel131.9 + description Test_encapsulation_vlan9 + encapsulation vlan + client untagged network untagged +! +interface Port-Channel131.10 + description Test_encapsulation_vlan9 + encapsulation vlan + client dot1q outer 14 inner 11 network client inner +! +interface Port-Channel132 + description Test_switchport_tap_tool + switchport tap native vlan 10 + switchport tap identity 3 + switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab + switchport tap mpls pop all + switchport tap encapsulation gre strip + switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip + switchport tap encapsulation gre protocol 0x0010 strip + switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0001 strip + switchport tap encapsulation gre destination 1.1.1.3 source 1.1.1.4 strip + switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip + switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet + switchport tool mpls pop all + switchport tool encapsulation vn-tag strip + switchport tool encapsulation dot1br strip + switchport tap allowed vlan 25 + switchport tool allowed vlan 23 + switchport tool identity qinq + switchport tool identity qinq source dzgre port inner policy + switchport tap truncation + switchport tool truncation 160 + switchport tap default group g1 group g2 group g3 + switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 + switchport tap default interface ethernet4 + switchport tap default interface port-channel10 + switchport tool group set group1 group2 group3 + switchport tool dot1q remove outer 1-2 + switchport tool dzgre preserve ``` ## BFD diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prefix-lists.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prefix-lists.md index e11019e1c2c..843d1b9f9d6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prefix-lists.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prefix-lists.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt-2.md index a311cb612e9..7c549b85e66 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt-2.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt.md index 7827373c1a2..3f107dff637 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/prompt.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ptp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ptp.md index 05be6cc1f6b..a985d67b1ea 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ptp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/ptp.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -52,28 +52,28 @@ PTP Profile: g8275.1 ```eos ! ptp clock-identity 11:11:11:11:11:11 -ptp source ip 1.1.2.3 +ptp domain 17 +ptp message-type event dscp 46 default +ptp message-type general dscp 36 default +ptp mode boundary one-step ptp priority1 101 ptp priority2 102 ptp profile g8275.1 +ptp source ip 1.1.2.3 ptp ttl 12 -ptp domain 17 -ptp message-type general dscp 36 default -ptp message-type event dscp 46 default -ptp mode boundary one-step ptp forward-unicast ptp monitor threshold offset-from-master 11 ptp monitor threshold mean-path-delay 12 -ptp monitor threshold offset-from-master 13 nanoseconds drop ptp monitor threshold mean-path-delay 14 nanoseconds drop -ptp monitor threshold missing-message announce 101 intervals -ptp monitor threshold missing-message follow-up 102 intervals +ptp monitor threshold offset-from-master 13 nanoseconds drop ptp monitor threshold missing-message sync 103 intervals +ptp monitor threshold missing-message follow-up 102 intervals +ptp monitor threshold missing-message announce 101 intervals ptp monitor sequence-id -ptp monitor threshold missing-message announce 201 sequence-ids -ptp monitor threshold missing-message delay-resp 202 sequence-ids -ptp monitor threshold missing-message follow-up 203 sequence-ids ptp monitor threshold missing-message sync 204 sequence-ids +ptp monitor threshold missing-message follow-up 203 sequence-ids +ptp monitor threshold missing-message delay-resp 202 sequence-ids +ptp monitor threshold missing-message announce 201 sequence-ids ``` ## Interfaces @@ -86,16 +86,16 @@ ptp monitor threshold missing-message sync 204 sequence-ids | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | trunk | 2,14 | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | trunk | 2,14 | - | - | - | | Ethernet5 | DC1-AGG01_Ethernet1 | *trunk | *110,201 | *- | *- | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet6 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.15/31 | default | 1500 | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet6 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.15/31 | default | 1500 | - | - | - | #### Ethernet Interfaces Device Configuration @@ -139,9 +139,9 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | DC1_L2LEAF1_Po1 | switched | trunk | 110,201 | - | - | - | - | 5 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | DC1_L2LEAF1_Po1 | trunk | 110,201 | - | - | - | - | 5 | - | #### Port-Channel Interfaces Device Configuration @@ -149,9 +149,9 @@ interface Ethernet6 ! interface Port-Channel5 description DC1_L2LEAF1_Po1 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport mlag 5 ptp enable ptp mpass diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/qos.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/qos.md index 7f2fd8751d7..dbd61fd888e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/qos.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/qos.md @@ -28,20 +28,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -56,18 +56,18 @@ interface Management1 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | MLAG_PEER_DC1-LEAF1B_Ethernet3 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-LEAF1B_Ethernet4 | *trunk | *2-4094 | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet6 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | -| Ethernet7 | Test-with-policymap | trunk | 110-111,210-211 | - | - | - | +| Ethernet3 | MLAG_PEER_DC1-LEAF1B_Ethernet3 | *trunk | *2-4094 | *- | *LEAF_PEER_L3, MLAG | 3 | +| Ethernet4 | MLAG_PEER_DC1-LEAF1B_Ethernet4 | *trunk | *2-4094 | *- | *LEAF_PEER_L3, MLAG | 3 | +| Ethernet6 | SRV-POD02_Eth1 | trunk | 110-111,210-211 | - | - | - | +| Ethernet7 | Test-with-policymap | trunk | 110-111,210-211 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | - | - | - | #### Ethernet Interfaces Device Configuration @@ -120,9 +120,9 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | MLAG_PEER_DC1-LEAF1B_Po3 | switched | trunk | 2-4094 | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | MLAG_PEER_DC1-LEAF1B_Po3 | trunk | 2-4094 | - | LEAF_PEER_L3, MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -130,11 +130,11 @@ interface Ethernet7 ! interface Port-Channel3 description MLAG_PEER_DC1-LEAF1B_Po3 - switchport switchport trunk allowed vlan 2-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport qos trust cos qos cos 2 service-profile experiment @@ -699,8 +699,8 @@ Priority Flow Control is **Off** on all interfaces. ```eos ! priority-flow-control all off -priority-flow-control pause watchdog action no-drop priority-flow-control pause watchdog default timeout 0.05 -priority-flow-control pause watchdog default polling-interval 10.001 priority-flow-control pause watchdog default recovery-time 1.22 +priority-flow-control pause watchdog default polling-interval 10.001 +priority-flow-control pause watchdog action no-drop ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length-notifying.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length-notifying.md index 65f6c096ff8..e5a1c9beff1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length-notifying.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length-notifying.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -49,6 +49,6 @@ interface Management1 ```eos ! queue-monitor length -queue-monitor length default threshold 100 no queue-monitor length notifying +queue-monitor length default threshold 100 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length.md index 3c320c99e2c..9c02c148a41 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-length.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -49,9 +49,10 @@ interface Management1 ```eos ! queue-monitor length -queue-monitor length default thresholds 100 10 -queue-monitor length log 100 queue-monitor length notifying queue-monitor length tx-latency +queue-monitor length default thresholds 100 10 queue-monitor length cpu thresholds 200000 100000 +! +queue-monitor length log 100 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-streaming.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-streaming.md index 94e66de07e4..56d1e6ab709 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-streaming.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/queue-monitor-streaming.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server-2.md index 56c6313c1a0..1153843aa60 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server.md index 9cb866b3021..2f06f1d6896 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/radius-server.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/redundancy.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/redundancy.md index 3e40592be27..ebe8038859a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/redundancy.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/redundancy.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/roles.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/roles.md index ecb5a0c1e20..03db8769308 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/roles.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/roles.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/route-maps.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/route-maps.md index 6db29977e4d..625ec4bee10 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/route-maps.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/route-maps.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology-2.md new file mode 100644 index 00000000000..4db2e262568 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology-2.md @@ -0,0 +1,54 @@ +# router-adaptive-virtual-topology-2 + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Routing](#routing) + - [Router Adaptive Virtual Topology](#router-adaptive-virtual-topology) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Routing + +### Router Adaptive Virtual Topology + +#### Router Adaptive Virtual Topology Summary + +Topology role: edge + +VXLAN gateway: Enabled + +#### Router Adaptive Virtual Topology Configuration + +```eos +! +router adaptive-virtual-topology + topology role edge gateway vxlan +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology.md index ad6e8a77c2b..4e40f827e68 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-adaptive-virtual-topology.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -41,7 +41,7 @@ interface Management1 #### Router Adaptive Virtual Topology Summary -Topology role: transit region +Topology role: pathfinder | Hierarchy | Name | ID | | --------- | ---- | -- | @@ -94,7 +94,7 @@ Topology role: transit region ```eos ! router adaptive-virtual-topology - topology role transit region + topology role pathfinder region North_America id 1 zone Canada id 2 site Ottawa id 99 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-1.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-1.md index b8f454a09f6..532f3da98b1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-1.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-1.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-2.md index 7c6b912efe0..9a0f896bbd4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bfd-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-asdot.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-asdot.md index d4d2158f1b1..de700059930 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-asdot.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-asdot.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-base.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-base.md index ab0c3cc2a14..313b509b99b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-base.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-base.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-mpls.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-mpls.md index 4a932182f62..a4b663331bd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-mpls.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-mpls.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -87,7 +87,7 @@ ASN Notation: asplain #### Router BGP EVPN Address Family -- Next-hop MPLS resolution Primary-RIB : tunnel-rib-colored system-colored-tunnel-rib +- Next-hop MPLS resolution Primary-RIB : tunnel-rib colored system-colored-tunnel-rib - Next-hop MPLS resolution Secondary-RIB : tunnel-rib test-rib - Next-hop MPLS resolution Tertiary-RIB : system-connected - Layer-2 In-place FEC update tracking timeout: 100 seconds @@ -98,6 +98,13 @@ ASN Notation: asplain | ---------- | -------- | ------------- | | EVPN-OVERLAY-PEERS | True | default | +##### EVPN Neighbors + +| Neighbor | Activate | Encapsulation | +| -------- | -------- | ------------- | +| 192.168.255.3 | True | default | +| 192.168.255.4 | False | default | + ##### EVPN Neighbor Default Encapsulation | Neighbor Default Encapsulation | Next-hop-self Source Interface | @@ -133,7 +140,7 @@ router bgp 65101 address-family evpn bgp additional-paths send limit 10 neighbor default encapsulation mpls next-hop-self source-interface Loopback0 - next-hop mpls resolution ribs tunnel-rib-colored system-colored-tunnel-rib tunnel-rib test-rib system-connected + next-hop mpls resolution ribs tunnel-rib colored system-colored-tunnel-rib tunnel-rib test-rib system-connected neighbor EVPN-OVERLAY-PEERS activate neighbor 192.168.255.3 activate neighbor 192.168.255.4 rcf in Address_Family_EVPN_In() diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-vpn-import-pruning.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-vpn-import-pruning.md index 5a2c891f40f..12f92c296df 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-vpn-import-pruning.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn-vpn-import-pruning.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn.md index 80a41884d31..bc092a4d884 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-evpn.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -117,6 +117,24 @@ ASN Notation: asplain | ADDITIONAL-PATH-PG-6 | True | default | | EVPN-OVERLAY-PEERS | True | vxlan | | MLAG-IPv4-UNDERLAY-PEER | False | default | +| TEST-ENCAPSULATION | True | mpls | +| TEST-ENCAPSULATION-2 | True | path-selection | + +##### EVPN Neighbors + +| Neighbor | Activate | Encapsulation | +| -------- | -------- | ------------- | +| 10.100.100.1 | True | default | +| 10.100.100.2 | True | default | +| 10.100.100.3 | True | default | +| 10.100.100.4 | True | path-selection | +| 10.100.100.5 | True | mpls | + +##### EVPN Neighbor Default Encapsulation + +| Neighbor Default Encapsulation | Next-hop-self Source Interface | +| ------------------------------ | ------------------------------ | +| path-selection | - | ##### EVPN Host Flapping Settings @@ -257,6 +275,7 @@ router bgp 65101 bgp next-hop-unchanged host-flap detection window 10 threshold 1 expiry timeout 3 seconds domain identifier 65101:0 + neighbor default encapsulation path-selection neighbor ADDITIONAL-PATH-PG-1 activate neighbor ADDITIONAL-PATH-PG-1 additional-paths receive neighbor ADDITIONAL-PATH-PG-1 additional-paths send any @@ -275,12 +294,20 @@ router bgp 65101 neighbor EVPN-OVERLAY-PEERS domain remote neighbor EVPN-OVERLAY-PEERS encapsulation vxlan no neighbor MLAG-IPv4-UNDERLAY-PEER activate + neighbor TEST-ENCAPSULATION activate + neighbor TEST-ENCAPSULATION encapsulation mpls + neighbor TEST-ENCAPSULATION-2 activate + neighbor TEST-ENCAPSULATION-2 encapsulation path-selection neighbor 10.100.100.1 activate neighbor 10.100.100.1 default-route neighbor 10.100.100.2 activate neighbor 10.100.100.2 default-route route-map RM_DEFAULT_ROUTE neighbor 10.100.100.3 activate neighbor 10.100.100.3 default-route rcf RCF_DEFAULT_ROUTE() + neighbor 10.100.100.4 activate + neighbor 10.100.100.4 encapsulation path-selection + neighbor 10.100.100.5 activate + neighbor 10.100.100.5 encapsulation mpls next-hop resolution disabled neighbor default next-hop-self received-evpn-routes route-type ip-prefix inter-domain route import ethernet-segment ip mass-withdraw diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-ipv4-labeled-unicast.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-ipv4-labeled-unicast.md new file mode 100644 index 00000000000..a416c8b5e0a --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-ipv4-labeled-unicast.md @@ -0,0 +1,106 @@ +# router-bgp-ipv4-labeled-unicast + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Routing](#routing) + - [Router BGP](#router-bgp) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Routing + +### Router BGP + +ASN Notation: asplain + +#### Router BGP Summary + +| BGP AS | Router ID | +| ------ | --------- | +| 65101 | - | + +#### Router BGP IPv4 Labeled Unicast + +##### General Settings + +| Settings | Value | +| -------- | ----- | +| Update wait-for-convergence | Enabled | +| Next-hop Unchanged | True | +| Label local-termination | implicit-null | + +##### IPv4 BGP-LU Peer-groups + +| Peer-group | Activate | Route-map In | Route-map Out | RCF In | RCF Out | +| ---------- | -------- | ------------ | ------------- | ------ | ------- | +| PG-BGP-LU | True | - | - | - | - | + +##### IPv4 BGP-LU Neighbors + +| Neighbor | Activate | Route-map In | Route-map Out | RCF In | RCF Out | +| -------- | -------- | ------------ | ------------- | ------ | ------- | +| 198.51.100.1 | True | - | - | RCF_TEST(ARGS) | - | +| 198.51.100.2 | False | - | RM_OUT_TEST | - | - | + +#### Router BGP Device Configuration + +```eos +! +router bgp 65101 + ! + address-family ipv4 labeled-unicast + update wait-for-convergence + bgp missing-policy include community-list direction in action deny + bgp additional-paths receive + bgp additional-paths send ecmp limit 20 + bgp next-hop-unchanged + next-hop resolution ribs tunnel-rib colored system-colored-tunnel-rib tunnel-rib test-rib system-connected + neighbor PG-BGP-LU activate + neighbor 198.51.100.1 activate + neighbor 198.51.100.1 additional-paths receive + neighbor 198.51.100.1 graceful-restart + neighbor 198.51.100.1 rcf in RCF_TEST(ARGS) + neighbor 198.51.100.1 additional-paths send ecmp + neighbor 198.51.100.1 maximum-advertised-routes 0 + no neighbor 198.51.100.2 activate + neighbor 198.51.100.2 graceful-restart-helper stale-route route-map RM_STALE + neighbor 198.51.100.2 route-map RM_OUT_TEST out + neighbor 198.51.100.2 next-hop-unchanged + neighbor 198.51.100.2 aigp-session + neighbor 198.51.100.2 multi-path + network 203.0.113.0/25 route-map RM-TEST + network 203.0.113.128/25 + label local-termination implicit-null + tunnel source-protocol isis segment-routing + tunnel source-protocol ldp rcf TEST(ARGS) + aigp-session confederation + aigp-session ebgp +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-link-state.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-link-state.md index 490fe918a8c..ebf5d9c75ff 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-link-state.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-link-state.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-path-selection.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-path-selection.md index cc59cf2c864..e8243c0df02 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-path-selection.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-path-selection.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-rtc.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-rtc.md index 6fc732d69d1..8489129addc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-rtc.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-rtc.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-evpn.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-evpn.md index a83a24ae802..4c213ad84b5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-evpn.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-evpn.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-evpn.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-evpn.md index 766a2e38fc1..3d92930df65 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-evpn.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-evpn.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-sr-te.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-sr-te.md index 2625cbdfadf..bd5556ff058 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-sr-te.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-v4-v6-sr-te.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpn-ipv4-vpn-ipv6.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpn-ipv4-vpn-ipv6.md index ec423598384..ad3bf1343db 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpn-ipv4-vpn-ipv6.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpn-ipv4-vpn-ipv6.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpws.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpws.md index 7299181d36e..02af69f11af 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpws.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vpws.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-address-families.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-address-families.md index a946f78b25b..c6c200828d4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-address-families.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-address-families.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-lite.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-lite.md index 847fa98a1c6..6b6987cea34 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-lite.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-bgp-vrf-lite.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-general.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-general.md index af14e357759..314e2639837 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-general.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-general.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-igmp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-igmp.md index 6e83513152f..6453c0cfd08 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-igmp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-igmp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-internet-exit.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-internet-exit.md index c770344a5df..66f19fcfa2a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-internet-exit.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-internet-exit.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -58,31 +58,30 @@ interface Management1 ```eos ! router internet-exit - ! - exit-group eg_01 - ! - exit-group eg_02 - fib-default - ! - exit-group eg_03 - local connection eg_03_lo_01 - local connection eg_03_lo_02 - fib-default - ! - exit-group eg_04 - local connection eg_04_lo_01 - local connection eg_04_lo_02 - local connection eg_04_lo_03 - ! - policy po_01 - exit-group po_eg_01_02 - exit-group po_eg_01_04 - exit-group po_eg_01_01 - exit-group po_eg_01_03 - exit-group system-default-exit-group - ! - policy po_02 - ! - policy po_03 - exit-group po_eg_03_01 + exit-group eg_01 + ! + exit-group eg_02 + fib-default + ! + exit-group eg_03 + local connection eg_03_lo_01 + local connection eg_03_lo_02 + fib-default + ! + exit-group eg_04 + local connection eg_04_lo_01 + local connection eg_04_lo_02 + local connection eg_04_lo_03 + ! + policy po_01 + exit-group po_eg_01_02 + exit-group po_eg_01_04 + exit-group po_eg_01_01 + exit-group po_eg_01_03 + exit-group system-default-exit-group + ! + policy po_02 + ! + policy po_03 + exit-group po_eg_03_01 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-1.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-1.md index 55b2fdd540c..0f470a2ad71 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-1.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-1.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-2.md index 7d2e94afa4a..49dd5658bc0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-new.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-new.md index 6768c4a09b6..6573a0ed6a6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-new.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis-new.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.254.11/24 | 10.73.254.253 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.254.11/24 | 10.73.254.253 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.254.11/24 ``` @@ -54,10 +54,10 @@ interface Management1 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_EAPI-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | - | - | - | -| Ethernet2 | P2P_LINK_TO_EAPI-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_EAPI-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | - | - | - | +| Ethernet2 | P2P_LINK_TO_EAPI-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | - | - | - | ##### ISIS @@ -155,9 +155,9 @@ interface Loopback1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | - | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | - | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis.md index f51311b1269..0f7bf919d82 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-isis.md @@ -22,20 +22,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.254.11/24 | 10.73.254.253 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.254.11/24 | 10.73.254.253 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.254.11/24 ``` @@ -55,13 +55,13 @@ interface Management1 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_EAPI-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | - | - | - | -| Ethernet2 | P2P_LINK_TO_EAPI-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | - | - | - | -| Ethernet4 | - | *routed | 4 | *10.9.2.3/31 | **default | **- | **- | **- | **- | -| Ethernet5 | - | *routed | 5 | *10.9.2.5/31 | **default | **- | **- | **- | **- | -| Ethernet6 | - | *routed | 6 | *10.9.2.7/31 | **default | **- | **- | **- | **- | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_EAPI-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | - | - | - | +| Ethernet2 | P2P_LINK_TO_EAPI-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | - | - | - | +| Ethernet4 | - | 4 | *10.9.2.3/31 | **default | **- | **- | **- | **- | +| Ethernet5 | - | 5 | *10.9.2.5/31 | **default | **- | **- | **- | **- | +| Ethernet6 | - | 6 | *10.9.2.7/31 | **default | **- | **- | **- | **- | *Inherited from Port-Channel Interface @@ -120,16 +120,16 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | ##### IPv4 -| Interface | Description | Type | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | ---- | ------- | ---------- | --- | --- | -------- | ------ | ------- | -| Port-Channel4 | - | routed | - | 10.9.2.3/31 | default | - | - | - | - | -| Port-Channel5 | - | routed | - | 10.9.2.5/31 | default | - | - | - | - | -| Port-Channel6 | - | routed | - | 10.9.2.7/31 | default | - | - | - | - | +| Interface | Description | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------- | ---------- | --- | --- | -------- | ------ | ------- | +| Port-Channel4 | - | - | 10.9.2.3/31 | default | - | - | - | - | +| Port-Channel5 | - | - | 10.9.2.5/31 | default | - | - | - | - | +| Port-Channel6 | - | - | 10.9.2.7/31 | default | - | - | - | - | ##### ISIS @@ -213,11 +213,11 @@ interface Loopback1 interface Loopback2 description ISIS-SR Node-SID ip address 10.1.255.3/32 - isis enable EVPN_UNDERLAY - isis passive - isis metric 50 node-segment ipv4 index 10 node-segment ipv6 index 1000 + isis enable EVPN_UNDERLAY + isis metric 50 + isis passive ``` ### VLAN Interfaces @@ -240,9 +240,9 @@ interface Loopback2 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | - | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | - | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-l2-vpn.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-l2-vpn.md index b661d77522f..eddf0dbe199 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-l2-vpn.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-l2-vpn.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-msdp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-msdp.md index bc3ff3f7f3c..061ad5c30e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-msdp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-msdp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-multicast.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-multicast.md index 91286566d40..cb009a7b627 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-multicast.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-multicast.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-ospf.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-ospf.md index 0879d376155..da6c94507cc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-ospf.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-ospf.md @@ -22,20 +22,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -72,8 +72,8 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | #### Port-Channel Interfaces Device Configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-path-selection.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-path-selection.md index 6df2d3543d9..dc4e6027136 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-path-selection.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-path-selection.md @@ -16,20 +16,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -91,6 +91,8 @@ interface Management1 | Ethernet2/4.666 | - | | | Ethernet3 | - | STUN-P-1 | | Ethernet4.666 | - | | +| Port-Channel1 | 192.168.42.43 | STUN-P-1
STUN-P-2 | +| Port-Channel4.666 | - | | ###### Local IPs @@ -200,6 +202,11 @@ router path-selection ! local interface Ethernet4.666 ! + local interface Port-Channel1 public address 192.168.42.43 + stun server-profile STUN-P-1 STUN-P-2 + ! + local interface Port-Channel4.666 + ! local ip 192.168.1.100 public address 192.168.42.42 stun server-profile STUN-P-1 STUN-P-2 ! @@ -216,16 +223,16 @@ router path-selection load-balance policy LB-EMPTY ! load-balance policy LB-P-1 - hop count lowest loss-rate 17 + hop count lowest path-group PG-5 path-group PG-2 priority 42 path-group PG-4 priority 42 path-group PG-3 priority 666 ! load-balance policy LB-P-2 - jitter 666 latency 42 + jitter 666 loss-rate 42.42 path-group PG-1 priority 1 path-group PG-3 @@ -233,6 +240,7 @@ router path-selection policy DPS-P-1 default-match load-balance LB-P-1 + ! 42 application-profile AP-3 load-balance LB-P-1 ! @@ -242,6 +250,7 @@ router path-selection ! policy DPS-P-3 42 application-profile AP-2 + ! 66 application-profile AP-1 load-balance LB-P-1 ! diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-pim-sparse-mode.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-pim-sparse-mode.md index a5059553952..89178293a5d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-pim-sparse-mode.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-pim-sparse-mode.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -50,6 +50,7 @@ BFD enabled: True | Rendezvous Point Address | Group Address | Access Lists | Priority | Hashmask | Override | | ------------------------ | ------------- | ------------ | -------- | -------- | -------- | | 10.238.1.161 | 239.12.12.12/32, 239.12.12.13/32, 239.12.12.14/32, 239.12.12.16/32, 239.12.12.20/32, 239.12.12.21/32 | RP_ACL, RP_ACL2 | 20 | - | - | +| 10.238.1.161 | 239.12.12.17/32 | RP_ACL3 | - | - | - | ##### IP Anycast Information @@ -78,6 +79,7 @@ BFD enabled: True ! router pim sparse-mode ipv4 + ssm range standard bfd rp address 10.238.1.161 239.12.12.12/32 priority 20 rp address 10.238.1.161 239.12.12.13/32 priority 20 @@ -87,8 +89,9 @@ router pim sparse-mode rp address 10.238.1.161 239.12.12.21/32 priority 20 rp address 10.238.1.161 access-list RP_ACL priority 20 rp address 10.238.1.161 access-list RP_ACL2 priority 20 + rp address 10.238.1.161 239.12.12.17/32 + rp address 10.238.1.161 access-list RP_ACL3 anycast-rp 10.38.1.161 10.50.64.16 register-count 15 - ssm range standard ! vrf MCAST_VRF1 ipv4 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-segment-security.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-segment-security.md index 41a0027e578..fbe5442c5b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-segment-security.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-segment-security.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-service-insertion.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-service-insertion.md index 4344505527f..58988e09ad7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-service-insertion.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-service-insertion.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-traffic-engineering.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-traffic-engineering.md index a47c46b8148..4866bb0c05b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-traffic-engineering.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/router-traffic-engineering.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-configuration-bgp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-configuration-bgp.md index 7763ad6ff2a..df1a454a4f8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-configuration-bgp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-configuration-bgp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model-2.md index e800a3bc4b6..6570fb8da70 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model-2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model-2.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model.md index 5e775176c54..4cebabe40d5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/service-routing-protocols-model.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sflow.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sflow.md index 84d0f27be7d..c8b9626a812 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sflow.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sflow.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -98,7 +98,6 @@ sFlow hardware accelerated Sample Rate: 1024 ```eos ! sflow sample dangerous 1000 -sflow sample input subinterface sflow polling-interval 10 sflow vrf AAA destination 10.6.75.62 123 sflow vrf AAA destination 10.6.75.63 333 @@ -114,6 +113,7 @@ sflow vrf MGMT source-interface Ethernet3 sflow destination 10.6.75.61 sflow destination 10.6.75.62 123 sflow source-interface Management0 +sflow sample input subinterface sflow sample output subinterface sflow extension bgp sflow extension router diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp-server-traps.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp-server-traps.md index 19cca202c83..8e47e0237b6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp-server-traps.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp-server-traps.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp.md index bdc888b27a6..7e4bbcf03e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/snmp.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -129,42 +129,43 @@ interface Management1 ```eos ! -snmp-server engineID local 424242424242424242 -snmp-server contact DC1_OPS -snmp-server location DC1 -snmp-server engineID remote 1.1.1.1 6172697374615F6970 -snmp-server engineID remote 2.2.2.2 udp-port 1337 DEADBEEFCAFE123456 snmp-server ipv4 access-list SNMP-MGMT vrf MGMT snmp-server ipv4 access-list onur snmp-server ipv6 access-list SNMP-MGMT vrf MGMT snmp-server ipv6 access-list onur_v6 -snmp-server vrf MGMT local-interface Management1 +snmp-server engineID local 424242424242424242 +snmp-server contact DC1_OPS +snmp-server location DC1 snmp-server local-interface Loopback0 snmp-server vrf Tenant_A_APP_Zone local-interface Loopback12 -snmp-server view VW-WRITE iso included +snmp-server vrf MGMT local-interface Management1 snmp-server view VW-READ iso included +snmp-server view VW-WRITE iso included snmp-server community ro onur snmp-server community view VW-READ rw ipv6 SNMP-MGMT SNMP-MGMT snmp-server community ro snmp-server group GRP-READ-ONLY v3 priv read v3read snmp-server group GRP-READ-WRITE v3 auth read v3read write v3write -snmp-server user USER-READ-NO-AUTH-NO-PRIV GRP-READ-ONLY v3 +snmp-server user REMOTE-USER-IP-LOCALIZED GRP-REMOTE remote 42.42.42.42 v3 localized DEADBEEFCAFE123456 auth sha +snmp-server user REMOTE-USER-IP-ONLY GRP-REMOTE remote 42.42.42.42 v3 +snmp-server user REMOTE-USER-IP-PORT GRP-REMOTE remote 42.42.42.42 udp-port 666 v3 snmp-server user USER-READ-AUTH-NO-PRIV GRP-READ-ONLY v3 auth sha -snmp-server user USER-READ-AUTH-PRIV GRP-READ-ONLY v3 auth sha priv aes -snmp-server user USER-READ-NO-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 snmp-server user USER-READ-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 localized 424242424242424242 auth sha +snmp-server user USER-READ-AUTH-PRIV GRP-READ-ONLY v3 auth sha priv aes snmp-server user USER-READ-AUTH-PRIV-LOC GRP-READ-ONLY v3 localized 424242424242424242 auth sha priv aes +snmp-server user USER-READ-NO-AUTH-NO-PRIV GRP-READ-ONLY v3 +snmp-server user USER-READ-NO-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 snmp-server user USER-WRITE GRP-READ-WRITE v3 auth sha priv aes -snmp-server user REMOTE-USER-IP-ONLY GRP-REMOTE remote 42.42.42.42 v3 -snmp-server user REMOTE-USER-IP-PORT GRP-REMOTE remote 42.42.42.42 udp-port 666 v3 -snmp-server user REMOTE-USER-IP-LOCALIZED GRP-REMOTE remote 42.42.42.42 v3 localized DEADBEEFCAFE123456 auth sha -snmp-server host 10.6.75.121 vrf MGMT version 1 -snmp-server host 10.6.75.121 vrf MGMT version 2c -snmp-server host 10.6.75.122 vrf MGMT version 2c +snmp-server engineID remote 1.1.1.1 6172697374615F6970 +snmp-server engineID remote 2.2.2.2 udp-port 1337 DEADBEEFCAFE123456 snmp-server host 10.6.75.99 vrf MGMT version 3 auth USER-READ-AUTH-NO-PRIV snmp-server host 10.6.75.99 vrf MGMT version 3 auth USER-WRITE snmp-server host 10.6.75.100 vrf MGMT version 3 priv USER-READ-AUTH-PRIV +snmp-server host 10.6.75.121 vrf MGMT version 1 +snmp-server host 10.6.75.121 vrf MGMT version 2c +snmp-server host 10.6.75.122 vrf MGMT version 2c snmp-server enable traps no snmp-server vrf default snmp-server vrf MGMT +snmp-server ifmib ifspeed shape-rate ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-bpdu.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-bpdu.md index 9e2683d2d2b..52e3bbdf76f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-bpdu.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-bpdu.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rapid-pvst.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rapid-pvst.md index da1d5b28b08..e55f6c0d83b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rapid-pvst.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rapid-pvst.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rstp.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rstp.md index a25c4aaa58e..e141d469f88 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rstp.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree-rstp.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree.md index e7f5a87b373..9d36b40852b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/spanning-tree.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/static-routes.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/static-routes.md index 0a6dfd6de31..af3d485e50c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/static-routes.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/static-routes.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/stun.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/stun.md index c3aad497068..2bb9cd956df 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/stun.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/stun.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-mode.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-mode.md index cdf5e2f6331..2ee3acd31eb 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-mode.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-mode.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-port-security.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-port-security.md index 648da4de014..3b2a8d1a6ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-port-security.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/switchport-port-security.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sync-e.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sync-e.md index 17fd9ab9f6f..ddd2fa8499d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sync-e.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/sync-e.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -58,15 +58,15 @@ sync-e | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | trunk | 2,14 | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | trunk | 2,14 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet6 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.15/31 | default | 1500 | - | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet6 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.15/31 | default | 1500 | - | - | - | #### Synchronous Ethernet diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/system.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/system.md index e1a7a78d3af..feca39283ba 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/system.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/system.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -52,9 +52,11 @@ interface Management1 | -------- | --- | ------------| | IPv4 | default | acl4_1 | | IPv4 | red | acl4_2 | +| IPv4 | red_1 | acl4_2 | | IPv4 | default | acl4_3 | | IPv6 | default | acl6_1 | | IPv6 | blue | acl6_2 | +| IPv6 | blue_1 | acl6_2 | | IPv6 | default | acl6_3 | #### System Control-Plane Device Configuration @@ -65,9 +67,11 @@ system control-plane tcp mss ceiling ipv4 1344 ipv6 1366 ip access-group acl4_1 in ip access-group acl4_2 vrf red in + ip access-group acl4_2 vrf red_1 in ip access-group acl4_3 vrf default in ipv6 access-group acl6_1 in ipv6 access-group acl6_2 vrf blue in + ipv6 access-group acl6_2 vrf blue_1 in ipv6 access-group acl6_3 vrf default in ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tap-aggregation.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tap-aggregation.md index e63564b1884..d4ae53f10a3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tap-aggregation.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tap-aggregation.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tcam-profile.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tcam-profile.md index 2f5c1b0da76..300df142d85 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tcam-profile.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tcam-profile.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminal.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminal.md index 296848cf17f..04e12f9fb78 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminal.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminal.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-cloud.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-cloud.md index 07e15b5eac9..4d9422dd834 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-cloud.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-cloud.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-extra-flags.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-extra-flags.md index b790dcbd695..30030ee1bae 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-extra-flags.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-extra-flags.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster-certs.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster-certs.md index 2a665fa4d00..879ff2f4e0b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster-certs.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster-certs.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster.md index 06a45399a62..a5c29ea845d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-multi-cluster.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-certs.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-certs.md index 804c2b808c6..ca4240ef3e1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-certs.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-certs.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-token.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-token.md index 46f4cb6acee..719b3547081 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-token.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-onprem-token.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-disableaaa.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-disableaaa.md index a272d31966b..4e2254435fa 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-disableaaa.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-disableaaa.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-no-ingestkey.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-no-ingestkey.md index 2b33230c522..91da9f8cfaa 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-no-ingestkey.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem-no-ingestkey.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem.md index 7483776f21c..b760e8b5d1b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/terminattr-prem.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-2.md new file mode 100644 index 00000000000..18504850286 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-2.md @@ -0,0 +1,76 @@ +# traffic-policies-2 + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Interfaces](#interfaces) + - [Port-Channel Interfaces](#port-channel-interfaces) + - [Traffic Policies information](#traffic-policies-information) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Interfaces + +### Port-Channel Interfaces + +#### Port-Channel Interfaces Summary + +##### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | + +#### Port-Channel Interfaces Device Configuration + +```eos +! +interface Port-Channel2 + no switchport +``` + +### Traffic Policies information + +#### IPv6 Field Sets + +| Field Set Name | IPv6 Prefixes | +| -------------- | ------------- | +| IPv6-DEMO-1 | 11:22:33:44:55:66:77:88 | +| IPv6-DEMO-2 | - | + +#### Traffic Policies Device Configuration + +```eos +! +traffic-policies + field-set ipv6 prefix IPv6-DEMO-1 + 11:22:33:44:55:66:77:88 + ! + field-set ipv6 prefix IPv6-DEMO-2 +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-3.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-3.md new file mode 100644 index 00000000000..c706240ed4a --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies-3.md @@ -0,0 +1,67 @@ +# traffic-policies-3 + +## Table of Contents + +- [Management](#management) + - [Management Interfaces](#management-interfaces) +- [Interfaces](#interfaces) + - [Ethernet Interfaces](#ethernet-interfaces) + - [Traffic Policies information](#traffic-policies-information) + +## Management + +### Management Interfaces + +#### Management Interfaces Summary + +##### IPv4 + +| Management Interface | Description | Type | VRF | IP Address | Gateway | +| -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | + +##### IPv6 + +| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | +| -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | + +#### Management Interfaces Device Configuration + +```eos +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +``` + +## Interfaces + +### Ethernet Interfaces + +#### Ethernet Interfaces Summary + +##### L2 + +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | +| --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | + +*Inherited from Port-Channel Interface + +#### Ethernet Interfaces Device Configuration + +```eos +! +interface Ethernet1 + no switchport +``` + +### Traffic Policies information + +#### Traffic Policies Device Configuration + +```eos +! +traffic-policies +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies.md index 1ceb676d545..250e0871980 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/traffic-policies.md @@ -19,20 +19,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -66,8 +66,8 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | #### Port-Channel Interfaces Device Configuration @@ -83,36 +83,55 @@ interface Port-Channel2 #### IPv4 Field Sets -| Field Set Name | Values | -| -------------- | ------ | +| Field Set Name | IPv4 Prefixes | +| -------------- | ------------- | | DEMO-01 | 10.0.0.0/8
192.168.0.0/16 | | DEMO-02 | 172.16.0.0/12
224.0.0.0/8 | +| DEMO-03 | - | #### L4 Port Field Sets -| Field Set Name | Values | -| -------------- | ------ | -| SERVICE-DEMO | 10,20,80,440-450| +| Field Set Name | L4 Ports | +| -------------- | -------- | +| SERVICE-DEMO | 10,20,80,440-450 | +| SERVICE-DEMO2 | - | #### Traffic Policies ##### BLUE-C1-POLICY -| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Destination port(s) | Action | -| --------- | ---- | ------- | ------------ | -------- | -------------- | ------------------- | ------ | -| BLUE-C1-POLICY-01 | ipv4 | 10.0.0.0/8
192.168.0.0/16 | DEMO-01 | tcp | 1,10-20 | ANY | action: PASS
traffic-class: 5 | -| BLUE-C1-POLICY-02 | ipv4 | DEMO-01
DEMO-02 | ANY | tcp
icmp | ANY | SERVICE-DEMO | action: PASS
counter: DEMO-TRAFFIC
dscp marking: 60 | -| BLUE-C1-POLICY-03 | ipv4 | DEMO-01 | ANY | icmp | ANY | ANY | action: DROP
counter: DROP-PACKETS
logging | -| BLUE-C1-POLICY-04 | ipv4 | DEMO-02 | DEMO-01 | tcp
icmp | 22 | ANY | action: PASS
traffic-class: 5 | -| BLUE-C1-POLICY-05 | ipv4 | DEMO-02 | DEMO-01 | tcp | ANY | ANY | action: PASS
traffic-class: 5 | +| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Source Field(s) | Destination port(s) | Destination Field(s) | Action | +| --------- | ---- | ------- | ------------ | -------- | -------------- | --------------- | ------------------- | -------------------- | ------ | +| BLUE-C1-POLICY-01 | ipv4 | 10.0.0.0/8
192.168.0.0/16 | DEMO-01 | tcp
udp | 1,10-20
any | -
SERVICE-DEMO | any
any | -
- | action: PASS
traffic-class: 5 | +| BLUE-C1-POLICY-02 | ipv4 | DEMO-01
DEMO-02 | any | tcp
icmp | any
- | -
- | any
- | SERVICE-DEMO
- | action: PASS
counter: DEMO-TRAFFIC
dscp marking: 60 | +| BLUE-C1-POLICY-03 | ipv4 | DEMO-01 | any | icmp | - | - | - | - | action: DROP
counter: DROP-PACKETS
logging | +| BLUE-C1-POLICY-04 | ipv4 | DEMO-02 | DEMO-01 | tcp
icmp | 22
- | -
- | 80
- | -
- | action: PASS
traffic-class: 5 | +| BLUE-C1-POLICY-05 | ipv4 | DEMO-02 | DEMO-01 | bgp | - | - | - | - | action: PASS
traffic-class: 5 | +| BLUE-C1-POLICY-06 | ipv4 | any | any | neighbors
udp
tcp
icmp | -
22
22
- | -
-
-
- | -
1,10-20
any
- | -
-
-
- | action: PASS | +| BLUE-C1-POLICY-07 | ipv4 | any | 10.0.0.0/8
192.168.0.0/16 | - | - | - | - | - | default action: PASS | +| BLUE-C1-POLICY-08 | ipv4 | any | DEMO-01 | udp
tcp | any
any | -
SERVICE-DEMO-SRC | 1,10-20
any | -
SERVICE-DEMO-DST | default action: PASS | ##### BLUE-C2-POLICY -| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Destination port(s) | Action | -| --------- | ---- | ------- | ------------ | -------- | -------------- | ------------------- | ------ | -| BLUE-C2-POLICY-01 | ipv4 | 10.0.0.0/8
192.168.0.0/16 | ANY | tcp
icmp | 1,10-20 | ANY | action: PASS
traffic-class: 5 | -| BLUE-C2-POLICY-02 | ipv4 | DEMO-01
DEMO-02 | ANY | tcp
icmp | SERVICE-DEMO | ANY | action: PASS
counter: DEMO-TRAFFIC
dscp marking: 60 | -| BLUE-C2-POLICY-03 | ipv4 | DEMO-01 | ANY | tcp | ANY | ANY | action: DROP
logging | +| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Source Field(s) | Destination port(s) | Destination Field(s) | Action | +| --------- | ---- | ------- | ------------ | -------- | -------------- | --------------- | ------------------- | -------------------- | ------ | +| BLUE-C2-POLICY-01 | ipv4 | 10.0.0.0/8
192.168.0.0/16 | any | tcp
icmp | 1,10-20
- | -
- | any
- | -
- | action: PASS
traffic-class: 5 | +| BLUE-C2-POLICY-02 | ipv4 | DEMO-01
DEMO-02 | any | tcp
icmp | any
- | SERVICE-DEMO
- | any
- | -
- | action: PASS
counter: DEMO-TRAFFIC
dscp marking: 60 | +| BLUE-C2-POLICY-03 | ipv4 | DEMO-01 | any | tcp | any | - | any | - | action: DROP | + +##### BLUE-C3-POLICY + +##### BLUE-C4-POLICY + +##### BLUE-C5-POLICY + +##### BLUE-C6-POLICY + +##### BLUE-C7-POLICY + +| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Source Field(s) | Destination port(s) | Destination Field(s) | Action | +| --------- | ---- | ------- | ------------ | -------- | -------------- | --------------- | ------------------- | -------------------- | ------ | +| BLUE-C7-POLICY-01 | ipv4 | any | any | neighbors | - | - | - | - | default action: PASS | ##### Traffic-Policy Interfaces @@ -126,95 +145,160 @@ interface Port-Channel2 ```eos ! traffic-policies - counter interface per-interface ingress + field-set l4-port SERVICE-DEMO + 10,20,80,440-450 + ! + field-set l4-port SERVICE-DEMO2 field-set ipv4 prefix DEMO-01 10.0.0.0/8 192.168.0.0/16 ! field-set ipv4 prefix DEMO-02 172.16.0.0/12 224.0.0.0/8 ! - field-set l4-port SERVICE-DEMO - 10,20,80,440-450 + field-set ipv4 prefix DEMO-03 + counter interface per-interface ingress ! traffic-policy BLUE-C1-POLICY counter DEMO-TRAFFIC DROP-PACKETS + ! match BLUE-C1-POLICY-01 ipv4 source prefix 10.0.0.0/8 192.168.0.0/16 destination prefix field-set DEMO-01 protocol tcp source port 1,10-20 + protocol udp source port field-set SERVICE-DEMO ttl 10, 20-30 + ! actions set traffic class 5 - ! ! match BLUE-C1-POLICY-02 ipv4 source prefix field-set DEMO-01 DEMO-02 - protocol tcp flags established destination port field-set SERVICE-DEMO + protocol tcp flags established + protocol tcp destination port field-set SERVICE-DEMO protocol icmp + ! actions count DEMO-TRAFFIC set dscp 60 - ! ! match BLUE-C1-POLICY-03 ipv4 source prefix field-set DEMO-01 - protocol icmp + protocol icmp type echo echo-reply code all fragment offset 1124, 2000-2010 + ! actions count DROP-PACKETS drop log - ! ! match BLUE-C1-POLICY-04 ipv4 source prefix field-set DEMO-02 destination prefix field-set DEMO-01 - protocol tcp flags established source port 22 + protocol tcp flags established + protocol tcp source port 22 destination port 80 protocol icmp + ! actions set traffic class 5 - ! ! match BLUE-C1-POLICY-05 ipv4 source prefix field-set DEMO-02 destination prefix field-set DEMO-01 - protocol tcp + protocol bgp fragment + ! actions set traffic class 5 - ! ! + match BLUE-C1-POLICY-06 ipv4 + protocol neighbors bgp + ! + match BLUE-C1-POLICY-07 ipv4 + destination prefix 10.0.0.0/8 192.168.0.0/16 + ! + match BLUE-C1-POLICY-08 ipv4 + destination prefix 10.0.0.0/8 192.168.0.0/16 + protocol udp destination port 1,10-20 + protocol tcp source port field-set SERVICE-DEMO-SRC destination port field-set SERVICE-DEMO-DST + ! + match ipv4-all-default ipv4 + actions + drop + ! + match ipv6-all-default ipv6 ! traffic-policy BLUE-C2-POLICY counter DEMO-TRAFFIC + ! match BLUE-C2-POLICY-01 ipv4 source prefix 10.0.0.0/8 192.168.0.0/16 protocol tcp source port 1,10-20 protocol icmp + ! actions set traffic class 5 - ! ! match BLUE-C2-POLICY-02 ipv4 source prefix field-set DEMO-01 DEMO-02 protocol tcp source port field-set SERVICE-DEMO protocol icmp + ! actions count DEMO-TRAFFIC set dscp 60 - ! ! match BLUE-C2-POLICY-03 ipv4 source prefix field-set DEMO-01 protocol tcp + ! + actions + drop + ! + match ipv4-all-default ipv4 actions drop log - ! ! + match ipv6-all-default ipv6 + ! + traffic-policy BLUE-C3-POLICY match ipv4-all-default ipv4 + actions + count test + set dscp 11 + set traffic class 10 + ! + match ipv6-all-default ipv6 + ! + traffic-policy BLUE-C4-POLICY + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 + actions + count test + set dscp 11 + set traffic class 10 + ! + traffic-policy BLUE-C5-POLICY + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 actions drop log ! + traffic-policy BLUE-C6-POLICY + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 + actions + drop + ! + traffic-policy BLUE-C7-POLICY + match BLUE-C7-POLICY-01 ipv4 + protocol neighbors bgp enforce ttl maximum-hops + ! + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/transceiver_qsfp_default_mode_4x10_false.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/transceiver_qsfp_default_mode_4x10_false.md index 0f0d40f4182..11bd44fff17 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/transceiver_qsfp_default_mode_4x10_false.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/transceiver_qsfp_default_mode_4x10_false.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tunnel-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tunnel-interfaces.md index 9c795fea875..0f39bead16a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tunnel-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/tunnel-interfaces.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/unsupported-transceiver.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/unsupported-transceiver.md index 2bd0ea0695f..15889841c7d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/unsupported-transceiver.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/unsupported-transceiver.md @@ -15,20 +15,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/virtual-source-nat.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/virtual-source-nat.md index 33b56cbf1a3..3bfde16f53d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/virtual-source-nat.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/virtual-source-nat.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md index f95e86b8da5..3b39466fd91 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -185,9 +185,20 @@ interface Management1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan2002 | EVPN_UNDERLAY | True | - | - | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan42 | EVPN_UNDERLAY | - | - | - | Level-1: sha | +| Vlan83 | EVPN_UNDERLAY | - | - | - | md5 | +| Vlan84 | EVPN_UNDERLAY | - | - | - | sha | +| Vlan85 | EVPN_UNDERLAY | - | - | - | sha | +| Vlan86 | EVPN_UNDERLAY | - | - | - | shared-secret | +| Vlan87 | EVPN_UNDERLAY | - | - | - | shared-secret | +| Vlan88 | EVPN_UNDERLAY | - | - | - | Level-1: md5
Level-2: text | +| Vlan90 | EVPN_UNDERLAY | - | - | - | Level-1: shared-secret
Level-2: shared-secret | +| Vlan91 | EVPN_UNDERLAY | - | - | - | Level-1: md5
Level-2: text | +| Vlan92 | EVPN_UNDERLAY | - | - | - | Level-1: shared-secret
Level-2: shared-secret | +| Vlan2002 | EVPN_UNDERLAY | True | - | - | md5 | +| Vlan4094 | EVPN_UNDERLAY | - | - | - | Level-1: sha
Level-2: sha | ##### Multicast Routing @@ -246,6 +257,8 @@ interface Vlan42 ip helper-address 10.10.64.150 source-interface Loopback0 ip helper-address 10.10.96.150 source-interface Loopback0 ip helper-address 10.10.96.151 source-interface Loopback0 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 5 level-1 ip address virtual 10.10.42.1/24 ! interface Vlan43 @@ -253,6 +266,13 @@ interface Vlan43 no shutdown ipv6 dhcp relay destination a0::2 vrf TEST local-interface Loopback44 link-address a0::4 ipv6 address a0::1/64 + isis authentication key-id 2 algorithm sha-512 key 0 password + isis authentication key-id 3 algorithm sha-512 rfc-5310 key 0 password1 + isis authentication key-id 1 algorithm sha-1 key 0 password level-1 + isis authentication key-id 4 algorithm sha-1 rfc-5310 key 0 password level-1 + isis authentication key-id 5 algorithm sha-1 key 0 password3 level-1 + isis authentication key-id 1 algorithm sha-1 key 0 password level-2 + isis authentication key-id 5 algorithm sha-1 rfc-5310 key 0 password level-2 ! interface Vlan44 description SVI Description @@ -267,6 +287,8 @@ interface Vlan50 ip nat source dynamic access-list ACL2 pool POOL2 ip nat destination static 1.0.0.1 2.0.0.1 ip nat destination dynamic access-list ACL1 pool POOL1 + isis authentication mode text rx-disabled level-2 + isis authentication key 0 password level-2 ! interface Vlan75 description SVI Description @@ -294,6 +316,9 @@ interface Vlan81 interface Vlan83 description SVI Description no shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 + isis authentication key 0 password ip address virtual 10.10.83.1/24 ip address virtual 10.11.83.1/24 secondary ip address virtual 10.11.84.1/24 secondary @@ -303,6 +328,9 @@ interface Vlan84 arp gratuitous accept arp monitor mac-address ip address 10.10.84.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 2 rx-disabled + isis authentication key 0 password ip virtual-router address 10.10.84.254 ip virtual-router address 10.11.84.254/24 ! @@ -310,12 +338,17 @@ interface Vlan85 description SVI Description arp cache dynamic capacity 50000 ip address 10.10.84.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 2 + isis authentication key 0 password bfd interval 500 min-rx 500 multiplier 5 bfd echo ! interface Vlan86 description SVI Description ip address 10.10.83.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile1 algorithm sha-1 rx-disabled ip attached-host route export 10 ! interface Vlan87 @@ -324,10 +357,17 @@ interface Vlan87 ip address 10.10.87.1/24 ip access-group ACL_IN in ip access-group ACL_OUT out + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile1 algorithm sha-1 ! interface Vlan88 description SVI Description shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 rx-disabled level-1 + isis authentication mode text rx-disabled level-2 + isis authentication key 0 password level-1 + isis authentication key 0 password level-2 ip address virtual 10.10.87.1/23 ! interface Vlan89 @@ -354,11 +394,19 @@ interface Vlan89 interface Vlan90 description SVI Description ip address 10.10.83.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile2 algorithm sha-1 level-1 + isis authentication mode shared-secret profile profile1 algorithm sha-256 level-2 ip attached-host route export ! interface Vlan91 description PBR Description shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 level-1 + isis authentication mode text level-2 + isis authentication key 0 password level-1 + isis authentication key 0 password level-2 service-policy type pbr input MyServicePolicy ! interface Vlan92 @@ -366,6 +414,9 @@ interface Vlan92 ip proxy-arp ip directed-broadcast ip address 10.10.92.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile2 algorithm sha-1 rx-disabled level-1 + isis authentication mode shared-secret profile profile1 algorithm sha-256 rx-disabled level-2 ! interface Vlan110 description PVLAN Primary with vlan mapping @@ -493,6 +544,8 @@ interface Vlan2002 ip verify unicast source reachable-via rx isis enable EVPN_UNDERLAY isis bfd + isis authentication mode md5 rx-disabled + isis authentication key 0 password ip address virtual 10.2.2.1/24 ! interface Vlan4094 @@ -506,6 +559,9 @@ interface Vlan4094 pim ipv4 hello count 3.5 pim ipv4 dr-priority 200 pim ipv4 bfd + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 5 rx-disabled level-1 + isis authentication mode sha key-id 10 rx-disabled level-2 ``` ## BFD diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-internal-order.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-internal-order.md index 74ea69bed35..0bed1f03abb 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-internal-order.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-internal-order.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlans.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlans.md index e472967d99f..2a50d8fc81f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlans.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlans.md @@ -18,20 +18,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vmtracer-sessions.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vmtracer-sessions.md index 8332d67f90e..261d4ea2058 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vmtracer-sessions.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vmtracer-sessions.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vrf-instances.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vrf-instances.md index 12ad8c213f6..0f3b15219d0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vrf-instances.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vrf-instances.md @@ -21,20 +21,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface-false.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface-false.md index e7c3194323a..db36583b04f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface-false.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface-false.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -53,7 +53,7 @@ interface Management1 ```eos ! interface Vxlan1 - no vxlan qos dscp propagation encapsulation no vxlan qos ecn propagation + no vxlan qos dscp propagation encapsulation no vxlan qos map dscp to traffic-class decapsulation ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface.md index 575286e3115..e3b9e6b1f76 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/vxlan-interface.md @@ -17,20 +17,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ``` @@ -94,20 +94,20 @@ interface Vxlan1 vxlan flood vtep learned data-plane vxlan vlan 110 vni 10110 vxlan vlan 111 vni 10111 - vxlan vlan 111 flood vtep 10.1.1.10 10.1.1.11 vxlan vrf Tenant_A_OP_Zone vni 10 vxlan vrf Tenant_A_WEB_Zone vni 11 vxlan mlag source-interface Loopback1 bfd vtep evpn interval 300 min-rx 300 multiplier 3 bfd vtep evpn prefix-list PL-TEST vxlan flood vtep 10.1.0.10 10.1.0.11 - vxlan qos dscp propagation encapsulation - vxlan qos ecn propagation - vxlan qos map dscp to traffic-class decapsulation + vxlan vlan 111 flood vtep 10.1.1.10 10.1.1.11 vxlan vlan 110 multicast group 239.9.1.4 vxlan vlan 112 multicast group 239.9.1.6 vxlan vrf Tenant_A_OP_Zone multicast group 232.0.0.10 vxlan multicast headend-replication + vxlan qos ecn propagation + vxlan qos dscp propagation encapsulation + vxlan qos map dscp to traffic-class decapsulation vxlan encapsulation ipv4 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa-2.cfg index e93bba1a3a7..566cb4a3935 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa-2.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname aaa-2 ! aaa accounting exec console none aaa accounting exec default none ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa.cfg index fe623914314..41e9a48888d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aaa.cfg @@ -1,18 +1,19 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G +aaa root secret sha512 dsakjlhfqwereDSAFWE346543dfgsG ! -hostname aaa +username admin privilege 15 role network-admin nopassword +username ansible privilege 15 role network-admin secret sha512 $6$.I7/ZR/zlLIUv8fr$vR/JvLTbq5amMt6Y1SE4CKlPDv/AzJYlFYHkUZ17BDovm0Oi4aLdBULe1EmZ0Y9xKjVLMKpxCSKmlrAioDxbQ0 +username cvpadmin privilege 15 role network-admin secret sha512 $6$.I7/ZR/zlLIUv8fr$vR/JvLTbq5amMt6Y1SE4CKlPDv/AzJYlFYHkUZ17BDovm0Oi4aLdBULe1EmZ0Y9xKjVLMKpxCSKmlrAioDxbQ0 +username cvpadmin ssh-key ssh-rsa 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 cvpadmin@hostmachine.local ! radius-server host 10.10.10.157 vrf mgt key 7 071B245F5A radius-server host 10.10.10.249 key 7 071B245F5A radius-server host 10.10.10.158 key 7 071B245F5A ! +tacacs-server timeout 10 tacacs-server host 10.10.10.157 single-connection vrf mgt key 7 071B245F5A tacacs-server host 10.10.10.249 timeout 23 key 7 071B245F5A tacacs-server host 10.10.10.158 key 7 071B245F5A tacacs-server host 10.10.10.159 key 8a $kUVyoj7FVQ//yw9D2lbqjA==$kxxohBiofI46IX3pw18KYQ==$DOOM0l9uU4TrQt2kyA7XCKtjUA== -tacacs-server timeout 10 ! aaa group server tacacs+ TACACS1 server 10.10.10.157 vrf mgt @@ -46,17 +47,7 @@ aaa accounting dot1x default start-stop group RADIUS aaa accounting commands all default start-stop group TACACS logging aaa accounting commands 0 default start-stop logging ! -no enable password -aaa root secret sha512 dsakjlhfqwereDSAFWE346543dfgsG -! -username admin privilege 15 role network-admin nopassword -username ansible privilege 15 role network-admin secret sha512 $6$.I7/ZR/zlLIUv8fr$vR/JvLTbq5amMt6Y1SE4CKlPDv/AzJYlFYHkUZ17BDovm0Oi4aLdBULe1EmZ0Y9xKjVLMKpxCSKmlrAioDxbQ0 -username cvpadmin privilege 15 role network-admin secret sha512 $6$.I7/ZR/zlLIUv8fr$vR/JvLTbq5amMt6Y1SE4CKlPDv/AzJYlFYHkUZ17BDovm0Oi4aLdBULe1EmZ0Y9xKjVLMKpxCSKmlrAioDxbQ0 -username cvpadmin ssh-key ssh-rsa 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 cvpadmin@hostmachine.local -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/acl.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/acl.cfg index 842086c8759..02da0664aa3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/acl.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/acl.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname acl -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -58,5 +50,3 @@ ip access-list standard ACL-SSH-VRF 20 permit 10.0.0.0/8 30 permit 172.16.0.0/12 40 permit 192.168.0.0/16 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/address-locking.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/address-locking.cfg index a11d73c69a1..8cb272ac953 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/address-locking.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/address-locking.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname address-locking -! -no enable password -no aaa root ! address locking disabled @@ -34,8 +26,6 @@ interface Ethernet3 address locking ipv6 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/agents.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/agents.cfg index 0cd0578b048..3302960eff6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/agents.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/agents.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! agent Dummy environment V1=42:V2=666 agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=true ! -transceiver qsfp default-mode 4x10G -! -hostname agents -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aliases.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aliases.cfg index 06d91f0b19c..649aadc0a96 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aliases.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/aliases.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! alias wr copy running-config startup-config alias siib show ip interface brief -! -transceiver qsfp default-mode 4x10G -! -hostname aliases -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/application-traffic-recognition.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/application-traffic-recognition.cfg index 320d76d10df..6c81ccc3fa8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/application-traffic-recognition.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/application-traffic-recognition.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname application-traffic-recognition -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -104,5 +96,3 @@ application traffic recognition ! field-set l4-port src_port_set2 5700-5800, 6500-6600 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/arp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/arp.cfg index 7897a498979..fb8e827f169 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/arp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/arp.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname arp -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,5 +12,3 @@ arp 41.42.42.42 DEAD.BEEF.CAFE arpa arp 42.42.42.42 DEAD.BEEF.CAFE arpa arp 43.42.42.42 DEAD.BEEF.CAFE arpa arp vrf defaulu 42.42.42.42 DEAD.BEEF.CAFE arpa -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/as-path.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/as-path.cfg index 20fcb37e2d8..bfc7e3acd38 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/as-path.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/as-path.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 ! ip as-path regex-mode asn ip as-path access-list mylist1 permit ^(64512|645115) egp ip as-path access-list mylist1 deny (64513|64515)$ any ip as-path access-list mylist2 deny _64517$ igp -! -hostname as-path -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/banners_without_eof.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/banners_without_eof.cfg index 4f4f5ec917b..31804b7d744 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/banners_without_eof.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/banners_without_eof.cfg @@ -1,16 +1,12 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname banners_without_eof -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 +management api http-commands + protocol https + protocol http + no shutdown + ! + vrf mgt + no shutdown + ip access-group ACL-API ! banner login !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! @@ -26,15 +22,6 @@ banner motd . Type help for information about the aliases . EOF -! -management api http-commands - protocol https - protocol http - no shutdown - ! - vrf mgt - no shutdown - ip access-group ACL-API ! management console idle-timeout 300 @@ -42,6 +29,11 @@ management console management security password encryption-key common ! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in @@ -57,5 +49,3 @@ management ssh interface Loopback1000 description Interface created with eos_cli on device level -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/base.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/base.cfg index 29b621245f1..31804b7d744 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/base.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/base.cfg @@ -1,16 +1,12 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname base -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 +management api http-commands + protocol https + protocol http + no shutdown + ! + vrf mgt + no shutdown + ip access-group ACL-API ! banner login !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! @@ -26,15 +22,6 @@ banner motd . Type help for information about the aliases . EOF -! -management api http-commands - protocol https - protocol http - no shutdown - ! - vrf mgt - no shutdown - ip access-group ACL-API ! management console idle-timeout 300 @@ -42,6 +29,11 @@ management console management security password encryption-key common ! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in @@ -57,5 +49,3 @@ management ssh interface Loopback1000 description Interface created with eos_cli on device level -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/boot.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/boot.cfg index a947ca1d143..2a0763753f5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/boot.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/boot.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret 5 a153de6290ff1409257a ! -transceiver qsfp default-mode 4x10G -! -hostname boot -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/class-maps.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/class-maps.cfg index 616d46b9616..aa6df2cdb34 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/class-maps.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/class-maps.cfg @@ -1,17 +1,15 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname class-maps -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! +class-map type pbr match-any CM_PBR_EXCLUDE + match ip access-group ACL_PBR_EXCLUDE +! +class-map type pbr match-any CM_PBR_INCLUDE + match ip access-group ACL_PBR_INCLUDE +! class-map type qos match-any CM_REPLICATION_LD match ip access-group ACL_REPLICATION_LD ! @@ -26,11 +24,3 @@ class-map type qos match-any COS_RANGE ! class-map type qos match-any VLAN_RANGE match vlan 200-400 -! -class-map type pbr match-any CM_PBR_EXCLUDE - match ip access-group ACL_PBR_EXCLUDE -! -class-map type pbr match-any CM_PBR_INCLUDE - match ip access-group ACL_PBR_INCLUDE -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/clock.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/clock.cfg index 30658b8b65e..d736f7b1b3c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/clock.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/clock.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname clock -! -no enable password -no aaa root ! clock timezone GMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/config-comment.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/config-comment.cfg index c264f5d5009..5c3d50e25b7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/config-comment.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/config-comment.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! !This is a test comment to test config_comment. !This is multiline comment. ! -transceiver qsfp default-mode 4x10G -! -hostname config-comment -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/custom-templates.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/custom-templates.cfg index 57b5cadece7..207d81792a9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/custom-templates.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/custom-templates.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname custom-templates -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,5 +12,3 @@ test-custom-template-no-logic-2 ! test-custom-template-with-logic-3 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx-2.cfg index df40fa99d6b..d64fefcdf1e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx-2.cfg @@ -1,22 +1,14 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname cvx-2 -! -no enable password -no aaa root ! cvx shutdown + ! service mcs shutdown + ! service vxlan shutdown ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx.cfg index 8034f900737..0d68d9e0cd5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/cvx.cfg @@ -1,26 +1,18 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname cvx -! -no enable password -no aaa root ! cvx no shutdown peer host 1.1.1.1 peer host 2.2.2.2 + ! service mcs redis password 7 070E334ddD1D18 no shutdown + ! service vxlan no shutdown vtep mac-learning control-plane ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemon_terminattr.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemon_terminattr.cfg index 1dab5059ca2..a39d2c41dbe 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemon_terminattr.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemon_terminattr.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.10:9910 -cvauth=key,key -cvvrf=default -smashexcludes=test -ingestexclude=test -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname daemon_terminattr -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemons.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemons.cfg index 78927057502..72b6be11675 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemons.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/daemons.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon ocprometheus exec /usr/bin/ocprometheus -config /usr/bin/ocprometheus.yml -addr localhost:6042 @@ -8,16 +7,7 @@ daemon random exec /usr/bin/random shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname daemons -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-relay.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-relay.cfg index 18c31cdcee6..4dace51c4d8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-relay.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-relay.cfg @@ -1,21 +1,11 @@ -!RANCID-CONTENT-TYPE: arista ! dhcp relay - server dhcp-relay-server1 - server dhcp-relay-server2 tunnel requests disabled mlag peer-link requests disabled -! -transceiver qsfp default-mode 4x10G -! -hostname dhcp-relay -! -no enable password -no aaa root + server dhcp-relay-server1 + server dhcp-relay-server2 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-servers.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-servers.cfg index d15f988c0d4..4a2443a6f40 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-servers.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dhcp-servers.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! dhcp server vrf AVRF ! @@ -63,16 +62,7 @@ dhcp server vrf VRF01 subnet 192.168.0.0/24 disabled ! -transceiver qsfp default-mode 4x10G -! -hostname dhcp-servers -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dns-ntp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dns-ntp.cfg index 1cf7ff73b1a..ea35a4f3ab6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dns-ntp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dns-ntp.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname dns-ntp ip domain lookup source-interface Loopback0 ip domain lookup vrf mgt source-interface Management0 ip name-server 10.10.128.10 @@ -15,6 +10,11 @@ ip name-server 2001:db8::2 priority 0 ip name-server vrf TEST 2001:db8::2 priority 3 dns domain test.local ! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! ntp authentication-key 1 md5 044F0E151B ntp authentication-key 2 sha1 15060E1F10 ntp trusted-key 1-2 @@ -24,13 +24,3 @@ ntp server vrf mgt 10.10.111.1 prefer ntp server vrf mgt 10.10.111.2 ntp server vrf mgt 2001:db8::3 ntp server vrf mgt 2001:db8::4 -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/domain-list.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/domain-list.cfg index 3f29727da88..dfcbed22ed8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/domain-list.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/domain-list.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname domain-list ip domain-list domain1.local ip domain-list domain2.local ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x-2.cfg index a0b0f3ed655..e22ea4e77fa 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x-2.cfg @@ -1,14 +1,11 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname dot1x-2 -! -no enable password -no aaa root +dot1x + aaa unresponsive phone action apply cached-results + aaa unresponsive action traffic allow + radius av-pair service-type + radius av-pair framed-mtu 1500 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,8 +13,3 @@ dot1x system-auth-control dot1x protocol lldp bypass dot1x protocol bpdu bypass dot1x dynamic-authorization -dot1x - radius av-pair service-type - radius av-pair framed-mtu 1500 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x.cfg index bd198645043..deb70a6b28c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dot1x.cfg @@ -1,20 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname dot1x -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -dot1x system-auth-control -dot1x protocol lldp bypass -dot1x dynamic-authorization dot1x supplicant profile Profile1 identity user_id1 @@ -31,16 +14,24 @@ dot1x aaa unresponsive phone action apply cached-results timeout 10 hours else traffic allow aaa unresponsive action traffic allow vlan 10 aaa unresponsive eap response success - aaa unresponsive recovery action reauthenticate aaa accounting update interval 6 seconds mac based authentication delay 300 seconds mac based authentication hold period 300 seconds radius av-pair service-type radius av-pair framed-mtu 1500 + mac-based-auth radius av-pair user-name delimiter colon lowercase + aaa unresponsive recovery action reauthenticate supplicant disconnect cached-results timeout 79 seconds captive-portal url http://portal-nacm08/captiveredirect/ ssl profile Profile1 captive-portal access-list ipv4 ACL captive-portal start limit infinite supplicant logging ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +dot1x system-auth-control +dot1x protocol lldp bypass +dot1x dynamic-authorization diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dps-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dps-interfaces.cfg index 06f3c802165..a35c2f93a4b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dps-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/dps-interfaces.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname dps-interfaces -! -no enable password -no aaa root ! interface Dps1 description Test DPS Interface @@ -18,8 +10,6 @@ interface Dps1 load-interval 42 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/enable-password.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/enable-password.cfg index 13154485cb5..5939ca32918 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/enable-password.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/enable-password.cfg @@ -1,15 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname enable-password ! enable password sha512 $6$nXycSRhVPaxRINPL$tM1MNjjRCbFD5di4XWsj8CPkm8Pdwmf9fVqRV015y3DXD4t1vi8CAWQpFP8Vbi9Y2i7.JuFey5UaafXvI6quD1 -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/eos_cli_config_gen_documentation.enable.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/eos_cli_config_gen_documentation.enable.cfg new file mode 100644 index 00000000000..e047f96bbfc --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/eos_cli_config_gen_documentation.enable.cfg @@ -0,0 +1,5 @@ +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/errdisable.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/errdisable.cfg index 74c804bc242..e77d4de0bd8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/errdisable.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/errdisable.cfg @@ -1,6 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! errdisable detect cause arp-inspection errdisable detect cause dot1x @@ -26,14 +23,7 @@ errdisable recovery cause xcvr-power-unsupported errdisable recovery cause xcvr-unsupported errdisable recovery interval 300 ! -hostname errdisable -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg index 86e614d7ef0..43274b1519e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ethernet-interfaces -! -no enable password -no aaa root ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet1 @@ -14,35 +6,39 @@ interface Ethernet1 l2 mtu 8000 l2 mru 8000 bgp session tracker ST1 + switchport access vlan 200 + switchport trunk native vlan tag + switchport phone vlan 110 + switchport phone trunk tagged + switchport vlan translation in required + switchport dot1q vlan tag required + switchport trunk allowed vlan 110-111,210-211 + switchport mode dot1q-tunnel + switchport dot1q ethertype 1536 + switchport vlan forwarding accept all + switchport trunk group g1 + switchport trunk group g2 no switchport - switchport tap native vlan 10 - switchport tap identity 3 inner 5 - switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab - switchport tap mpls pop all - switchport tap encapsulation gre strip - switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip - switchport tap encapsulation gre protocol 0x0001 strip - switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0010 strip - switchport tap encapsulation gre destination 2.1.1.3 source 2.1.1.4 strip - switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip - switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet - switchport tool mpls pop all - switchport tool encapsulation vn-tag strip - switchport tool encapsulation dot1br strip - switchport tap allowed vlan 25 - switchport tool allowed vlan 23 - switchport tool identity qinq - switchport tool identity dot1q source dzgre port - switchport tap truncation 150 - switchport tool truncation - switchport tap default group g1 group g2 group g3 - switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 - switchport tap default interface ethernet4 - switchport tap default interface port-channel10 - switchport tool group set group1 group2 group3 - switchport tool dot1q remove outer 1 - switchport tool dzgre preserve + switchport source-interface tx + switchport vlan translation 12 20 + switchport vlan translation 24 inner 78 network 46 + switchport vlan translation 24 inner 78 46 + switchport vlan translation 43 dot1q-tunnel 30 + switchport vlan translation in 10 24 + switchport vlan translation in 37 inner 56 49 + switchport vlan translation in 23 dot1q-tunnel 45 + switchport vlan translation out 34 50 + switchport vlan translation out 10 45 inner 34 + switchport vlan translation out 45 dot1q-tunnel all + switchport trunk private-vlan secondary + switchport pvlan mapping 20-30 ip address 172.31.255.1/31 + switchport backup-link Ethernet5 prefer vlan 10 + switchport backup preemption-delay 35 + switchport backup mac-move-burst 20 + switchport backup mac-move-burst-interval 30 + switchport backup initial-mac-move-delay 10 + switchport backup dest-macaddr 01:00:00:00:00:00 ip verify unicast source reachable-via rx bfd interval 500 min-rx 500 multiplier 5 bfd echo @@ -60,6 +56,7 @@ interface Ethernet1 ip igmp host-proxy version 2 tcp mss ceiling ipv4 70 ipv6 75 egress switchport port-security + switchport port-security mac-address maximum disabled priority-flow-control on priority-flow-control priority 5 drop link tracking group EVPN_MH_ES1 upstream @@ -70,6 +67,7 @@ interface Ethernet1 ! interface Ethernet2 description SRV-POD02_Eth1 + switchport dot1q vlan tag disallowed switchport trunk allowed vlan 110-111,210-211 switchport mode trunk switchport @@ -90,9 +88,13 @@ interface Ethernet2 interface Ethernet3 description P2P_LINK_TO_DC1-SPINE2_Ethernet2 mtu 1500 + switchport trunk native vlan 5 + switchport mode trunk no switchport + switchport vlan translation out 23 dot1q-tunnel 50 no snmp trap link-change ip address 172.31.128.1/31 + switchport backup-link Ethernet4 ipv6 enable ipv6 address 2002:ABDC::1/64 ipv6 nd prefix 2345:ABCD:3FE0::1/96 infinite 50 no-autoconfig @@ -114,13 +116,6 @@ interface Ethernet4 shutdown mtu 9100 no switchport - switchport tap identity 5 - switchport tap mac-address dest 01:00:00:00:00:00 - switchport tap encapsulation vxlan strip - switchport tool identity dot1q - switchport tool identity qinq source dzgre policy inner port - switchport tap truncation - switchport tool truncation 160 snmp trap link-change ipv6 enable ipv6 address 2020::2020/64 @@ -135,6 +130,7 @@ interface Ethernet4 multicast ipv6 boundary ff00::/16 out multicast ipv6 boundary ff01::/16 out multicast ipv4 static + switchport port-security violation protect priority-flow-control on spanning-tree guard none ! @@ -142,6 +138,7 @@ interface Ethernet5 description Molecule Routing no shutdown mtu 9100 + switchport access vlan 220 no switchport ip ospf cost 99 ip ospf network point-to-point @@ -275,10 +272,11 @@ interface Ethernet15 ! interface Ethernet16 description PVLAN Promiscuous Trunk - vlan translation out - switchport vlan translation out 111-112 110 + switchport vlan translation out required switchport trunk allowed vlan 110-112 switchport mode trunk switchport + switchport vlan translation out 111-112 110 ! interface Ethernet17 description PVLAN Secondary Trunk @@ -347,6 +345,7 @@ interface Ethernet26.1 ! interface Ethernet26.100 description TENANT_A pseudowire 1 interface + vlan id 10 encapsulation vlan client dot1q 100 network client ! @@ -363,12 +362,12 @@ interface Ethernet26.300 interface Ethernet26.400 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 400 inner 20 network dot1q outer 21 inner 401 + client dot1q outer 400 inner 20 network dot1q outer 401 inner 21 ! interface Ethernet26.500 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 500 inner 50 + client dot1q outer 500 inner 50 network client ! interface Ethernet27 description EVPN-Vxlan single-active redundancy @@ -693,6 +692,10 @@ interface Ethernet67 switchport transceiver frequency 190050.000 ! +interface Ethernet67.1 + description Test_encapsulation_dot1q + encapsulation dot1q vlan 4 inner 34 +! interface Ethernet68 description Custom_Transceiver_Frequency no shutdown @@ -700,14 +703,125 @@ interface Ethernet68 transceiver media override 100gbase-ar4 transceiver frequency 190080.000 ghz ! +interface Ethernet68.1 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q outer 23 inner dot1q 45 network dot1ad outer 32 inner dot1ad 54 +! +interface Ethernet68.2 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q 10 network dot1q outer 32 inner 54 +! +interface Ethernet68.3 + description Test_encapsulation_vlan3 + encapsulation vlan + client dot1ad 12 network dot1q 25 +! +interface Ethernet68.4 + description Test_encapsulation_vlan4 + encapsulation vlan + client dot1ad outer 35 inner dot1q 60 network dot1q outer 53 inner dot1ad 6 +! +interface Ethernet68.5 + description Test_encapsulation_vlan5 + encapsulation vlan + client dot1ad outer 35 inner 60 network dot1ad outer 52 inner 62 +! +interface Ethernet68.6 + description Test_encapsulation_vlan6 + encapsulation vlan + client dot1ad outer 35 inner 60 network client +! +interface Ethernet68.7 + description Test_encapsulation_vlan7 + encapsulation vlan + client untagged network dot1ad outer 35 inner 60 +! +interface Ethernet68.8 + description Test_encapsulation_vlan8 + encapsulation vlan + client untagged network dot1q outer 35 inner 60 +! +interface Ethernet68.9 + description Test_encapsulation_vlan9 + encapsulation vlan + client untagged network untagged +! +interface Ethernet68.10 + description Test_encapsulation_vlan9 + encapsulation vlan + client dot1q outer 14 inner 11 network client inner +! interface Ethernet69 description IP NAT service-profile switchport ip nat service-profile TEST-NAT-PROFILE ! +interface Ethernet70 + description dot1x_aaa_unresponsive + no shutdown + dot1x aaa unresponsive phone action apply cached-results timeout 10 hours else traffic allow + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet71 + description dot1x_aaa_unresponsive1 + no shutdown + dot1x aaa unresponsive phone action apply cached-results timeout 10 hours + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet72 + description dot1x_aaa_unresponsive2 + no shutdown + dot1x aaa unresponsive action traffic allow vlan 10 access-list acl1 + dot1x aaa unresponsive eap response success + dot1x mac based access-list +! +interface Ethernet73 + description Switchport_tap_tool + switchport tap native vlan 10 + switchport tap identity 3 inner 5 + switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab + switchport tap mpls pop all + switchport tap encapsulation gre strip + switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip + switchport tap encapsulation gre protocol 0x0001 strip + switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0010 strip + switchport tap encapsulation gre destination 2.1.1.3 source 2.1.1.4 strip + switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip + switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet + switchport tool mpls pop all + switchport tool encapsulation vn-tag strip + switchport tool encapsulation dot1br strip + switchport tap allowed vlan 25 + switchport tool allowed vlan 23 + switchport tool identity qinq + switchport tool identity dot1q source dzgre port + switchport tap truncation 150 + switchport tool truncation + switchport tap default group g1 group g2 group g3 + switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 + switchport tap default interface ethernet4 + switchport tap default interface port-channel10 + switchport tool group set group1 group2 group3 + switchport tool dot1q remove outer 1 + switchport tool dzgre preserve +! +interface Ethernet74 + description Test_tap_tool + switchport tap identity 5 + switchport tap mac-address dest 01:00:00:00:00:00 + switchport tap encapsulation vxlan strip + switchport tool identity dot1q + switchport tool identity qinq source dzgre policy inner port + switchport tap truncation + switchport tool truncation 160 +! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-handlers.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-handlers.cfg index b6e2a434fc9..3f6953c265b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-handlers.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-handlers.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname event-handlers -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -28,11 +20,11 @@ event-handler trigger-on-boot action increment device-health metric Metric1 ! event-handler trigger-on-counters + action log trigger on-counters poll interval 10 condition ( Arad*.IptCrcErrCnt.delta > 100 ) and ( Arad*.UcFifoFullDrop.delta > 100 ) granularity per-source - action log ! event-handler trigger-on-counters2 trigger on-counters @@ -48,10 +40,10 @@ event-handler trigger-on-intf event-handler trigger-on-intf2 ! event-handler trigger-on-logging + action increment device-health metric Metric2 trigger on-logging poll interval 10 regex ab* - action increment device-health metric Metric2 ! event-handler trigger-on-logging2 trigger on-logging @@ -78,5 +70,3 @@ event-handler trigger-on-maintenance5 event-handler trigger-vm-tracer trigger vm-tracer vm action bash echo "vm-tracer vm" -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-monitor.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-monitor.cfg index 1b978fce8a4..3dd8fb80d9f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-monitor.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/event-monitor.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! event-monitor ! -transceiver qsfp default-mode 4x10G -! -hostname event-monitor -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking-2.cfg index 14d4a268ec4..44d926c8757 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking-2.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! flow tracking sampled sample 666 @@ -8,16 +7,7 @@ flow tracking sampled record export on interval 5666 record export mpls ! -transceiver qsfp default-mode 4x10G -! -hostname flow-tracking-2 -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking.cfg index 66577b6847f..981a88ee251 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/flow-tracking.cfg @@ -1,60 +1,62 @@ -!RANCID-CONTENT-TYPE: arista ! -flow tracking sampled - encapsulation ipv4 ipv6 mpls - sample 666 - hardware offload ipv4 - hardware offload threshold minimum 2 samples +flow tracking hardware tracker T1 record export on inactive timeout 3666 record export on interval 5666 - record export mpls + ! tracker T2 exporter T2-E1 collector 42.42.42.42 - flow table size 614400 entries + ! tracker T3 exporter T3-E1 + ! exporter T3-E2 collector 10.10.10.10 port 777 + ! exporter T3-E3 collector this.is.my.awesome.collector.dns.name port 888 format ipfix version 10 local interface Management1 template interval 424242 + ! exporter T3-E4 collector dead:beef::cafe - flow table size 100000 entries + record format ipfix standard timestamps counters no shutdown ! -flow tracking hardware +flow tracking sampled + encapsulation ipv4 ipv6 mpls + sample 666 + hardware offload ipv4 + hardware offload threshold minimum 2 samples tracker T1 record export on inactive timeout 3666 record export on interval 5666 + record export mpls + ! tracker T2 + flow table size 614400 entries exporter T2-E1 collector 42.42.42.42 + ! tracker T3 + flow table size 100000 entries exporter T3-E1 + ! exporter T3-E2 collector 10.10.10.10 port 777 + ! exporter T3-E3 collector this.is.my.awesome.collector.dns.name port 888 format ipfix version 10 local interface Management1 template interval 424242 + ! exporter T3-E4 collector dead:beef::cafe - record format ipfix standard timestamps counters no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname flow-tracking -! -no enable password -no aaa root -! interface Port-Channel42 switchport flow tracker hardware T3 @@ -78,8 +80,6 @@ interface Ethernet42 flow tracker sampled T3 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate-default-config.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate-default-config.cfg index e69de29bb2d..1363f2017fa 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate-default-config.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate-default-config.cfg @@ -0,0 +1,10 @@ +!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +transceiver qsfp default-mode 4x10G +! +hostname generate-default-config +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate_device_documentation.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate_device_documentation.cfg deleted file mode 100644 index 1e60695d073..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/generate_device_documentation.cfg +++ /dev/null @@ -1,15 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname generate_device_documentation -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/groups.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/groups.cfg index 6ab3f98f257..66181578b16 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/groups.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/groups.cfg @@ -1,16 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname groups -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! group bgp bar vrf red @@ -23,6 +10,11 @@ group bgp foo maintenance profile bgp ixp maintenance profile bgp uplink-neighbors ! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! group interface QSFP_Interface_Group interface Ethernet1,5 maintenance profile interface uplink-interfaces @@ -30,9 +22,7 @@ group interface QSFP_Interface_Group group interface SFP_Interface_Group interface Ethernet10-20 interface Ethernet30-48 - maintenance profile interface downlink-interfaces - maintenance profile interface ix-interfaces maintenance profile bgp downlink-neighbors maintenance profile bgp local-ix -! -end + maintenance profile interface downlink-interfaces + maintenance profile interface ix-interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware-counter.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware-counter.cfg index e5eca647e05..3cae8d8f556 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware-counter.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware-counter.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! hardware counter feature acl out mac hardware counter feature gre tunnel interface out @@ -9,16 +8,7 @@ hardware counter feature route ipv4 vrf test 192.168.0.0/24 hardware counter feature route ipv6 2001:db8:cafe::/64 hardware counter feature segment-security in ! -transceiver qsfp default-mode 4x10G -! -hostname hardware-counter -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware.cfg index e3955c97a4e..1526d60b644 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hardware.cfg @@ -1,8 +1,6 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname hardware +hardware port-group 1 select Et32/1-4 +hardware port-group 2 select Et32/1,Et32/3,Et34 ! hardware access-list mechanism tcam ! @@ -10,12 +8,7 @@ hardware speed-group 1 serdes 10g hardware speed-group 2 serdes 25g hardware speed-group 3/1 serdes 25g ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hide-passwords.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hide-passwords.cfg index eaaa180fb1c..0bfb456436d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hide-passwords.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hide-passwords.cfg @@ -1,25 +1,20 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +enable password sha512 +aaa root secret sha512 ! -hostname hide-passwords +username ansible secret sha512 ! radius-server host 10.10.10.158 key 7 ! tacacs-server host 10.10.10.157 key 7 ! -enable password sha512 -aaa root secret sha512 -! -username ansible secret sha512 -! ip security ! profile Profile-1 shared-key 7 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -32,5 +27,3 @@ router bgp 65100 vrf BLAH neighbor 10.50.2.1 remote-as 65000 neighbor 10.50.2.1 password 7 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hostname.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hostname.cfg index b425d153a2c..a337019910c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hostname.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/hostname.cfg @@ -1,15 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! hostname hostname-set-via-hostname-var ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/igmp-snooping.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/igmp-snooping.cfg index 56f1874c20b..7630bb0703f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/igmp-snooping.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/igmp-snooping.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! vlan internal order ascending range 1006 1199 ! @@ -7,13 +6,6 @@ ip igmp snooping vlan 10 no ip igmp snooping vlan 20 no ip igmp snooping vlan 30 ! -transceiver qsfp default-mode 4x10G -! -hostname igmp-snooping -! -no enable password -no aaa root -! vlan 110 name PR01-DMZ ! @@ -22,8 +14,6 @@ vlan 3010 trunk group LEAF_PEER_L3 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-defaults.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-defaults.cfg index f204ec0cba1..7be5a54af39 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-defaults.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-defaults.cfg @@ -1,22 +1,12 @@ -!RANCID-CONTENT-TYPE: arista ! switchport default mode routed ! interface defaults + mtu 9000 ethernet shutdown - mtu 9000 -! -transceiver qsfp default-mode 4x10G -! -hostname interface-defaults -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-profiles.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-profiles.cfg index 2196e707cfa..daa1d36f896 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-profiles.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/interface-profiles.cfg @@ -1,4 +1,8 @@ -!RANCID-CONTENT-TYPE: arista +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 ! interface profile TEST-PROFILE-1 command description Molecule @@ -8,17 +12,3 @@ interface profile TEST-PROFILE-1 interface profile TEST-PROFILE-2 command mtu 9214 command ptp enable -! -transceiver qsfp default-mode 4x10G -! -hostname interface-profiles -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-access-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-access-lists.cfg index 0d257db96d2..dd984b52c18 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-access-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-access-lists.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-access-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -31,5 +23,3 @@ ip access-list ACL_NO_SEQUENCE permit ip any any nexthop-group NH_TEST permit vlan inner 123 0x000 ip any any permit vlan 234 0xFFF ip any any -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-client-source-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-client-source-interfaces.cfg index 04981f1f18a..818ee744384 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-client-source-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-client-source-interfaces.cfg @@ -1,31 +1,21 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-client-source-interfaces -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! +ip ftp client source-interface Ethernet10 ip ftp client source-interface Loopback0 vrf default ip ftp client source-interface Management0 vrf MGMT -ip ftp client source-interface Ethernet10 ip http client local-interface Loopback0 vrf default ip http client local-interface Management0 vrf MGMT ip http client local-interface Ethernet10 ip ssh client source-interface Ethernet10 ip ssh client source-interface Loopback0 vrf default ip ssh client source-interface Management0 vrf MGMT +ip telnet client source-interface Ethernet10 ip telnet client source-interface Loopback0 vrf default ip telnet client source-interface Management0 vrf MGMT -ip telnet client source-interface Ethernet10 +ip tftp client source-interface Ethernet10 ip tftp client source-interface Loopback0 vrf default ip tftp client source-interface Management0 vrf MGMT -ip tftp client source-interface Ethernet10 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-community-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-community-lists.cfg index dab5b3e9ea7..73c99437dc9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-community-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-community-lists.cfg @@ -1,25 +1,12 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-community-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! -ip community-list TEST1 permit 1000:1000 -ip community-list TEST2 permit 2000:3000 -! ip community-list IP_CL_TEST1 permit 1001:1001 1002:1002 ip community-list IP_CL_TEST1 deny 1010:1010 ip community-list regexp IP_CL_TEST1 permit 20:* ip community-list IP_CL_TEST2 deny 1003:1003 ip community-list regexp IP_RE_TEST1 permit ^$ ip community-list regexp IP_RE_TEST2 deny ^100 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-relay.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-relay.cfg index a0c82d56e87..ac3eb588e3b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-relay.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-relay.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! ip dhcp relay information option ip dhcp relay always-on ip dhcp relay all-subnets default ! -transceiver qsfp default-mode 4x10G -! -hostname ip-dhcp-relay -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-snooping.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-snooping.cfg index 51af40d5854..4fc26748515 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-snooping.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-dhcp-snooping.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista ! ip dhcp snooping bridging ip dhcp snooping information option ip dhcp snooping information option circuit-id type 10 format %h:%p ip dhcp snooping vlan 10,20,500,1000-2000 ! -transceiver qsfp default-mode 4x10G -! -hostname ip-dhcp-snooping -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists-regexp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists-regexp.cfg index 45a16ded88c..f652d9ecae3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists-regexp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists-regexp.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-extended-community-lists-regexp -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,5 +8,3 @@ ip extcommunity-list regexp TEST1 permit 65[0-9]{3}:[0-9]+ ip extcommunity-list regexp TEST1 deny .* ! ip extcommunity-list regexp TEST2 deny 6500[0-1]:650[0-9][0-9] -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists.cfg index c9922626f81..3a87f581467 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-extended-community-lists.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-extended-community-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,5 +8,3 @@ ip extcommunity-list TEST1 permit 65000:65000 ip extcommunity-list TEST1 deny 65002:65002 ! ip extcommunity-list TEST2 deny 65001:65001 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-igmp-snooping-enable.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-igmp-snooping-enable.cfg index 15dff960b53..a3c0943a32e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-igmp-snooping-enable.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-igmp-snooping-enable.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! ip igmp snooping robustness-variable 2 ip igmp snooping restart query-interval 30 @@ -33,16 +32,7 @@ ip igmp snooping proxy ip igmp snooping vlan 23 proxy no ip igmp snooping vlan 25 proxy ! -transceiver qsfp default-mode 4x10G -! -hostname ip-igmp-snooping-enable -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-nat.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-nat.cfg index 82c052a3fc5..50492f74d94 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-nat.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-nat.cfg @@ -1,11 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -ip nat translation address selection any ip nat translation address selection hash field source-ip -ip nat translation udp-timeout 3600 +ip nat translation address selection any ip nat translation tcp-timeout 7200 +ip nat translation udp-timeout 3600 ip nat translation max-entries 100000 ip nat translation low-mark 50 ip nat translation max-entries 1000 host @@ -49,15 +46,10 @@ ip nat profile NAT-PROFILE-NO-VRF-2 ip nat destination dynamic access-list ACL5 pool POOL5 priority 4294967295 comment Priority high end ip nat destination dynamic access-list ACL6 pool POOL6 comment Priority default ! -ip nat profile NAT-PROFILE-TEST-VRF vrf NAT-PROFILE-TEST-VRF -! -hostname ip-nat -! -no enable password -no aaa root +ip nat profile NAT-PROFILE-TEST-VRF vrf TEST ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -83,5 +75,3 @@ ip nat synchronization local-interface Ethernet1 port-range 1024 65535 port-range split disabled -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-radius-source-interface.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-radius-source-interface.cfg index 435bef9f0f0..c042aaba3cd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-radius-source-interface.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-radius-source-interface.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-radius-source-interface -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -17,5 +9,3 @@ ip radius vrf default source-interface loopback1 ip radius vrf MGMT source-interface Ma1 ! ip radius source-interface loopback10 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing-fib.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing-fib.cfg index 978274426a6..a5e454da595 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing-fib.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing-fib.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-routing-fib -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -17,5 +9,3 @@ ip hardware fib optimize prefixes profile urpf-internet ! ipv6 unicast-routing ipv6 hardware fib optimize prefixes profile internet -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing.cfg index 7884ebc8827..4c84b9e9fbe 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-routing.cfg @@ -1,18 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-routing -! -no enable password -no aaa root ! vrf instance TEST1 ! vrf instance TEST2 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,9 +12,7 @@ ip routing ipv6 interfaces no ip icmp redirect ip routing vrf TEST1 ip routing ipv6 interfaces vrf TEST2 +no ipv6 icmp redirect ! ipv6 unicast-routing ipv6 unicast-routing vrf TEST1 -no ipv6 icmp redirect -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-security.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-security.cfg index f036ee83f85..95f951f3dbc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-security.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-security.cfg @@ -1,19 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-security -! -no enable password -no aaa root ! ip security - ! ike policy IKE-1 - local-id 192.168.100.1 ike-lifetime 24 encryption aes256 dh-group 20 + local-id 192.168.100.1 ! ike policy IKE-2 ! @@ -33,14 +24,14 @@ ip security pfs dh-group 14 ! sa policy SA-3 - esp integrity null esp encryption null + esp integrity null sa lifetime 8 hours pfs dh-group 17 ! sa policy SA-4 - esp integrity md5 esp encryption 3des + esp integrity md5 ! sa policy SA-5 esp integrity sha512 @@ -48,6 +39,8 @@ ip security sa policy SA-6 esp integrity sha384 ! + sa policy SA-7 + ! profile Profile-1 ike-policy IKE-1 sa-policy SA-1 @@ -69,13 +62,13 @@ ip security flow parallelization encapsulation udp mode tunnel ! + profile Profile-4 + ! key controller profile Profile-1 hardware encryption disabled ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-tacacs-source-interface.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-tacacs-source-interface.cfg index 4591c7ca113..0ff20529839 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-tacacs-source-interface.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-tacacs-source-interface.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-tacacs-source-interface -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -17,5 +9,3 @@ ip tacacs vrf default source-interface loopback1 ip tacacs vrf TEST1 source-interface lo3 ! ip tacacs source-interface loopback10 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-virtual-router-mac-address.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-virtual-router-mac-address.cfg index a050cb8d880..1324e77269a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-virtual-router-mac-address.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ip-virtual-router-mac-address.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ip-virtual-router-mac-address -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! ip virtual-router mac-address 00:1c:73:00:dc:01 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-access-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-access-lists.cfg index 406e74b13aa..e41d5b20fef 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-access-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-access-lists.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ipv6-access-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -37,5 +29,3 @@ ipv6 access-list standard TEST5 ipv6 access-list standard TEST6 5 deny 2001:db8:1000::/64 10 permit 2001:db8::/32 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-dhcp-relay.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-dhcp-relay.cfg index a861d158152..5cf46f0d12a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-dhcp-relay.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-dhcp-relay.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista ! ipv6 dhcp relay always-on ipv6 dhcp relay all-subnets default ipv6 dhcp relay option link-layer address ipv6 dhcp relay option remote-id format %m:%i ! -transceiver qsfp default-mode 4x10G -! -hostname ipv6-dhcp-relay -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-neighbors.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-neighbors.cfg index 576885f08dc..b58b61996f5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-neighbors.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-neighbors.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ipv6-neighbors -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! ipv6 neighbor persistent refresh-delay 1000 ipv6 neighbor vrf MGMT 11:22:33:44:55:66:77:88 Ethernet1 11:22:33:44:55:66 ipv6 neighbor ::ffff:192.1.56.10 Loopback99 aa:af:12:34:bc:bf -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-static-routes.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-static-routes.cfg index eedea36bb8b..baa6a55e808 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-static-routes.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ipv6-static-routes.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ipv6-static-routes -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -19,5 +11,3 @@ ipv6 route vrf customer01 2a01:cb04:4e6:a300::/64 Vlan101 2a01:cb04:4e6:100::1 ipv6 route vrf customer01 2a01:cb04:4e6:a400::/64 Vlan101 2a01:cb04:4e6:100::1 201 tag 667 name RT-TO-FAKE-DMZ ipv6 route vrf customer01 2b01:cb04:4e6:a400::/64 Vlan102 2a01:cb04:4e6:102::1 track bfd 201 tag 102 name Track-BFD metric 100 ipv6 route vrf customer01 2c01:cb04:4e6:a400::/64 Vlan102 201 tag 102 name No-Track-BFD -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/l2-protocol-forwarding.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/l2-protocol-forwarding.cfg index 9dbba4d2e1d..bbb4d6d4978 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/l2-protocol-forwarding.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/l2-protocol-forwarding.cfg @@ -1,6 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! l2-protocol forwarding profile TEST1 @@ -40,11 +37,6 @@ l2-protocol stp tagged forward stp untagged forward ! -hostname l2-protocol-forwarding -! -no enable password -no aaa root -! interface Port-Channel1 description L2PF test switchport @@ -56,8 +48,6 @@ interface Ethernet1 l2-protocol forwarding profile TEST1 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lacp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lacp.cfg index 690a597706e..0ed81a0d10e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lacp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lacp.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! +lacp system-priority 0 lacp port-id range 1 128 no lacp rate-limit default -lacp system-priority 0 -! -hostname lacp -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/link-tracking-groups.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/link-tracking-groups.cfg index 0b3b20ff3a8..17bcabb5645 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/link-tracking-groups.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/link-tracking-groups.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname link-tracking-groups -! -no enable password -no aaa root ! link tracking group EVPN_MH_ES1 links minimum 30 @@ -13,8 +5,6 @@ link tracking group EVPN_MH_ES1 link tracking group EVPN_MH_ES2 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lldp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lldp.cfg index 7649bb1bcee..339572730a7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lldp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/lldp.cfg @@ -1,19 +1,11 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -no lldp run lldp timer 30 lldp hold-time 90 -lldp management-address 192.168.1.1/24 -lldp management-address vrf Management no lldp tlv transmit system-capabilities lldp tlv transmit system-description -! -hostname lldp -! -no enable password -no aaa root +no lldp run +lldp management-address 192.168.1.1/24 +lldp management-address vrf Management ! interface Ethernet1 description to WAN-ISP1-01 Ethernet2 @@ -40,8 +32,6 @@ interface Ethernet4 no lldp receive ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/load-interval.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/load-interval.cfg index dc54045d167..0e7a36bc17f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/load-interval.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/load-interval.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! load-interval default 25 ! -transceiver qsfp default-mode 4x10G -! -hostname load-interval -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/local-users.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/local-users.cfg index ee0bc361ada..8fa14b2330c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/local-users.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/local-users.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname local-users -! -no enable password -no aaa root ! no username admin username shell shell /sbin/nologin nopassword @@ -13,8 +5,6 @@ username shell ssh-key SSH_KEY username shell ssh-key secondary SECONDARY_SSH_KEY ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-match-list.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-match-list.cfg index 6cf3de4ffb9..161111b5346 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-match-list.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-match-list.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! logging console informational logging monitor debugging logging policy match match-list molecule discard ! -hostname logging-match-list -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-minimal.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-minimal.cfg index b090cc2ca7f..f3f3e2ae51d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-minimal.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging-minimal.cfg @@ -1,20 +1,13 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! +no logging repeat-messages logging buffered 64000 logging console informational logging monitor debugging logging facility syslog ! -hostname logging-minimal -! -no enable password -no aaa root +logging event link-status global ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging.cfg index 505b65e989f..1110a0650b8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/logging.cfg @@ -1,12 +1,13 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +logging event storm-control discards global +logging event storm-control discards interval 10 ! +logging event congestion-drops interval 10 +! +logging repeat-messages logging buffered 1000000 warnings no logging trap logging console errors -logging event storm-control discards global -logging event storm-control discards interval 10 logging synchronous level critical logging host 20.20.20.7 logging host 50.50.50.7 100 200 protocol tcp @@ -26,18 +27,14 @@ logging format timestamp traditional year timezone logging format rfc5424 logging source-interface Loopback0 logging vrf mgt source-interface Management0 +! logging level AAA warnings logging level ACL critical logging level BGP 0 ! -hostname logging -! -no enable password -no aaa root +no logging event link-status global ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/loopbacks-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/loopbacks-interfaces.cfg index df1aad13467..4278f9e4dd2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/loopbacks-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/loopbacks-interfaces.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname loopbacks-interfaces -! -no enable password -no aaa root ! interface Loopback0 description EVPN_Overlay_Peering @@ -29,12 +21,12 @@ interface Loopback99 ip address 192.168.1.1/32 secondary ipv6 enable ipv6 address 2002::CAFE/64 + mpls ldp interface isis enable ISIS_TEST isis bfd - isis passive isis metric 100 + isis passive isis network point-to-point - mpls ldp interface ! interface Loopback100 description TENANT_A_PROJECT02_VTEP_DIAGNOSTICS @@ -42,8 +34,6 @@ interface Loopback100 ip address 10.1.255.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-access-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-access-lists.cfg index 547a6737e06..e51bc69bab2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-access-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-access-lists.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mac-access-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -31,5 +23,3 @@ mac access-list TEST4 remark A comment in the middle permit any 02:00:00:12:34:56 00:00:00:00:00:00 deny any 02:00:00:ab:cd:ef 00:00:00:00:00:00 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-address-table.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-address-table.cfg index e9d184771ea..dbc918f79b4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-address-table.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-address-table.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mac-address-table -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -17,5 +9,3 @@ mac address-table aging-time 100 mac address-table notification host-flap logging mac address-table notification host-flap detection window 10 mac address-table notification host-flap detection moves 2 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-security-eth-po-entropy.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-security-eth-po-entropy.cfg index 8bbe8a2fc06..fac8f08e810 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-security-eth-po-entropy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mac-security-eth-po-entropy.cfg @@ -1,6 +1,11 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +management security + entropy source hardware + password encryption-key common + ! + ssl profile SSL_PROFILE + tls versions 1.1 1.2 + certificate SSL_CERT key SSL_KEY ! mac security license license1 123456 @@ -15,24 +20,21 @@ mac security traffic unprotected allow sci l2-protocol lldp bypass unauthorized + ! profile A2 key 1234b 7 12485744465E5A53 traffic unprotected allow active-sak + ! profile A3 cipher aes256-gcm-xpn key ab 7 10195F4C5144405A traffic unprotected drop ! -hostname mac-security-eth-po-entropy -! -no enable password -no aaa root -! interface Port-Channel3 description L2-PORT - switchport switchport trunk allowed vlan 1-5 switchport mode trunk + switchport ! interface Ethernet1 mac security profile A1 @@ -45,15 +47,6 @@ interface Ethernet3 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -management security - entropy source hardware - password encryption-key common - ssl profile SSL_PROFILE - tls versions 1.1 1.2 - certificate SSL_CERT key SSL_KEY -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/maintenance.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/maintenance.cfg index 23c35d0da11..d325e4e21e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/maintenance.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/maintenance.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname maintenance -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -43,5 +35,3 @@ maintenance group bgp BGP_GROUP_2 group interface INTERFACE_GROUP_1 profile unit UP1 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg index 24f16d01fa4..1ee1035cd59 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname management-accounts -! -no enable password -no aaa root +management accounts + password policy AVD_POLICY ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -management accounts - password policy AVD_POLICY -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg index 7442a449bc9..71dd77c22ff 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg @@ -1,26 +1,9 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-api-http -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -ip access-list standard ACL-API - 10 permit 10.0.0.0/8 - 20 permit 100.0.0.0/8 ! management api http-commands protocol https - protocol https ssl profile SSL_PROFILE no protocol http default-services + protocol https ssl profile SSL_PROFILE no shutdown ! vrf default @@ -36,4 +19,11 @@ EOF EOF ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +ip access-list standard ACL-API + 10 permit 10.0.0.0/8 + 20 permit 100.0.0.0/8 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg index 8ee2c59a1ce..003f04f89a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg @@ -1,16 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-api-models -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management api models ! @@ -26,4 +13,7 @@ management api models path /Sysdb/sys/logging/config/vrfLoggingHost/mgmt disabled path cell/1/agent disabled ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg index 10c6d558f2a..dc603e4c156 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname management-console -! -no enable password -no aaa root +management console + idle-timeout 15 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -management console - idle-timeout 15 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg index 3b86ba112f4..737c7a38520 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg @@ -1,16 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-cvx -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management cvx no shutdown @@ -20,4 +7,7 @@ management cvx source-interface Loopback0 vrf MGMT ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg index 74ef1b2b9f7..d5187f40ef3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname management-defaults -! -no enable password -no aaa root +management defaults + secret hash md5 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -management defaults - secret hash md5 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg index 5a28cfa9481..3445974afb3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg @@ -1,34 +1,25 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-gnmi-grpc-tunnel -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management api gnmi - transport grpc-tunnel onetarget + transport grpc-tunnel multipletargets no shutdown vrf management tunnel ssl profile ssl_profile gnmi ssl profile ssl_profile destination 10.1.1.100 port 10000 local interface Management1 port 10001 - target testid100 - transport grpc-tunnel multipletargets + target testid1 testid2 testid3 testid4 + ! + transport grpc-tunnel noserialnotargets + ! + transport grpc-tunnel onetarget no shutdown vrf management tunnel ssl profile ssl_profile gnmi ssl profile ssl_profile destination 10.1.1.100 port 10000 local interface Management1 port 10001 - target testid1 testid2 testid3 testid4 + target testid100 + ! transport grpc-tunnel serialandtargets no shutdown vrf management @@ -37,9 +28,12 @@ management api gnmi destination 10.1.1.100 port 10000 local interface Management1 port 10001 target serial-number testid10 testid20 - transport grpc-tunnel noserialnotargets + ! transport grpc-tunnel serialonly target serial-number provider eos-native ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg index a95bc7aad39..a948162faa2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg @@ -1,16 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-gnmi-new-flags -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management api gnmi transport grpc MGMT @@ -18,10 +5,14 @@ management api gnmi vrf MGMT ip access-group acl1 notification timestamp send-time + ! transport grpc mytransport port 6032 ip access-group acl1 notification timestamp send-time provider eos-native ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg index 3621d9398d9..a48de3c1063 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg @@ -1,24 +1,15 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-gnmi -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management api gnmi transport grpc MGMT vrf MGMT ip access-group ACL-GNMI + ! transport grpc MONITORING port 6031 vrf MONITORING provider eos-native ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg index ffd1af9b03b..3b9057ef346 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg @@ -1,18 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-interfaces -! -no enable password -no aaa root ! interface Management0 mac-address 00:1c:73:00:00:aa ip address 10.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -28,5 +20,3 @@ interface Vlan123 mtu 1500 ip address 10.73.0.123/24 ip virtual-router address 10.73.0.1 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-security.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-security.cfg index df09605b6f9..b92f8ae4daa 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-security.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-security.cfg @@ -1,23 +1,11 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-security -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! management security entropy source hardware haveged cpu jitter entropy source hardware exclusive + password minimum length 17 password encryption-key common password encryption reversible aes-256-gcm - password minimum length 17 + ! password policy AVD_POLICY minimum digits 1 minimum length 2 @@ -36,31 +24,43 @@ management security ! session shared-secret profile profile2 secret Secret4 0 name1_secret receive-lifetime 2024-12-20 10:00:00 2025-12-20 10:00:00 transmit-lifetime 2024-12-20 10:00:00 2025-12-20 10:00:00 + ! ssl profile certificate-profile certificate eAPI.crt key eAPI.key crl ca.crl crl intermediate.crl + ! ssl profile cipher-list-profile cipher-list ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384 + ! ssl profile test1-chain-cert chain certificate test-chain-cert1.crt chain certificate test-chain-cert2.crt chain certificate requirement basic-constraint ca true + ! ssl profile test1-trust-cert trust certificate test-trust1.crt trust certificate test-trust2.crt trust certificate requirement basic-constraint ca true trust certificate policy expiry-date ignore + ! ssl profile test2-chain-cert chain certificate requirement include root-ca + ! ssl profile test2-trust-cert trust certificate system trust certificate requirement hostname fqdn + ! ssl profile tls-single-version-profile-as-float tls versions 1.0 + ! ssl profile tls-single-version-profile-as-string tls versions 1.1 + ! ssl profile tls-versions-profile tls versions 1.0 1.1 ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh-custom-cipher.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh-custom-cipher.cfg index 1e505b1138d..7df647d4a5e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh-custom-cipher.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh-custom-cipher.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-ssh-custom-cipher -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,15 +8,13 @@ management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in idle-timeout 15 - connection limit 55 cipher aes256-cbc aes256-ctr aes256-gcm@openssh.com key-exchange ecdh-sha2-nistp521 mac hmac-sha2-512 hmac-sha2-512-etm@openssh.com hostkey server ecdsa-nistp256 ecdsa-nistp521 - hostkey server cert sshkey.cert + connection limit 55 no shutdown + hostkey server cert sshkey.cert ! vrf mgt no shutdown -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh.cfg index 8a0e4bfeb92..ae1e39530e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-ssh.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-ssh -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,16 +8,16 @@ management ssh ip access-group ACL-SSH in ip access-group ACL-SSH-VRF vrf mgt in idle-timeout 15 - connection limit 50 + authentication protocol keyboard-interactive password public-key connection per-host 10 - client-alive interval 666 - client-alive count-max 42 fips restrictions hostkey client strict-checking + connection limit 50 + authentication empty-passwords permit + client-alive interval 666 + client-alive count-max 42 no shutdown log-level debug ! vrf mgt no shutdown -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-tech-support.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-tech-support.cfg index d904a9afdb4..443a3e28b81 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-tech-support.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-tech-support.cfg @@ -1,29 +1,19 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname management-tech-support -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! management tech-support policy show tech-support - exclude command show platform fap ip route - exclude command show platform fap ipv6 route exclude command show ip bgp vrf all + exclude command show ip route vrf all detail exclude command show ipv6 bgp vrf all + exclude command show ipv6 route vrf all detail exclude command show kernel ip route vrf all exclude command show kernel ipv6 route vrf all - exclude command show ip route vrf all detail - exclude command show ipv6 route vrf all detail + exclude command show platform fap ip route + exclude command show platform fap ipv6 route exclude command json show version detail include command show version detail | grep TerminAttr exit -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/match-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/match-lists.cfg index c8e084c86bb..3a94dec71a7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/match-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/match-lists.cfg @@ -1,6 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +match-list input string molecule + 10 match regex ^.*MOLECULE.*$ + 20 match regex ^.*TESTING.*$ ! match-list input prefix-ipv4 molecule_v4 match prefix-ipv4 10.10.10.0/24 @@ -9,18 +10,7 @@ match-list input prefix-ipv4 molecule_v4 match-list input prefix-ipv6 molecule_v6 match prefix-ipv6 2001:0DB8::/32 ! -match-list input string molecule - 10 match regex ^.*MOLECULE.*$ - 20 match regex ^.*TESTING.*$ -! -hostname match-lists -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mcs-client.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mcs-client.cfg index ddcf9c9442b..d528683f0c2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mcs-client.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mcs-client.cfg @@ -1,6 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! mcs client no shutdown @@ -11,14 +8,7 @@ mcs client server host 10.90.224.189 server host leaf2.atd.lab ! -hostname mcs-client -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mlag-configuration.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mlag-configuration.cfg index 7edeb198ac2..5f5d01422fc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mlag-configuration.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mlag-configuration.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mlag-configuration -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -22,5 +14,3 @@ mlag configuration dual-primary recovery delay mlag 90 non-mlag 30 reload-delay mlag 400 reload-delay non-mlag 450 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity-2.cfg new file mode 100644 index 00000000000..4d971c5d86e --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity-2.cfg @@ -0,0 +1,11 @@ +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +monitor connectivity + interval 5 + shutdown + interface set HOST_SET2 Loopback2-4, Loopback10-12 + local-interfaces HOST_SET2 default diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity.cfg index b816d6182a1..2edd354667d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-connectivity.cfg @@ -1,18 +1,45 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname monitor-connectivity -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! monitor connectivity + vrf blue + interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 + local-interfaces VRF_GLOBAL_SET default + ! + host server4 + description + server4_connectivity_monitor + local-interfaces VRF_GLOBAL_SET + ip 10.10.20.1 + url https://server2.local.com + ! + host server5 + description + server5_connectivity_monitor + local-interfaces VRF_GLOBAL_SET address-only + ip 10.10.20.11 + url https://server5.local.com + ! + host server6 + ! + vrf red + interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 + interface set VRF_HOST_SET Loopback12-14, 19-23 + description + vrf_connectivity_monitor + local-interfaces VRF_GLOBAL_SET address-only default + ! + host server2 + description + server2_connectivity_monitor + local-interfaces VRF_HOST_SET address-only + ip 10.10.20.1 + url https://server2.local.com + ! + vrf yellow interval 5 no shutdown interface set GLOBAL_SET Ethernet1-4 @@ -38,28 +65,5 @@ monitor connectivity server3_connectivity_monitor local-interfaces HOST_SET ip 10.10.10.3 - vrf blue - interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 - local-interfaces VRF_GLOBAL_SET default - ! - host server4 - description - server4_connectivity_monitor - local-interfaces VRF_HOST_SET - ip 10.10.20.1 - url https://server2.local.com - vrf red - interface set VRF_GLOBAL_SET Vlan21-24, Vlan29-32 - interface set VRF_HOST_SET Loopback12-14, 19-23 - local-interfaces VRF_GLOBAL_SET address-only default - description - vrf_connectivity_monitor - ! - host server2 - description - server2_connectivity_monitor - local-interfaces VRF_HOST_SET address-only - ip 10.10.20.1 - url https://server2.local.com -! -end + ! + host server4 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-layer1.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-layer1.cfg index e4c0fbb54bd..30663de2526 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-layer1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-layer1.cfg @@ -1,6 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! monitor layer1 logging transceiver @@ -8,14 +5,7 @@ monitor layer1 logging transceiver communication logging mac fault ! -hostname monitor-layer1 -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-session-default-encapsulation-gre.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-session-default-encapsulation-gre.cfg new file mode 100644 index 00000000000..7694cc2149c --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-session-default-encapsulation-gre.cfg @@ -0,0 +1,7 @@ +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +monitor session default encapsulation gre payload inner-packet diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-sessions.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-sessions.cfg index 81bb37fa84a..8e8616e2d79 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-sessions.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-sessions.cfg @@ -1,31 +1,22 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname monitor-sessions -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! monitor session myMonitoringSession1 source Ethernet0 ipv6 access-group ipv6ACL monitor session myMonitoringSession1 source Ethernet5 both ip access-group ipv4ACL priority 10 monitor session myMonitoringSession1 destination Ethernet48 -monitor session myMonitoringSession1 encapsulation gre metadata tx -monitor session myMonitoringSession1 header remove size 32 monitor session myMonitoringSession1 truncate +monitor session myMonitoringSession1 header remove size 32 +monitor session myMonitoringSession1 encapsulation gre metadata tx +monitor session myMonitoringSession2 ip access-group ipv4ACL monitor session myMonitoringSession2 source Ethernet3, Ethernet5 rx monitor session myMonitoringSession2 source Ethernet10-15 rx monitor session myMonitoringSession2 source Ethernet12 rx monitor session myMonitoringSession2 source Ethernet18 tx mac access-group macACL priority 100 monitor session myMonitoringSession2 destination Cpu monitor session myMonitoringSession2 destination Ethernet50 -monitor session myMonitoringSession2 encapsulation gre metadata tx -monitor session myMonitoringSession2 ip access-group ipv4ACL monitor session myMonitoringSession2 sample 50 -! -end +monitor session myMonitoringSession2 encapsulation gre metadata tx +monitor session myMonitoringSession3 source Ethernet20 both ip access-group ipv4ACL priority 10 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-influx.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-influx.cfg index 70eec6d7c4d..8381b387a47 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-influx.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-influx.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname monitor-telemetry-influx -! -no enable password -no aaa root ! monitor telemetry influx destination influxdb test @@ -34,8 +26,6 @@ monitor telemetry influx source group standard disabled ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-postcard-policy.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-postcard-policy.cfg index 966eb3ead0d..dd1b6bcd12e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-postcard-policy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/monitor-telemetry-postcard-policy.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname monitor-telemetry-postcard-policy -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -43,5 +35,3 @@ monitor telemetry postcard policy ! profile profile2 ingress sample policy samplepo2 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-2.cfg index 900a3f9b52d..83d5dcbf41c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-2.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mpls-2 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -18,5 +10,3 @@ mpls ldp shutdown ! mpls icmp ttl-exceeded tunneling -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-3.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-3.cfg index 20fc1078004..c5cf1779079 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls-3.cfg @@ -1,21 +1,11 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mpls-3 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! mpls ip ! mpls ldp - interface disabled default router-id 192.168.1.2 -! -end + interface disabled default diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls.cfg index 7f0103429a2..a60504954f9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/mpls.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname mpls -! -no enable password -no aaa root ! interface Ethernet1 no switchport @@ -19,18 +11,16 @@ interface Loopback0 mpls ldp interface ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! mpls ip ! mpls ldp - interface disabled default router-id 192.168.1.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ! mpls icmp fragmentation-needed tunneling -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/none_configuration.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/none_configuration.cfg index 24afbbf7417..e047f96bbfc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/none_configuration.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/none_configuration.cfg @@ -1,15 +1,5 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname none_configuration -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ntp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ntp.cfg index d9d7f69de11..568ee7ece77 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ntp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ntp.cfg @@ -1,8 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname ntp +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 ! ntp authentication-key 1 md5 7 044F0E151B ntp authentication-key 2 md5 7 044F0E151B @@ -16,13 +16,3 @@ ntp server 10.1.1.1 ntp server 10.1.1.2 prefer ntp server 20.20.20.1 key 2 ntp server ie.pool.ntp.org iburst key 1 -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/object-tracking.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/object-tracking.cfg index 0c19def24d1..5d2de50584c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/object-tracking.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/object-tracking.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname object-tracking ! track MyTrackNoProperty interface Ethernet1/1 line-protocol track MyTrackSetProperty interface Ethernet2/1 line-protocol ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/patch-panel.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/patch-panel.cfg index 4b8b56555ce..ad2dc911324 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/patch-panel.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/patch-panel.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname patch-panel -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -16,14 +8,12 @@ patch panel connector interface recovery review delay 10 900 connector interface patch bgp vpws remote-failure errdisable ! - patch TEN_B_site2_site5_eline - connector 1 interface Ethernet5 - connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_B_site2_site5_eline - ! patch TEN_A_site2_site5_eline shutdown connector 1 interface Ethernet6 dot1q vlan 123 connector 2 pseudowire ldp LDP_PW_1 ! -! -end + patch TEN_B_site2_site5_eline + connector 1 interface Ethernet5 + connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_B_site2_site5_eline + ! diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/peer-filters.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/peer-filters.cfg index f845992b821..afe4952cd3a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/peer-filters.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/peer-filters.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname peer-filters -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -18,5 +10,3 @@ peer-filter PF1 ! peer-filter PF2 30 match as-range 65000 result accept -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/platform.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/platform.cfg index 4146bd730ea..78eca7a9c3c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/platform.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/platform.cfg @@ -1,6 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! platform trident mmu queue profile mc_example_profile egress unicast queue 1 reserved bytes 0 @@ -23,8 +20,6 @@ platform trident mmu queue profile unused_profile egress multicast queue 1 reserved cells 0 egress multicast queue 1 threshold 8 ! -hostname platform -! platform trident forwarding-table partition 2 platform sand qos map traffic-class 0 to network-qos 0 platform sand qos map traffic-class 1 to network-qos 7 @@ -36,14 +31,9 @@ platform sand multicast replication default ingress platform sand mdb profile l3-xxl platform sfe data-plane cpu allocation maximum 42 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! platform trident mmu queue profile mc_example_profile apply -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/poe.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/poe.cfg index d0cf1ce2b53..f4484954195 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/poe.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/poe.cfg @@ -1,22 +1,12 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! no lldp tlv transmit power-via-mdi lldp tlv transmit system-capabilities ! -hostname poe -! poe reboot action maintain interface shutdown action power-off ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps-pbr.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps-pbr.cfg index 333848d786d..a47148e9535 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps-pbr.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps-pbr.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname policy-maps-pbr -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,5 +12,3 @@ policy-map type pbr POLICY_DROP_THEN_NEXTHOP set nexthop recursive 172.30.1.2 ! class NO_ACTION -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps.cfg index 95c8d0505c6..b2313431f05 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/policy-maps.cfg @@ -1,17 +1,15 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname policy-maps -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! +policy-map type pbr PM_PBR_BREAKOUT + class CM_PBR_EXCLUDE + ! + class CM_PBR_INCLUDE + set nexthop recursive 192.168.4.2 +! policy-map type copp copp-system-policy class copp-system-OspfIsis shape kbps 1000 @@ -23,12 +21,6 @@ policy-map type copp copp-system-policy ! class copp-system-aaa ! -policy-map type pbr PM_PBR_BREAKOUT - class CM_PBR_EXCLUDE - ! - class CM_PBR_INCLUDE - set nexthop recursive 192.168.4.2 -! policy-map type quality-of-service PM_REPLICATION_LD class CM_REPLICATION_LD set dscp af11 @@ -51,5 +43,3 @@ policy-map type quality-of-service PM_REPLICATION_LD3 set dscp af11 set cos 6 police rate 10000 bps burst-size 260 kbytes -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg index fdaa8144b31..a95efc050ee 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg @@ -1,28 +1,20 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname port-channel-interfaces -! -no enable password -no aaa root ! interface Port-Channel3 description MLAG_PEER_DC1-LEAF1B_Po3 - switchport switchport trunk allowed vlan 2-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport no snmp trap link-change shape rate 200000 kbps ! interface Port-Channel5 description DC1_L2LEAF1_Po1 bgp session tracker ST2 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport ip igmp host-proxy ip igmp host-proxy 239.0.0.1 ip igmp host-proxy 239.0.0.2 exclude 10.0.2.1 @@ -51,6 +43,7 @@ interface Port-Channel5 interface Port-Channel8 description to Dev02 Port-channel 8 no switchport + switchport port-security violation protect ! interface Port-Channel8.101 description to Dev02 Port-Channel8.101 - VRF-C1 @@ -68,9 +61,9 @@ interface Port-Channel9 ! interface Port-Channel10 description SRV01_bond0 - switchport switchport trunk allowed vlan 2-3000 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0404:0404:0303 route-target import 04:04:03:03:02:02 @@ -78,11 +71,11 @@ interface Port-Channel10 ! interface Port-Channel12 description interface_in_mode_access_with_voice - switchport switchport trunk native vlan 100 switchport phone vlan 70 switchport phone trunk untagged switchport mode trunk phone + switchport ! interface Port-Channel13 description EVPN-Vxlan single-active redundancy @@ -106,21 +99,27 @@ interface Port-Channel14 ! interface Port-Channel15 description DC1_L2LEAF3_Po1 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport mlag 15 spanning-tree guard loop link tracking group EVPN_MH_ES2 upstream ! interface Port-Channel16 description DC1_L2LEAF4_Po1 - switchport + switchport trunk native vlan 10 + switchport dot1q vlan tag disallowed switchport trunk allowed vlan 110,201 switchport mode trunk + switchport + switchport vlan translation out 23 dot1q-tunnel 22 snmp trap link-change mlag 16 + switchport port-security violation protect log + switchport port-security mac-address maximum 100 spanning-tree guard none + switchport backup-link Port-Channel100.102 prefer vlan 20 ! interface Port-Channel17 description PBR Description @@ -130,15 +129,16 @@ interface Port-Channel17 ! interface Port-Channel20 description Po_in_mode_access_accepting_tagged_LACP_frames - switchport switchport access vlan 200 + switchport mode access + switchport l2-protocol encapsulation dot1q vlan 200 ! interface Port-Channel50 description SRV-POD03_PortChanne1 - switchport switchport trunk allowed vlan 1-4000 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -146,9 +146,15 @@ interface Port-Channel50 ! interface Port-Channel51 description ipv6_prefix - switchport switchport trunk allowed vlan 1-500 switchport mode trunk + switchport + switchport port-security + no switchport port-security mac-address maximum disabled + switchport port-security vlan 1 mac-address maximum 3 + switchport port-security vlan 2 mac-address maximum 3 + switchport port-security vlan 3 mac-address maximum 3 + switchport port-security vlan default mac-address maximum 2 ipv6 nd prefix a1::/64 infinite infinite no-autoconfig ! interface Port-Channel99 @@ -164,40 +170,47 @@ interface Port-Channel99 ! interface Port-Channel100 logging event link-status + switchport access vlan 200 + switchport trunk native vlan tag + switchport phone vlan 110 + switchport phone trunk tagged + switchport vlan translation in required + switchport dot1q vlan tag required + switchport trunk allowed vlan 10-11 + switchport mode dot1q-tunnel + switchport dot1q ethertype 1536 + switchport vlan forwarding accept all + switchport trunk group g1 + switchport trunk group g2 no switchport - switchport tap native vlan 10 - switchport tap identity 3 - switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab - switchport tap mpls pop all - switchport tap encapsulation gre strip - switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip - switchport tap encapsulation gre protocol 0x0010 strip - switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0001 strip - switchport tap encapsulation gre destination 1.1.1.3 source 1.1.1.4 strip - switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip - switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet - switchport tool mpls pop all - switchport tool encapsulation vn-tag strip - switchport tool encapsulation dot1br strip - switchport tap allowed vlan 25 - switchport tool allowed vlan 23 - switchport tool identity qinq - switchport tool identity qinq source dzgre port inner policy - switchport tap truncation - switchport tool truncation 160 - switchport tap default group g1 group g2 group g3 - switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 - switchport tap default interface ethernet4 - switchport tap default interface port-channel10 - switchport tool group set group1 group2 group3 - switchport tool dot1q remove outer 1-2 - switchport tool dzgre preserve + switchport source-interface tx multicast + switchport vlan translation 12 20 + switchport vlan translation 23 inner 74 42 + switchport vlan translation 24 inner 78 network 46 + switchport vlan translation 43 dot1q-tunnel 30 + switchport vlan translation in 34 23 + switchport vlan translation in 37 inner 56 49 + switchport vlan translation in 23 dot1q-tunnel 45 + switchport vlan translation out 34 50 + switchport vlan translation out 10 45 inner 34 + switchport vlan translation out 45 dot1q-tunnel all + switchport trunk private-vlan secondary + switchport pvlan mapping 20-30 + switchport port-security + switchport port-security mac-address maximum disabled + switchport backup-link Port-channel51 + switchport backup preemption-delay 35 + switchport backup mac-move-burst 20 + switchport backup mac-move-burst-interval 30 + switchport backup initial-mac-move-delay 10 + switchport backup dest-macaddr 01:00:00:00:00:00 ! interface Port-Channel100.101 description IFL for TENANT01 logging event link-status mtu 1500 encapsulation dot1q vlan 101 + ip address 10.1.1.3/31 switchport tap identity 3 inner 10 switchport tap mac-address dest 01:00:00:00:00:00 switchport tap encapsulation vxlan strip @@ -205,43 +218,44 @@ interface Port-Channel100.101 switchport tool identity dot1q source dzgre policy switchport tap truncation 120 switchport tool truncation - ip address 10.1.1.3/31 ! interface Port-Channel100.102 description IFL for TENANT02 no logging event link-status logging event storm-control discards mtu 1500 - encapsulation dot1q vlan 102 + encapsulation dot1q vlan 102 inner 110 vrf C2 ip address 10.1.2.3/31 ! interface Port-Channel101 description PVLAN Promiscuous Access - only one secondary - switchport switchport access vlan 110 + switchport mode access + switchport switchport pvlan mapping 111 no qos trust ! interface Port-Channel102 description PVLAN Promiscuous Trunk - vlan translation out - switchport + switchport vlan translation out required switchport trunk allowed vlan 110-112 switchport mode trunk + switchport switchport vlan translation out 111-112 110 ! interface Port-Channel103 description PVLAN Secondary Trunk - switchport switchport trunk allowed vlan 110-112 switchport mode trunk + switchport switchport trunk private-vlan secondary ! interface Port-Channel104 description LACP fallback individual - switchport switchport trunk allowed vlan 112 switchport mode trunk + switchport port-channel lacp fallback timeout 300 port-channel lacp fallback individual ! @@ -269,8 +283,9 @@ interface Port-Channel108 ! interface Port-Channel109 description Molecule ACLs - switchport switchport access vlan 110 + switchport mode access + switchport ip access-group IPV4_ACL_IN in ip access-group IPV4_ACL_OUT out ipv6 access-group IPV6_ACL_IN in @@ -317,7 +332,7 @@ interface Port-Channel111.300 interface Port-Channel111.400 description TENANT_A pseudowire 3 interface encapsulation vlan - client dot1q outer 400 inner 20 network dot1q outer 21 inner 401 + client dot1q outer 400 inner 20 network dot1q outer 401 inner 21 ! interface Port-Channel111.1000 description L2 Subinterface @@ -331,9 +346,9 @@ interface Port-Channel111.1000 ! interface Port-Channel112 description LACP fallback individual - switchport switchport trunk allowed vlan 112 switchport mode trunk + switchport port-channel lacp fallback timeout 5 port-channel lacp fallback individual ! @@ -354,9 +369,9 @@ interface Port-Channel114 ! interface Port-Channel115 description native-vlan-tag-precedence - switchport switchport trunk native vlan tag switchport mode trunk + switchport ! interface Port-Channel117 description interface_with_sflow_ingress_egress_enabled @@ -384,12 +399,13 @@ interface Port-Channel120 ! interface Port-Channel121 description access_port_with_no_vlans + switchport mode access switchport ! interface Port-Channel122 description trunk_port_with_no_vlans - switchport switchport mode trunk + switchport ! interface Port-Channel130 description IP NAT Testing @@ -401,9 +417,89 @@ interface Port-Channel130 ! interface Port-Channel131 description dot1q-tunnel mode - switchport switchport access vlan 115 switchport mode dot1q-tunnel + switchport +! +interface Port-Channel131.1 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q outer 23 inner dot1q 45 network dot1ad outer 32 inner dot1ad 54 +! +interface Port-Channel131.2 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q 10 network dot1q outer 32 inner 54 +! +interface Port-Channel131.3 + description Test_encapsulation_vlan3 + encapsulation vlan + client dot1ad 12 network dot1q 25 +! +interface Port-Channel131.4 + description Test_encapsulation_vlan4 + encapsulation vlan + client dot1ad outer 35 inner dot1q 60 network dot1q outer 53 inner dot1ad 6 +! +interface Port-Channel131.5 + description Test_encapsulation_vlan5 + encapsulation vlan + client dot1ad outer 35 inner 60 network dot1ad outer 52 inner 62 +! +interface Port-Channel131.6 + description Test_encapsulation_vlan6 + encapsulation vlan + client dot1ad outer 35 inner 60 network client +! +interface Port-Channel131.7 + description Test_encapsulation_vlan7 + encapsulation vlan + client untagged network dot1ad outer 35 inner 60 +! +interface Port-Channel131.8 + description Test_encapsulation_vlan8 + encapsulation vlan + client untagged network dot1q outer 35 inner 60 +! +interface Port-Channel131.9 + description Test_encapsulation_vlan9 + encapsulation vlan + client untagged network untagged +! +interface Port-Channel131.10 + description Test_encapsulation_vlan9 + encapsulation vlan + client dot1q outer 14 inner 11 network client inner +! +interface Port-Channel132 + description Test_switchport_tap_tool + switchport tap native vlan 10 + switchport tap identity 3 + switchport tap mac-address dest 01:00:00:00:00:00 src 01:23:45:67:89:ab + switchport tap mpls pop all + switchport tap encapsulation gre strip + switchport tap encapsulation gre destination 1.1.1.1 source 1.1.1.2 protocol 0x0000 strip + switchport tap encapsulation gre protocol 0x0010 strip + switchport tap encapsulation gre destination 2.1.1.2 protocol 0x0001 strip + switchport tap encapsulation gre destination 1.1.1.3 source 1.1.1.4 strip + switchport tap encapsulation gre protocol 0x0002 feature header length 3 strip + switchport tap encapsulation gre protocol 0x0003 feature header length 2 strip re-encapsulation ethernet + switchport tool mpls pop all + switchport tool encapsulation vn-tag strip + switchport tool encapsulation dot1br strip + switchport tap allowed vlan 25 + switchport tool allowed vlan 23 + switchport tool identity qinq + switchport tool identity qinq source dzgre port inner policy + switchport tap truncation + switchport tool truncation 160 + switchport tap default group g1 group g2 group g3 + switchport tap default nexthop-group nexthop_g1 nexthop_g2 nexthop_g3 + switchport tap default interface ethernet4 + switchport tap default interface port-channel10 + switchport tool group set group1 group2 group3 + switchport tool dot1q remove outer 1-2 + switchport tool dzgre preserve ! interface Ethernet3 description MLAG_PEER_DC1-LEAF1B_Ethernet3 @@ -487,8 +583,6 @@ interface Ethernet50 no lldp receive ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prefix-lists.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prefix-lists.cfg index 3f8a25b5c4b..b7ca39f537d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prefix-lists.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prefix-lists.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname prefix-lists -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -33,5 +25,3 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ipv6 prefix-list PL-IPV6-LOOPBACKS seq 10 permit 1b11:3a00:22b0:0082::/64 eq 128 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt-2.cfg index 79ca5ad48c6..c86f989e3fd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt-2.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! prompt Test ! -transceiver qsfp default-mode 4x10G -! -hostname prompt-2 -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt.cfg index cd58043198c..c22490143c2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/prompt.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! prompt %H__%D{%H:%M:%S}%v%P ! -transceiver qsfp default-mode 4x10G -! -hostname prompt -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ptp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ptp.cfg index 1742ed2e49d..6c51d046106 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ptp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ptp.cfg @@ -1,41 +1,33 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname ptp ! ptp clock-identity 11:11:11:11:11:11 -ptp source ip 1.1.2.3 +ptp domain 17 +ptp message-type event dscp 46 default +ptp message-type general dscp 36 default +ptp mode boundary one-step ptp priority1 101 ptp priority2 102 ptp profile g8275.1 +ptp source ip 1.1.2.3 ptp ttl 12 -ptp domain 17 -ptp message-type general dscp 36 default -ptp message-type event dscp 46 default -ptp mode boundary one-step ptp forward-unicast ptp monitor threshold offset-from-master 11 ptp monitor threshold mean-path-delay 12 -ptp monitor threshold offset-from-master 13 nanoseconds drop ptp monitor threshold mean-path-delay 14 nanoseconds drop -ptp monitor threshold missing-message announce 101 intervals -ptp monitor threshold missing-message follow-up 102 intervals +ptp monitor threshold offset-from-master 13 nanoseconds drop ptp monitor threshold missing-message sync 103 intervals +ptp monitor threshold missing-message follow-up 102 intervals +ptp monitor threshold missing-message announce 101 intervals ptp monitor sequence-id -ptp monitor threshold missing-message announce 201 sequence-ids -ptp monitor threshold missing-message delay-resp 202 sequence-ids -ptp monitor threshold missing-message follow-up 203 sequence-ids ptp monitor threshold missing-message sync 204 sequence-ids -! -no enable password -no aaa root +ptp monitor threshold missing-message follow-up 203 sequence-ids +ptp monitor threshold missing-message delay-resp 202 sequence-ids +ptp monitor threshold missing-message announce 201 sequence-ids ! interface Port-Channel5 description DC1_L2LEAF1_Po1 - switchport switchport trunk allowed vlan 110,201 switchport mode trunk + switchport mlag 5 ptp enable ptp mpass @@ -78,8 +70,6 @@ interface Ethernet6 ptp role dynamic ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/qos.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/qos.cfg index fde9603cc49..32861576754 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/qos.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/qos.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname qos ! qos profile experiment qos trust cos @@ -166,16 +161,13 @@ qos profile wred_uc_queues_test bandwidth guaranteed percent 10 random-detect drop minimum-threshold 1 microseconds maximum-threshold 10 microseconds drop-probability 90 ! -no enable password -no aaa root -! interface Port-Channel3 description MLAG_PEER_DC1-LEAF1B_Po3 - switchport switchport trunk allowed vlan 2-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport qos trust cos qos cos 2 service-profile experiment @@ -222,7 +214,7 @@ interface Ethernet7 random-detect ecn count ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -251,12 +243,6 @@ qos map exp 0 to traffic-class 0 ! qos random-detect ecn allow non-ect chip-based ! -priority-flow-control all off -priority-flow-control pause watchdog action no-drop -priority-flow-control pause watchdog default timeout 0.05 -priority-flow-control pause watchdog default polling-interval 10.001 -priority-flow-control pause watchdog default recovery-time 1.22 -! class-map type qos match-any cmap_tc0_v4 match ip access-group acl_qos_tc0_v4 ! @@ -285,4 +271,8 @@ policy-map type quality-of-service pmap_test1 class class-default set traffic-class 1 ! -end +priority-flow-control all off +priority-flow-control pause watchdog default timeout 0.05 +priority-flow-control pause watchdog default recovery-time 1.22 +priority-flow-control pause watchdog default polling-interval 10.001 +priority-flow-control pause watchdog action no-drop diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length-notifying.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length-notifying.cfg index 92f5d184206..2973f825915 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length-notifying.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length-notifying.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! queue-monitor length -queue-monitor length default threshold 100 no queue-monitor length notifying -! -hostname queue-monitor-length-notifying -! -no enable password -no aaa root +queue-monitor length default threshold 100 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length.cfg index d64d8049f79..4d7535a769f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-length.cfg @@ -1,22 +1,13 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! queue-monitor length -queue-monitor length default thresholds 100 10 -queue-monitor length log 100 queue-monitor length notifying queue-monitor length tx-latency +queue-monitor length default thresholds 100 10 queue-monitor length cpu thresholds 200000 100000 ! -hostname queue-monitor-length -! -no enable password -no aaa root +queue-monitor length log 100 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-streaming.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-streaming.cfg index b2c5b30be2e..8b401ed129e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-streaming.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/queue-monitor-streaming.cfg @@ -1,16 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname queue-monitor-streaming -! -no enable password -no aaa root -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 ! queue-monitor streaming max-connections 5 @@ -19,4 +6,7 @@ queue-monitor streaming vrf test no shutdown ! -end +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server-2.cfg index 87f06337837..710b10c45e5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server-2.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname radius-server-2 ! radius-server attribute 32 include-in-access-req format myformat ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server.cfg index fa2ccd2468c..9783bac9acb 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/radius-server.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname radius-server ! radius-server attribute 32 include-in-access-req hostname radius-server dynamic-authorization port 1700 @@ -17,12 +12,7 @@ radius-server host 10.10.11.158 timeout 1 retransmit 1 key 7 071B245F5A radius-server host 10.10.11.156 tls port 1700 timeout 1 retransmit 1 radius-server host 10.10.11.155 vrf mgt tls ssl-profile HOST_SSL_PROFILE port 2083 timeout 1 retransmit 1 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/redundancy.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/redundancy.cfg index d3246119213..430a33806dc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/redundancy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/redundancy.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname redundancy ! redundancy protocol sso ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/roles.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/roles.cfg index ea13416a987..39370566920 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/roles.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/roles.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname roles -! -no enable password -no aaa root +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 ! role network-limited 10 permit mode exec command ssh 20 deny command telnet 30 permit mode exec command traceroute -! -interface Management1 - description oob_management - vrf MGMT - ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/route-maps.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/route-maps.cfg index cdcd6efb5cd..4b4d9f77e58 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/route-maps.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/route-maps.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname route-maps -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -49,5 +41,3 @@ route-map RM-MLAG-PEER-IN permit 10 route-map RM-STATIC-2-BGP permit 10 description tag for static routes set tag 65100 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology-2.cfg new file mode 100644 index 00000000000..dee019b8612 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology-2.cfg @@ -0,0 +1,8 @@ +! +router adaptive-virtual-topology + topology role edge gateway vxlan +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology.cfg index be716200d53..43db9a5d488 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-adaptive-virtual-topology.cfg @@ -1,11 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-adaptive-virtual-topology ! router adaptive-virtual-topology - topology role transit region + topology role pathfinder region North_America id 1 zone Canada id 2 site Ottawa id 99 @@ -50,12 +45,7 @@ router adaptive-virtual-topology avt profile video id 1 avt profile voice id 2 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-1.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-1.cfg index 8431288bf96..5c44a76af44 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-1.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bfd-1 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -24,5 +16,3 @@ router bfd initiator measurement delay round-trip reflector min-rx 600 reflector local-discriminator 155.1.3.1 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-2.cfg index 5ca93b3621a..ebb414e6319 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bfd-2.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bfd-2 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! router bfd session stats snapshot interval dangerous 8 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-base.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-base.cfg index 8d7edf75acd..748bd2e0e65 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-base.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-base.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-base -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -144,5 +136,3 @@ router bgp 65101 recovery delay 666 seconds session tracker ST2 recovery delay 42 seconds -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-mpls.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-mpls.cfg index 25e222ff100..8dc866980e4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-mpls.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-mpls.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-evpn-mpls -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -37,11 +29,9 @@ router bgp 65101 address-family evpn bgp additional-paths send limit 10 neighbor default encapsulation mpls next-hop-self source-interface Loopback0 - next-hop mpls resolution ribs tunnel-rib-colored system-colored-tunnel-rib tunnel-rib test-rib system-connected + next-hop mpls resolution ribs tunnel-rib colored system-colored-tunnel-rib tunnel-rib test-rib system-connected neighbor EVPN-OVERLAY-PEERS activate neighbor 192.168.255.3 activate neighbor 192.168.255.4 rcf in Address_Family_EVPN_In() neighbor 192.168.255.4 rcf out Address_Family_EVPN_Out() layer-2 fec in-place update timeout 100 seconds -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-vpn-import-pruning.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-vpn-import-pruning.cfg index 6c910e9aec2..6ec44a2c81a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-vpn-import-pruning.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn-vpn-import-pruning.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-evpn-vpn-import-pruning -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -87,5 +79,3 @@ router bgp 65101 router-id 192.168.255.3 neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER redistribute connected -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn.cfg index 05e321d5bb1..ac624966de6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-evpn.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-evpn -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -106,6 +98,7 @@ router bgp 65101 bgp next-hop-unchanged host-flap detection window 10 threshold 1 expiry timeout 3 seconds domain identifier 65101:0 + neighbor default encapsulation path-selection neighbor ADDITIONAL-PATH-PG-1 activate neighbor ADDITIONAL-PATH-PG-1 additional-paths receive neighbor ADDITIONAL-PATH-PG-1 additional-paths send any @@ -124,12 +117,20 @@ router bgp 65101 neighbor EVPN-OVERLAY-PEERS domain remote neighbor EVPN-OVERLAY-PEERS encapsulation vxlan no neighbor MLAG-IPv4-UNDERLAY-PEER activate + neighbor TEST-ENCAPSULATION activate + neighbor TEST-ENCAPSULATION encapsulation mpls + neighbor TEST-ENCAPSULATION-2 activate + neighbor TEST-ENCAPSULATION-2 encapsulation path-selection neighbor 10.100.100.1 activate neighbor 10.100.100.1 default-route neighbor 10.100.100.2 activate neighbor 10.100.100.2 default-route route-map RM_DEFAULT_ROUTE neighbor 10.100.100.3 activate neighbor 10.100.100.3 default-route rcf RCF_DEFAULT_ROUTE() + neighbor 10.100.100.4 activate + neighbor 10.100.100.4 encapsulation path-selection + neighbor 10.100.100.5 activate + neighbor 10.100.100.5 encapsulation mpls next-hop resolution disabled neighbor default next-hop-self received-evpn-routes route-type ip-prefix inter-domain route import ethernet-segment ip mass-withdraw @@ -188,5 +189,3 @@ router bgp 65101 route-target import 00:01:00:01:00:01 ! layer-2 fec in-place update -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-ipv4-labeled-unicast.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-ipv4-labeled-unicast.cfg new file mode 100644 index 00000000000..6edb13b7e19 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-ipv4-labeled-unicast.cfg @@ -0,0 +1,35 @@ +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +router bgp 65101 + ! + address-family ipv4 labeled-unicast + update wait-for-convergence + bgp missing-policy include community-list direction in action deny + bgp additional-paths receive + bgp additional-paths send ecmp limit 20 + bgp next-hop-unchanged + next-hop resolution ribs tunnel-rib colored system-colored-tunnel-rib tunnel-rib test-rib system-connected + neighbor PG-BGP-LU activate + neighbor 198.51.100.1 activate + neighbor 198.51.100.1 additional-paths receive + neighbor 198.51.100.1 graceful-restart + neighbor 198.51.100.1 rcf in RCF_TEST(ARGS) + neighbor 198.51.100.1 additional-paths send ecmp + neighbor 198.51.100.1 maximum-advertised-routes 0 + no neighbor 198.51.100.2 activate + neighbor 198.51.100.2 graceful-restart-helper stale-route route-map RM_STALE + neighbor 198.51.100.2 route-map RM_OUT_TEST out + neighbor 198.51.100.2 next-hop-unchanged + neighbor 198.51.100.2 aigp-session + neighbor 198.51.100.2 multi-path + network 203.0.113.0/25 route-map RM-TEST + network 203.0.113.128/25 + label local-termination implicit-null + tunnel source-protocol isis segment-routing + tunnel source-protocol ldp rcf TEST(ARGS) + aigp-session confederation + aigp-session ebgp diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-link-state.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-link-state.cfg index 3a37e986c1f..b6e0af4da21 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-link-state.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-link-state.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-link-state -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -33,5 +25,3 @@ router bgp 65101.0001 neighbor 192.168.255.2 activate path-selection path-selection role consumer propagator -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-path-selection.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-path-selection.cfg index a387b41089c..0256a883141 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-path-selection.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-path-selection.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-path-selection -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -50,5 +42,3 @@ router bgp 65101 neighbor 172.31.255.3 additional-paths send ecmp limit 42 neighbor 172.31.255.4 activate neighbor 172.31.255.4 additional-paths send limit 42 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-rtc.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-rtc.cfg index 26d79d399bf..3df3b6ef962 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-rtc.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-rtc.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-rtc -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -94,5 +86,3 @@ router bgp 65101 router-id 192.168.255.3 neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER redistribute connected -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-evpn.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-evpn.cfg index c9e4248eeaf..b171dfce041 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-evpn.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-evpn.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-v4-evpn -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -162,5 +154,3 @@ router bgp 65101 neighbor 10.255.251.4 bfd redistribute connected redistribute static route-map RM-CONN-2-BGP -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-evpn.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-evpn.cfg index ba764ff73d5..623a9320a62 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-evpn.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-evpn.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-v4-v6-evpn -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -136,5 +128,3 @@ router bgp 65100 route-target import evpn 1:30002 route-target export evpn 1:30002 route-target export evpn route-map RM-DEFAULT-EXTRA-COMM -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-sr-te.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-sr-te.cfg index 1b879491969..f4a309d23d1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-sr-te.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-v4-v6-sr-te.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-v4-v6-sr-te -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -36,5 +28,3 @@ router bgp 65103 neighbor 2001:db8::dead:beef:cafe activate neighbor 2001:db8::dead:beef:cafe route-map RM-SR-TE-PEER-IN6 in neighbor 2001:db8::dead:beef:cafe route-map RM-SR-TE-PEER-OUT6 out -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpn-ipv4-vpn-ipv6.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpn-ipv4-vpn-ipv6.cfg index f7cb3dec7c2..b463d7eeb4b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpn-ipv4-vpn-ipv6.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpn-ipv4-vpn-ipv6.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-vpn-ipv4-vpn-ipv6 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -61,5 +53,3 @@ router bgp 65103 neighbor 2001:cafe:192:168::5 rcf out Address_Family_VPN_IPV6_Out() neighbor default encapsulation mpls next-hop-self source-interface Loopback0 route import match-failure action discard -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpws.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpws.cfg index c765517ab1a..4779e24f522 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpws.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vpws.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-vpws -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -39,5 +31,3 @@ router bgp 65101 ! pseudowire TEN_B_site2_site5_pw evpn vpws id local 26 remote 58 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-address-families.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-address-families.cfg index 5c350a203bb..1084d94f7e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-address-families.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-address-families.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-vrf-address-families -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -125,5 +117,3 @@ router bgp 65001 ! address-family ipv4 bgp additional-paths send ecmp -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-lite.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-lite.cfg index 8db21597c38..f9ce01345b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-lite.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-bgp-vrf-lite.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-bgp-vrf-lite -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -122,5 +114,3 @@ router bgp 65001 bgp listen range 12.10.10.0/24 peer-id include router-id peer-group my-peer-group3 remote-as 65444 bgp listen range 13.10.10.0/24 peer-group my-peer-group4 peer-filter my-peer-filter neighbor 10.1.1.0 peer group OBS_WAN -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-general.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-general.cfg index 3366960c831..32e21c08d1e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-general.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-general.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-general -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -37,5 +29,3 @@ router general EOF ! exit -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-igmp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-igmp.cfg index 327cc102089..bcfef6d9142 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-igmp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-igmp.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-igmp -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -18,5 +10,3 @@ router igmp ! vrf BLUE host-proxy match mroute iif -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-internet-exit.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-internet-exit.cfg index 9d5e78b92fb..dd2af1a866f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-internet-exit.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-internet-exit.cfg @@ -1,44 +1,33 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-internet-exit ! router internet-exit - ! - exit-group eg_01 - ! - exit-group eg_02 - fib-default - ! - exit-group eg_03 - local connection eg_03_lo_01 - local connection eg_03_lo_02 - fib-default - ! - exit-group eg_04 - local connection eg_04_lo_01 - local connection eg_04_lo_02 - local connection eg_04_lo_03 - ! - policy po_01 - exit-group po_eg_01_02 - exit-group po_eg_01_04 - exit-group po_eg_01_01 - exit-group po_eg_01_03 - exit-group system-default-exit-group - ! - policy po_02 - ! - policy po_03 - exit-group po_eg_03_01 -! -no enable password -no aaa root + exit-group eg_01 + ! + exit-group eg_02 + fib-default + ! + exit-group eg_03 + local connection eg_03_lo_01 + local connection eg_03_lo_02 + fib-default + ! + exit-group eg_04 + local connection eg_04_lo_01 + local connection eg_04_lo_02 + local connection eg_04_lo_03 + ! + policy po_01 + exit-group po_eg_01_02 + exit-group po_eg_01_04 + exit-group po_eg_01_01 + exit-group po_eg_01_03 + exit-group system-default-exit-group + ! + policy po_02 + ! + policy po_03 + exit-group po_eg_03_01 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-1.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-1.cfg index cd5ae8ceb39..35110573484 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-1.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-isis-1 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -21,5 +13,3 @@ router isis EVPN_UNDERLAY authentication key 0 password ! segment-routing mpls -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-2.cfg index efd8c8cd42f..b45e1df447e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-2.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-isis-2 -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -17,5 +9,3 @@ router isis EVPN_UNDERLAY set-overload-bit on-startup 55 authentication mode sha key-id 4 rx-disabled ! -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-new.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-new.cfg index 595b8860a16..be579c9b4cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-new.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis-new.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-isis-new -! -no enable password -no aaa root ! interface Ethernet1 description P2P_LINK_TO_EAPI-SPINE1_Ethernet1 @@ -42,7 +34,7 @@ interface Loopback1 isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.254.11/24 ! @@ -109,5 +101,3 @@ router isis EVPN_UNDERLAY no shutdown prefix-segment 155.2.1.1/32 index 211 prefix-segment 2001:cafe:155::/64 index 6211 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis.cfg index 2c2e9317881..c04bd4a0f32 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-isis.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-isis -! -no enable password -no aaa root ! interface Port-Channel4 no switchport @@ -76,14 +68,14 @@ interface Loopback1 interface Loopback2 description ISIS-SR Node-SID ip address 10.1.255.3/32 - isis enable EVPN_UNDERLAY - isis passive - isis metric 50 node-segment ipv4 index 10 node-segment ipv6 index 1000 + isis enable EVPN_UNDERLAY + isis metric 50 + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.254.11/24 ! @@ -137,5 +129,3 @@ router isis EVPN_UNDERLAY traffic-engineering no shutdown is-type level-2 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-l2-vpn.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-l2-vpn.cfg index 6b874771b22..944ba6f6325 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-l2-vpn.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-l2-vpn.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-l2-vpn ! router l2-vpn arp learning bridged @@ -13,12 +8,7 @@ router l2-vpn nd rs flooding disabled virtual-router neighbor advertisement flooding disabled ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-msdp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-msdp.cfg index 9ece12465e4..4527aed3564 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-msdp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-msdp.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-msdp -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -49,5 +41,3 @@ router msdp sa-filter out list ACL4 description Some other kind of MSDP Peer sa-limit 100 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-multicast.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-multicast.cfg index fdfc0fb5514..aac7caa8b19 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-multicast.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-multicast.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-multicast -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -33,5 +25,3 @@ router multicast vrf MCAST_VRF2 ipv4 routing -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-ospf.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-ospf.cfg index f3708f87342..89d00e120d4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-ospf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-ospf.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-ospf -! -no enable password -no aaa root ! interface Port-Channel12 no switchport @@ -27,7 +19,7 @@ interface Loopback2 ip ospf area 0.0.0.2 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -115,5 +107,3 @@ router ospf 600 area 0.0.20.25 nssa default-information-originate metric-type 1 area 0.0.20.26 nssa no-summary area 0.0.20.26 nssa default-information-originate metric 50 metric-type 1 nssa-only -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-path-selection.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-path-selection.cfg index 55c1867cff8..6571e3e1be9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-path-selection.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-path-selection.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-path-selection ! router path-selection peer dynamic source stun @@ -44,6 +39,11 @@ router path-selection ! local interface Ethernet4.666 ! + local interface Port-Channel1 public address 192.168.42.43 + stun server-profile STUN-P-1 STUN-P-2 + ! + local interface Port-Channel4.666 + ! local ip 192.168.1.100 public address 192.168.42.42 stun server-profile STUN-P-1 STUN-P-2 ! @@ -60,16 +60,16 @@ router path-selection load-balance policy LB-EMPTY ! load-balance policy LB-P-1 - hop count lowest loss-rate 17 + hop count lowest path-group PG-5 path-group PG-2 priority 42 path-group PG-4 priority 42 path-group PG-3 priority 666 ! load-balance policy LB-P-2 - jitter 666 latency 42 + jitter 666 loss-rate 42.42 path-group PG-1 priority 1 path-group PG-3 @@ -77,6 +77,7 @@ router path-selection policy DPS-P-1 default-match load-balance LB-P-1 + ! 42 application-profile AP-3 load-balance LB-P-1 ! @@ -86,6 +87,7 @@ router path-selection ! policy DPS-P-3 42 application-profile AP-2 + ! 66 application-profile AP-1 load-balance LB-P-1 ! @@ -97,12 +99,7 @@ router path-selection ! vrf VRF-3 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-pim-sparse-mode.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-pim-sparse-mode.cfg index ddaad76de4f..840e54fcfc0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-pim-sparse-mode.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-pim-sparse-mode.cfg @@ -1,19 +1,12 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-pim-sparse-mode -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! router pim sparse-mode ipv4 + ssm range standard bfd rp address 10.238.1.161 239.12.12.12/32 priority 20 rp address 10.238.1.161 239.12.12.13/32 priority 20 @@ -23,8 +16,9 @@ router pim sparse-mode rp address 10.238.1.161 239.12.12.21/32 priority 20 rp address 10.238.1.161 access-list RP_ACL priority 20 rp address 10.238.1.161 access-list RP_ACL2 priority 20 + rp address 10.238.1.161 239.12.12.17/32 + rp address 10.238.1.161 access-list RP_ACL3 anycast-rp 10.38.1.161 10.50.64.16 register-count 15 - ssm range standard ! vrf MCAST_VRF1 ipv4 @@ -41,5 +35,3 @@ router pim sparse-mode ipv4 rp address 10.238.4.161 access-list RP_ACL rp address 10.238.4.161 access-list RP_ACL2 priority 20 hashmask 30 override -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-segment-security.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-segment-security.cfg index 3c408a8dec3..20da216c65d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-segment-security.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-segment-security.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-segment-security -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -52,5 +44,3 @@ router segment-security from MATCH-LIST30 policy policy-drop-all fallback policy policy-custom ! -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-service-insertion.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-service-insertion.cfg index 94ed521512c..c0e20139ea7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-service-insertion.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-service-insertion.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-service-insertion ! router service-insertion connection aconnection @@ -29,12 +24,7 @@ router service-insertion interface Ethernet3/1 next-hop 10.10.10.10 monitor connectivity host host4 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-traffic-engineering.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-traffic-engineering.cfg index e425773c325..d29ad17ddb1 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-traffic-engineering.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/router-traffic-engineering.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname router-traffic-engineering -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -49,5 +41,3 @@ router traffic-engineering segment-list label-stack 900002 900010 900011 900012 router-id ipv4 10.0.0.1 router-id ipv6 2001:beef:cafe::1 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-configuration-bgp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-configuration-bgp.cfg index 85514d7a41c..bba34f8cac6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-configuration-bgp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-configuration-bgp.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! service routing configuration bgp no-equals-default ! -transceiver qsfp default-mode 4x10G -! -hostname service-routing-configuration-bgp -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model-2.cfg index 94a6f26f313..5a0edbfdd61 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model-2.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! service routing protocols model ribd ! -hostname service-routing-protocols-model-2 -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model.cfg index d90bebc7e1b..dfed0a814c6 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/service-routing-protocols-model.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! -hostname service-routing-protocols-model -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sflow.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sflow.cfg index 0182528123c..555ceeff12b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sflow.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sflow.cfg @@ -1,11 +1,5 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname sflow ! sflow sample dangerous 1000 -sflow sample input subinterface sflow polling-interval 10 sflow vrf AAA destination 10.6.75.62 123 sflow vrf AAA destination 10.6.75.63 333 @@ -21,6 +15,7 @@ sflow vrf MGMT source-interface Ethernet3 sflow destination 10.6.75.61 sflow destination 10.6.75.62 123 sflow source-interface Management0 +sflow sample input subinterface sflow sample output subinterface sflow extension bgp sflow extension router @@ -35,12 +30,7 @@ sflow hardware acceleration module Linecard1 sflow hardware acceleration module Linecard2 no sflow hardware acceleration module Linecard3 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp-server-traps.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp-server-traps.cfg index a7834445d9f..d777754260b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp-server-traps.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp-server-traps.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname snmp-server-traps ! snmp-server contact DC1_OPS snmp-server location DC1 @@ -19,12 +14,7 @@ snmp-server enable traps snmpConfigManEvent no snmp-server vrf default snmp-server vrf MGMT ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp.cfg index c3db1f52c45..84f68936385 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/snmp.cfg @@ -1,54 +1,45 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G -! -hostname snmp -! -snmp-server engineID local 424242424242424242 -snmp-server contact DC1_OPS -snmp-server location DC1 -snmp-server engineID remote 1.1.1.1 6172697374615F6970 -snmp-server engineID remote 2.2.2.2 udp-port 1337 DEADBEEFCAFE123456 snmp-server ipv4 access-list SNMP-MGMT vrf MGMT snmp-server ipv4 access-list onur snmp-server ipv6 access-list SNMP-MGMT vrf MGMT snmp-server ipv6 access-list onur_v6 -snmp-server vrf MGMT local-interface Management1 +snmp-server engineID local 424242424242424242 +snmp-server contact DC1_OPS +snmp-server location DC1 snmp-server local-interface Loopback0 snmp-server vrf Tenant_A_APP_Zone local-interface Loopback12 -snmp-server view VW-WRITE iso included +snmp-server vrf MGMT local-interface Management1 snmp-server view VW-READ iso included +snmp-server view VW-WRITE iso included snmp-server community SNMP-COMMUNITY-1 ro onur snmp-server community SNMP-COMMUNITY-2 view VW-READ rw ipv6 SNMP-MGMT SNMP-MGMT snmp-server community SNMP-COMMUNITY-3 ro snmp-server group GRP-READ-ONLY v3 priv read v3read snmp-server group GRP-READ-WRITE v3 auth read v3read write v3write -snmp-server user USER-READ-NO-AUTH-NO-PRIV GRP-READ-ONLY v3 +snmp-server user REMOTE-USER-IP-LOCALIZED GRP-REMOTE remote 42.42.42.42 v3 localized DEADBEEFCAFE123456 auth sha ShouldBeEncryptedPassword +snmp-server user REMOTE-USER-IP-ONLY GRP-REMOTE remote 42.42.42.42 v3 +snmp-server user REMOTE-USER-IP-PORT GRP-REMOTE remote 42.42.42.42 udp-port 666 v3 snmp-server user USER-READ-AUTH-NO-PRIV GRP-READ-ONLY v3 auth sha clearPassword -snmp-server user USER-READ-AUTH-PRIV GRP-READ-ONLY v3 auth sha clearPassword priv aes clearPassword -snmp-server user USER-READ-NO-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 snmp-server user USER-READ-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 localized 424242424242424242 auth sha 8da526cd35b9ea9b42d819036f7fad058576ea0a +snmp-server user USER-READ-AUTH-PRIV GRP-READ-ONLY v3 auth sha clearPassword priv aes clearPassword snmp-server user USER-READ-AUTH-PRIV-LOC GRP-READ-ONLY v3 localized 424242424242424242 auth sha 8da526cd35b9ea9b42d819036f7fad058576ea0a priv aes 8da526cd35b9ea9b42d819036f7fad05 +snmp-server user USER-READ-NO-AUTH-NO-PRIV GRP-READ-ONLY v3 +snmp-server user USER-READ-NO-AUTH-NO-PRIV-LOC GRP-READ-ONLY v3 snmp-server user USER-WRITE GRP-READ-WRITE v3 auth sha clearPassword priv aes clearPassword -snmp-server user REMOTE-USER-IP-ONLY GRP-REMOTE remote 42.42.42.42 v3 -snmp-server user REMOTE-USER-IP-PORT GRP-REMOTE remote 42.42.42.42 udp-port 666 v3 -snmp-server user REMOTE-USER-IP-LOCALIZED GRP-REMOTE remote 42.42.42.42 v3 localized DEADBEEFCAFE123456 auth sha ShouldBeEncryptedPassword -snmp-server host 10.6.75.121 vrf MGMT version 1 SNMP-COMMUNITY-1 -snmp-server host 10.6.75.121 vrf MGMT version 2c SNMP-COMMUNITY-2 -snmp-server host 10.6.75.122 vrf MGMT version 2c SNMP-COMMUNITY-2 +snmp-server engineID remote 1.1.1.1 6172697374615F6970 +snmp-server engineID remote 2.2.2.2 udp-port 1337 DEADBEEFCAFE123456 snmp-server host 10.6.75.99 vrf MGMT version 3 auth USER-READ-AUTH-NO-PRIV snmp-server host 10.6.75.99 vrf MGMT version 3 auth USER-WRITE snmp-server host 10.6.75.100 vrf MGMT version 3 priv USER-READ-AUTH-PRIV +snmp-server host 10.6.75.121 vrf MGMT version 1 SNMP-COMMUNITY-1 +snmp-server host 10.6.75.121 vrf MGMT version 2c SNMP-COMMUNITY-2 +snmp-server host 10.6.75.122 vrf MGMT version 2c SNMP-COMMUNITY-2 snmp-server enable traps no snmp-server vrf default snmp-server vrf MGMT -! -no enable password -no aaa root +snmp-server ifmib ifspeed shape-rate ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-bpdu.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-bpdu.cfg index fb378347559..cae904fa9ae 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-bpdu.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-bpdu.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname spanning-tree-bpdu ! no spanning-tree edge-port bpduguard default no spanning-tree edge-port bpdufilter default spanning-tree bpduguard rate-limit default spanning-tree bpduguard rate-limit count 100 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rapid-pvst.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rapid-pvst.cfg index 70055e395fd..8d2abcad52d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rapid-pvst.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rapid-pvst.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname spanning-tree-rapid-pvst ! spanning-tree mode rapid-pvst spanning-tree vlan-id 1,2,3,4,5,10-15 priority 4096 spanning-tree vlan-id 3 priority 8192 spanning-tree vlan-id 100-500 priority 16384 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rstp.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rstp.cfg index 6619318557e..39da0271ffc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rstp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree-rstp.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname spanning-tree-rstp ! spanning-tree mode rstp spanning-tree priority 8192 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree.cfg index 088448f7855..e5fdd562236 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/spanning-tree.cfg @@ -1,8 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname spanning-tree ! spanning-tree mode mstp no spanning-tree vlan-id 105,202,505-506 @@ -18,12 +13,7 @@ spanning-tree mst configuration instance 3 vlan 15 instance 4 vlan 200-300 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/static-routes.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/static-routes.cfg index 01c9ef57922..9d81dc6164a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/static-routes.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/static-routes.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname static-routes -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,5 +12,3 @@ ip route vrf APP 10.3.4.0/24 1.2.3.4 ip route vrf APP 10.3.5.0/24 Null0 ip route vrf customer01 10.3.6.0/24 Ethernet40 11.2.1.1 track bfd 100 tag 1000 name Track-BFD metric 300 ip route vrf customer01 10.3.7.0/24 Ethernet41 100 tag 1000 name No-Track-BFD metric 300 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/stun.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/stun.cfg index 5e6edf74fd6..ecbba147717 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/stun.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/stun.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname stun -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -29,5 +21,3 @@ stun ssl profile pathfinder binding timeout 600 seconds ssl connection lifetime 1300 minutes -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-mode.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-mode.cfg index b4ec163fb61..ad7d7e040ac 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-mode.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-mode.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! switchport default mode access ! @@ -6,16 +5,7 @@ switchport default phone cos 0 ! switchport default phone vlan 69 ! -transceiver qsfp default-mode 4x10G -! -hostname switchport-mode -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-port-security.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-port-security.cfg index 291e8031c37..fb30e58bda7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-port-security.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/switchport-port-security.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname switchport-port-security ! switchport port-security mac-address aging switchport port-security mac-address moveable switchport port-security persistence disabled switchport port-security violation protect chip-based ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sync-e.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sync-e.cfg index 7bcd2757d87..a68cb88f444 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sync-e.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/sync-e.cfg @@ -1,15 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname sync-e ! sync-e network option 2 ! -no enable password -no aaa root -! interface Ethernet3 description P2P_LINK_TO_DC1-SPINE2_Ethernet5 switchport trunk allowed vlan 2,14 @@ -31,8 +23,6 @@ interface Ethernet6 priority disabled ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/system.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/system.cfg index 70a7663ac0a..871af45d159 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/system.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/system.cfg @@ -1,18 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname system -! -no enable password -no aaa root ! system l1 unsupported speed action warn unsupported error-correction action error ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -20,9 +12,9 @@ system control-plane tcp mss ceiling ipv4 1344 ipv6 1366 ip access-group acl4_1 in ip access-group acl4_2 vrf red in + ip access-group acl4_2 vrf red_1 in ip access-group acl4_3 vrf default in ipv6 access-group acl6_1 in ipv6 access-group acl6_2 vrf blue in + ipv6 access-group acl6_2 vrf blue_1 in ipv6 access-group acl6_3 vrf default in -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tap-aggregation.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tap-aggregation.cfg index d1d38ae9f54..b5d085c8d21 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tap-aggregation.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tap-aggregation.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname tap-aggregation -! -no enable password -no aaa root ! tap aggregation mode exclusive profile tap-aggregation-extended @@ -21,8 +13,6 @@ tap aggregation mac fcs-error pass-through ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tcam-profile.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tcam-profile.cfg index 6a4f357a342..29e313cdbc4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tcam-profile.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tcam-profile.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname tcam-profile -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -126,5 +118,3 @@ hardware tcam packet ipv4 vxlan forwarding bridged decap ! system profile traffic_policy -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminal.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminal.cfg index ea2a751ab86..e2ad04bfd72 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminal.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminal.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista ! -terminal width 1000 terminal length 1000 -! -transceiver qsfp default-mode 4x10G -! -hostname terminal -! -no enable password -no aaa root +terminal width 1000 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-cloud.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-cloud.cfg index 7b0504e0ef9..0ee543bf2e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-cloud.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-cloud.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=apiserver.arista.io:443 -cvauth=token-secure,/tmp/cv-onboarding-token -cvvrf=mgt -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-cloud -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-extra-flags.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-extra-flags.cfg index f1d761e9dc5..e5d1ffc549f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-extra-flags.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-extra-flags.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.8:9910,10.10.10.9:9910,10.10.10.10:9910 -cvauth=key,magickey -cvvrf=mgt -cvgnmi -disableaaa -cvproxy=http://arista:arista@10.10.10.1:3128 -grpcaddr=mgmt/0.0.0.0:6042 -grpcreadonly -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs=/var/log/messages,/var/log/agents/ -cvconfig -cvsourceintf=Vlan100 no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-extra-flags -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster-certs.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster-certs.cfg index 7d3b505e161..1a6798589e2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster-certs.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster-certs.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvopt DC1.addr=10.20.20.1:9910 -cvopt DC1.auth=certs,/persist/secure/ssl/terminattr/DC1/certs/client.crt,/persist/secure/ssl/terminattr/DC1/keys/client.key,/persist/secure/ssl/terminattr/DC1/certs/ca.crt -cvopt DC1.vrf=mgt -cvopt DC1.sourceintf=Loopback10 -cvopt DC2.addr=10.30.30.1:9910 -cvopt DC2.auth=certs,/persist/secure/ssl/terminattr/DC2/certs/client.crt,/persist/secure/ssl/terminattr/DC2/keys/client.key,/persist/secure/ssl/terminattr/DC2/certs/ca.crt -cvopt DC2.vrf=mgt -cvopt DC2.sourceintf=Vlan500 -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-multi-cluster-certs -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster.cfg index 0523c7da015..093afa458b0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-multi-cluster.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvopt DC1.addr=10.20.20.1:9910 -cvopt DC1.auth=key,arista -cvopt DC1.vrf=mgt -cvopt DC1.sourceintf=Loopback10 -cvopt DC2.addr=10.30.30.1:9910 -cvopt DC2.auth=token,/tmp/tokenDC2 -cvopt DC2.vrf=mgt -cvopt DC2.sourceintf=Vlan500 -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-multi-cluster -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-certs.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-certs.cfg index cae744ad60a..433d715546c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-certs.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-certs.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.8:9910,10.10.10.9:9910,10.10.10.10:9910 -cvauth=certs,/persist/secure/ssl/terminattr/primary/certs/client.crt,/persist/secure/ssl/terminattr/primary/keys/client.key,/persist/secure/ssl/terminattr/primary/certs/ca.crt -cvvrf=mgt -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-onprem-certs -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-token.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-token.cfg index 46651354cba..4ca2bf54eaf 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-token.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-onprem-token.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.0.2.1:9910,192.0.2.2:9910,192.0.2.3:9910 -cvauth=token,/tmp/token -cvvrf=mgt -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-onprem-token -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-disableaaa.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-disableaaa.cfg index 4ae05ca9b9a..3314d8466c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-disableaaa.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-disableaaa.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.8:9910,10.10.10.9:9910,10.10.10.10:9910 -cvauth=key, -cvvrf=mgt -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-prem-disableaaa -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-no-ingestkey.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-no-ingestkey.cfg index 02110dc2141..58b75511288 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-no-ingestkey.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem-no-ingestkey.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.8:9910,10.10.10.9:9910,10.10.10.10:9910 -cvauth=key, -cvvrf=mgt -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-prem-no-ingestkey -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem.cfg index e8bbf1d8e05..b83bfe17c4b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/terminattr-prem.cfg @@ -1,19 +1,9 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.10.10.8:9910,10.10.10.9:9910,10.10.10.10:9910 -cvauth=key,magickey -cvvrf=mgt -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! -transceiver qsfp default-mode 4x10G -! -hostname terminattr-prem -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-2.cfg new file mode 100644 index 00000000000..4557d0714d1 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-2.cfg @@ -0,0 +1,14 @@ +! +interface Port-Channel2 + no switchport +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +traffic-policies + field-set ipv6 prefix IPv6-DEMO-1 + 11:22:33:44:55:66:77:88 + ! + field-set ipv6 prefix IPv6-DEMO-2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-3.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-3.cfg new file mode 100644 index 00000000000..4ab401261fb --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies-3.cfg @@ -0,0 +1,10 @@ +! +interface Ethernet1 + no switchport +! +interface Management1 + description OOB_MANAGEMENT + vrf MGMT + ip address 10.73.255.122/24 +! +traffic-policies diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies.cfg index a3426fb9e6f..d83d3c6fddf 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/traffic-policies.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname traffic-policies -! -no enable password -no aaa root ! interface Port-Channel2 no switchport @@ -18,101 +10,164 @@ interface Ethernet1 traffic-policy output BLUE-C2-POLICY ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! traffic-policies - counter interface per-interface ingress + field-set l4-port SERVICE-DEMO + 10,20,80,440-450 + ! + field-set l4-port SERVICE-DEMO2 field-set ipv4 prefix DEMO-01 10.0.0.0/8 192.168.0.0/16 ! field-set ipv4 prefix DEMO-02 172.16.0.0/12 224.0.0.0/8 ! - field-set l4-port SERVICE-DEMO - 10,20,80,440-450 + field-set ipv4 prefix DEMO-03 + counter interface per-interface ingress ! traffic-policy BLUE-C1-POLICY counter DEMO-TRAFFIC DROP-PACKETS + ! match BLUE-C1-POLICY-01 ipv4 source prefix 10.0.0.0/8 192.168.0.0/16 destination prefix field-set DEMO-01 protocol tcp source port 1,10-20 + protocol udp source port field-set SERVICE-DEMO ttl 10, 20-30 + ! actions set traffic class 5 - ! ! match BLUE-C1-POLICY-02 ipv4 source prefix field-set DEMO-01 DEMO-02 - protocol tcp flags established destination port field-set SERVICE-DEMO + protocol tcp flags established + protocol tcp destination port field-set SERVICE-DEMO protocol icmp + ! actions count DEMO-TRAFFIC set dscp 60 - ! ! match BLUE-C1-POLICY-03 ipv4 source prefix field-set DEMO-01 - protocol icmp + protocol icmp type echo echo-reply code all fragment offset 1124, 2000-2010 + ! actions count DROP-PACKETS drop log - ! ! match BLUE-C1-POLICY-04 ipv4 source prefix field-set DEMO-02 destination prefix field-set DEMO-01 - protocol tcp flags established source port 22 + protocol tcp flags established + protocol tcp source port 22 destination port 80 protocol icmp + ! actions set traffic class 5 - ! ! match BLUE-C1-POLICY-05 ipv4 source prefix field-set DEMO-02 destination prefix field-set DEMO-01 - protocol tcp + protocol bgp fragment + ! actions set traffic class 5 - ! ! + match BLUE-C1-POLICY-06 ipv4 + protocol neighbors bgp + ! + match BLUE-C1-POLICY-07 ipv4 + destination prefix 10.0.0.0/8 192.168.0.0/16 + ! + match BLUE-C1-POLICY-08 ipv4 + destination prefix 10.0.0.0/8 192.168.0.0/16 + protocol udp destination port 1,10-20 + protocol tcp source port field-set SERVICE-DEMO-SRC destination port field-set SERVICE-DEMO-DST + ! + match ipv4-all-default ipv4 + actions + drop + ! + match ipv6-all-default ipv6 ! traffic-policy BLUE-C2-POLICY counter DEMO-TRAFFIC + ! match BLUE-C2-POLICY-01 ipv4 source prefix 10.0.0.0/8 192.168.0.0/16 protocol tcp source port 1,10-20 protocol icmp + ! actions set traffic class 5 - ! ! match BLUE-C2-POLICY-02 ipv4 source prefix field-set DEMO-01 DEMO-02 protocol tcp source port field-set SERVICE-DEMO protocol icmp + ! actions count DEMO-TRAFFIC set dscp 60 - ! ! match BLUE-C2-POLICY-03 ipv4 source prefix field-set DEMO-01 protocol tcp + ! + actions + drop + ! + match ipv4-all-default ipv4 actions drop log - ! ! + match ipv6-all-default ipv6 + ! + traffic-policy BLUE-C3-POLICY + match ipv4-all-default ipv4 + actions + count test + set dscp 11 + set traffic class 10 + ! + match ipv6-all-default ipv6 + ! + traffic-policy BLUE-C4-POLICY + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 + actions + count test + set dscp 11 + set traffic class 10 + ! + traffic-policy BLUE-C5-POLICY match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 actions drop log ! -! -end + traffic-policy BLUE-C6-POLICY + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 + actions + drop + ! + traffic-policy BLUE-C7-POLICY + match BLUE-C7-POLICY-01 ipv4 + protocol neighbors bgp enforce ttl maximum-hops + ! + match ipv4-all-default ipv4 + ! + match ipv6-all-default ipv6 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/transceiver_qsfp_default_mode_4x10_false.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/transceiver_qsfp_default_mode_4x10_false.cfg index e0889699b7f..e047f96bbfc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/transceiver_qsfp_default_mode_4x10_false.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/transceiver_qsfp_default_mode_4x10_false.cfg @@ -1,13 +1,5 @@ -!RANCID-CONTENT-TYPE: arista -! -hostname transceiver_qsfp_default_mode_4x10_false -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tunnel-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tunnel-interfaces.cfg index f277e807e7f..518ccbb62c7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tunnel-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/tunnel-interfaces.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname tunnel-interfaces -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -66,5 +58,3 @@ interface Tunnel4 ip nat service-profile NAT-PROFILE-NO-VRF-1 tunnel source interface Ethernet42 tunnel destination 1.1.1.1 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/unsupported-transceiver.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/unsupported-transceiver.cfg index 746f7afef3c..d09a27c3865 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/unsupported-transceiver.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/unsupported-transceiver.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname unsupported-transceiver ! service unsupported-transceiver test dsafDSFfvadskjh3424 ! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/virtual-source-nat.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/virtual-source-nat.cfg index 58a12618b7f..5f25cabe6a4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/virtual-source-nat.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/virtual-source-nat.cfg @@ -1,18 +1,8 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname virtual-source-nat -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! ip address virtual source-nat vrf TEST_01 address 1.1.1.1 ip address virtual source-nat vrf TEST_02 address 1.1.1.2 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg index 64e882dee94..6ae5032dd34 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vlan-interfaces -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -54,6 +46,8 @@ interface Vlan42 ip helper-address 10.10.64.150 source-interface Loopback0 ip helper-address 10.10.96.150 source-interface Loopback0 ip helper-address 10.10.96.151 source-interface Loopback0 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 5 level-1 ip address virtual 10.10.42.1/24 ! interface Vlan43 @@ -61,6 +55,13 @@ interface Vlan43 no shutdown ipv6 dhcp relay destination a0::2 vrf TEST local-interface Loopback44 link-address a0::4 ipv6 address a0::1/64 + isis authentication key-id 2 algorithm sha-512 key 0 password + isis authentication key-id 3 algorithm sha-512 rfc-5310 key 0 password1 + isis authentication key-id 1 algorithm sha-1 key 0 password level-1 + isis authentication key-id 4 algorithm sha-1 rfc-5310 key 0 password level-1 + isis authentication key-id 5 algorithm sha-1 key 0 password3 level-1 + isis authentication key-id 1 algorithm sha-1 key 0 password level-2 + isis authentication key-id 5 algorithm sha-1 rfc-5310 key 0 password level-2 ! interface Vlan44 description SVI Description @@ -75,6 +76,8 @@ interface Vlan50 ip nat source dynamic access-list ACL2 pool POOL2 ip nat destination static 1.0.0.1 2.0.0.1 ip nat destination dynamic access-list ACL1 pool POOL1 + isis authentication mode text rx-disabled level-2 + isis authentication key 0 password level-2 ! interface Vlan75 description SVI Description @@ -102,6 +105,9 @@ interface Vlan81 interface Vlan83 description SVI Description no shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 + isis authentication key 0 password ip address virtual 10.10.83.1/24 ip address virtual 10.11.83.1/24 secondary ip address virtual 10.11.84.1/24 secondary @@ -111,6 +117,9 @@ interface Vlan84 arp gratuitous accept arp monitor mac-address ip address 10.10.84.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 2 rx-disabled + isis authentication key 0 password ip virtual-router address 10.10.84.254 ip virtual-router address 10.11.84.254/24 ! @@ -118,12 +127,17 @@ interface Vlan85 description SVI Description arp cache dynamic capacity 50000 ip address 10.10.84.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 2 + isis authentication key 0 password bfd interval 500 min-rx 500 multiplier 5 bfd echo ! interface Vlan86 description SVI Description ip address 10.10.83.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile1 algorithm sha-1 rx-disabled ip attached-host route export 10 ! interface Vlan87 @@ -132,10 +146,17 @@ interface Vlan87 ip address 10.10.87.1/24 ip access-group ACL_IN in ip access-group ACL_OUT out + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile1 algorithm sha-1 ! interface Vlan88 description SVI Description shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 rx-disabled level-1 + isis authentication mode text rx-disabled level-2 + isis authentication key 0 password level-1 + isis authentication key 0 password level-2 ip address virtual 10.10.87.1/23 ! interface Vlan89 @@ -162,11 +183,19 @@ interface Vlan89 interface Vlan90 description SVI Description ip address 10.10.83.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile2 algorithm sha-1 level-1 + isis authentication mode shared-secret profile profile1 algorithm sha-256 level-2 ip attached-host route export ! interface Vlan91 description PBR Description shutdown + isis enable EVPN_UNDERLAY + isis authentication mode md5 level-1 + isis authentication mode text level-2 + isis authentication key 0 password level-1 + isis authentication key 0 password level-2 service-policy type pbr input MyServicePolicy ! interface Vlan92 @@ -174,6 +203,9 @@ interface Vlan92 ip proxy-arp ip directed-broadcast ip address 10.10.92.1/24 + isis enable EVPN_UNDERLAY + isis authentication mode shared-secret profile profile2 algorithm sha-1 rx-disabled level-1 + isis authentication mode shared-secret profile profile1 algorithm sha-256 rx-disabled level-2 ! interface Vlan110 description PVLAN Primary with vlan mapping @@ -301,6 +333,8 @@ interface Vlan2002 ip verify unicast source reachable-via rx isis enable EVPN_UNDERLAY isis bfd + isis authentication mode md5 rx-disabled + isis authentication key 0 password ip address virtual 10.2.2.1/24 ! interface Vlan4094 @@ -314,5 +348,6 @@ interface Vlan4094 pim ipv4 hello count 3.5 pim ipv4 dr-priority 200 pim ipv4 bfd -! -end + isis enable EVPN_UNDERLAY + isis authentication mode sha key-id 5 rx-disabled level-1 + isis authentication mode sha key-id 10 rx-disabled level-2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-internal-order.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-internal-order.cfg index d8059292ead..9952d313fbc 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-internal-order.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-internal-order.cfg @@ -1,17 +1,7 @@ -!RANCID-CONTENT-TYPE: arista ! vlan internal order ascending range 10 40 ! -transceiver qsfp default-mode 4x10G -! -hostname vlan-internal-order -! -no enable password -no aaa root -! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlans.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlans.cfg index 95749c075c6..a4b43989065 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlans.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlans.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vlans -! -no enable password -no aaa root ! vlan 110 name PR01-DMZ @@ -33,8 +25,6 @@ vlan 3012 trunk group MY_TRUNK_GROUP ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vmtracer-sessions.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vmtracer-sessions.cfg index 67f1ce3a9cc..188b436c48a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vmtracer-sessions.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vmtracer-sessions.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vmtracer-sessions -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -23,5 +15,3 @@ vmtracer session session_2 url https://192.168.0.10 username user1 password 7 encrypted_password -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vrf-instances.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vrf-instances.cfg index 6a0920a3c97..a9539a629e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vrf-instances.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vrf-instances.cfg @@ -1,11 +1,3 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vrf-instances -! -no enable password -no aaa root ! vrf instance MGMT ! @@ -14,11 +6,9 @@ vrf instance TENANT_A_PROJECT01 vrf instance TENANT_A_PROJECT02 ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 no ip routing vrf MGMT ip routing vrf TENANT_A_PROJECT01 ip routing vrf TENANT_A_PROJECT02 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface-false.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface-false.cfg index 235c6d61041..fab96673304 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface-false.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface-false.cfg @@ -1,20 +1,10 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vxlan-interface-false -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! interface Vxlan1 - no vxlan qos dscp propagation encapsulation no vxlan qos ecn propagation + no vxlan qos dscp propagation encapsulation no vxlan qos map dscp to traffic-class decapsulation -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface.cfg index 96b7526f5e2..b6d60b36377 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vxlan-interface.cfg @@ -1,14 +1,6 @@ -!RANCID-CONTENT-TYPE: arista -! -transceiver qsfp default-mode 4x10G -! -hostname vxlan-interface -! -no enable password -no aaa root ! interface Management1 - description oob_management + description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! @@ -22,21 +14,19 @@ interface Vxlan1 vxlan flood vtep learned data-plane vxlan vlan 110 vni 10110 vxlan vlan 111 vni 10111 - vxlan vlan 111 flood vtep 10.1.1.10 10.1.1.11 vxlan vrf Tenant_A_OP_Zone vni 10 vxlan vrf Tenant_A_WEB_Zone vni 11 vxlan mlag source-interface Loopback1 bfd vtep evpn interval 300 min-rx 300 multiplier 3 bfd vtep evpn prefix-list PL-TEST vxlan flood vtep 10.1.0.10 10.1.0.11 - vxlan qos dscp propagation encapsulation - vxlan qos ecn propagation - vxlan qos map dscp to traffic-class decapsulation + vxlan vlan 111 flood vtep 10.1.1.10 10.1.1.11 vxlan vlan 110 multicast group 239.9.1.4 vxlan vlan 112 multicast group 239.9.1.6 vxlan vrf Tenant_A_OP_Zone multicast group 232.0.0.10 vxlan multicast headend-replication + vxlan qos ecn propagation + vxlan qos dscp propagation encapsulation + vxlan qos map dscp to traffic-class decapsulation vxlan encapsulation ipv4 -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/group_vars/all.yml index 489c44b4fec..4ac6ca7b5bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/group_vars/all.yml @@ -4,7 +4,7 @@ is_for_test: true ### Management Interfaces ### management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT vrf: MGMT ip_address: 10.73.255.122/24 gateway: 10.73.255.2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/address-locking.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/address-locking.yml index d28fbf9d30d..66e65c5dbcb 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/address-locking.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/address-locking.yml @@ -17,20 +17,23 @@ address_locking: ethernet_interfaces: - name: Ethernet1 - type: switched + switchport: + enabled: true description: Address Locking Interface Testing 1 address_locking: ipv4: true - name: Ethernet2 - type: switched + switchport: + enabled: true description: Address Locking Interface Testing 2 address_locking: ipv4: true ipv6: true - name: Ethernet3 - type: switched + switchport: + enabled: true description: Address Locking Interface Testing 3 address_locking: ipv4: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x-2.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x-2.yml index 52f34ead81b..e03ba25d9b3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x-2.yml @@ -10,3 +10,9 @@ dot1x: radius_av_pair: service_type: true framed_mtu: 1500 + aaa: + unresponsive: + action: + traffic_allow: true + phone_action: + apply_cached_results: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x.yml index 55467eae2cb..2e0fd5e5da2 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/dot1x.yml @@ -24,6 +24,9 @@ dot1x: apply_alternate: true recovery_action_reauthenticate: true accounting_update_interval: 6 + radius_av_pair_username_format: + delimiter: colon + mac_string_case: lowercase captive_portal: enabled: true url: http://portal-nacm08/captiveredirect/ diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_configuration.enable.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_configuration.enable.yml new file mode 100644 index 00000000000..68adfc9a0e4 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_configuration.enable.yml @@ -0,0 +1,2 @@ +eos_cli_config_gen_configuration: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_documentation.enable.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_documentation.enable.yml new file mode 100644 index 00000000000..76a8e0c3467 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/eos_cli_config_gen_documentation.enable.yml @@ -0,0 +1,2 @@ +eos_cli_config_gen_documentation: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml index 5b8421b8005..209817c3f19 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml @@ -10,7 +10,6 @@ ethernet_interfaces: mtu: 1500 l2_mtu: 8000 l2_mru: 8000 - type: routed ip_address: 172.31.255.1/31 link_tracking_groups: - name: EVPN_MH_ES1 @@ -33,74 +32,75 @@ ethernet_interfaces: ipv4_segment_size: 70 ipv6_segment_size: 75 direction: egress + # test for switchport settings switchport: + enabled: false port_security: enabled: true - tap: - allowed_vlan: 25 - default: - groups: - - g2 - - g1 - - g3 - nexthop_groups: - - nexthop_g1 - - nexthop_g3 - - nexthop_g2 - interfaces: - - port-channel10 - - ethernet4 - identity: - port_id: 3 - inner_port_id: 5 - mpls_pop_all: true - native_vlan: 10 - truncation: - enabled: true - size: 150 - mac_address: - dest: 01:00:00:00:00:00 - src: 01:23:45:67:89:ab - encapsulation: - gre: - - strip: true - - strip: true - destination: 1.1.1.1 - source: 1.1.1.2 - protocol: "0x0000" - - strip: true - protocol: "0x0001" - - strip: true - destination: 2.1.1.2 - protocol: "0x0010" - - strip: false - - strip: true - destination: 2.1.1.3 - source: 2.1.1.4 - - strip: true - protocol: "0x0002" - feature_header_length: 3 - - strip: true - protocol: "0x0003" - feature_header_length: 2 - re_encapsulation_ethernet_header: true - tool: - mpls_pop_all: true - encapsulation: - dot1br_strip: true - vn_tag_strip: true - allowed_vlan: 23 - identity: - tag: qinq - dot1q_dzgre_source: port - truncation: - enabled: true + mac_address_maximum: + disabled: true + trunk: + allowed_vlan: 110-111,210-211 + native_vlan: 5 + native_vlan_tag: true groups: - - group1 - - group2 - - group3 - dot1q_remove_outer_vlan_tag: 1 - dzgre_preserve: true + - g1 + - g2 + private_vlan_secondary: true + access_vlan: 200 + phone: + vlan: 110 + trunk: tagged + mode: dot1q-tunnel + pvlan_mapping: 20-30 + dot1q: + ethertype: 1536 + vlan_tag: required + vlan_translations: + in_required: true + direction_in: + - from: 10 + to: 24 + - from: 37 + to: 49 + inner_vlan_from: 56 + - from: 23 + to: 45 + dot1q_tunnel: true + direction_both: + - from: 24 + inner_vlan_from: 78 + network: true + to: 46 + - from: 12 + to: 20 + - from: 43 + to: 30 + dot1q_tunnel: true + - from: 24 + inner_vlan_from: 78 + network: false + to: 46 + direction_out: + - from: 34 + to: 50 + - from: 10 + to: 45 + inner_vlan_to: 34 + - from: 45 + dot1q_tunnel_to: all + - from: 55 + vlan_forwarding_accept_all: true + source_interface: tx + backup_link: + interface: Ethernet5 + prefer_vlan: 10 + backup: + dest_macaddr: 01:00:00:00:00:00 + mac_move_burst: 20 + mac_move_burst_interval: 30 + initial_mac_move_delay: 10 + preemption_delay: 35 eos_cli: | comment Comment created from eos_cli under ethernet_interfaces.Ethernet1 @@ -129,13 +129,10 @@ ethernet_interfaces: version: 2 - name: Ethernet2 - type: switched peer: SRV-POD03 peer_interface: Eth1 peer_type: server description: SRV-POD02_Eth1 - mode: trunk - vlans: 110-111,210-211 tcp_mss_ceiling: ipv4_segment_size: 70 direction: ingress @@ -164,13 +161,25 @@ ethernet_interfaces: no_drop: true spanning_tree_bpduguard: disabled spanning_tree_bpdufilter: disabled + # test for switchport settings switchport: + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 + private_vlan_secondary: false + enabled: true + dot1q: + vlan_tag: disallowed port_security: mac_address_maximum: limit: 100 violation: mode: protect protect_log: true + vlan_translations: + in_required: false + backup_link: + prefer_vlan: 20 - name: Ethernet3 peer: DC1-SPINE2 @@ -178,7 +187,6 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 mtu: 1500 - type: routed ip_address: 172.31.128.1/31 snmp_trap_link_change: false link_tracking_groups: @@ -203,7 +211,12 @@ ethernet_interfaces: spanning_tree_guard: root tcp_mss_ceiling: ipv6_segment_size: 65 + # test for switchport settings switchport: + enabled: false + mode: trunk + trunk: + native_vlan: 5 port_security: mac_address_maximum: disabled: false @@ -213,9 +226,15 @@ ethernet_interfaces: vlans: - range: 1-3 mac_address_maximum: 3 + vlan_translations: + out_required: false + direction_out: + - from: 23 + dot1q_tunnel_to: 50 + backup_link: + interface: Ethernet4 - name: Ethernet4 - type: routed description: Molecule IPv6 shutdown: true mtu: 9100 @@ -243,29 +262,17 @@ ethernet_interfaces: boundaries: - boundary: ff00::/16 - boundary: ff01::/16 + # test for switchport port-security violation switchport: - tap: - identity: - port_id: 5 - mac_address: - dest: 01:00:00:00:00:00 - encapsulation: - vxlan_strip: true - truncation: - enabled: true - tool: - identity: - tag: dot1q - qinq_dzgre_source: policy inner port - truncation: - enabled: true - size: 160 + enabled: false + port_security: + violation: + mode: protect - name: Ethernet5 description: Molecule Routing shutdown: false mtu: 9100 - type: routed ospf_network_point_to_point: true ospf_area: 100 ospf_cost: 99 @@ -295,9 +302,12 @@ ethernet_interfaces: isis_authentication_mode: md5 isis_authentication_key: "asfddja23452" spanning_tree_guard: loop + # test for switchport access vlan + switchport: + enabled: false + access_vlan: 220 - name: Ethernet6 - type: switched logging: event: link_status: true @@ -308,15 +318,20 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server description: SRV-POD02_Eth1 - mode: trunk - vlans: 110-111,210-211 + # test for switchport trunk mode + switchport: + enabled: true + trunk: + allowed_vlan: 110-111,210-211 + mode: trunk spanning_tree_bpduguard: enabled spanning_tree_bpdufilter: enabled - name: Ethernet7 description: Molecule L2 shutdown: false - type: switched + switchport: + enabled: true mtu: 7000 ptp: enable: true @@ -357,21 +372,24 @@ ethernet_interfaces: - name: Ethernet8 description: to WAN-ISP1-01 Ethernet2 - type: routed + switchport: + enabled: false lldp: transmit: false receive: false + - name: Ethernet8.101 description: to WAN-ISP-01 Ethernet2.101 - VRF-C1 - type: l3dot1q - encapsulation_dot1q_vlan: 101 + encapsulation_dot1q: + vlan: 101 ip_address: 172.31.128.1/31 ipv6_enable: true ipv6_address: 2002:ABDC::1/64 - name: Ethernet9 description: interface_with_mpls_enabled - type: routed + switchport: + enabled: false ip_address: 172.31.128.9/31 multicast: ipv4: @@ -387,7 +405,8 @@ ethernet_interfaces: - name: Ethernet10 description: interface_with_mpls_disabled - type: routed + switchport: + enabled: false ip_address: 172.31.128.10/31 mpls: ip: false @@ -396,9 +415,11 @@ ethernet_interfaces: - name: Ethernet11 description: interface_in_mode_access_accepting_tagged_LACP - type: switched - mode: access - vlans: 200 + # test for switchport access mode + switchport: + enabled: true + mode: access + access_vlan: 200 l2_protocol: encapsulation_dot1q_vlan: 200 spanning_tree_bpduguard: false # No config should be rendered for this case @@ -406,9 +427,11 @@ ethernet_interfaces: - name: Ethernet12 description: interface_with_dot1q_tunnel - type: switched - mode: dot1q-tunnel - vlans: 300 + # test for switchport dot1q-tunnel mode + switchport: + enabled: true + mode: dot1q-tunnel + access_vlan: 300 - name: Ethernet13 logging: @@ -418,15 +441,17 @@ ethernet_interfaces: spanning_tree: false storm_control_discards: false description: interface_in_mode_access_with_voice - type: switched - native_vlan: 100 - mode: "trunk phone" - phone: - trunk: untagged - vlan: 70 + # test for switchport trunk-phone mode + switchport: + enabled: true + trunk: + native_vlan: 100 + mode: "trunk phone" + phone: + trunk: untagged + vlan: 70 - name: Ethernet14 - type: switched logging: event: link_status: true @@ -434,47 +459,60 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server description: SRV-POD02_Eth1 - mode: trunk - vlans: 110-111,210-211 + # test for switchport trunk mode settings + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 - name: Ethernet15 - type: switched description: PVLAN Promiscuous Access - only one secondary - mode: access - vlans: 110 - pvlan_mapping: 111 + # test for switchport pvlan mapping + switchport: + enabled: true + mode: access + access_vlan: 110 + pvlan_mapping: 111 - name: Ethernet16 - type: switched description: PVLAN Promiscuous Trunk - vlan translation out - mode: trunk - vlans: 110-112 - vlan_translations: - - direction: out - from: 111-112 - to: 110 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112 + vlan_translations: + out_required: true + direction_out: + - from: 111-112 + to: 110 - name: Ethernet17 - type: switched description: PVLAN Secondary Trunk - mode: trunk - vlans: 110-112 - trunk_private_vlan_secondary: true + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112 + private_vlan_secondary: true - name: Ethernet18 description: PBR Description mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 192.0.2.1/31 service_policy: pbr: input: MyLANServicePolicy - name: Ethernet19 - type: switched description: Switched port with no LLDP rx/tx - mode: access - vlans: 110 + switchport: + enabled: true + mode: access + access_vlan: 110 lldp: transmit: false receive: false @@ -482,13 +520,15 @@ ethernet_interfaces: - name: Ethernet20 description: Port patched through patch-panel to pseudowire - type: routed + switchport: + enabled: false lldp: transmit: false receive: false - name: Ethernet21 - type: switched + switchport: + enabled: true description: 200MBit/s shape qos: trust: disabled @@ -496,89 +536,96 @@ ethernet_interfaces: rate: "200000 kbps" - name: Ethernet22 - type: switched + switchport: + enabled: true description: 10% shape shape: rate: "10 percent" - name: Ethernet23 - type: switched + switchport: + enabled: true description: Error-correction encoding error_correction_encoding: fire_code: true reed_solomon: true - name: Ethernet24 - type: switched + switchport: + enabled: true description: Disable error-correction encoding error_correction_encoding: enabled: false - name: Ethernet25 - type: switched + switchport: + enabled: true description: Molecule MAC mac_access_group_in: MAC_ACL_IN mac_access_group_out: MAC_ACL_OUT - name: Ethernet26 - type: routed + switchport: + enabled: false + - name: Ethernet26.1 - type: l2dot1q description: TENANT_A pseudowire 1 interface encapsulation_vlan: client: - unmatched: true + encapsulation: unmatched + - name: Ethernet26.100 - type: l2dot1q description: TENANT_A pseudowire 1 interface + vlan_id: 10 encapsulation_vlan: client: - dot1q: - vlan: 100 + encapsulation: dot1q + vlan: 100 network: - client: true + encapsulation: client + - name: Ethernet26.200 - type: l2dot1q description: TENANT_A pseudowire 2 interface encapsulation_vlan: client: - dot1q: - vlan: 200 + encapsulation: dot1q + vlan: 200 + - name: Ethernet26.300 - type: l2dot1q description: TENANT_A pseudowire 3 interface encapsulation_vlan: client: - dot1q: - vlan: 300 + encapsulation: dot1q + vlan: 300 network: - dot1q: - vlan: 400 + encapsulation: dot1q + vlan: 400 + - name: Ethernet26.400 - type: l2dot1q description: TENANT_A pseudowire 3 interface encapsulation_vlan: client: - dot1q: - outer: 400 - inner: 20 + encapsulation: dot1q + outer_vlan: 400 + inner_vlan: 20 network: - dot1q: - outer: 401 - inner: 21 + encapsulation: dot1q + outer_vlan: 401 + inner_vlan: 21 + - name: Ethernet26.500 - type: l2dot1q description: TENANT_A pseudowire 3 interface encapsulation_vlan: client: - dot1q: - outer: 500 - inner: 50 + encapsulation: dot1q + outer_vlan: 500 + inner_vlan: 50 network: - client: true + encapsulation: client - name: Ethernet27 - type: switched + switchport: + enabled: true description: EVPN-Vxlan single-active redundancy evpn_ethernet_segment: identifier: "0000:0000:0000:0102:0304" @@ -592,7 +639,8 @@ ethernet_interfaces: candidate_reachability_required: true - name: Ethernet28 - type: switched + switchport: + enabled: true description: EVPN-MPLS multihoming evpn_ethernet_segment: identifier: "0000:0000:0000:0102:0305" @@ -602,41 +650,47 @@ ethernet_interfaces: tunnel_flood_filter_time: 100 - name: Ethernet29 - type: switched + switchport: + enabled: true description: DOT1X Testing - auto phone true dot1x: port_control: auto port_control_force_authorized_phone: true - name: Ethernet30 - type: switched + switchport: + enabled: true description: DOT1X Testing - force-authorized phone false dot1x: port_control: force-authorized port_control_force_authorized_phone: false - name: Ethernet31 - type: switched + switchport: + enabled: true description: DOT1X Testing - force-unauthorized - no phone dot1x: port_control: force-unauthorized - name: Ethernet32 - type: switched + switchport: + enabled: true description: DOT1X Testing - auto reauthentication dot1x: port_control: auto reauthentication: true - name: Ethernet33 - type: switched + switchport: + enabled: true description: DOT1X Testing - pae mode authenticator dot1x: pae: mode: authenticator - name: Ethernet34 - type: switched + switchport: + enabled: true description: DOT1X Testing - authentication_failure allow dot1x: authentication_failure: @@ -644,28 +698,32 @@ ethernet_interfaces: allow_vlan: 800 - name: Ethernet35 - type: switched + switchport: + enabled: true description: DOT1X Testing - authentication_failure drop dot1x: authentication_failure: action: drop - name: Ethernet36 - type: switched + switchport: + enabled: true description: DOT1X Testing - host-mode single-host dot1x: host_mode: mode: single-host - name: Ethernet37 - type: switched + switchport: + enabled: true description: DOT1X Testing - host-mode multi-host dot1x: host_mode: mode: multi-host - name: Ethernet38 - type: switched + switchport: + enabled: true description: DOT1X Testing - host-mode multi-host authenticated dot1x: host_mode: @@ -673,7 +731,8 @@ ethernet_interfaces: multi_host_authenticated: true - name: Ethernet39 - type: switched + switchport: + enabled: true description: DOT1X Testing - mac_based_authentication host-mode common true dot1x: mac_based_authentication: @@ -681,7 +740,8 @@ ethernet_interfaces: host_mode_common: true - name: Ethernet40 - type: switched + switchport: + enabled: true description: DOT1X Testing - mac_based_authentication always dot1x: mac_based_authentication: @@ -689,7 +749,8 @@ ethernet_interfaces: always: true - name: Ethernet41 - type: switched + switchport: + enabled: true description: DOT1X Testing - mac_based_authentication always and host-mode common dot1x: mac_based_authentication: @@ -698,14 +759,16 @@ ethernet_interfaces: host_mode_common: true - name: Ethernet42 - type: switched + switchport: + enabled: true description: DOT1X Testing - mac_based_authentication dot1x: mac_based_authentication: enabled: true - name: Ethernet43 - type: switched + switchport: + enabled: true description: DOT1X Testing - timeout values dot1x: timeout: @@ -716,7 +779,8 @@ ethernet_interfaces: tx_period: 6 - name: Ethernet44 - type: switched + switchport: + enabled: true description: DOT1X Testing - reauthorization_request_limit dot1x: reauthorization_request_limit: 3 @@ -724,7 +788,8 @@ ethernet_interfaces: disabled: true - name: Ethernet45 - type: switched + switchport: + enabled: true description: DOT1X Testing - all features dot1x: port_control: auto @@ -756,15 +821,18 @@ ethernet_interfaces: native_vlan_membership_egress: true - name: Ethernet46 - type: switched description: native-vlan-tag-precedence - native_vlan_tag: true - native_vlan: 100 - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + native_vlan_tag: true + native_vlan: 100 - name: Ethernet47 description: IP Helper - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 ip_helpers: - ip_helper: 10.10.96.101 @@ -778,24 +846,28 @@ ethernet_interfaces: - name: Ethernet48 description: Load Interval - type: switched + switchport: + enabled: true load_interval: 5 - name: Ethernet50 - type: switched + switchport: + enabled: true description: SFlow Interface Testing - SFlow ingress enabled sflow: enable: true - name: Ethernet51 - type: switched + switchport: + enabled: true description: SFlow Interface Testing - SFlow egress enabled sflow: egress: enable: true - name: Ethernet52 - type: switched + switchport: + enabled: true description: SFlow Interface Testing - SFlow ingress and egress unmodified enabled sflow: enable: true @@ -803,7 +875,8 @@ ethernet_interfaces: unmodified_enable: true - name: Ethernet53 - type: switched + switchport: + enabled: true description: SFlow Interface Testing - SFlow ingress and egress disabled sflow: enable: false @@ -811,7 +884,8 @@ ethernet_interfaces: enable: false - name: Ethernet54 - type: switched + switchport: + enabled: true description: SFlow Interface Testing - SFlow ingress and egress unmodified disabled sflow: enable: false @@ -820,7 +894,8 @@ ethernet_interfaces: - name: Ethernet55 description: DHCPv6 Relay Testing - type: routed + switchport: + enabled: false shutdown: false ipv6_address: a0::1/64 ipv6_dhcp_relay_destinations: @@ -832,7 +907,8 @@ ethernet_interfaces: local_interface: Loopback55 - name: Ethernet56 - type: switched + switchport: + enabled: true description: Interface with poe commands and limit in class poe: priority: low @@ -849,7 +925,8 @@ ethernet_interfaces: negotiation_lldp: false - name: Ethernet57 - type: switched + switchport: + enabled: true description: Interface with poe commands and limit in watts poe: disabled: false @@ -867,13 +944,15 @@ ethernet_interfaces: negotiation_lldp: true - name: Ethernet58 - type: switched + switchport: + enabled: true description: Interface with poe disabled and no other poe keys poe: disabled: true - name: Ethernet60 - type: switched + switchport: + enabled: true description: IP NAT Testing ip_nat: destination: @@ -1019,12 +1098,14 @@ ethernet_interfaces: spanning_tree: false storm_control_discards: false description: interface_in_mode_access_with_voice - type: switched - native_vlan: 100 - mode: "trunk phone" - phone: - trunk: "untagged phone" - vlan: 70 + switchport: + enabled: true + trunk: + native_vlan: 100 + mode: "trunk phone" + phone: + trunk: "untagged phone" + vlan: 70 - name: Ethernet62 logging: @@ -1034,35 +1115,41 @@ ethernet_interfaces: spanning_tree: false storm_control_discards: false description: interface_in_mode_access_with_voice - type: switched - native_vlan: 100 - mode: "trunk phone" - phone: - trunk: "tagged phone" - vlan: 70 + switchport: + enabled: true + trunk: + native_vlan: 100 + mode: "trunk phone" + phone: + trunk: "tagged phone" + vlan: 70 - name: Ethernet63 description: DHCP client interface - type: routed + switchport: + enabled: false ip_address: "dhcp" dhcp_client_accept_default_route: true - name: Ethernet64 description: DHCP server interface - type: routed + switchport: + enabled: false ip_address: 192.168.42.42/24 dhcp_server_ipv4: true dhcp_server_ipv6: true - name: Ethernet69 - type: switched + switchport: + enabled: true description: IP NAT service-profile ip_nat: service_profile: TEST-NAT-PROFILE # VRRP - name: Ethernet65 description: Multiple VRIDs - type: routed + switchport: + enabled: false shutdown: false ip_address: 192.0.2.2/25 ipv6_enable: true @@ -1090,7 +1177,8 @@ ethernet_interfaces: - name: Ethernet66 description: Multiple VRIDs and tracking shutdown: false - type: routed + switchport: + enabled: false ip_address: 192.0.2.2/25 ipv6_enable: true ipv6_address: 2001:db8::2/64 @@ -1134,14 +1222,22 @@ ethernet_interfaces: version: 3 # Transceiver Frequency - name: Ethernet67 - type: switched + switchport: + enabled: true description: Custom_Transceiver_Frequency shutdown: false transceiver: frequency: 190050 + - name: Ethernet67.1 + description: Test_encapsulation_dot1q + encapsulation_dot1q: + vlan: 4 + inner_vlan: 34 + - name: Ethernet68 - type: switched + switchport: + enabled: true description: Custom_Transceiver_Frequency shutdown: false transceiver: @@ -1149,3 +1245,249 @@ ethernet_interfaces: frequency_unit: ghz media: override: 100gbase-ar4 + + - name: Ethernet68.1 + description: Test_encapsulation_vlan1 + encapsulation_vlan: + client: + outer_vlan: 23 + inner_vlan: 45 + encapsulation: dot1q + inner_encapsulation: dot1q + network: + encapsulation: dot1ad + outer_vlan: 32 + inner_vlan: 54 + inner_encapsulation: dot1ad + + - name: Ethernet68.2 + description: Test_encapsulation_vlan2 + encapsulation_vlan: + client: + encapsulation: dot1q + vlan: 10 + network: + encapsulation: dot1q + outer_vlan: 32 + inner_vlan: 54 + + - name: Ethernet68.3 + description: Test_encapsulation_vlan3 + encapsulation_vlan: + client: + encapsulation: dot1ad + vlan: 12 + network: + encapsulation: dot1q + vlan: 25 + + - name: Ethernet68.4 + description: Test_encapsulation_vlan4 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + inner_encapsulation: dot1q + network: + encapsulation: dot1q + outer_vlan: 53 + inner_vlan: 6 + inner_encapsulation: dot1ad + + - name: Ethernet68.5 + description: Test_encapsulation_vlan5 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + network: + encapsulation: dot1ad + outer_vlan: 52 + inner_vlan: 62 + + - name: Ethernet68.6 + description: Test_encapsulation_vlan6 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + network: + encapsulation: client + + - name: Ethernet68.7 + description: Test_encapsulation_vlan7 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + + - name: Ethernet68.8 + description: Test_encapsulation_vlan8 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: dot1q + outer_vlan: 35 + inner_vlan: 60 + + - name: Ethernet68.9 + description: Test_encapsulation_vlan9 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: untagged + + - name: Ethernet68.10 + description: Test_encapsulation_vlan9 + encapsulation_vlan: + client: + encapsulation: dot1q + outer_vlan: 14 + inner_vlan: 11 + network: + encapsulation: client inner + + - name: Ethernet70 + description: dot1x_aaa_unresponsive + shutdown: false + dot1x: + aaa: + unresponsive: + eap_response: success + action: + traffic_allow_vlan: 10 + traffic_allow_access_list: acl1 + phone_action: + apply_cached_results: true + cached_results_timeout: + time_duration: 10 + time_duration_unit: hours + traffic_allow: true + apply_alternate: true + mac_based_access_list: true + + - name: Ethernet71 + description: dot1x_aaa_unresponsive1 + shutdown: false + dot1x: + aaa: + unresponsive: + eap_response: success + action: + traffic_allow_vlan: 10 + traffic_allow_access_list: acl1 + phone_action: + apply_cached_results: true + cached_results_timeout: + time_duration: 10 + time_duration_unit: hours + mac_based_access_list: true + + - name: Ethernet72 + description: dot1x_aaa_unresponsive2 + shutdown: false + dot1x: + aaa: + unresponsive: + eap_response: success + action: + traffic_allow_vlan: 10 + traffic_allow_access_list: acl1 + mac_based_access_list: true + + - name: Ethernet73 + description: Switchport_tap_tool + switchport: + tap: + allowed_vlan: 25 + default: + groups: + - g2 + - g1 + - g3 + nexthop_groups: + - nexthop_g1 + - nexthop_g3 + - nexthop_g2 + interfaces: + - port-channel10 + - ethernet4 + identity: + port_id: 3 + inner_port_id: 5 + mpls_pop_all: true + native_vlan: 10 + truncation: + enabled: true + size: 150 + mac_address: + dest: 01:00:00:00:00:00 + src: 01:23:45:67:89:ab + encapsulation: + gre: + - strip: true + - strip: true + destination: 1.1.1.1 + source: 1.1.1.2 + protocol: "0x0000" + - strip: true + protocol: "0x0001" + - strip: true + destination: 2.1.1.2 + protocol: "0x0010" + - strip: false + - strip: true + destination: 2.1.1.3 + source: 2.1.1.4 + - strip: true + protocol: "0x0002" + feature_header_length: 3 + - strip: true + protocol: "0x0003" + feature_header_length: 2 + re_encapsulation_ethernet_header: true + tool: + mpls_pop_all: true + encapsulation: + dot1br_strip: true + vn_tag_strip: true + allowed_vlan: 23 + identity: + tag: qinq + dot1q_dzgre_source: port + truncation: + enabled: true + groups: + - group1 + - group2 + - group3 + dot1q_remove_outer_vlan_tag: 1 + dzgre_preserve: true + + - name: Ethernet74 + description: Test_tap_tool + switchport: + tap: + identity: + port_id: 5 + mac_address: + dest: 01:00:00:00:00:00 + encapsulation: + vxlan_strip: true + truncation: + enabled: true + tool: + identity: + tag: dot1q + qinq_dzgre_source: policy inner port + truncation: + enabled: true + size: 160 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/flow-tracking.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/flow-tracking.yml index 5ee76e9e59d..88ebba363ab 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/flow-tracking.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/flow-tracking.yml @@ -96,23 +96,27 @@ flow_tracking: format_ipfix_standard_timestamps_counters: true ethernet_interfaces: - name: Ethernet40 - type: switched + switchport: + enabled: true flow_tracker: sampled: T2 hardware: T2 - name: Ethernet41 - type: switched + switchport: + enabled: true flow_tracker: sampled: T3 hardware: T3 - name: Ethernet42 - type: switched + switchport: + enabled: true flow_tracker: sampled: T3 port_channel_interfaces: - name: Port-Channel42 - type: switched + switchport: + enabled: true flow_tracker: sampled: T3 hardware: T3 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate-default-config.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate-default-config.yml index 98ace87ca70..7ffd7d9bddd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate-default-config.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate-default-config.yml @@ -1,3 +1,3 @@ -generate_default_config: false +generate_default_config: true # Override config inherited from all.yml management_interfaces: null diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/hardware.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/hardware.yml index fc4a2536be1..3f56b6e5f35 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/hardware.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/hardware.yml @@ -9,3 +9,8 @@ hardware: serdes: 25g - speed_group: 3/1 serdes: 25g + port_groups: + - port_group: 1 + select: Et32/1-4 + - port_group: 2 + select: Et32/1,Et32/3,Et34 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-access-lists.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-access-lists.yml index 6bd28771cdd..531a921c10a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-access-lists.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-access-lists.yml @@ -35,6 +35,11 @@ ip_access_lists: destination: any destination_ports_match: range destination_ports: [10, 20] + # verify issue 4423 where a protocol was missing + # and an entry with only the sequence number was rendered. + - sequence: 60 + source: any + destination: any - sequence: 4294967295 action: deny protocol: ip diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-community-lists.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-community-lists.yml index 3b9cc3b6a76..542e95adfaf 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-community-lists.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-community-lists.yml @@ -1,11 +1,4 @@ ### IP community lists ### - -community_lists: - - name: TEST1 - action: "permit 1000:1000" - - name: TEST2 - action: "permit 2000:3000" - ip_community_lists: - name: IP_CL_TEST1 entries: diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-security.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-security.yml index 87d93c88087..25c55f746e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-security.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ip-security.yml @@ -1,12 +1,13 @@ ### IP Security ### ip_security: ike_policies: + # Testing sorting + - name: IKE-2 - name: IKE-1 local_id: 192.168.100.1 ike_lifetime: 24 encryption: aes256 dh_group: 20 - - name: IKE-2 - name: IKE-FQDN local_id_fqdn: fqdn.local - name: IKE-UFQDN @@ -14,6 +15,8 @@ ip_security: # local_id won't be rendered as local_id_fqdn takes precedence local_id: 192.168.42.42 sa_policies: + # Testing sorting + - name: SA-7 - name: SA-1 esp: encryption: aes128 @@ -44,6 +47,8 @@ ip_security: esp: integrity: sha384 profiles: + # testing sorting + - name: Profile-4 - name: Profile-1 ike_policy: IKE-1 sa_policy: SA-1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/l2-protocol-forwarding.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/l2-protocol-forwarding.yml index 7281b89bef0..6a50168985f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/l2-protocol-forwarding.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/l2-protocol-forwarding.yml @@ -64,14 +64,16 @@ l2_protocol: ethernet_interfaces: - name: Ethernet1 - type: switched + switchport: + enabled: true description: L2PF test l2_protocol: forwarding_profile: TEST1 port_channel_interfaces: - name: Port-Channel1 - type: switched + switchport: + enabled: true description: L2PF test l2_protocol: forwarding_profile: TEST2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/lldp.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/lldp.yml index f43e85bf03f..fde465d50e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/lldp.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/lldp.yml @@ -14,29 +14,33 @@ lldp: ethernet_interfaces: - name: Ethernet1 description: to WAN-ISP1-01 Ethernet2 - type: routed + switchport: + enabled: false lldp: transmit: false receive: false - name: Ethernet2 - type: switched description: Switched port with no LLDP rx/tx - mode: access - vlans: 110 + switchport: + enabled: true + mode: access + access_vlan: 110 lldp: transmit: false receive: true - name: Ethernet3 - type: switched description: No special LLDP settings - mode: access - vlans: 110 + switchport: + enabled: true + mode: access + access_vlan: 110 - name: Ethernet4 description: test - type: routed + switchport: + enabled: false lldp: transmit: true receive: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging-minimal.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging-minimal.yml index b08e94c8f3d..d45a788fc59 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging-minimal.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging-minimal.yml @@ -3,5 +3,8 @@ logging: console: informational monitor: debugging facility: syslog + repeat_messages: false buffered: size: 64000 + event: + global_link_status: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging.yml index 51cd492453f..26d61019fa8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/logging.yml @@ -4,6 +4,7 @@ logging: buffered: size: 1000000 level: warnings + repeat_messages: true trap: disabled synchronous: level: @@ -67,6 +68,8 @@ logging: - 100 - 200 event: + congestion_drops_interval: 10 + global_link_status: false storm_control: discards: global: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mac-security-eth-po-entropy.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mac-security-eth-po-entropy.yml index 0963bb68091..cb6b384efba 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mac-security-eth-po-entropy.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mac-security-eth-po-entropy.yml @@ -54,15 +54,16 @@ management_security: ### L2 portchannel port_channel_interfaces: - name: Port-Channel3 - type: switched description: L2-PORT - vlans: 1-5 - mode: trunk + switchport: + enabled: true + trunk: + allowed_vlan: 1-5 + mode: trunk # Children interfaces ethernet_interfaces: - name: Ethernet3 - type: port-channel-member peer: DC1-AGG01 peer_interface: Ethernet3 peer_type: l3leaf @@ -74,7 +75,8 @@ ethernet_interfaces: mode: active # Routed Interfaces - name: Ethernet1 - type: routed + switchport: + enabled: false ip_address: 1.1.1.1/24 mac_security: profile: A1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml index abf6d26c196..c23d7afbcd5 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml @@ -1,7 +1,7 @@ ### Management Interfaces ### management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT vrf: MGMT ip_address: 10.73.255.122/24 gateway: 10.73.255.2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-ssh.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-ssh.yml index c49e1229585..c3ca0f4826f 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-ssh.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-ssh.yml @@ -1,4 +1,10 @@ management_ssh: + authentication: + empty_passwords: permit + protocols: + - keyboard-interactive + - password + - public-key access_groups: - name: ACL-SSH - name: ACL-SSH-VRF diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity-2.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity-2.yml new file mode 100644 index 00000000000..66b68af4f24 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity-2.yml @@ -0,0 +1,10 @@ +### Monitor connectivity example for address_only as true +monitor_connectivity: + interval: 5 + shutdown: true + interface_sets: + - name: GLOBAL_SET2 + - name: HOST_SET2 + interfaces: Loopback2-4, Loopback10-12 + local_interfaces: HOST_SET2 + address_only: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity.yml index 075acd2dede..7c11abd5eb3 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-connectivity.yml @@ -27,6 +27,7 @@ monitor_connectivity: ip: 10.10.10.3 local_interfaces: HOST_SET address_only: false + - name: server4 vrfs: - name: red description: vrf_connectivity_monitor @@ -53,5 +54,16 @@ monitor_connectivity: description: server4_connectivity_monitor ip: 10.10.20.1 address_only: false - local_interfaces: VRF_HOST_SET + local_interfaces: VRF_GLOBAL_SET url: https://server2.local.com + - name: server5 + description: server5_connectivity_monitor + ip: 10.10.20.11 + address_only: true + local_interfaces: VRF_GLOBAL_SET + url: https://server5.local.com + - name: server6 + - name: yellow + address_only: true + interface_sets: + - name: VRF_GLOBAL_SET diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-session-default-encapsulation-gre.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-session-default-encapsulation-gre.yml new file mode 100644 index 00000000000..e4ec3a9205a --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-session-default-encapsulation-gre.yml @@ -0,0 +1,3 @@ +--- +monitor_session_default_encapsulation_gre: + payload: inner-packet diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-sessions.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-sessions.yml index 6d5f6cbb465..921a69081d8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-sessions.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/monitor-sessions.yml @@ -40,3 +40,11 @@ monitor_sessions: type: ip name: ipv4ACL sample: 50 + - name: myMonitoringSession3 + sources: + - name: Ethernet20 + direction: both + access_group: + type: ip + name: ipv4ACL + priority: 10 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mpls.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mpls.yml index 1b1618a4ecf..c1198c6e203 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mpls.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/mpls.yml @@ -10,7 +10,8 @@ mpls: ethernet_interfaces: - name: Ethernet1 - type: routed + switchport: + enabled: false ip_address: 192.168.100.1/31 mpls: ip: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml index 9a01cbd850c..fcd7640e994 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml @@ -2,13 +2,15 @@ ### Port-Channel Interfaces ### port_channel_interfaces: - name: Port-Channel5 - type: switched description: DC1_L2LEAF1_Po1 - vlans: 110,201 link_tracking_groups: - name: EVPN_MH_ES1 direction: downstream - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110,201 mlag: 5 storm_control: broadcast: @@ -52,42 +54,67 @@ port_channel_interfaces: - name: ACL2 version: 2 - name: Port-Channel15 - type: switched description: DC1_L2LEAF3_Po1 - vlans: 110,201 link_tracking_groups: - name: EVPN_MH_ES2 direction: upstream - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110,201 + private_vlan_secondary: false mlag: 15 spanning_tree_guard: loop - name: Port-Channel16 - type: switched description: DC1_L2LEAF4_Po1 - vlans: 110,201 - mode: trunk snmp_trap_link_change: true mlag: 16 spanning_tree_guard: disabled + switchport: + mode: trunk + port_security: + mac_address_maximum: + limit: 100 + violation: + mode: protect + protect_log: true + enabled: true + trunk: + native_vlan: 10 + allowed_vlan: 110,201 + dot1q: + vlan_tag: disallowed + vlan_translations: + direction_out: + - from: 23 + dot1q_tunnel_to: 22 + backup_link: + interface: Port-Channel100.102 + prefer_vlan: 20 - name: Port-Channel3 - type: switched description: MLAG_PEER_DC1-LEAF1B_Po3 - vlans: "2-4094" - mode: trunk snmp_trap_link_change: false shape: rate: 200000 kbps - trunk_groups: - - LEAF_PEER_L3 - - MLAG + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: "2-4094" + groups: + - LEAF_PEER_L3 + - MLAG - name: Port-Channel10 - type: switched description: SRV01_bond0 - vlans: 2-3000 - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 2-3000 evpn_ethernet_segment: identifier: "0000:0000:0404:0404:0303" route_target: "04:04:03:03:02:02" @@ -95,20 +122,34 @@ port_channel_interfaces: rate: 50 percent - name: Port-Channel50 - type: switched description: SRV-POD03_PortChanne1 - vlans: 1-4000 - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4000 evpn_ethernet_segment: identifier: "0000:0000:0303:0202:0101" route_target: "03:03:02:02:01:01" lacp_id: 0303.0202.0101 - name: Port-Channel51 - type: switched description: ipv6_prefix - vlans: 1-500 - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-500 + port_security: + mac_address_maximum: + disabled: false + violation: + mode: shutdown + vlan_default_mac_address_maximum: 2 + vlans: + - range: 1-3 + mac_address_maximum: 3 + - range: 4-5 ipv6_nd_prefixes: - ipv6_prefix: a1::/64 valid_lifetime: infinite @@ -116,85 +157,86 @@ port_channel_interfaces: no_autoconfig_flag: true - name: Port-Channel100 - type: routed logging: event: link_status: true switchport: - tap: - allowed_vlan: 25 - default: - groups: - - g2 - - g1 - - g3 - nexthop_groups: - - nexthop_g1 - - nexthop_g3 - - nexthop_g2 - interfaces: - - port-channel10 - - ethernet4 - identity: - port_id: 3 - mpls_pop_all: true - native_vlan: 10 - truncation: - enabled: true - mac_address: - dest: 01:00:00:00:00:00 - src: 01:23:45:67:89:ab - encapsulation: - gre: - - strip: true - - strip: true - destination: 1.1.1.1 - source: 1.1.1.2 - protocol: "0x0000" - - strip: true - protocol: "0x0010" - - strip: true - destination: 2.1.1.2 - protocol: "0x0001" - - strip: false - - strip: true - destination: 1.1.1.3 - source: 1.1.1.4 - - strip: true - protocol: "0x0002" - feature_header_length: 3 - - strip: true - protocol: "0x0003" - feature_header_length: 2 - re_encapsulation_ethernet_header: true - tool: - mpls_pop_all: true - encapsulation: - dot1br_strip: true - vn_tag_strip: true - allowed_vlan: 23 - identity: - tag: qinq - qinq_dzgre_source: port inner policy - truncation: - enabled: true - size: 160 + enabled: false + port_security: + enabled: true + mac_address_maximum: + disabled: true + trunk: + allowed_vlan: 10-11 + native_vlan: 5 + native_vlan_tag: true groups: - - group1 - - group2 - - group3 - dot1q_remove_outer_vlan_tag: 1-2 - dzgre_preserve: true + - g1 + - g2 + private_vlan_secondary: true + access_vlan: 200 + phone: + vlan: 110 + trunk: tagged + mode: dot1q-tunnel + pvlan_mapping: 20-30 + dot1q: + ethertype: 1536 + vlan_tag: required + source_interface: tx multicast + vlan_translations: + in_required: true + direction_in: + - from: 34 + to: 23 + - from: 37 + to: 49 + inner_vlan_from: 56 + - from: 23 + to: 45 + dot1q_tunnel: true + direction_both: + - from: 24 + inner_vlan_from: 78 + network: true + to: 46 + - from: 12 + to: 20 + - from: 43 + to: 30 + dot1q_tunnel: true + - from: 23 + inner_vlan_from: 74 + network: false + to: 42 + direction_out: + - from: 34 + to: 50 + - from: 10 + to: 45 + inner_vlan_to: 34 + - from: 45 + dot1q_tunnel_to: all + - from: 55 + vlan_forwarding_accept_all: true + backup_link: + interface: Port-channel51 + backup: + dest_macaddr: 01:00:00:00:00:00 + mac_move_burst: 20 + mac_move_burst_interval: 30 + initial_mac_move_delay: 10 + preemption_delay: 35 - name: Port-Channel100.101 - type: l3dot1q logging: event: link_status: true description: IFL for TENANT01 mtu: 1500 ip_address: 10.1.1.3/31 - encapsulation_dot1q_vlan: 101 + encapsulation_dot1q: + vlan: 101 switchport: tap: identity: @@ -215,7 +257,6 @@ port_channel_interfaces: dot1q_dzgre_source: policy - name: Port-Channel100.102 - type: l3dot1q logging: event: link_status: false @@ -224,21 +265,28 @@ port_channel_interfaces: mtu: 1500 ip_address: 10.1.2.3/31 vrf: C2 - encapsulation_dot1q_vlan: 102 + encapsulation_dot1q: + vlan: 102 + inner_vlan: 110 bfd: - name: Port-Channel8 description: to Dev02 Port-channel 8 - type: routed + switchport: + enabled: false + port_security: + violation: + mode: protect - name: Port-Channel8.101 description: to Dev02 Port-Channel8.101 - VRF-C1 - type: l3dot1q ip_address: 10.1.2.3/31 - encapsulation_dot1q_vlan: 101 + encapsulation_dot1q: + vlan: 101 - name: Port-Channel9 - type: routed + switchport: + enabled: false ip_address: 10.9.2.3/31 bfd: echo: true @@ -253,24 +301,28 @@ port_channel_interfaces: - name: Port-Channel20 description: Po_in_mode_access_accepting_tagged_LACP_frames - type: switched - mode: access - vlans: 200 + switchport: + enabled: true + mode: access + access_vlan: 200 l2_protocol: encapsulation_dot1q_vlan: 200 - name: Port-Channel12 description: interface_in_mode_access_with_voice - type: switched - native_vlan: 100 - mode: "trunk phone" - phone: - trunk: untagged - vlan: 70 + switchport: + enabled: true + mode: "trunk phone" + trunk: + native_vlan: 100 + phone: + trunk: untagged + vlan: 70 - name: Port-Channel13 - type: switched description: EVPN-Vxlan single-active redundancy + switchport: + enabled: true evpn_ethernet_segment: redundancy: single-active identifier: "0000:0000:0000:0102:0304" @@ -283,7 +335,8 @@ port_channel_interfaces: route_target: "00:00:01:02:03:04" - name: Port-Channel14 - type: switched + switchport: + enabled: true description: EVPN-MPLS multihoming evpn_ethernet_segment: identifier: "0000:0000:0000:0102:0305" @@ -294,7 +347,8 @@ port_channel_interfaces: - name: Port-Channel17 description: PBR Description - type: routed + switchport: + enabled: false ip_address: 192.0.2.3/31 service_policy: pbr: @@ -302,7 +356,8 @@ port_channel_interfaces: - name: Port-Channel99 description: MCAST - type: routed + switchport: + enabled: false ip_address: 192.0.2.10/31 pim: ipv4: @@ -315,68 +370,81 @@ port_channel_interfaces: interval: 15 - name: Port-Channel101 - type: switched description: PVLAN Promiscuous Access - only one secondary - mode: access - vlans: 110 - pvlan_mapping: 111 + switchport: + enabled: true + mode: access + access_vlan: 110 + pvlan_mapping: 111 qos: trust: disabled - name: Port-Channel102 - type: switched description: PVLAN Promiscuous Trunk - vlan translation out - mode: trunk - vlans: 110-112 - vlan_translations: - - direction: out - from: 111-112 - to: 110 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112 + vlan_translations: + out_required: true + direction_out: + - from: 111-112 + to: 110 - name: Port-Channel103 - type: switched description: PVLAN Secondary Trunk - mode: trunk - vlans: 110-112 - trunk_private_vlan_secondary: true + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112 + private_vlan_secondary: true - name: Port-Channel104 - type: switched description: LACP fallback individual - mode: trunk - vlans: 112 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 112 lacp_fallback_timeout: 300 lacp_fallback_mode: individual - name: Port-Channel105 - type: switched + switchport: + enabled: true description: bpdu disabled spanning_tree_bpduguard: disabled spanning_tree_bpdufilter: disabled - name: Port-Channel106 - type: switched + switchport: + enabled: true description: bpdu enabled spanning_tree_bpduguard: enabled spanning_tree_bpdufilter: enabled - name: Port-Channel107 - type: switched + switchport: + enabled: true description: bpdu true spanning_tree_bpduguard: true spanning_tree_bpdufilter: true - name: Port-Channel108 - type: switched + switchport: + enabled: true description: bpdu false spanning_tree_bpduguard: false # No config should be rendered for this case spanning_tree_bpdufilter: false # No config should be rendered for this case - name: Port-Channel109 - type: switched description: Molecule ACLs - mode: access - vlans: 110 + switchport: + enabled: true + mode: access + access_vlan: 110 access_group_in: IPV4_ACL_IN access_group_out: IPV4_ACL_OUT ipv6_access_group_in: IPV6_ACL_IN @@ -386,7 +454,8 @@ port_channel_interfaces: - name: Port-Channel110 description: isis_interface_knobs - type: routed + switchport: + enabled: false isis_enable: ISIS_TEST isis_bfd: true isis_passive: false @@ -399,77 +468,81 @@ port_channel_interfaces: - name: Port-Channel111 description: Flexencap Port-Channel - type: routed + switchport: + enabled: false + - name: Port-Channel111.1 - type: l2dot1q description: TENANT_A pseudowire 1 interface encapsulation_vlan: client: - unmatched: true + encapsulation: unmatched + - name: Port-Channel111.100 - type: l2dot1q description: TENANT_A pseudowire 2 interface encapsulation_vlan: client: - dot1q: - vlan: 100 + encapsulation: dot1q + vlan: 100 network: - client: true + encapsulation: client + - name: Port-Channel111.200 - type: l2dot1q description: TENANT_A pseudowire 3 interface encapsulation_vlan: client: - dot1q: - vlan: 200 + encapsulation: dot1q + vlan: 200 + - name: Port-Channel111.300 - type: l2dot1q description: TENANT_A pseudowire 4 interface encapsulation_vlan: client: - dot1q: - vlan: 300 + encapsulation: dot1q + vlan: 300 network: - dot1q: - vlan: 400 + encapsulation: dot1q + vlan: 400 + - name: Port-Channel111.400 - type: l2dot1q description: TENANT_A pseudowire 3 interface encapsulation_vlan: client: - dot1q: - outer: 400 - inner: 20 + encapsulation: dot1q + outer_vlan: 400 + inner_vlan: 20 network: - dot1q: - outer: 401 - inner: 21 + encapsulation: dot1q + outer_vlan: 401 + inner_vlan: 21 + - name: Port-Channel111.1000 - type: l2dot1q description: L2 Subinterface vlan_id: 1000 encapsulation_vlan: client: - dot1q: - vlan: 100 + encapsulation: dot1q + vlan: 100 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:0303:0202:0101 route_target: 03:03:02:02:01:01 lacp_id: 0303.0202.0101 - name: Port-Channel112 - type: switched description: LACP fallback individual - mode: trunk - vlans: 112 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 112 lacp_fallback_timeout: 5 lacp_fallback_mode: individual - name: Port-Channel113 description: interface_with_mpls_enabled - type: routed + switchport: + enabled: false ip_address: 172.31.128.9/31 mpls: ip: true @@ -479,7 +552,8 @@ port_channel_interfaces: - name: Port-Channel114 description: interface_with_mpls_disabled - type: routed + switchport: + enabled: false ip_address: 172.31.128.10/31 mpls: ip: false @@ -487,15 +561,18 @@ port_channel_interfaces: interface: false - name: Port-Channel115 - type: switched description: native-vlan-tag-precedence - native_vlan_tag: true - native_vlan: 100 - mode: trunk + switchport: + enabled: true + trunk: + native_vlan_tag: true + native_vlan: 100 + mode: trunk - name: Port-Channel117 description: interface_with_sflow_ingress_egress_enabled - type: routed + switchport: + enabled: false sflow: enable: true egress: @@ -503,7 +580,8 @@ port_channel_interfaces: - name: Port-Channel118 description: interface_with_sflow_ingress_egress_unmodified_enabled - type: routed + switchport: + enabled: false sflow: enable: true egress: @@ -511,7 +589,8 @@ port_channel_interfaces: - name: Port-Channel119 description: interface_with_sflow_ingress_egress_disabled - type: routed + switchport: + enabled: false sflow: enable: false egress: @@ -519,7 +598,8 @@ port_channel_interfaces: - name: Port-Channel120 description: interface_with_sflow_ingress_egress_unmodified_disabled - type: routed + switchport: + enabled: false sflow: enable: false egress: @@ -527,17 +607,20 @@ port_channel_interfaces: - name: Port-Channel121 description: access_port_with_no_vlans - type: switched - mode: access + switchport: + enabled: true + mode: access - name: Port-Channel122 description: trunk_port_with_no_vlans - type: switched - mode: trunk + switchport: + enabled: true + mode: trunk - name: Port-Channel130 - type: switched description: IP NAT Testing + switchport: + enabled: true ip_nat: destination: dynamic: @@ -557,14 +640,191 @@ port_channel_interfaces: - name: Port-Channel131 description: dot1q-tunnel mode - type: switched - mode: dot1q-tunnel - vlans: 115 + switchport: + enabled: true + mode: dot1q-tunnel + access_vlan: 115 + + - name: Port-Channel131.1 + description: Test_encapsulation_vlan1 + encapsulation_vlan: + client: + outer_vlan: 23 + inner_vlan: 45 + encapsulation: dot1q + inner_encapsulation: dot1q + network: + encapsulation: dot1ad + outer_vlan: 32 + inner_vlan: 54 + inner_encapsulation: dot1ad + + - name: Port-Channel131.2 + description: Test_encapsulation_vlan2 + encapsulation_vlan: + client: + encapsulation: dot1q + vlan: 10 + network: + encapsulation: dot1q + outer_vlan: 32 + inner_vlan: 54 + + - name: Port-Channel131.3 + description: Test_encapsulation_vlan3 + encapsulation_vlan: + client: + encapsulation: dot1ad + vlan: 12 + network: + encapsulation: dot1q + vlan: 25 + + - name: Port-Channel131.4 + description: Test_encapsulation_vlan4 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + inner_encapsulation: dot1q + network: + encapsulation: dot1q + outer_vlan: 53 + inner_vlan: 6 + inner_encapsulation: dot1ad + + - name: Port-Channel131.5 + description: Test_encapsulation_vlan5 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + network: + encapsulation: dot1ad + outer_vlan: 52 + inner_vlan: 62 + + - name: Port-Channel131.6 + description: Test_encapsulation_vlan6 + encapsulation_vlan: + client: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + network: + encapsulation: client + + - name: Port-Channel131.7 + description: Test_encapsulation_vlan7 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: dot1ad + outer_vlan: 35 + inner_vlan: 60 + + - name: Port-Channel131.8 + description: Test_encapsulation_vlan8 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: dot1q + outer_vlan: 35 + inner_vlan: 60 + + - name: Port-Channel131.9 + description: Test_encapsulation_vlan9 + encapsulation_vlan: + client: + encapsulation: untagged + network: + encapsulation: untagged + + - name: Port-Channel131.10 + description: Test_encapsulation_vlan9 + encapsulation_vlan: + client: + encapsulation: dot1q + outer_vlan: 14 + inner_vlan: 11 + network: + encapsulation: client inner + + - name: Port-Channel132 + description: Test_switchport_tap_tool + switchport: + tap: + allowed_vlan: 25 + default: + groups: + - g2 + - g1 + - g3 + nexthop_groups: + - nexthop_g1 + - nexthop_g3 + - nexthop_g2 + interfaces: + - port-channel10 + - ethernet4 + identity: + port_id: 3 + mpls_pop_all: true + native_vlan: 10 + truncation: + enabled: true + mac_address: + dest: 01:00:00:00:00:00 + src: 01:23:45:67:89:ab + encapsulation: + gre: + - strip: true + - strip: true + destination: 1.1.1.1 + source: 1.1.1.2 + protocol: "0x0000" + - strip: true + protocol: "0x0010" + - strip: true + destination: 2.1.1.2 + protocol: "0x0001" + - strip: false + - strip: true + destination: 1.1.1.3 + source: 1.1.1.4 + - strip: true + protocol: "0x0002" + feature_header_length: 3 + - strip: true + protocol: "0x0003" + feature_header_length: 2 + re_encapsulation_ethernet_header: true + tool: + mpls_pop_all: true + encapsulation: + dot1br_strip: true + vn_tag_strip: true + allowed_vlan: 23 + identity: + tag: qinq + qinq_dzgre_source: port inner policy + truncation: + enabled: true + size: 160 + groups: + - group1 + - group2 + - group3 + dot1q_remove_outer_vlan_tag: 1-2 + dzgre_preserve: true # Children interfaces ethernet_interfaces: - name: Ethernet5 - type: port-channel-member peer: DC1-AGG01 peer_interface: Ethernet1 peer_type: l2leaf @@ -577,7 +837,6 @@ ethernet_interfaces: override: 100gbase-ar4 - name: Ethernet3 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer @@ -587,7 +846,6 @@ ethernet_interfaces: mode: active - name: Ethernet4 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer @@ -597,7 +855,6 @@ ethernet_interfaces: mode: active - name: Ethernet50 - type: port-channel-member peer: SRV-POD03 peer_interface: Eth1 peer_type: server @@ -610,7 +867,6 @@ ethernet_interfaces: transmit: false - name: Ethernet8 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet4 description: MLAG_PEER_DC1-LEAF1B_Ethernet8 @@ -619,7 +875,6 @@ ethernet_interfaces: mode: active - name: Ethernet15 - type: port-channel-member peer: DC1-AGG03 peer_interface: Ethernet1 peer_type: l2leaf @@ -632,7 +887,6 @@ ethernet_interfaces: multiplier: 30 - name: Ethernet16 - type: port-channel-member peer: DC1-AGG04 peer_interface: Ethernet1 peer_type: l2leaf @@ -644,59 +898,54 @@ ethernet_interfaces: mode: normal - name: Ethernet17 - type: port-channel-member description: LAG Member channel_group: id: 17 mode: active - name: Ethernet10/1 - type: port-channel-member description: LAG Member channel_group: id: 101 mode: active - name: Ethernet10/2 - type: port-channel-member description: LAG Member channel_group: id: 102 mode: active - name: Ethernet10/3 - type: port-channel-member description: LAG Member channel_group: id: 103 mode: active - name: Ethernet10/4 - type: switched description: LAG Member LACP fallback channel_group: id: 104 mode: active - mode: trunk - vlans: 100 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100 spanning_tree_portfast: edge - name: Ethernet18 - type: port-channel-member description: LAG Member channel_group: id: 109 mode: active - name: Ethernet10/10 - type: port-channel-member description: isis_port_channel_member channel_group: id: 110 mode: active - name: Ethernet11/1 - type: port-channel-member description: LAG Member with error_correction error_correction_encoding: fire_code: true @@ -706,13 +955,15 @@ ethernet_interfaces: mode: active - name: Ethernet11/2 - type: switched description: LAG Member LACP fallback LLDP ZTP VLAN channel_group: id: 112 mode: active - mode: trunk - vlans: 112 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 112 spanning_tree_portfast: edge lldp: ztp_vlan: 112 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ptp.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ptp.yml index 274c48bce9b..2df8864d931 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ptp.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ptp.yml @@ -40,10 +40,12 @@ ptp: # port-channels port_channel_interfaces: - name: Port-Channel5 - type: switched description: DC1_L2LEAF1_Po1 - vlans: 110,201 - mode: trunk + switchport: + enabled: true + trunk: + allowed_vlan: 110,201 + mode: trunk mlag: 5 ptp: enable: true @@ -65,9 +67,11 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: spine description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 - type: switched - mode: trunk - vlans: 2,14 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 2,14 ptp: enable: true delay_mechanism: e2e @@ -82,7 +86,8 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 ptp: enable: true @@ -100,7 +105,6 @@ ethernet_interfaces: destination_mac_address: non-forwardable # port-channel interfaces - name: Ethernet5 - type: port-channel-member peer: DC1-AGG01 peer_interface: Ethernet1 peer_type: l2leaf diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/qos.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/qos.yml index 4cf0c2fdb1b..8a9e9fcef35 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/qos.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/qos.yml @@ -289,7 +289,8 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 service_profile: test service_policy: @@ -300,13 +301,15 @@ ethernet_interfaces: dscp: 48 - name: Ethernet6 - type: switched peer: SRV-POD02 peer_interface: Eth1 peer_type: server description: SRV-POD02_Eth1 - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 service_profile: experiment qos: trust: cos @@ -318,7 +321,6 @@ ethernet_interfaces: count: true - name: Ethernet3 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer @@ -328,7 +330,6 @@ ethernet_interfaces: mode: active - name: Ethernet4 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer @@ -338,13 +339,15 @@ ethernet_interfaces: mode: active - name: Ethernet7 - type: switched peer: SRV-POD03 peer_interface: Eth1 peer_type: server description: Test-with-policymap - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 service_profile: qprof_testwithpolicy uc_tx_queues: - id: 4 @@ -355,13 +358,15 @@ ethernet_interfaces: ### Port-Channel Interfaces ### port_channel_interfaces: - name: Port-Channel3 - type: switched description: MLAG_PEER_DC1-LEAF1B_Po3 - vlans: "2-4094" - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG + switchport: + enabled: true + trunk: + allowed_vlan: "2-4094" + groups: + - LEAF_PEER_L3 + - MLAG + mode: trunk service_profile: experiment service_policy: qos: diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology-2.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology-2.yml new file mode 100644 index 00000000000..2991872e79f --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology-2.yml @@ -0,0 +1,5 @@ +--- +# Testing gateway VXLAN feature +router_adaptive_virtual_topology: + topology_role: edge + gateway_vxlan: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology.yml index f3c0d80884f..e8cb4bd3204 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-adaptive-virtual-topology.yml @@ -1,5 +1,6 @@ router_adaptive_virtual_topology: - topology_role: transit region + topology_role: pathfinder + gateway_vxlan: true region: name: North_America id: 1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-evpn.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-evpn.yml index b084a4fdb90..5def441a464 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-evpn.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-evpn.yml @@ -76,6 +76,7 @@ router_bgp: next_hop_self_received_evpn_routes: enable: true inter_domain: true + encapsulation: path-selection domain_identifier: "65101:0" neighbors: - ip_address: 10.100.100.1 @@ -92,6 +93,12 @@ router_bgp: default_route: enabled: true rcf: RCF_DEFAULT_ROUTE() + - ip_address: 10.100.100.4 + activate: true + encapsulation: path-selection + - ip_address: 10.100.100.5 + activate: true + encapsulation: mpls peer_groups: - name: EVPN-OVERLAY-PEERS activate: true @@ -133,6 +140,12 @@ router_bgp: additional_paths: send: any: false + - name: TEST-ENCAPSULATION + activate: true + encapsulation: mpls + - name: TEST-ENCAPSULATION-2 + activate: true + encapsulation: path-selection evpn_hostflap_detection: enabled: true window: 10 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-ipv4-labeled-unicast.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-ipv4-labeled-unicast.yml new file mode 100644 index 00000000000..912999844e5 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-bgp-ipv4-labeled-unicast.yml @@ -0,0 +1,50 @@ +router_bgp: + as: 65101 + address_family_ipv4_labeled_unicast: + update_wait_for_convergence: true + aigp_session: + ebgp: true + confederation: true + bgp: + additional_paths: + receive: true + send: ecmp + send_ecmp_limit: 20 + missing_policy: + direction_in: + action: deny + include_community_list: true + next_hop_unchanged: true + next_hop_resolution_ribs: + - rib_type: "tunnel-rib-colored" + - rib_type: "tunnel-rib" + rib_name: "test-rib" + - rib_type: "system-connected" + label_local_termination: implicit-null + networks: + - prefix: 203.0.113.0/25 + route_map: RM-TEST + - prefix: 203.0.113.128/25 + tunnel_source_protocols: + - protocol: isis segment-routing + - protocol: ldp + rcf: TEST(ARGS) + neighbors: + - ip_address: 198.51.100.1 + activate: true + additional_paths: + receive: true + send: ecmp + graceful_restart: true + maximum_advertised_routes: 0 + rcf_in: RCF_TEST(ARGS) + - ip_address: 198.51.100.2 + aigp_session: true + multi_path: true + graceful_restart_helper: + stale_route_map: RM_STALE + next_hop_unchanged: true + route_map_out: RM_OUT_TEST + peer_groups: + - name: PG-BGP-LU + activate: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis-new.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis-new.yml index 8fbec56fbc4..5ab2e962757 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis-new.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis-new.yml @@ -40,6 +40,7 @@ router_isis: ospf_route_type: external - source_protocol: ospfv3 address_family_ipv4: + enabled: true maximum_paths: 4 bfd_all_interfaces: true fast_reroute_ti_lfa: @@ -52,6 +53,7 @@ router_isis: enabled: True rcf: lu_2_sr_pfx() address_family_ipv6: + enabled: true fast_reroute_ti_lfa: mode: node-protection level: level-1 @@ -136,7 +138,8 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_EAPI-SPINE1_Ethernet1 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 @@ -147,13 +150,13 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_EAPI-SPINE2_Ethernet1 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 isis_network_point_to_point: true - name: Ethernet3 - type: port-channel-member peer: EAPI-LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer @@ -179,7 +182,7 @@ loopback_interfaces: ### Management Interfaces ### management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT vrf: MGMT ip_address: 10.73.254.11/24 gateway: 10.73.254.253 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis.yml index 82832dde5f1..0bab20e51f7 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-isis.yml @@ -20,6 +20,7 @@ router_isis: - source_protocol: bgp route_map: RM-BGP address_family_ipv4: + enabled: true tunnel_source_labeled_unicast: enabled: True fast_reroute_ti_lfa: @@ -29,6 +30,7 @@ router_isis: enable: true strict: false address_family_ipv6: + enabled: true bfd_all_interfaces: true fast_reroute_ti_lfa: level: level-2 @@ -79,7 +81,8 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_EAPI-SPINE1_Ethernet1 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 @@ -90,14 +93,14 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_EAPI-SPINE2_Ethernet1 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 isis_network_point_to_point: true isis_circuit_type: level-1-2 - name: Ethernet3 - type: port-channel-member peer: EAPI-LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer @@ -106,21 +109,18 @@ ethernet_interfaces: id: 3 mode: active - name: Ethernet4 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet4 channel_group: id: 4 mode: active - name: Ethernet5 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet5 channel_group: id: 5 mode: active - name: Ethernet6 - type: port-channel-member peer: DC1-LEAF1B peer_interface: Ethernet6 channel_group: @@ -154,7 +154,7 @@ loopback_interfaces: ### Management Interfaces ### management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT vrf: MGMT ip_address: 10.73.254.11/24 gateway: 10.73.254.253 @@ -184,20 +184,23 @@ vlan_interfaces: ### Port-Channel Interfaces ### port_channel_interfaces: - name: Port-Channel4 - type: routed + switchport: + enabled: false ip_address: 10.9.2.3/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 isis_network_point_to_point: true isis_circuit_type: level-2 - name: Port-Channel5 - type: routed + switchport: + enabled: false ip_address: 10.9.2.5/31 isis_enable: EVPN_UNDERLAY isis_metric: 50 isis_passive: true - name: Port-Channel6 - type: routed + switchport: + enabled: false ip_address: 10.9.2.7/31 isis_enable: EVPN_UNDERLAY isis_metric: 100 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-ospf.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-ospf.yml index 901c7ceb766..2f149bc63a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-ospf.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-ospf.yml @@ -19,8 +19,11 @@ router_ospf: default_information_originate: redistribute: static: + enabled: true connected: + enabled: true bgp: + enabled: true auto_cost_reference_bandwidth: 100 maximum_paths: 10 mpls_ldp_sync_default: true @@ -73,12 +76,15 @@ router_ospf: metric: 100 redistribute: static: + enabled: true route_map: rm-ospf-static include_leaked: true connected: + enabled: true route_map: rm-ospf-connected include_leaked: true bgp: + enabled: true route_map: rm-ospf-bgp include_leaked: true areas: @@ -99,10 +105,13 @@ router_ospf: router_lsa: redistribute: static: + enabled: true route_map: rm-ospf-static connected: + enabled: true route_map: rm-ospf-connected bgp: + enabled: true route_map: rm-ospf-bgp - id: 400 max_metric: @@ -113,10 +122,13 @@ router_ospf: summary_lsa: redistribute: static: + enabled: true include_leaked: true connected: + enabled: true include_leaked: true bgp: + enabled: true include_leaked: true - id: 500 max_metric: @@ -126,6 +138,13 @@ router_ospf: on_startup: 222 summary_lsa: override_metric: 456 + redistribute: + static: + enabled: false + connected: + enabled: false + bgp: + enabled: false - id: 600 areas: - id: 0.0.0.1 @@ -162,7 +181,8 @@ router_ospf: ethernet_interfaces: - name: Ethernet1 - type: routed + switchport: + enabled: false ospf_network_point_to_point: true ospf_area: 0.0.0.1 ospf_cost: 99 @@ -176,7 +196,8 @@ loopback_interfaces: ospf_area: 0.0.0.2 port_channel_interfaces: - name: Port-Channel12 - type: routed + switchport: + enabled: false ospf_network_point_to_point: true ospf_area: 0.0.0.12 ospf_cost: 99 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-path-selection.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-path-selection.yml index ead4f0c5950..01debbe09ad 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-path-selection.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-path-selection.yml @@ -28,6 +28,14 @@ router_path_selection: - name: Ethernet1/1/3 - name: Ethernet4.666 - name: Ethernet2/4.666 + - name: Port-Channel1 + public_address: 192.168.42.43 + stun: + # Test multiple stun profiles + server_profiles: + - STUN-P-1 + - STUN-P-2 + - name: Port-Channel4.666 local_ips: # Out of order to test sorting - ip_address: 192.168.100.1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-pim-sparse-mode.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-pim-sparse-mode.yml index a03404dccc6..39d50c8dd17 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-pim-sparse-mode.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/router-pim-sparse-mode.yml @@ -16,6 +16,11 @@ router_pim_sparse_mode: - RP_ACL - RP_ACL2 priority: 20 + - address: 10.238.1.161 + groups: + - 239.12.12.17/32 + access_lists: + - RP_ACL3 anycast_rps: - address: 10.38.1.161 other_anycast_rp_addresses: diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/snmp.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/snmp.yml index 0b10d88ae74..4daca5cd790 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/snmp.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/snmp.yml @@ -3,8 +3,9 @@ snmp_server: engine_ids: local: 424242424242424242 remotes: + # TODO: make address as primary key # First one without IP should not be rendered - - id: 1234567890ABCDEF12 + # - id: 1234567890ABCDEF12 - id: 6172697374615F6970 address: 1.1.1.1 - id: DEADBEEFCAFE123456 @@ -147,3 +148,4 @@ snmp_server: enable: false - name: MGMT enable: true + ifmib_ifspeed_shape_rate: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/sync-e.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/sync-e.yml index c7672fe18bc..f55d3fe5e33 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/sync-e.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/sync-e.yml @@ -10,9 +10,11 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: spine description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 - type: switched - mode: trunk - vlans: 2,14 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 2,14 sync_e: enable: true priority: 10 @@ -22,14 +24,14 @@ ethernet_interfaces: peer_type: spine description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 sync_e: enable: true priority: disabled # port-channel interfaces - name: Ethernet5 - type: port-channel-member peer: DC1-AGG01 peer_interface: Ethernet1 peer_type: l2leaf diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/system.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/system.yml index f4dece89093..4158907f7cd 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/system.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/system.yml @@ -7,12 +7,16 @@ system: - acl_name: "acl4_1" - acl_name: "acl4_2" vrf: red + - acl_name: "acl4_2" + vrf: red_1 - acl_name: "acl4_3" vrf: default ipv6_access_groups: - acl_name: "acl6_1" - acl_name: "acl6_2" vrf: blue + - acl_name: "acl6_2" + vrf: blue_1 - acl_name: "acl6_3" vrf: default l1: diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-2.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-2.yml new file mode 100644 index 00000000000..e5953a92c37 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-2.yml @@ -0,0 +1,11 @@ +### Traffic Policies to cover IPv6 field and none policy case +traffic_policies: + field_sets: + ipv6: + - name: IPv6-DEMO-1 + prefixes: + - 11:22:33:44:55:66:77:88 + - name: IPv6-DEMO-2 +port_channel_interfaces: + - name: Port-Channel2 + type: routed diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-3.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-3.yml new file mode 100644 index 00000000000..74ae91772bc --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies-3.yml @@ -0,0 +1,7 @@ +### Traffic policies for without field_sets option case +traffic_policies: + options: + counter_per_interface: false +ethernet_interfaces: + - name: Ethernet1 + type: routed diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies.yml index 971c70fff7e..4fa1eea253c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/traffic-policies.yml @@ -6,17 +6,22 @@ traffic_policies: ports: - name: SERVICE-DEMO port_range: "10,20,80,440-450" + - name: SERVICE-DEMO2 ipv4: - - name: DEMO-01 - prefixes: - - 10.0.0.0/8 - - 192.168.0.0/16 - name: DEMO-02 prefixes: - 172.16.0.0/12 - 224.0.0.0/8 + - name: DEMO-01 + prefixes: + - 10.0.0.0/8 + - 192.168.0.0/16 + - name: DEMO-03 policies: - name: BLUE-C1-POLICY + default_actions: + ipv4: + drop: true matches: - name: BLUE-C1-POLICY-01 type: ipv4 @@ -30,6 +35,10 @@ traffic_policies: protocols: - protocol: tcp src_port: "1,10-20" + - protocol: udp + src_field: SERVICE-DEMO + flags: + - established ttl: "10, 20-30" actions: traffic_class: 5 @@ -75,6 +84,7 @@ traffic_policies: protocols: - protocol: tcp src_port: "22" + dst_port: "80" flags: - established - protocol: icmp @@ -89,10 +99,49 @@ traffic_policies: prefix_lists: - DEMO-01 protocols: - - protocol: tcp + - protocol: bgp fragment: actions: traffic_class: 5 + - name: BLUE-C1-POLICY-06 + type: ipv4 + protocols: + - protocol: neighbors + - protocol: udp + dst_port: "1,10-20" + src_port: "22" + - protocol: tcp + src_port: "22" + flags: + - established + icmp_type: + - echo + - echo-reply + - protocol: icmp + actions: + log: false + - name: BLUE-C1-POLICY-07 + type: ipv4 + destination: + prefixes: + - 10.0.0.0/8 + - 192.168.0.0/16 + - name: BLUE-C1-POLICY-08 + type: ipv4 + destination: + prefixes: + - 10.0.0.0/8 + - 192.168.0.0/16 + prefix_lists: + - DEMO-01 + protocols: + - protocol: udp + dst_port: "1,10-20" + flags: + - established + - protocol: tcp + dst_field: SERVICE-DEMO-DST + src_field: SERVICE-DEMO-SRC - name: BLUE-C2-POLICY default_actions: ipv4: @@ -133,18 +182,46 @@ traffic_policies: - protocol: tcp actions: drop: true - log: true - + - name: BLUE-C3-POLICY + default_actions: + ipv4: + count: test + traffic_class: 10 + dscp: 11 + - name: BLUE-C4-POLICY + default_actions: + ipv6: + count: test + traffic_class: 10 + dscp: 11 + - name: BLUE-C6-POLICY + default_actions: + ipv6: + drop: true + - name: BLUE-C5-POLICY + default_actions: + ipv6: + drop: true + log: true + - name: BLUE-C7-POLICY + matches: + - name: BLUE-C7-POLICY-01 + type: ipv4 + protocols: + - protocol: neighbors + enforce_gtsm: true ethernet_interfaces: - name: Ethernet1 - type: routed + switchport: + enabled: false traffic_policy: input: BLUE-C1-POLICY output: BLUE-C2-POLICY port_channel_interfaces: - name: Port-Channel2 - type: routed + switchport: + enabled: false traffic_policy: input: BLUE-C1-POLICY output: BLUE-C2-POLICY diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml index ce6784b94bf..4bf70adf432 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml @@ -21,6 +21,23 @@ vlan_interfaces: isis_enable: "EVPN_UNDERLAY" isis_bfd: true ip_verify_unicast_source_reachable_via: rx + # Test isis authentication both md5 rx + isis_authentication: + both: + key_type: 0 + key: password + mode: md5 + rx_disabled: true + level_1: + key_type: 0 + key: password + mode: md5 + rx_disabled: true + level_2: + key_type: 0 + key: password + mode: text + rx_disabled: true - name: Vlan81 description: IPv6 Virtual Address @@ -39,6 +56,13 @@ vlan_interfaces: ip_address_virtual_secondaries: - 10.11.83.1/24 - 10.11.84.1/24 + # Test isis auth both md5 + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + both: + key_type: 0 + key: password + mode: md5 - name: Vlan84 description: SVI Description @@ -48,6 +72,16 @@ vlan_interfaces: - 10.11.84.254/24 arp_gratuitous_accept: true arp_monitor_mac_address: true + isis_enable: "EVPN_UNDERLAY" + # Test isis auth both sha rx + isis_authentication: + both: + key_type: 0 + key: password + mode: sha + sha: + key_id: 2 + rx_disabled: true - name: Vlan85 description: SVI Description @@ -58,6 +92,15 @@ vlan_interfaces: interval: 500 min_rx: 500 multiplier: 5 + # Test isis auth both sha + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + both: + key_type: 0 + key: password + mode: sha + sha: + key_id: 2 - name: Vlan86 description: SVI Description @@ -65,6 +108,15 @@ vlan_interfaces: ip_attached_host_route_export: enabled: true distance: 10 + # Test isis auth both shared secret rx + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + both: + mode: shared-secret + shared_secret: + profile: profile1 + algorithm: sha-1 + rx_disabled: true - name: Vlan87 description: SVI Description @@ -72,11 +124,32 @@ vlan_interfaces: ip_address: 10.10.87.1/24 access_group_in: ACL_IN access_group_out: ACL_OUT + # Test isis auth both shared secret + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + both: + mode: shared-secret + shared_secret: + profile: profile1 + algorithm: sha-1 - name: Vlan88 description: SVI Description shutdown: true ip_address_virtual: 10.10.87.1/23 + # Test isis auth both l1l2 md5 text rx + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + key_type: 0 + key: password + mode: md5 + rx_disabled: true + level_2: + key_type: 0 + key: password + mode: text + rx_disabled: true - name: Vlan91 description: PBR Description @@ -84,18 +157,57 @@ vlan_interfaces: service_policy: pbr: input: MyServicePolicy + # Test isis auth l1l2 md5 text + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + key_type: 0 + key: password + mode: md5 + level_2: + key_type: 0 + key: password + mode: text - name: Vlan90 description: SVI Description ip_address: 10.10.83.1/24 ip_attached_host_route_export: enabled: true + # Test isis auth l1l2 shared secret + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + mode: shared-secret + shared_secret: + profile: profile2 + algorithm: sha-1 + level_2: + mode: shared-secret + shared_secret: + profile: profile1 + algorithm: sha-256 - name: Vlan92 description: SVI Description ip_address: 10.10.92.1/24 ip_proxy_arp: true ip_directed_broadcast: true + # Test isis auth l1l2 shared secret rx + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + mode: shared-secret + shared_secret: + profile: profile2 + algorithm: sha-1 + rx_disabled: true + level_2: + mode: shared-secret + shared_secret: + profile: profile1 + algorithm: sha-256 + rx_disabled: true # MCAST Configuration @@ -113,6 +225,19 @@ vlan_interfaces: hello: count: 3.5 interval: 10 + # Test isis auth l1l2 sha rx + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + mode: sha + sha: + key_id: 5 + rx_disabled: true + level_2: + mode: sha + sha: + key_id: 10 + rx_disabled: true # Helpers on SVI @@ -161,6 +286,13 @@ vlan_interfaces: source_interface: Loopback0 - ip_helper: 10.10.64.150 source_interface: Loopback0 + # Test isis auth l1l2 sha + isis_enable: "EVPN_UNDERLAY" + isis_authentication: + level_1: + mode: sha + sha: + key_id: 5 - name: Vlan43 description: SVI Description @@ -171,6 +303,55 @@ vlan_interfaces: vrf: TEST local_interface: Loopback44 link_address: a0::4 + isis_authentication: + both: + key_ids: + - id: 2 + algorithm: sha-512 + key_type: 0 + key: password + rfc_5310: false + - id: 3 + algorithm: sha-512 + key_type: 0 + key: password1 + rfc_5310: true + level_1: + key_ids: + - id: 1 + algorithm: sha-1 + key_type: 0 + key: password + rfc_5310: false + - id: 4 + algorithm: sha-1 + key_type: 0 + key: password + rfc_5310: true + - id: 3 + algorithm: sha-1 + key_type: 0 + key: password3 + - id: 5 + algorithm: sha-1 + key_type: 0 + key: password3 + level_2: + key_ids: + - id: 1 + algorithm: sha-1 + key_type: 0 + key: password + rfc_5310: false + - id: 5 + algorithm: sha-1 + key_type: 0 + key: password + rfc_5310: true + - id: 3 + algorithm: sha-1 + key_type: 0 + key: password2 - name: Vlan44 description: SVI Description @@ -201,6 +382,12 @@ vlan_interfaces: static: - original_ip: 3.0.0.1 translated_ip: 4.0.0.1 + isis_authentication: + level_2: + key_type: 0 + key: password + mode: text + rx_disabled: true # IPv6 SVI configuration diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.ini b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.ini index 5f0ff7d8cbf..0f5b2366e7a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.ini +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.ini @@ -28,13 +28,14 @@ dhcp-servers dot1x dot1x-2 enable-password +eos_cli_config_gen_configuration.enable +eos_cli_config_gen_documentation.enable errdisable ethernet-interfaces event-handlers event-monitor flow-tracking flow-tracking-2 -generate_device_documentation generate-default-config groups hardware-counter @@ -96,7 +97,9 @@ match-lists mlag-configuration monitor-layer1 monitor-connectivity +monitor-connectivity-2 monitor-sessions +monitor-session-default-encapsulation-gre monitor-telemetry-influx monitor-telemetry-postcard-policy mpls @@ -126,12 +129,14 @@ redundancy roles route-maps router-adaptive-virtual-topology +router-adaptive-virtual-topology-2 router-bfd-1 router-bfd-2 router-bgp-base router-bgp-evpn router-bgp-evpn-vpn-import-pruning router-bgp-evpn-mpls +router-bgp-ipv4-labeled-unicast router-bgp-link-state router-bgp-path-selection router-bgp-rtc @@ -188,6 +193,8 @@ terminattr-prem terminattr-prem-no-ingestkey terminattr-prem-disableaaa traffic-policies +traffic-policies-2 +traffic-policies-3 transceiver_qsfp_default_mode_4x10_false tunnel-interfaces unsupported-transceiver diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/converge.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/converge.yml index 10b8eca6101..7cf935c5b7b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/converge.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/converge.yml @@ -9,6 +9,3 @@ delegate_to: 127.0.0.1 ansible.builtin.import_role: name: arista.avd.eos_cli_config_gen - # TODO: AVD 5.0.0 - # Adding a test for #4232 - tags: [test] diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/create.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/create.yml index 92e9a2d2593..4f7582d5a49 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/create.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/create.yml @@ -9,5 +9,3 @@ ansible.builtin.import_role: name: arista.avd.build_output_folders run_once: true - # TODO: AVD 5.0.0 - tags: [test] diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/destroy.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/destroy.yml index 6e3ee143c0a..ef414eee898 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/destroy.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/destroy.yml @@ -15,5 +15,3 @@ - intended/structured_configs - config_backup - reports - # TODO: AVD 5.0.0 - tags: [test] diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host1.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host1.md deleted file mode 100644 index 29d4da0f37d..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host1.md +++ /dev/null @@ -1,4 +0,0 @@ -# host1 - -## Table of Contents - diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host2.md new file mode 100644 index 00000000000..0eea64af2ee --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/documentation/devices/host2.md @@ -0,0 +1,29 @@ +# host2 + +## Table of Contents + +- [Interfaces](#interfaces) + - [VXLAN Interface](#vxlan-interface) + +## Interfaces + +### VXLAN Interface + +#### VXLAN Interface Summary + +| Setting | Value | +| ------- | ----- | +| UDP port | 4789 | +| Qos dscp propagation encapsulation | Disabled | +| Qos ECN propagation | Disabled | +| Qos map dscp to traffic-class decapsulation | Disabled | + +#### VXLAN Interface Device Configuration + +```eos +! +interface Vxlan1 + no vxlan qos ecn propagation + no vxlan qos dscp propagation encapsulation + no vxlan qos map dscp to traffic-class decapsulation +``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host1.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host1.cfg index 43aa506cc32..4a55f4af29b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host1.cfg @@ -1,10 +1,123 @@ -!RANCID-CONTENT-TYPE: arista ! -transceiver qsfp default-mode 4x10G +interface Port-Channel2 + description Test_mode_and_vlans + switchport + switchport access vlan 100 ! -hostname host1 +interface Port-Channel3 + description Test_trunk_groups_and_native_vlan + switchport + switchport trunk allowed vlan 110 + switchport trunk native vlan 10 + switchport mode trunk + switchport trunk group group1 + switchport trunk group group2 ! -no enable password -no aaa root +interface Port-Channel4 + description Test_native_vlan_tag_and_phone + switchport + switchport trunk native vlan tag + switchport phone vlan 20 + switchport phone trunk tagged + switchport mode trunk phone ! -end +interface Port-Channel5 + description Test_vlan_translations + switchport + switchport trunk private-vlan secondary + switchport pvlan mapping 2,3,4 + switchport vlan translation in 23 50 + switchport vlan translation out 25 49 + switchport vlan translation 34 60 +! +interface Port-Channel6 + description Test_encapsulation_dot1q_vlan + encapsulation dot1q vlan 20 +! +interface Port-Channel7 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q 10 network dot1q 20 +! +interface Port-Channel8 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q outer 10 inner 12 +! +interface Port-Channel9 + description Test_encapsulation_vlan3 + encapsulation vlan + client unmatched +! +interface Port-Channel10 + description Test_encapsulation_vlan4 + vlan id 100 + encapsulation vlan + client dot1q outer 10 inner 12 network dot1q outer 20 inner 22 +! +interface Ethernet1 + description Test_mode_and_vlans + switchport access vlan 100 + switchport mode access + switchport +! +interface Ethernet2 + description Test_trunk_groups_and_native_vlan + switchport trunk native vlan 10 + switchport trunk allowed vlan 110 + switchport mode trunk + switchport trunk group group1 + switchport trunk group group2 + switchport +! +interface Ethernet3 + description Test_native_vlan_tag_and_phone + switchport trunk native vlan tag + switchport phone vlan 20 + switchport phone trunk tagged + switchport mode trunk phone + switchport +! +interface Ethernet4 + description Test_vlan_translations + switchport vlan translation in 23 50 + switchport vlan translation out 25 49 + switchport vlan translation 34 60 + switchport + switchport trunk private-vlan secondary + switchport pvlan mapping 2,3,4 +! +interface Ethernet5 + description Test_encapsulation_dot1q_vlan + encapsulation dot1q vlan 20 +! +interface Ethernet6 + description Test_encapsulation_vlan1 + encapsulation vlan + client dot1q 10 network dot1q 20 +! +interface Ethernet7 + description Test_encapsulation_vlan2 + encapsulation vlan + client dot1q outer 10 inner 12 +! +interface Ethernet8 + description Test_encapsulation_vlan3 + encapsulation vlan + client unmatched +! +interface Ethernet9 + description Test_encapsulation_vlan4 + vlan id 100 + encapsulation vlan + client dot1q outer 10 inner 12 network dot1q outer 20 inner 22 +! +interface Ethernet10 + description Test_for_type_routed + no switchport +! +interface Ethernet11 + channel-group 16 mode active +! +ip community-list TEST1 permit 1000:1000 +ip community-list TEST2 permit 2000:3000 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host2.cfg new file mode 100644 index 00000000000..299cdca6a82 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/intended/configs/host2.cfg @@ -0,0 +1,5 @@ +! +interface Vxlan1 + no vxlan qos ecn propagation + no vxlan qos dscp propagation encapsulation + no vxlan qos map dscp to traffic-class decapsulation diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/community-lists.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/community-lists.yml new file mode 100644 index 00000000000..e1919c93c20 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/community-lists.yml @@ -0,0 +1,5 @@ +community_lists: + - name: TEST1 + action: "permit 1000:1000" + - name: TEST2 + action: "permit 2000:3000" diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/ethernet-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/ethernet-interfaces.yml new file mode 100644 index 00000000000..235330cf19d --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/ethernet-interfaces.yml @@ -0,0 +1,114 @@ +--- +### Ethernet Interfaces ### + +# Testing deprecated keys in ethernet_interfaces +# The deprecated keys listed below will be removed in AVD6.0.0: +# - mode, vlans, native_vlan, native_vlan_tag, trunk_groups, phone, vlan_translations, trunk_private_vlan_secondary, pvlan_mapping +# - vlan_id, encapsulation_dot1q_vlan, encapsulation_vlan.client.dot1q, encapsulation_vlan.client.unmatched +# - encapsulation_vlan.network.dot1q, encapsulation_vlan.network.client +# - type +ethernet_interfaces: + - name: Ethernet1 + description: Test_mode_and_vlans + # test for type `switched` + type: switched + mode: access + vlans: 100 + + - name: Ethernet2 + description: Test_trunk_groups_and_native_vlan + type: switched + mode: trunk + vlans: 110 + native_vlan: 10 + trunk_groups: + - group1 + - group2 + + - name: Ethernet3 + description: Test_native_vlan_tag_and_phone + type: switched + native_vlan_tag: true + native_vlan: 20 + mode: trunk phone + phone: + vlan: 20 + trunk: tagged + + - name: Ethernet4 + description: Test_vlan_translations + type: switched + vlan_translations: + - from: 23 + to: 50 + direction: in + - from: 25 + to: 49 + direction: out + - from: 34 + to: 60 + direction: both + # test trunk_private_vlan_secondary and pvlan_mapping + trunk_private_vlan_secondary: true + pvlan_mapping: "2,3,4" + + - name: Ethernet5 + description: Test_encapsulation_dot1q_vlan + type: l3dot1q + encapsulation_dot1q_vlan: 20 + + - name: Ethernet6 + description: Test_encapsulation_vlan1 + type: l3dot1q + encapsulation_vlan: + client: + dot1q: + vlan: 10 + network: + dot1q: + vlan: 20 + + - name: Ethernet7 + description: Test_encapsulation_vlan2 + type: l3dot1q + encapsulation_vlan: + client: + dot1q: + outer: 10 + inner: 12 + network: + client: true + + - name: Ethernet8 + description: Test_encapsulation_vlan3 + # test for type 'l3dot1q` + type: l3dot1q + encapsulation_vlan: + client: + unmatched: true + + - name: Ethernet9 + description: Test_encapsulation_vlan4 + # test for vlan_id + vlan_id: 100 + # test for type 'l2dot1q` + type: l2dot1q + encapsulation_vlan: + client: + dot1q: + outer: 10 + inner: 12 + network: + dot1q: + outer: 20 + inner: 22 + + - name: Ethernet10 + description: Test_for_type_routed + type: routed + + - name: Ethernet11 + type: port-channel-member + channel_group: + id: 16 + mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate_device_documentation.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/generate_device_documentation.yml similarity index 100% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/generate_device_documentation.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/generate_device_documentation.yml diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/port-channel-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/port-channel-interfaces.yml new file mode 100644 index 00000000000..89927dfdcbb --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/host_vars/host1/port-channel-interfaces.yml @@ -0,0 +1,98 @@ +### Port-Channel Interfaces ### +# Testing deprecated keys for switchport config in port-channel_interfaces +# The deprecated keys listed below will be removed in AVD6.0.0: +# - mode, vlans, native_vlan, native_vlan_tag, trunk_groups, phone, vlan_translations, trunk_private_vlan_secondary, pvlan_mapping +# - vlan_id, encapsulation_dot1q_vlan, encapsulation_vlan.client.dot1q, encapsulation_vlan.client.unmatched +# - encapsulation_vlan.network.dot1q, encapsulation_vlan.network.client +port_channel_interfaces: + - name: Port-Channel2 + description: Test_mode_and_vlans + type: switched + mode: access + vlans: 100 + + - name: Port-Channel3 + description: Test_trunk_groups_and_native_vlan + type: switched + mode: trunk + vlans: 110 + native_vlan: 10 + trunk_groups: + - group1 + - group2 + + - name: Port-Channel4 + description: Test_native_vlan_tag_and_phone + type: switched + native_vlan_tag: true + native_vlan: 20 + mode: trunk phone + phone: + vlan: 20 + trunk: tagged + + - name: Port-Channel5 + description: Test_vlan_translations + type: switched + vlan_translations: + - from: 23 + to: 50 + direction: in + - from: 25 + to: 49 + direction: out + - from: 34 + to: 60 + direction: both + # test trunk_private_vlan_secondary and pvlan_mapping + trunk_private_vlan_secondary: true + pvlan_mapping: "2,3,4" + + - name: Port-Channel6 + description: Test_encapsulation_dot1q_vlan + type: l3dot1q + encapsulation_dot1q_vlan: 20 + + - name: Port-Channel7 + description: Test_encapsulation_vlan1 + type: l3dot1q + encapsulation_vlan: + client: + dot1q: + vlan: 10 + network: + dot1q: + vlan: 20 + + - name: Port-Channel8 + description: Test_encapsulation_vlan2 + type: l3dot1q + encapsulation_vlan: + client: + dot1q: + outer: 10 + inner: 12 + network: + client: true + + - name: Port-Channel9 + description: Test_encapsulation_vlan3 + type: l3dot1q + encapsulation_vlan: + client: + unmatched: true + + - name: Port-Channel10 + description: Test_encapsulation_vlan4 + # test for vlan_id + vlan_id: 100 + type: l2dot1q + encapsulation_vlan: + client: + dot1q: + outer: 10 + inner: 12 + network: + dot1q: + outer: 20 + inner: 22 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/hosts.ini b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/hosts.ini index 15f06264145..232d6940908 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/hosts.ini +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/inventory/hosts.ini @@ -1,2 +1,3 @@ [test_hosts] host1 +host2 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/molecule.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/molecule.yml index 1f473673492..c5456334a28 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen_deprecated_vars/molecule.yml @@ -30,9 +30,5 @@ provisioner: hosts: 'inventory/hosts.ini' host_vars: 'inventory/host_vars/' group_vars: 'inventory/group_vars/' - ansible_args: - # TODO: AVD 5.0.0 - # Testing import role with tag - - --tags=test verifier: name: ansible diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/converge.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/converge.yml index 88ed60b4edf..2c6080f9d26 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/converge.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/converge.yml @@ -31,6 +31,8 @@ execute_tasks: false state: present cv_collection: v3 + # Run tests without interacting with CVP. + avd_eos_config_deploy_cvp_provision: false - name: "Converge -- Build Cloudvision Configuration - empty filter as a string" hosts: CVP @@ -52,3 +54,5 @@ cv_collection: v3 # overwriting the default structured_cvp_dir_name to get different files structured_cvp_dir_name: cvp-empty-filter + # Run tests without interacting with CVP. + avd_eos_config_deploy_cvp_provision: false diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1A.md index c2ced015581..d8fbe14e445 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -252,11 +257,11 @@ vlan internal order ascending range 1006 1199 | 150 | Tenant_A_WAN_Zone_1 | - | | 250 | Tenant_B_WAN_Zone_1 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -272,23 +277,23 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -302,19 +307,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.41/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | routed | - | 172.31.255.43/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | routed | - | 172.31.255.45/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | routed | - | 172.31.255.47/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.41/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | - | 172.31.255.43/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | - | 172.31.255.45/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | - | 172.31.255.47/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -349,12 +354,12 @@ interface Ethernet4 ip address 172.31.255.47/31 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -365,21 +370,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -390,27 +394,27 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.10/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.10/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ``` @@ -424,11 +428,11 @@ interface Loopback1 | Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | False | | Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -466,34 +470,34 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -736,7 +740,7 @@ router bgp 65104 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.11 description DC1-BL1B + neighbor 10.255.251.11 description DC1-BL1B_Vlan4093 neighbor 172.31.255.40 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.40 remote-as 65001 neighbor 172.31.255.40 description DC1-SPINE1_Ethernet6 @@ -751,16 +755,16 @@ router bgp 65104 neighbor 172.31.255.46 description DC1-SPINE4_Ethernet6 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -796,6 +800,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3013 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -805,6 +810,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3020 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -814,6 +820,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3030 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1B.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1B.md index 8e06ad8a43c..814cb9a4bae 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1B.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-BL1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -252,11 +257,11 @@ vlan internal order ascending range 1006 1199 | 150 | Tenant_A_WAN_Zone_1 | - | | 250 | Tenant_B_WAN_Zone_1 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -272,23 +277,23 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -302,19 +307,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | routed | - | 172.31.255.49/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | routed | - | 172.31.255.51/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | routed | - | 172.31.255.53/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | routed | - | 172.31.255.55/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | - | 172.31.255.49/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | - | 172.31.255.51/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | - | 172.31.255.53/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | - | 172.31.255.55/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -349,12 +354,12 @@ interface Ethernet4 ip address 172.31.255.55/31 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -365,21 +370,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -390,27 +394,27 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.11/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.11/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ``` @@ -424,11 +428,11 @@ interface Loopback1 | Vlan150 | Tenant_A_WAN_Zone_1 | Tenant_A_WAN_Zone | - | False | | Vlan250 | Tenant_B_WAN_Zone_1 | Tenant_B_WAN_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -466,34 +470,34 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -736,7 +740,7 @@ router bgp 65104 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.10 description DC1-BL1A + neighbor 10.255.251.10 description DC1-BL1A_Vlan4093 neighbor 172.31.255.48 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.48 remote-as 65001 neighbor 172.31.255.48 description DC1-SPINE1_Ethernet7 @@ -751,16 +755,16 @@ router bgp 65104 neighbor 172.31.255.54 description DC1-SPINE4_Ethernet7 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -796,6 +800,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3013 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -805,6 +810,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3020 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -814,6 +820,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3030 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF1A.md index ac246a8cbc0..284ca5c673f 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -148,6 +149,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -274,9 +279,9 @@ interface Ethernet2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_LEAF2_Po7 | switched | trunk | 110-111,120-121,130-131 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_LEAF2_Po7 | trunk | 110-111,120-121,130-131 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -285,9 +290,9 @@ interface Ethernet2 interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2A.md index 8047aacd97a..bfb94b9a100 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -255,7 +260,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -307,7 +312,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -323,8 +328,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet7 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet7 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -334,21 +339,21 @@ vlan 4094 ! interface Ethernet1 description DC1-SVC3A_Ethernet7 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet2 description DC1-SVC3B_Ethernet7 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -359,10 +364,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -371,17 +376,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -390,7 +395,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -403,7 +408,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2B.md index 97d0e5c3e35..157d6aa58ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-L2LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -255,7 +260,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -307,7 +312,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -323,8 +328,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet8 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet8 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -334,21 +339,21 @@ vlan 4094 ! interface Ethernet1 description DC1-SVC3A_Ethernet8 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet2 description DC1-SVC3B_Ethernet8 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -359,10 +364,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -371,17 +376,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -390,7 +395,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -403,7 +408,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF1A.md index 19d238702f4..200ffc82d0e 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -53,20 +54,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -157,6 +158,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -249,19 +254,19 @@ vlan 131 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet6 | server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 110-111,210-211 | - | - | - | -| Ethernet7 | server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | +| Ethernet6 | SERVER_server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 110-111,210-211 | - | - | - | +| Ethernet7 | SERVER_server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | routed | - | 172.31.255.5/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | routed | - | 172.31.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | - | 172.31.255.5/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | - | 172.31.255.7/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -296,14 +301,14 @@ interface Ethernet4 ip address 172.31.255.7/31 ! interface Ethernet6 - description server02_SINGLE_NODE_TRUNK_Eth1 + description SERVER_server02_SINGLE_NODE_TRUNK_Eth1 no shutdown switchport trunk allowed vlan 110-111,210-211 switchport mode trunk switchport ! interface Ethernet7 - description server02_SINGLE_NODE_Eth1 + description SERVER_server02_SINGLE_NODE_Eth1 no shutdown switchport access vlan 110 switchport mode access @@ -318,27 +323,27 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.5/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ``` @@ -614,16 +619,16 @@ router bgp 65101 neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2A.md index 62d5a47108a..1f9f85a5466 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -164,6 +165,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -264,14 +269,14 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -314,35 +319,35 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -356,21 +361,21 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet1 | *trunk | *110-111,120-121,130-131 | *- | *- | 7 | -| Ethernet10 | server01_MLAG_Eth2 | *trunk | *210-211 | *- | *- | 10 | +| Ethernet10 | SERVER_server01_MLAG_Eth2 | *trunk | *210-211 | *- | *- | 10 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 172.31.255.9/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 172.31.255.11/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | routed | - | 172.31.255.13/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | routed | - | 172.31.255.15/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 172.31.255.9/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 172.31.255.11/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | - | 172.31.255.13/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | - | 172.31.255.15/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -405,12 +410,12 @@ interface Ethernet4 ip address 172.31.255.15/31 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -420,7 +425,7 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth2 + description SERVER_server01_MLAG_Eth2 no shutdown channel-group 10 mode active ``` @@ -431,38 +436,37 @@ interface Ethernet10 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 110-111,120-121,130-131 | - | - | - | - | 7 | - | -| Port-Channel10 | server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | 10 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 110-111,120-121,130-131 | - | - | - | - | 7 | - | +| Port-Channel10 | SERVER_server01_MLAG | trunk | 210-211 | - | - | - | - | 10 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description SERVER_server01_MLAG no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ``` @@ -474,16 +478,16 @@ interface Port-Channel10 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.6/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -491,12 +495,12 @@ interface Port-Channel10 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -525,14 +529,14 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -639,55 +643,55 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.2/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.2/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.2/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -972,7 +976,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.3 description DC1-LEAF2B + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan4093 neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.8 remote-as 65001 neighbor 172.31.255.8 description DC1-SPINE1_Ethernet2 @@ -987,16 +991,16 @@ router bgp 65102 neighbor 172.31.255.14 description DC1-SPINE4_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1050,6 +1054,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1059,6 +1064,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1068,6 +1074,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -1077,6 +1084,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1086,6 +1094,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1095,6 +1104,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3029 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2B.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2B.md index c08f4d16f41..02b7847e144 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -164,6 +165,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -264,14 +269,14 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -314,35 +319,35 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -356,21 +361,21 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet2 | *trunk | *110-111,120-121,130-131 | *- | *- | 7 | -| Ethernet10 | server01_MLAG_Eth3 | *trunk | *210-211 | *- | *- | 10 | +| Ethernet10 | SERVER_server01_MLAG_Eth3 | *trunk | *210-211 | *- | *- | 10 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 172.31.255.17/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 172.31.255.19/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | routed | - | 172.31.255.21/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | routed | - | 172.31.255.23/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 172.31.255.17/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 172.31.255.19/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | - | 172.31.255.21/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | - | 172.31.255.23/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -405,12 +410,12 @@ interface Ethernet4 ip address 172.31.255.23/31 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -420,7 +425,7 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth3 + description SERVER_server01_MLAG_Eth3 no shutdown channel-group 10 mode active ``` @@ -431,38 +436,37 @@ interface Ethernet10 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 110-111,120-121,130-131 | - | - | - | - | 7 | - | -| Port-Channel10 | server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | 10 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 110-111,120-121,130-131 | - | - | - | - | 7 | - | +| Port-Channel10 | SERVER_server01_MLAG | trunk | 210-211 | - | - | - | - | 10 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description SERVER_server01_MLAG no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ``` @@ -474,16 +478,16 @@ interface Port-Channel10 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.7/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.7/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.7/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -491,12 +495,12 @@ interface Port-Channel10 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -525,14 +529,14 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -639,55 +643,55 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.3/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.3/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.3/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -972,7 +976,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.2 description DC1-LEAF2A + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan4093 neighbor 172.31.255.16 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.16 remote-as 65001 neighbor 172.31.255.16 description DC1-SPINE1_Ethernet3 @@ -987,16 +991,16 @@ router bgp 65102 neighbor 172.31.255.22 description DC1-SPINE4_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1050,6 +1054,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1059,6 +1064,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1068,6 +1074,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -1077,6 +1084,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1086,6 +1094,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1095,6 +1104,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3029 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE1.md index 345faa5d471..c8af47f07b8 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 172.31.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 172.31.255.8/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 172.31.255.16/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | routed | - | 172.31.255.24/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | routed | - | 172.31.255.32/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | routed | - | 172.31.255.40/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | routed | - | 172.31.255.48/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 172.31.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 172.31.255.8/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 172.31.255.16/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | - | 172.31.255.24/31 | default | 1500 | True | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | - | 172.31.255.32/31 | default | 1500 | True | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | - | 172.31.255.40/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | - | 172.31.255.48/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -248,14 +253,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet1 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.24/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet1 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.32/31 @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ``` @@ -399,15 +404,15 @@ ASN Notation: asplain | 172.31.255.1 | 65101 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.9 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.17 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.25 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.33 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.25 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.33 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.41 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.49 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 192.168.255.5 | 65101 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.6 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.7 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.8 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.9 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.8 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.9 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.10 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.11 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | @@ -452,9 +457,11 @@ router bgp 65001 neighbor 172.31.255.17 description DC1-LEAF2B_Ethernet1 neighbor 172.31.255.25 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.25 remote-as 65103 + neighbor 172.31.255.25 shutdown neighbor 172.31.255.25 description DC1-SVC3A_Ethernet1 neighbor 172.31.255.33 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.33 remote-as 65103 + neighbor 172.31.255.33 shutdown neighbor 172.31.255.33 description DC1-SVC3B_Ethernet1 neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.41 remote-as 65104 @@ -464,25 +471,27 @@ router bgp 65001 neighbor 172.31.255.49 description DC1-BL1B_Ethernet1 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE2.md index 76810f68e96..8e1aa14ad47 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 172.31.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 172.31.255.10/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 172.31.255.18/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | routed | - | 172.31.255.26/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | routed | - | 172.31.255.34/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | routed | - | 172.31.255.42/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | routed | - | 172.31.255.50/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 172.31.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 172.31.255.10/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 172.31.255.18/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | - | 172.31.255.26/31 | default | 1500 | True | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | - | 172.31.255.34/31 | default | 1500 | True | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | - | 172.31.255.42/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | - | 172.31.255.50/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -248,14 +253,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet2 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.26/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet2 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.34/31 @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ``` @@ -399,15 +404,15 @@ ASN Notation: asplain | 172.31.255.3 | 65101 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.11 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.19 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.27 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.35 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.27 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.35 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.43 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.51 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 192.168.255.5 | 65101 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.6 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.7 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.8 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.9 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.8 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.9 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.10 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.11 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | @@ -452,9 +457,11 @@ router bgp 65001 neighbor 172.31.255.19 description DC1-LEAF2B_Ethernet2 neighbor 172.31.255.27 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.27 remote-as 65103 + neighbor 172.31.255.27 shutdown neighbor 172.31.255.27 description DC1-SVC3A_Ethernet2 neighbor 172.31.255.35 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.35 remote-as 65103 + neighbor 172.31.255.35 shutdown neighbor 172.31.255.35 description DC1-SVC3B_Ethernet2 neighbor 172.31.255.43 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.43 remote-as 65104 @@ -464,25 +471,27 @@ router bgp 65001 neighbor 172.31.255.51 description DC1-BL1B_Ethernet2 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE3.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE3.md index 9c3d1c42ac2..0515e5b42b3 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE3.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | routed | - | 172.31.255.4/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | routed | - | 172.31.255.12/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | routed | - | 172.31.255.20/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | routed | - | 172.31.255.28/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | routed | - | 172.31.255.36/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | routed | - | 172.31.255.44/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | routed | - | 172.31.255.52/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | - | 172.31.255.4/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | - | 172.31.255.12/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | - | 172.31.255.20/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | - | 172.31.255.28/31 | default | 1500 | True | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | - | 172.31.255.36/31 | default | 1500 | True | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | - | 172.31.255.44/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | - | 172.31.255.52/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -248,14 +253,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet3 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.28/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet3 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.36/31 @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ``` @@ -399,15 +404,15 @@ ASN Notation: asplain | 172.31.255.5 | 65101 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.13 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.21 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.29 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.37 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.29 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.37 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.45 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.53 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 192.168.255.5 | 65101 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.6 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.7 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.8 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.9 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.8 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.9 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.10 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.11 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | @@ -452,9 +457,11 @@ router bgp 65001 neighbor 172.31.255.21 description DC1-LEAF2B_Ethernet3 neighbor 172.31.255.29 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.29 remote-as 65103 + neighbor 172.31.255.29 shutdown neighbor 172.31.255.29 description DC1-SVC3A_Ethernet3 neighbor 172.31.255.37 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.37 remote-as 65103 + neighbor 172.31.255.37 shutdown neighbor 172.31.255.37 description DC1-SVC3B_Ethernet3 neighbor 172.31.255.45 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.45 remote-as 65104 @@ -464,25 +471,27 @@ router bgp 65001 neighbor 172.31.255.53 description DC1-BL1B_Ethernet3 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE4.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE4.md index 5fd8d62be3b..72c8180d3eb 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE4.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SPINE4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | routed | - | 172.31.255.6/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | routed | - | 172.31.255.14/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | routed | - | 172.31.255.22/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | routed | - | 172.31.255.30/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | routed | - | 172.31.255.38/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | routed | - | 172.31.255.46/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | routed | - | 172.31.255.54/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | - | 172.31.255.6/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | - | 172.31.255.14/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | - | 172.31.255.22/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | - | 172.31.255.30/31 | default | 1500 | True | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | - | 172.31.255.38/31 | default | 1500 | True | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | - | 172.31.255.46/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | - | 172.31.255.54/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -248,14 +253,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet4 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.30/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet4 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.38/31 @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ``` @@ -399,15 +404,15 @@ ASN Notation: asplain | 172.31.255.7 | 65101 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.15 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.23 | 65102 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.31 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | -| 172.31.255.39 | 65103 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.31 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | +| 172.31.255.39 | 65103 | default | True | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.47 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 172.31.255.55 | 65104 | default | - | Inherited from peer group IPv4-UNDERLAY-PEERS | Inherited from peer group IPv4-UNDERLAY-PEERS | - | - | - | - | - | - | | 192.168.255.5 | 65101 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.6 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.7 | 65102 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.8 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | -| 192.168.255.9 | 65103 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.8 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | +| 192.168.255.9 | 65103 | default | True | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.10 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | | 192.168.255.11 | 65104 | default | - | Inherited from peer group EVPN-OVERLAY-PEERS | Inherited from peer group EVPN-OVERLAY-PEERS | - | Inherited from peer group EVPN-OVERLAY-PEERS | - | - | - | - | @@ -452,9 +457,11 @@ router bgp 65001 neighbor 172.31.255.23 description DC1-LEAF2B_Ethernet4 neighbor 172.31.255.31 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.31 remote-as 65103 + neighbor 172.31.255.31 shutdown neighbor 172.31.255.31 description DC1-SVC3A_Ethernet4 neighbor 172.31.255.39 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.39 remote-as 65103 + neighbor 172.31.255.39 shutdown neighbor 172.31.255.39 description DC1-SVC3B_Ethernet4 neighbor 172.31.255.47 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.47 remote-as 65104 @@ -464,25 +471,27 @@ router bgp 65001 neighbor 172.31.255.55 description DC1-BL1B_Ethernet4 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3A.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3A.md index 3b92f80cee7..843c5372394 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3A.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -164,6 +165,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -267,17 +272,17 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -329,47 +334,47 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -383,22 +388,22 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet1 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet1 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 7 | -| Ethernet10 | server03_ESI_Eth1 | *trunk | *110-111,210-211 | *- | *- | 10 | +| Ethernet10 | SERVER_server03_ESI_Eth1 | *trunk | *110-111,210-211 | *- | *- | 10 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 172.31.255.25/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 172.31.255.27/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | routed | - | 172.31.255.29/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | routed | - | 172.31.255.31/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 172.31.255.25/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 172.31.255.27/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | - | 172.31.255.29/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | - | 172.31.255.31/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -433,12 +438,12 @@ interface Ethernet4 ip address 172.31.255.31/31 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -453,7 +458,7 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet10 - description server03_ESI_Eth1 + description SERVER_server03_ESI_Eth1 no shutdown channel-group 10 mode active ``` @@ -464,11 +469,11 @@ interface Ethernet10 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 7 | - | -| Port-Channel10 | server03_ESI_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | 0000:0000:0303:0202:0101 | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Port-Channel10 | SERVER_server03_ESI | trunk | 110-111,210-211 | - | - | - | - | - | 0000:0000:0303:0202:0101 | ##### EVPN Multihoming @@ -483,27 +488,26 @@ interface Ethernet10 ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server03_ESI_PortChanne1 + description SERVER_server03_ESI no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -518,16 +522,16 @@ interface Port-Channel10 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.8/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.8/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -535,12 +539,12 @@ interface Port-Channel10 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -572,17 +576,17 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -713,76 +717,76 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.6/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.6/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.6/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.6/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1097,7 +1101,7 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.7 description DC1-SVC3B + neighbor 10.255.251.7 description DC1-SVC3B_Vlan4093 neighbor 172.31.255.24 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.24 remote-as 65001 neighbor 172.31.255.24 description DC1-SPINE1_Ethernet4 @@ -1112,16 +1116,16 @@ router bgp 65103 neighbor 172.31.255.30 description DC1-SPINE4_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1193,6 +1197,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1202,6 +1207,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1211,6 +1217,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1220,6 +1227,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3013 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -1229,6 +1237,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1238,6 +1247,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1247,6 +1257,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1256,6 +1267,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3029 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1265,6 +1277,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3030 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3B.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3B.md index 4d4d395002c..a8fa48b5db5 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3B.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/devices/DC1-SVC3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -60,20 +61,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -164,6 +165,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -267,17 +272,17 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3029 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -329,47 +334,47 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -383,8 +388,8 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet2 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet2 | *trunk | *110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | *- | *- | 7 | @@ -392,12 +397,12 @@ vlan 4094 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | routed | - | 172.31.255.33/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | routed | - | 172.31.255.35/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | routed | - | 172.31.255.37/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | routed | - | 172.31.255.39/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | - | 172.31.255.33/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | - | 172.31.255.35/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | - | 172.31.255.37/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | - | 172.31.255.39/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -432,12 +437,12 @@ interface Ethernet4 ip address 172.31.255.39/31 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -458,29 +463,28 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ``` @@ -492,16 +496,16 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.9/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.9/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.9/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -509,12 +513,12 @@ interface Port-Channel7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -546,17 +550,17 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3029 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3029 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -687,76 +691,76 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.7/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.7/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.7/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.7/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1071,7 +1075,7 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.6 description DC1-SVC3A + neighbor 10.255.251.6 description DC1-SVC3A_Vlan4093 neighbor 172.31.255.32 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.32 remote-as 65001 neighbor 172.31.255.32 description DC1-SPINE1_Ethernet5 @@ -1086,16 +1090,16 @@ router bgp 65103 neighbor 172.31.255.38 description DC1-SPINE4_Ethernet5 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1167,6 +1171,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1176,6 +1181,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1185,6 +1191,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1194,6 +1201,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3013 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -1203,6 +1211,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1212,6 +1221,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1221,6 +1231,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1230,6 +1241,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3029 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1239,6 +1251,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3030 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-documentation.md index 2d2e1432c65..d8c1daa092c 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-documentation.md @@ -152,7 +152,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 192.168.254.0/24 | 256 | 7 | 2.74 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-p2p-links.csv b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-p2p-links.csv deleted file mode 100644 index 77164dfae44..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ /dev/null @@ -1,29 +0,0 @@ -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address -l3leaf,DC1-BL1A,Ethernet1,172.31.255.41/31,spine,DC1-SPINE1,Ethernet6,172.31.255.40/31 -l3leaf,DC1-BL1A,Ethernet2,172.31.255.43/31,spine,DC1-SPINE2,Ethernet6,172.31.255.42/31 -l3leaf,DC1-BL1A,Ethernet3,172.31.255.45/31,spine,DC1-SPINE3,Ethernet6,172.31.255.44/31 -l3leaf,DC1-BL1A,Ethernet4,172.31.255.47/31,spine,DC1-SPINE4,Ethernet6,172.31.255.46/31 -l3leaf,DC1-BL1B,Ethernet1,172.31.255.49/31,spine,DC1-SPINE1,Ethernet7,172.31.255.48/31 -l3leaf,DC1-BL1B,Ethernet2,172.31.255.51/31,spine,DC1-SPINE2,Ethernet7,172.31.255.50/31 -l3leaf,DC1-BL1B,Ethernet3,172.31.255.53/31,spine,DC1-SPINE3,Ethernet7,172.31.255.52/31 -l3leaf,DC1-BL1B,Ethernet4,172.31.255.55/31,spine,DC1-SPINE4,Ethernet7,172.31.255.54/31 -l3leaf,DC1-LEAF1A,Ethernet1,172.31.255.1/31,spine,DC1-SPINE1,Ethernet1,172.31.255.0/31 -l3leaf,DC1-LEAF1A,Ethernet2,172.31.255.3/31,spine,DC1-SPINE2,Ethernet1,172.31.255.2/31 -l3leaf,DC1-LEAF1A,Ethernet3,172.31.255.5/31,spine,DC1-SPINE3,Ethernet1,172.31.255.4/31 -l3leaf,DC1-LEAF1A,Ethernet4,172.31.255.7/31,spine,DC1-SPINE4,Ethernet1,172.31.255.6/31 -l3leaf,DC1-LEAF2A,Ethernet1,172.31.255.9/31,spine,DC1-SPINE1,Ethernet2,172.31.255.8/31 -l3leaf,DC1-LEAF2A,Ethernet2,172.31.255.11/31,spine,DC1-SPINE2,Ethernet2,172.31.255.10/31 -l3leaf,DC1-LEAF2A,Ethernet3,172.31.255.13/31,spine,DC1-SPINE3,Ethernet2,172.31.255.12/31 -l3leaf,DC1-LEAF2A,Ethernet4,172.31.255.15/31,spine,DC1-SPINE4,Ethernet2,172.31.255.14/31 -l3leaf,DC1-LEAF2B,Ethernet1,172.31.255.17/31,spine,DC1-SPINE1,Ethernet3,172.31.255.16/31 -l3leaf,DC1-LEAF2B,Ethernet2,172.31.255.19/31,spine,DC1-SPINE2,Ethernet3,172.31.255.18/31 -l3leaf,DC1-LEAF2B,Ethernet3,172.31.255.21/31,spine,DC1-SPINE3,Ethernet3,172.31.255.20/31 -l3leaf,DC1-LEAF2B,Ethernet4,172.31.255.23/31,spine,DC1-SPINE4,Ethernet3,172.31.255.22/31 -spine,DC1-SPINE1,Ethernet4,172.31.255.24/31,l3leaf,DC1-SVC3A,Ethernet1,172.31.255.25/31 -spine,DC1-SPINE1,Ethernet5,172.31.255.32/31,l3leaf,DC1-SVC3B,Ethernet1,172.31.255.33/31 -spine,DC1-SPINE2,Ethernet4,172.31.255.26/31,l3leaf,DC1-SVC3A,Ethernet2,172.31.255.27/31 -spine,DC1-SPINE2,Ethernet5,172.31.255.34/31,l3leaf,DC1-SVC3B,Ethernet2,172.31.255.35/31 -spine,DC1-SPINE3,Ethernet4,172.31.255.28/31,l3leaf,DC1-SVC3A,Ethernet3,172.31.255.29/31 -spine,DC1-SPINE3,Ethernet5,172.31.255.36/31,l3leaf,DC1-SVC3B,Ethernet3,172.31.255.37/31 -spine,DC1-SPINE4,Ethernet4,172.31.255.30/31,l3leaf,DC1-SVC3A,Ethernet4,172.31.255.31/31 -spine,DC1-SPINE4,Ethernet5,172.31.255.38/31,l3leaf,DC1-SVC3B,Ethernet4,172.31.255.39/31 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 4154acb861e..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,90 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -l3leaf,DC1-BL1A,Ethernet1,spine,DC1-SPINE1,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet2,spine,DC1-SPINE2,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet3,spine,DC1-SPINE3,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet4,spine,DC1-SPINE4,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet5,mlag_peer,DC1-BL1B,Ethernet5,True -l3leaf,DC1-BL1A,Ethernet6,mlag_peer,DC1-BL1B,Ethernet6,True -l3leaf,DC1-BL1B,Ethernet1,spine,DC1-SPINE1,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet2,spine,DC1-SPINE2,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet3,spine,DC1-SPINE3,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet4,spine,DC1-SPINE4,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet5,mlag_peer,DC1-BL1A,Ethernet5,True -l3leaf,DC1-BL1B,Ethernet6,mlag_peer,DC1-BL1A,Ethernet6,True -l2leaf,DC1-L2LEAF1A,Ethernet1,l3leaf,DC1-LEAF2A,Ethernet7,True -l2leaf,DC1-L2LEAF1A,Ethernet2,l3leaf,DC1-LEAF2B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet1,l3leaf,DC1-SVC3A,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet2,l3leaf,DC1-SVC3B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet3,mlag_peer,DC1-L2LEAF2B,Ethernet3,True -l2leaf,DC1-L2LEAF2A,Ethernet4,mlag_peer,DC1-L2LEAF2B,Ethernet4,True -l2leaf,DC1-L2LEAF2B,Ethernet1,l3leaf,DC1-SVC3A,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet2,l3leaf,DC1-SVC3B,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet3,mlag_peer,DC1-L2LEAF2A,Ethernet3,True -l2leaf,DC1-L2LEAF2B,Ethernet4,mlag_peer,DC1-L2LEAF2A,Ethernet4,True -l3leaf,DC1-LEAF1A,Ethernet1,spine,DC1-SPINE1,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet2,spine,DC1-SPINE2,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet3,spine,DC1-SPINE3,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet4,spine,DC1-SPINE4,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet6,server,server02_SINGLE_NODE_TRUNK,Eth1,True -l3leaf,DC1-LEAF1A,Ethernet7,server,server02_SINGLE_NODE,Eth1,True -l3leaf,DC1-LEAF2A,Ethernet1,spine,DC1-SPINE1,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet2,spine,DC1-SPINE2,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet3,spine,DC1-SPINE3,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet4,spine,DC1-SPINE4,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet5,mlag_peer,DC1-LEAF2B,Ethernet5,True -l3leaf,DC1-LEAF2A,Ethernet6,mlag_peer,DC1-LEAF2B,Ethernet6,True -l3leaf,DC1-LEAF2A,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet1,True -l3leaf,DC1-LEAF2A,Ethernet10,server,server01_MLAG,Eth2,True -l3leaf,DC1-LEAF2B,Ethernet1,spine,DC1-SPINE1,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet2,spine,DC1-SPINE2,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet3,spine,DC1-SPINE3,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet4,spine,DC1-SPINE4,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet5,mlag_peer,DC1-LEAF2A,Ethernet5,True -l3leaf,DC1-LEAF2B,Ethernet6,mlag_peer,DC1-LEAF2A,Ethernet6,True -l3leaf,DC1-LEAF2B,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet2,True -l3leaf,DC1-LEAF2B,Ethernet10,server,server01_MLAG,Eth3,True -spine,DC1-SPINE1,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet1,True -spine,DC1-SPINE1,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet1,True -spine,DC1-SPINE1,Ethernet4,l3leaf,DC1-SVC3A,Ethernet1,True -spine,DC1-SPINE1,Ethernet5,l3leaf,DC1-SVC3B,Ethernet1,True -spine,DC1-SPINE1,Ethernet6,l3leaf,DC1-BL1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet7,l3leaf,DC1-BL1B,Ethernet1,True -spine,DC1-SPINE2,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet2,True -spine,DC1-SPINE2,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet2,True -spine,DC1-SPINE2,Ethernet4,l3leaf,DC1-SVC3A,Ethernet2,True -spine,DC1-SPINE2,Ethernet5,l3leaf,DC1-SVC3B,Ethernet2,True -spine,DC1-SPINE2,Ethernet6,l3leaf,DC1-BL1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet7,l3leaf,DC1-BL1B,Ethernet2,True -spine,DC1-SPINE3,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet3,True -spine,DC1-SPINE3,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet3,True -spine,DC1-SPINE3,Ethernet4,l3leaf,DC1-SVC3A,Ethernet3,True -spine,DC1-SPINE3,Ethernet5,l3leaf,DC1-SVC3B,Ethernet3,True -spine,DC1-SPINE3,Ethernet6,l3leaf,DC1-BL1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet7,l3leaf,DC1-BL1B,Ethernet3,True -spine,DC1-SPINE4,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet4,True -spine,DC1-SPINE4,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet4,True -spine,DC1-SPINE4,Ethernet4,l3leaf,DC1-SVC3A,Ethernet4,True -spine,DC1-SPINE4,Ethernet5,l3leaf,DC1-SVC3B,Ethernet4,True -spine,DC1-SPINE4,Ethernet6,l3leaf,DC1-BL1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet7,l3leaf,DC1-BL1B,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet1,spine,DC1-SPINE1,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet2,spine,DC1-SPINE2,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet3,spine,DC1-SPINE3,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet4,spine,DC1-SPINE4,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet5,mlag_peer,DC1-SVC3B,Ethernet5,True -l3leaf,DC1-SVC3A,Ethernet6,mlag_peer,DC1-SVC3B,Ethernet6,True -l3leaf,DC1-SVC3A,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet10,server,server03_ESI,Eth1,True -l3leaf,DC1-SVC3B,Ethernet1,spine,DC1-SPINE1,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet2,spine,DC1-SPINE2,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet3,spine,DC1-SPINE3,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet4,spine,DC1-SPINE4,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet5,mlag_peer,DC1-SVC3A,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet6,mlag_peer,DC1-SVC3A,Ethernet6,True -l3leaf,DC1-SVC3B,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet2,True -l3leaf,DC1-SVC3B,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet2,True diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1A.cfg index 022f8dda71a..e47f8d5a3e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,19 +26,10 @@ hostname DC1-BL1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -37,23 +40,23 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -65,12 +68,11 @@ vrf instance Tenant_B_WAN_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet6 @@ -101,27 +103,27 @@ interface Ethernet4 ip address 172.31.255.47/31 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -145,34 +147,34 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.10/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -212,6 +214,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -248,7 +253,7 @@ router bgp 65104 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.11 description DC1-BL1B + neighbor 10.255.251.11 description DC1-BL1B_Vlan4093 neighbor 172.31.255.40 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.40 remote-as 65001 neighbor 172.31.255.40 description DC1-SPINE1_Ethernet6 @@ -263,16 +268,16 @@ router bgp 65104 neighbor 172.31.255.46 description DC1-SPINE4_Ethernet6 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -308,6 +313,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3013 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -317,6 +323,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3020 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -326,13 +333,7 @@ router bgp 65104 router-id 192.168.255.10 update wait-install neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.11 description DC1-BL1B_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1B.cfg index 5cc05d3f8bc..01371240ba9 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-BL1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,19 +26,10 @@ hostname DC1-BL1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -37,23 +40,23 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -65,12 +68,11 @@ vrf instance Tenant_B_WAN_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet7 @@ -101,27 +103,27 @@ interface Ethernet4 ip address 172.31.255.55/31 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -145,34 +147,34 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.11/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -212,6 +214,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -248,7 +253,7 @@ router bgp 65104 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.10 description DC1-BL1A + neighbor 10.255.251.10 description DC1-BL1A_Vlan4093 neighbor 172.31.255.48 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.48 remote-as 65001 neighbor 172.31.255.48 description DC1-SPINE1_Ethernet7 @@ -263,16 +268,16 @@ router bgp 65104 neighbor 172.31.255.54 description DC1-SPINE4_Ethernet7 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -308,6 +313,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3013 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -317,6 +323,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3020 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -326,13 +333,7 @@ router bgp 65104 router-id 192.168.255.11 update wait-install neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.10 description DC1-BL1A_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF1A.cfg index a97ffa9e48b..dae7f58bf51 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,18 +28,9 @@ hostname DC1-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -51,9 +54,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet7 @@ -66,7 +69,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -74,11 +77,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2A.cfg index b4917346e9c..b60814c005c 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-L2LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,7 +78,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -83,46 +86,46 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet7 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet2 description DC1-SVC3B_Ethernet7 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -139,11 +142,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2B.cfg index ee8426c4b26..c68e5d36aa0 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-L2LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-L2LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,7 +78,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -83,46 +86,46 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet8 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet2 description DC1-SVC3B_Ethernet8 - no shutdown + shutdown channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -139,11 +142,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF1A.cfg index 3086c8cfde0..ccbc1312c19 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,18 +28,9 @@ hostname DC1-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 120 name Tenant_A_WEB_Zone_1 ! @@ -75,31 +78,31 @@ interface Ethernet4 ip address 172.31.255.7/31 ! interface Ethernet6 - description server02_SINGLE_NODE_TRUNK_Eth1 + description SERVER_server02_SINGLE_NODE_TRUNK_Eth1 no shutdown switchport trunk allowed vlan 110-111,210-211 switchport mode trunk switchport ! interface Ethernet7 - description server02_SINGLE_NODE_Eth1 + description SERVER_server02_SINGLE_NODE_Eth1 no shutdown switchport access vlan 110 switchport mode access switchport ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -154,6 +157,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -191,16 +197,16 @@ router bgp 65101 neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -236,11 +242,4 @@ router bgp 65101 router-id 192.168.255.5 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2A.cfg index 387ddb4bc68..6c4def68a79 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -66,35 +69,35 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -112,27 +115,26 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description SERVER_server01_MLAG no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Ethernet1 @@ -164,12 +166,12 @@ interface Ethernet4 ip address 172.31.255.15/31 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -179,17 +181,17 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth2 + description SERVER_server01_MLAG_Eth2 no shutdown channel-group 10 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -200,7 +202,7 @@ interface Loopback100 ip address 10.255.1.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -281,55 +283,55 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.2/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.2/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.2/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -386,6 +388,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -422,7 +427,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.3 description DC1-LEAF2B + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan4093 neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.8 remote-as 65001 neighbor 172.31.255.8 description DC1-SPINE1_Ethernet2 @@ -437,16 +442,16 @@ router bgp 65102 neighbor 172.31.255.14 description DC1-SPINE4_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -500,6 +505,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -509,6 +515,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -518,6 +525,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -527,6 +535,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -536,6 +545,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ! vrf Tenant_C_OP_Zone @@ -545,13 +555,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3029 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2B.cfg index 0b3111ee2e2..4b75afe8bd5 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -66,35 +69,35 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -112,27 +115,26 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description SERVER_server01_MLAG no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Ethernet1 @@ -164,12 +166,12 @@ interface Ethernet4 ip address 172.31.255.23/31 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -179,17 +181,17 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth3 + description SERVER_server01_MLAG_Eth3 no shutdown channel-group 10 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -200,7 +202,7 @@ interface Loopback100 ip address 10.255.1.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -281,55 +283,55 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.3/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.3/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.3/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -386,6 +388,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -422,7 +427,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.2 description DC1-LEAF2A + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan4093 neighbor 172.31.255.16 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.16 remote-as 65001 neighbor 172.31.255.16 description DC1-SPINE1_Ethernet3 @@ -437,16 +442,16 @@ router bgp 65102 neighbor 172.31.255.22 description DC1-SPINE4_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -500,6 +505,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -509,6 +515,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -518,6 +525,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -527,6 +535,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -536,6 +545,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ! vrf Tenant_C_OP_Zone @@ -545,13 +555,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3029 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE1.cfg index 9e4a029ecc8..ec10575ced0 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -50,14 +53,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet1 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.24/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet1 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.32/31 @@ -77,12 +80,12 @@ interface Ethernet7 ip address 172.31.255.48/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -95,6 +98,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,9 +136,11 @@ router bgp 65001 neighbor 172.31.255.17 description DC1-LEAF2B_Ethernet1 neighbor 172.31.255.25 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.25 remote-as 65103 + neighbor 172.31.255.25 shutdown neighbor 172.31.255.25 description DC1-SVC3A_Ethernet1 neighbor 172.31.255.33 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.33 remote-as 65103 + neighbor 172.31.255.33 shutdown neighbor 172.31.255.33 description DC1-SVC3B_Ethernet1 neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.41 remote-as 65104 @@ -142,25 +150,27 @@ router bgp 65001 neighbor 172.31.255.49 description DC1-BL1B_Ethernet1 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -170,11 +180,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE2.cfg index 6d929104b94..bb4e50a28e2 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE2 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -50,14 +53,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet2 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.26/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet2 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.34/31 @@ -77,12 +80,12 @@ interface Ethernet7 ip address 172.31.255.50/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -95,6 +98,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,9 +136,11 @@ router bgp 65001 neighbor 172.31.255.19 description DC1-LEAF2B_Ethernet2 neighbor 172.31.255.27 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.27 remote-as 65103 + neighbor 172.31.255.27 shutdown neighbor 172.31.255.27 description DC1-SVC3A_Ethernet2 neighbor 172.31.255.35 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.35 remote-as 65103 + neighbor 172.31.255.35 shutdown neighbor 172.31.255.35 description DC1-SVC3B_Ethernet2 neighbor 172.31.255.43 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.43 remote-as 65104 @@ -142,25 +150,27 @@ router bgp 65001 neighbor 172.31.255.51 description DC1-BL1B_Ethernet2 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -170,11 +180,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE3.cfg index caf5bb6834d..f75c1099126 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE3 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -50,14 +53,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet3 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.28/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet3 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.36/31 @@ -77,12 +80,12 @@ interface Ethernet7 ip address 172.31.255.52/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -95,6 +98,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,9 +136,11 @@ router bgp 65001 neighbor 172.31.255.21 description DC1-LEAF2B_Ethernet3 neighbor 172.31.255.29 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.29 remote-as 65103 + neighbor 172.31.255.29 shutdown neighbor 172.31.255.29 description DC1-SVC3A_Ethernet3 neighbor 172.31.255.37 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.37 remote-as 65103 + neighbor 172.31.255.37 shutdown neighbor 172.31.255.37 description DC1-SVC3B_Ethernet3 neighbor 172.31.255.45 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.45 remote-as 65104 @@ -142,25 +150,27 @@ router bgp 65001 neighbor 172.31.255.53 description DC1-BL1B_Ethernet3 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -170,11 +180,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE4.cfg index dd945fddaaa..a91a81ed902 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SPINE4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE4 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -50,14 +53,14 @@ interface Ethernet3 ! interface Ethernet4 description P2P_LINK_TO_DC1-SVC3A_Ethernet4 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.30/31 ! interface Ethernet5 description P2P_LINK_TO_DC1-SVC3B_Ethernet4 - no shutdown + shutdown mtu 1500 no switchport ip address 172.31.255.38/31 @@ -77,12 +80,12 @@ interface Ethernet7 ip address 172.31.255.54/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -95,6 +98,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,9 +136,11 @@ router bgp 65001 neighbor 172.31.255.23 description DC1-LEAF2B_Ethernet4 neighbor 172.31.255.31 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.31 remote-as 65103 + neighbor 172.31.255.31 shutdown neighbor 172.31.255.31 description DC1-SVC3A_Ethernet4 neighbor 172.31.255.39 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.39 remote-as 65103 + neighbor 172.31.255.39 shutdown neighbor 172.31.255.39 description DC1-SVC3B_Ethernet4 neighbor 172.31.255.47 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.47 remote-as 65104 @@ -142,25 +150,27 @@ router bgp 65001 neighbor 172.31.255.55 description DC1-BL1B_Ethernet4 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 shutdown + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 shutdown + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -170,11 +180,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3A.cfg index ed2eae463a2..e53be4c8f6f 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-SVC3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,47 +78,47 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -139,27 +142,26 @@ vrf instance Tenant_C_OP_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server03_ESI_PortChanne1 + description SERVER_server03_ESI no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -194,12 +196,12 @@ interface Ethernet4 ip address 172.31.255.31/31 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -214,17 +216,17 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet10 - description server03_ESI_Eth1 + description SERVER_server03_ESI_Eth1 no shutdown channel-group 10 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -235,7 +237,7 @@ interface Loopback100 ip address 10.255.1.8/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -334,76 +336,76 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.6/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.6/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.6/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.6/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.6/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.6/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -469,6 +471,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -505,7 +510,7 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.7 description DC1-SVC3B + neighbor 10.255.251.7 description DC1-SVC3B_Vlan4093 neighbor 172.31.255.24 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.24 remote-as 65001 neighbor 172.31.255.24 description DC1-SPINE1_Ethernet4 @@ -520,16 +525,16 @@ router bgp 65103 neighbor 172.31.255.30 description DC1-SPINE4_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -601,6 +606,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -610,6 +616,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -619,6 +626,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -628,6 +636,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3013 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -637,6 +646,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -646,6 +656,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -655,6 +666,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -664,6 +676,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3029 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -673,13 +686,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.7 description DC1-SVC3B_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3B.cfg index 8683024f7e5..aef8961afe4 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/configs/DC1-SVC3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-SVC3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,47 +78,47 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3029 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -139,19 +142,18 @@ vrf instance Tenant_C_OP_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -183,12 +185,12 @@ interface Ethernet4 ip address 172.31.255.39/31 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -203,12 +205,12 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -219,7 +221,7 @@ interface Loopback100 ip address 10.255.1.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -318,76 +320,76 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.7/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.7/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.7/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan3029 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone ip address 10.255.251.7/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.251.7/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.7/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -453,6 +455,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -489,7 +494,7 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.6 description DC1-SVC3A + neighbor 10.255.251.6 description DC1-SVC3A_Vlan4093 neighbor 172.31.255.32 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.32 remote-as 65001 neighbor 172.31.255.32 description DC1-SPINE1_Ethernet5 @@ -504,16 +509,16 @@ router bgp 65103 neighbor 172.31.255.38 description DC1-SPINE4_Ethernet5 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -585,6 +590,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -594,6 +600,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -603,6 +610,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -612,6 +620,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3013 redistribute connected ! vrf Tenant_A_WEB_Zone @@ -621,6 +630,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -630,6 +640,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -639,6 +650,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -648,6 +660,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3029 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -657,13 +670,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.6 description DC1-SVC3A_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1A.yml index d6174cadc18..71f741739e4 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1A.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Vlan4093 - ip_address: 172.31.255.40 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:14 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1B_Vlan3013 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:21 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1B_Vlan3020 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:31 route_targets: import: @@ -147,11 +148,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1B_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -200,6 +203,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -234,7 +243,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -255,46 +264,46 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.10/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -311,7 +320,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.251.10/31 @@ -327,7 +336,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.251.10/31 @@ -343,26 +352,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.251.10/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1B_Po5 - type: switched + description: MLAG_DC1-BL1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -371,8 +380,7 @@ ethernet_interfaces: peer: DC1-BL1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -384,7 +392,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.41/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -393,7 +402,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.43/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -402,7 +412,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.45/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -411,7 +422,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.47/31 mlag_configuration: domain_id: DC1_BL1 @@ -436,11 +448,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1B.yml index 2a3207ef604..b224875d330 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-BL1B.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Vlan4093 - ip_address: 172.31.255.48 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:14 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1A_Vlan3013 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:21 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1A_Vlan3020 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:31 route_targets: import: @@ -147,11 +148,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-BL1A_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -200,6 +203,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -234,7 +243,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -255,46 +264,46 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.11/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -311,7 +320,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.251.11/31 @@ -327,7 +336,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.251.11/31 @@ -343,26 +352,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.251.11/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1A_Po5 - type: switched + description: MLAG_DC1-BL1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -371,8 +380,7 @@ ethernet_interfaces: peer: DC1-BL1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -384,7 +392,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.49/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -393,7 +402,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.51/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -402,7 +412,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.53/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -411,7 +422,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.55/31 mlag_configuration: domain_id: DC1_BL1 @@ -436,11 +448,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF1A.yml index cd1f00161a9..8651fcba69e 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -44,7 +50,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -69,7 +75,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -79,17 +84,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131 vlans: - id: 130 name: Tenant_A_APP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2A.yml index cc4d4b7d2d3..98e7fe2c727 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -116,33 +122,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.16/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -151,8 +160,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -162,8 +170,7 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: l3leaf description: DC1-SVC3A_Ethernet7 - shutdown: false - type: port-channel-member + shutdown: true channel_group: id: 1 mode: active @@ -172,8 +179,7 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: l3leaf description: DC1-SVC3B_Ethernet7 - shutdown: false - type: port-channel-member + shutdown: true channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2B.yml index d61aefce92a..45757aeecc1 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -116,33 +122,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.17/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -151,8 +160,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -162,8 +170,7 @@ ethernet_interfaces: peer_interface: Ethernet8 peer_type: l3leaf description: DC1-SVC3A_Ethernet8 - shutdown: false - type: port-channel-member + shutdown: true channel_group: id: 1 mode: active @@ -172,8 +179,7 @@ ethernet_interfaces: peer_interface: Ethernet8 peer_type: l3leaf description: DC1-SVC3B_Ethernet8 - shutdown: false - type: port-channel-member + shutdown: true channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF1A.yml index ea5cc602756..351898b17df 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF1A.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -83,7 +83,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.5 rd: 192.168.255.5:12 route_targets: import: @@ -94,10 +93,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.5 rd: 192.168.255.5:11 route_targets: import: @@ -108,6 +107,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -148,6 +148,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -178,7 +184,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -204,7 +210,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -213,7 +220,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -222,7 +230,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -231,35 +240,39 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 - name: Ethernet6 peer: server02_SINGLE_NODE_TRUNK peer_interface: Eth1 peer_type: server port_profile: TENANT_A_B - description: server02_SINGLE_NODE_TRUNK_Eth1 + description: SERVER_server02_SINGLE_NODE_TRUNK_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 - name: Ethernet7 peer: server02_SINGLE_NODE peer_interface: Eth1 peer_type: server port_profile: TENANT_A - description: server02_SINGLE_NODE_Eth1 + description: SERVER_server02_SINGLE_NODE_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2A.yml index 37cdaa8f29b..b83efa37779 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2A.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Vlan4093 - ip_address: 172.31.255.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:12 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:13 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:10 route_targets: import: @@ -147,15 +148,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3009 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:11 route_targets: import: @@ -166,15 +168,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:20 route_targets: import: @@ -185,15 +188,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3019 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:30 route_targets: import: @@ -204,11 +208,13 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3029 updates: wait_install: true vlan_aware_bundles: @@ -281,6 +287,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -324,7 +336,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -345,12 +357,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -360,9 +372,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -371,9 +383,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -382,9 +394,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -393,9 +405,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: Tenant_B_OP_Zone_1 @@ -404,9 +416,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -415,18 +427,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 3029 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.2/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -452,7 +464,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -477,7 +489,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -505,7 +517,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -535,7 +547,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -559,7 +571,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -583,40 +595,44 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2B_Po5 - type: switched + description: MLAG_DC1-LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131 mlag: 7 - name: Port-Channel10 - description: server01_MLAG_PortChanne1 - type: switched + description: SERVER_server01_MLAG shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 mlag: 10 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -625,8 +641,7 @@ ethernet_interfaces: peer: DC1-LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -638,7 +653,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.9/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -647,7 +663,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.11/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -656,7 +673,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.13/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -665,7 +683,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 - name: Ethernet7 peer: DC1-L2LEAF1A @@ -673,7 +692,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -682,9 +700,8 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: TENANT_B - description: server01_MLAG_Eth2 + description: SERVER_server01_MLAG_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -711,11 +728,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2B.yml index 30730e8db48..eb73fbf921a 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-LEAF2B.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Vlan4093 - ip_address: 172.31.255.16 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:12 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:13 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:10 route_targets: import: @@ -147,15 +148,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3009 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:11 route_targets: import: @@ -166,15 +168,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:20 route_targets: import: @@ -185,15 +188,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3019 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:30 route_targets: import: @@ -204,11 +208,13 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3029 updates: wait_install: true vlan_aware_bundles: @@ -281,6 +287,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -324,7 +336,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -345,12 +357,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -360,9 +372,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -371,9 +383,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -382,9 +394,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -393,9 +405,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: Tenant_B_OP_Zone_1 @@ -404,9 +416,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -415,18 +427,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 3029 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.3/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -452,7 +464,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -477,7 +489,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -505,7 +517,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -535,7 +547,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -559,7 +571,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -583,40 +595,44 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2A_Po5 - type: switched + description: MLAG_DC1-LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131 mlag: 7 - name: Port-Channel10 - description: server01_MLAG_PortChanne1 - type: switched + description: SERVER_server01_MLAG shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 mlag: 10 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -625,8 +641,7 @@ ethernet_interfaces: peer: DC1-LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -638,7 +653,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.17/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -647,7 +663,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.19/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -656,7 +673,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -665,7 +683,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 - name: Ethernet7 peer: DC1-L2LEAF1A @@ -673,7 +692,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -682,9 +700,8 @@ ethernet_interfaces: peer_interface: Eth3 peer_type: server port_profile: TENANT_B - description: server01_MLAG_Eth3 + description: SERVER_server01_MLAG_Eth3 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -711,11 +728,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE1.yml index 86d3ad1426b..a910dc3bdd9 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE1.yml @@ -58,11 +58,13 @@ router_bgp: remote_as: '65103' peer: DC1-SVC3A description: DC1-SVC3A_Ethernet1 + shutdown: true - ip_address: 172.31.255.33 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65103' peer: DC1-SVC3B description: DC1-SVC3B_Ethernet1 + shutdown: true - ip_address: 172.31.255.41 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65104' @@ -76,38 +78,40 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' + shutdown: true - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' + shutdown: true address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -133,6 +137,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -154,7 +164,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -189,7 +200,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.8/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -198,25 +210,28 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.16/31 - name: Ethernet4 peer: DC1-SVC3A peer_interface: Ethernet1 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3A_Ethernet1 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.24/31 - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet1 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3B_Ethernet1 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.32/31 - name: Ethernet6 peer: DC1-BL1A @@ -225,7 +240,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.40/31 - name: Ethernet7 peer: DC1-BL1B @@ -234,11 +250,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.48/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE2.yml index 8214532c465..2828d93212e 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE2.yml @@ -58,11 +58,13 @@ router_bgp: remote_as: '65103' peer: DC1-SVC3A description: DC1-SVC3A_Ethernet2 + shutdown: true - ip_address: 172.31.255.35 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65103' peer: DC1-SVC3B description: DC1-SVC3B_Ethernet2 + shutdown: true - ip_address: 172.31.255.43 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65104' @@ -76,38 +78,40 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' + shutdown: true - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' + shutdown: true address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -133,6 +137,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -154,7 +164,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -189,7 +200,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.10/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -198,25 +210,28 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.18/31 - name: Ethernet4 peer: DC1-SVC3A peer_interface: Ethernet2 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3A_Ethernet2 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.26/31 - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet2 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3B_Ethernet2 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.34/31 - name: Ethernet6 peer: DC1-BL1A @@ -225,7 +240,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.42/31 - name: Ethernet7 peer: DC1-BL1B @@ -234,11 +250,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.50/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE3.yml index 523bc8f71b5..2f1dbaa086a 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE3.yml @@ -58,11 +58,13 @@ router_bgp: remote_as: '65103' peer: DC1-SVC3A description: DC1-SVC3A_Ethernet3 + shutdown: true - ip_address: 172.31.255.37 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65103' peer: DC1-SVC3B description: DC1-SVC3B_Ethernet3 + shutdown: true - ip_address: 172.31.255.45 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65104' @@ -76,38 +78,40 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' + shutdown: true - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' + shutdown: true address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -133,6 +137,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -154,7 +164,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -189,7 +200,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.12/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -198,25 +210,28 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 - name: Ethernet4 peer: DC1-SVC3A peer_interface: Ethernet3 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3A_Ethernet3 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.28/31 - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet3 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3B_Ethernet3 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.36/31 - name: Ethernet6 peer: DC1-BL1A @@ -225,7 +240,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.44/31 - name: Ethernet7 peer: DC1-BL1B @@ -234,11 +250,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.52/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE4.yml index a8c8527a043..b20e2fb60d1 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SPINE4.yml @@ -58,11 +58,13 @@ router_bgp: remote_as: '65103' peer: DC1-SVC3A description: DC1-SVC3A_Ethernet4 + shutdown: true - ip_address: 172.31.255.39 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65103' peer: DC1-SVC3B description: DC1-SVC3B_Ethernet4 + shutdown: true - ip_address: 172.31.255.47 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65104' @@ -76,38 +78,40 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' + shutdown: true - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' + shutdown: true address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -133,6 +137,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -154,7 +164,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -189,7 +200,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.14/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -198,25 +210,28 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 - name: Ethernet4 peer: DC1-SVC3A peer_interface: Ethernet4 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3A_Ethernet4 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.30/31 - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet4 peer_type: l3leaf description: P2P_LINK_TO_DC1-SVC3B_Ethernet4 - shutdown: false + shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.38/31 - name: Ethernet6 peer: DC1-BL1A @@ -225,7 +240,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.46/31 - name: Ethernet7 peer: DC1-BL1B @@ -234,11 +250,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.54/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3A.yml index 4b356c9b26a..798f234b710 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3A.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Vlan4093 - ip_address: 172.31.255.24 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:12 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:13 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:10 route_targets: import: @@ -147,15 +148,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3009 updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:14 route_targets: import: @@ -166,15 +168,16 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3013 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:11 route_targets: import: @@ -185,15 +188,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:20 route_targets: import: @@ -204,15 +208,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3019 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:21 route_targets: import: @@ -223,15 +228,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3020 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:30 route_targets: import: @@ -242,15 +248,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3029 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:31 route_targets: import: @@ -261,11 +268,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -362,6 +371,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -414,7 +429,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -435,12 +450,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -450,9 +465,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -461,9 +476,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -472,17 +487,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -491,9 +506,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: Tenant_B_OP_Zone_1 @@ -502,17 +517,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -521,26 +536,26 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 3029 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.6/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -566,7 +581,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -591,7 +606,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -619,7 +634,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -635,7 +650,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -665,7 +680,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -689,7 +704,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -705,7 +720,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -729,7 +744,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.6/31 @@ -745,32 +760,37 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.251.6/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3B_Po5 - type: switched + description: MLAG_DC1-SVC3B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 mlag: 7 - name: Port-Channel10 - description: server03_ESI_PortChanne1 - type: switched + description: SERVER_server03_ESI shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 evpn_ethernet_segment: identifier: 0000:0000:0303:0202:0101 route_target: 03:03:02:02:01:01 @@ -780,8 +800,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet5 shutdown: false channel_group: id: 5 @@ -790,8 +809,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet6 shutdown: false channel_group: id: 5 @@ -803,7 +821,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.25/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -812,7 +831,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.27/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -821,7 +841,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.29/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -830,7 +851,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.31/31 - name: Ethernet7 peer: DC1-L2LEAF2A @@ -838,7 +860,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -848,7 +869,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -857,9 +877,8 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: TENANT_A_B - description: server03_ESI_Eth1 + description: SERVER_server03_ESI_Eth1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -886,11 +905,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3B.yml index c36bc636ad2..d3a66604108 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/DC1-SVC3B.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Vlan4093 - ip_address: 172.31.255.32 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -98,7 +98,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:12 route_targets: import: @@ -109,15 +108,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:13 route_targets: import: @@ -128,15 +128,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:10 route_targets: import: @@ -147,15 +148,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3009 updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:14 route_targets: import: @@ -166,15 +168,16 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3013 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:11 route_targets: import: @@ -185,15 +188,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:20 route_targets: import: @@ -204,15 +208,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3019 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:21 route_targets: import: @@ -223,15 +228,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3020 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:30 route_targets: import: @@ -242,15 +248,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3029 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:31 route_targets: import: @@ -261,11 +268,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -362,6 +371,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -414,7 +429,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -435,12 +450,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -450,9 +465,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -461,9 +476,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -472,17 +487,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -491,9 +506,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: Tenant_B_OP_Zone_1 @@ -502,17 +517,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -521,26 +536,26 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 3029 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.7/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -566,7 +581,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -591,7 +606,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -619,7 +634,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -635,7 +650,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -665,7 +680,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -689,7 +704,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -705,7 +720,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -729,7 +744,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.7/31 @@ -745,33 +760,35 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.251.7/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3A_Po5 - type: switched + description: MLAG_DC1-SVC3A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350 mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-SVC3A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet5 shutdown: false channel_group: id: 5 @@ -780,8 +797,7 @@ ethernet_interfaces: peer: DC1-SVC3A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet6 shutdown: false channel_group: id: 5 @@ -793,7 +809,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.33/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -802,7 +819,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.35/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -811,7 +829,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.37/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -820,7 +839,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.39/31 - name: Ethernet7 peer: DC1-L2LEAF2A @@ -828,7 +848,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -838,7 +857,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -865,11 +883,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.9/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp-empty-filter/cv_server_configlets.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp-empty-filter/cv_server_configlets.yml index 05137d98676..33c55eab76e 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp-empty-filter/cv_server_configlets.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp-empty-filter/cv_server_configlets.yml @@ -1,63 +1,64 @@ cvp_configlets: - AVD_DC1-BL1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + AVD_DC1-BL1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege 15 + role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-BL1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n description MLAG_PEER_DC1-BL1B_Po5\n - \ no shutdown\n switchport\n switchport mode trunk\n switchport trunk group - LEAF_PEER_L3\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - P2P_LINK_TO_DC1-SPINE1_Ethernet6\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.41/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet6\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.43/31\n!\ninterface - Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet6\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.45/31\n!\ninterface Ethernet4\n - \ description P2P_LINK_TO_DC1-SPINE4_Ethernet6\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.47/31\n!\ninterface Ethernet5\n description - MLAG_PEER_DC1-BL1B_Ethernet5\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet6\n description MLAG_PEER_DC1-BL1B_Ethernet6\n no shutdown\n channel-group - 5 mode active\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n no - shutdown\n ip address 192.168.255.10/32\n!\ninterface Loopback1\n description - VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode mstp\nno + spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 150\n + \ name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ trunk group MLAG\n!\nvlan 3020\n name MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk + group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n + \ description MLAG_DC1-BL1B_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description P2P_LINK_TO_DC1-SPINE1_Ethernet6\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.41/31\n!\ninterface Ethernet2\n description + P2P_LINK_TO_DC1-SPINE2_Ethernet6\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.43/31\n!\ninterface Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet6\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.45/31\n!\ninterface + Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet6\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.47/31\n!\ninterface Ethernet5\n + \ description MLAG_DC1-BL1B_Ethernet5\n no shutdown\n channel-group 5 mode + active\n!\ninterface Ethernet6\n description MLAG_DC1-BL1B_Ethernet6\n no + shutdown\n channel-group 5 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.10/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.110/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.10/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.10/31\n!\ninterface - Vxlan1\n description DC1-BL1A_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 150 vni 10150\n vxlan vlan 250 vni 20250\n vxlan vlan 350 vni - 30350\n vxlan vrf Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_B_WAN_Zone vni - 21\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip - routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing - vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n - \ seq 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq - 32\n!\nmlag configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n - \ peer-address 10.255.252.11\n peer-link Port-Channel5\n reload-delay mlag - 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map - RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map + Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface Vlan3030\n description + MLAG_L3_VRF_Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n + \ ip address 10.255.251.10/31\n!\ninterface Vlan4093\n description MLAG_L3\n + \ no shutdown\n mtu 1500\n ip address 10.255.251.10/31\n!\ninterface Vlan4094\n + \ description MLAG\n no shutdown\n mtu 1500\n no autostate\n ip address + 10.255.252.10/31\n!\ninterface Vxlan1\n description DC1-BL1A_VTEP\n vxlan + source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 150 vni 10150\n vxlan + vlan 250 vni 20250\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_WAN_Zone + vni 14\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_WAN_Zone + vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq + 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag + configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n peer-address + 10.255.252.11\n peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay + non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP + permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65104\n @@ -75,8 +76,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.11 description DC1-BL1B\n neighbor 172.31.255.40 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.40 remote-as 65001\n neighbor + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan4093\n neighbor 172.31.255.40 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.40 remote-as 65001\n neighbor 172.31.255.40 description DC1-SPINE1_Ethernet6\n neighbor 172.31.255.42 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.42 remote-as 65001\n neighbor 172.31.255.42 description DC1-SPINE2_Ethernet6\n neighbor 172.31.255.44 peer @@ -85,91 +86,94 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.46 remote-as 65001\n neighbor 172.31.255.46 description DC1-SPINE4_Ethernet6\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n - \ rd 192.168.255.10:14\n route-target both 14:14\n redistribute - learned\n vlan 150\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd - 192.168.255.10:21\n route-target both 21:21\n redistribute learned\n - \ vlan 250\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n - \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n - \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family - ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS - activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_WAN_Zone\n - \ rd 192.168.255.10:14\n route-target import evpn 14:14\n route-target - export evpn 14:14\n router-id 192.168.255.10\n update wait-install\n - \ neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.10:14\n + \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n + \ vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.10:21\n route-target + both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle + Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n route-target both 31:31\n + \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER + activate\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.10:14\n route-target + import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.10\n + \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3013\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.10:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.10\n \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n - \ route-target import evpn 31:31\n route-target export evpn 31:31\n router-id - 192.168.255.10\n update wait-install\n neighbor 10.255.251.11 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n - \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-BL1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.10\n + \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-BL1B: "!\nno enable password\nno aaa root\n!\nusername admin privilege 15 + role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-BL1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n description MLAG_PEER_DC1-BL1A_Po5\n - \ no shutdown\n switchport\n switchport mode trunk\n switchport trunk group - LEAF_PEER_L3\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - P2P_LINK_TO_DC1-SPINE1_Ethernet7\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.49/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet7\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.51/31\n!\ninterface - Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet7\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.53/31\n!\ninterface Ethernet4\n - \ description P2P_LINK_TO_DC1-SPINE4_Ethernet7\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.55/31\n!\ninterface Ethernet5\n description - MLAG_PEER_DC1-BL1A_Ethernet5\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet6\n description MLAG_PEER_DC1-BL1A_Ethernet6\n no shutdown\n channel-group - 5 mode active\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n no - shutdown\n ip address 192.168.255.11/32\n!\ninterface Loopback1\n description - VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode mstp\nno + spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 150\n + \ name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ trunk group MLAG\n!\nvlan 3020\n name MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk + group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n + \ description MLAG_DC1-BL1A_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description P2P_LINK_TO_DC1-SPINE1_Ethernet7\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.49/31\n!\ninterface Ethernet2\n description + P2P_LINK_TO_DC1-SPINE2_Ethernet7\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.51/31\n!\ninterface Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet7\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.53/31\n!\ninterface + Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet7\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.55/31\n!\ninterface Ethernet5\n + \ description MLAG_DC1-BL1A_Ethernet5\n no shutdown\n channel-group 5 mode + active\n!\ninterface Ethernet6\n description MLAG_DC1-BL1A_Ethernet6\n no + shutdown\n channel-group 5 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.11/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.111/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.11/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.11/31\n!\ninterface - Vxlan1\n description DC1-BL1B_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 150 vni 10150\n vxlan vlan 250 vni 20250\n vxlan vlan 350 vni - 30350\n vxlan vrf Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_B_WAN_Zone vni - 21\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip - routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing - vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n - \ seq 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq - 32\n!\nmlag configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n - \ peer-address 10.255.252.10\n peer-link Port-Channel5\n reload-delay mlag - 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map - RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map + Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface Vlan3030\n description + MLAG_L3_VRF_Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n + \ ip address 10.255.251.11/31\n!\ninterface Vlan4093\n description MLAG_L3\n + \ no shutdown\n mtu 1500\n ip address 10.255.251.11/31\n!\ninterface Vlan4094\n + \ description MLAG\n no shutdown\n mtu 1500\n no autostate\n ip address + 10.255.252.11/31\n!\ninterface Vxlan1\n description DC1-BL1B_VTEP\n vxlan + source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 150 vni 10150\n vxlan + vlan 250 vni 20250\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_WAN_Zone + vni 14\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_WAN_Zone + vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq + 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag + configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n peer-address + 10.255.252.10\n peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay + non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP + permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65104\n @@ -187,8 +191,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.10 description DC1-BL1A\n neighbor 172.31.255.48 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.48 remote-as 65001\n neighbor + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan4093\n neighbor 172.31.255.48 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.48 remote-as 65001\n neighbor 172.31.255.48 description DC1-SPINE1_Ethernet7\n neighbor 172.31.255.50 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.50 remote-as 65001\n neighbor 172.31.255.50 description DC1-SPINE2_Ethernet7\n neighbor 172.31.255.52 peer @@ -197,64 +201,67 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.54 remote-as 65001\n neighbor 172.31.255.54 description DC1-SPINE4_Ethernet7\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n - \ rd 192.168.255.11:14\n route-target both 14:14\n redistribute - learned\n vlan 150\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd - 192.168.255.11:21\n route-target both 21:21\n redistribute learned\n - \ vlan 250\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n - \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n - \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family - ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS - activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_WAN_Zone\n - \ rd 192.168.255.11:14\n route-target import evpn 14:14\n route-target - export evpn 14:14\n router-id 192.168.255.11\n update wait-install\n - \ neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.11:14\n + \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n + \ vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.11:21\n route-target + both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle + Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n route-target both 31:31\n + \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER + activate\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.11:14\n route-target + import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.11\n + \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3013\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.11:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.11\n \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n - \ route-target import evpn 31:31\n route-target export evpn 31:31\n router-id - 192.168.255.11\n update wait-install\n neighbor 10.255.251.10 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n - \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.11\n + \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-L2LEAF1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nspanning-tree mst 0 priority 16384\n!\nno enable password\nno aaa root\n!\nusername - admin privilege 15 role network-admin nopassword\nusername cvpadmin privilege - 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan - 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan - 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf - instance MGMT\n!\ninterface Port-Channel1\n description DC1_LEAF2_Po7\n no - shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n - \ switchport mode trunk\n!\ninterface Ethernet1\n description DC1-LEAF2A_Ethernet7\n - \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet2\n description - DC1-LEAF2B_Ethernet7\n no shutdown\n channel-group 1 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.112/24\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan + 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan + 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan + 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n + \ description DC1_LEAF2_Po7\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n!\ninterface + Ethernet1\n description DC1-LEAF2A_Ethernet7\n no shutdown\n channel-group + 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF2B_Ethernet7\n no + shutdown\n channel-group 1 mode active\n!\ninterface Management1\n description + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.112/24\nno + ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-L2LEAF2A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -262,35 +269,35 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG_PEER\n trunk group - MLAG\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 1\n!\ninterface Port-Channel3\n description - MLAG_PEER_DC1-L2LEAF2B_Po3\n no shutdown\n switchport\n switchport mode - trunk\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - DC1-SVC3A_Ethernet7\n no shutdown\n channel-group 1 mode active\n!\ninterface - Ethernet2\n description DC1-SVC3B_Ethernet7\n no shutdown\n channel-group - 1 mode active\n!\ninterface Ethernet3\n description MLAG_PEER_DC1-L2LEAF2B_Ethernet3\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG\n trunk group MLAG\n!\nvrf + instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n no + shutdown\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n + \ switchport mode trunk\n switchport\n mlag 1\n!\ninterface Port-Channel3\n + \ description MLAG_DC1-L2LEAF2B_Port-Channel3\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description DC1-SVC3A_Ethernet7\n shutdown\n channel-group 1 mode active\n!\ninterface + Ethernet2\n description DC1-SVC3B_Ethernet7\n shutdown\n channel-group 1 + mode active\n!\ninterface Ethernet3\n description MLAG_DC1-L2LEAF2B_Ethernet3\n \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet4\n description - MLAG_PEER_DC1-L2LEAF2B_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.113/24\n!\ninterface Vlan4094\n description MLAG_PEER\n - \ no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.16/31\nno - ip routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface + MLAG_DC1-L2LEAF2B_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.113/24\n!\ninterface Vlan4094\n description MLAG\n no + shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.16/31\nno ip + routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.17\n peer-link Port-Channel3\n reload-delay - mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nmanagement + mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-L2LEAF2B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-L2LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-L2LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -298,76 +305,75 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG_PEER\n trunk group - MLAG\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 1\n!\ninterface Port-Channel3\n description - MLAG_PEER_DC1-L2LEAF2A_Po3\n no shutdown\n switchport\n switchport mode - trunk\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - DC1-SVC3A_Ethernet8\n no shutdown\n channel-group 1 mode active\n!\ninterface - Ethernet2\n description DC1-SVC3B_Ethernet8\n no shutdown\n channel-group - 1 mode active\n!\ninterface Ethernet3\n description MLAG_PEER_DC1-L2LEAF2A_Ethernet3\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG\n trunk group MLAG\n!\nvrf + instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n no + shutdown\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n + \ switchport mode trunk\n switchport\n mlag 1\n!\ninterface Port-Channel3\n + \ description MLAG_DC1-L2LEAF2A_Port-Channel3\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description DC1-SVC3A_Ethernet8\n shutdown\n channel-group 1 mode active\n!\ninterface + Ethernet2\n description DC1-SVC3B_Ethernet8\n shutdown\n channel-group 1 + mode active\n!\ninterface Ethernet3\n description MLAG_DC1-L2LEAF2A_Ethernet3\n \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet4\n description - MLAG_PEER_DC1-L2LEAF2A_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.114/24\n!\ninterface Vlan4094\n description MLAG_PEER\n - \ no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.17/31\nno - ip routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface + MLAG_DC1-L2LEAF2A_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.114/24\n!\ninterface Vlan4094\n description MLAG\n no + shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.17/31\nno ip + routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.16\n peer-link Port-Channel3\n reload-delay - mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nmanagement + mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-LEAF1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nspanning-tree mst 0 priority 4096\n!\nno enable password\nno aaa root\n!\nusername - admin privilege 15 role network-admin nopassword\nusername cvpadmin privilege - 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan - 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf - instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\ninterface - Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet1\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.1/31\n!\ninterface Ethernet2\n - \ description P2P_LINK_TO_DC1-SPINE2_Ethernet1\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.3/31\n!\ninterface Ethernet3\n description - P2P_LINK_TO_DC1-SPINE3_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.5/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet1\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.7/31\n!\ninterface - Ethernet6\n description server02_SINGLE_NODE_TRUNK_Eth1\n no shutdown\n switchport - trunk allowed vlan 110-111,210-211\n switchport mode trunk\n switchport\n!\ninterface - Ethernet7\n description server02_SINGLE_NODE_Eth1\n no shutdown\n switchport - access vlan 110\n switchport mode access\n switchport\n!\ninterface Loopback0\n - \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.5/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.5/32\n!\ninterface Management1\n description oob_management\n no - shutdown\n vrf MGMT\n ip address 192.168.200.105/24\n!\ninterface Vlan120\n - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n - \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual - 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n - \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface - Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface - Vxlan1\n description DC1-LEAF1A_VTEP\n vxlan source-interface Loopback1\n - \ vxlan udp-port 4789\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n - \ vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vrf Tenant_A_APP_Zone - vni 12\n vxlan vrf Tenant_A_WEB_Zone vni 11\n!\nip virtual-router mac-address - 00:dc:00:00:00:0a\n!\nip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip - routing vrf Tenant_A_WEB_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq - 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nip - route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop - interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n router-id 192.168.255.5\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n - \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS - password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n - \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nspanning-tree mst 0 priority 4096\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan + 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan + 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet1\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.1/31\n!\ninterface + Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet1\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.3/31\n!\ninterface Ethernet3\n + \ description P2P_LINK_TO_DC1-SPINE3_Ethernet1\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.5/31\n!\ninterface Ethernet4\n description + P2P_LINK_TO_DC1-SPINE4_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.7/31\n!\ninterface Ethernet6\n description SERVER_server02_SINGLE_NODE_TRUNK_Eth1\n + \ no shutdown\n switchport trunk allowed vlan 110-111,210-211\n switchport + mode trunk\n switchport\n!\ninterface Ethernet7\n description SERVER_server02_SINGLE_NODE_Eth1\n + \ no shutdown\n switchport access vlan 110\n switchport mode access\n switchport\n!\ninterface + Loopback0\n description ROUTER_ID\n no shutdown\n ip address 192.168.255.5/32\n!\ninterface + Loopback1\n description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.5/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.105/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n + \ no shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST + source-interface lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n + \ description Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n + \ ip address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface + Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.31.1/24\n!\ninterface Vxlan1\n description DC1-LEAF1A_VTEP\n + \ vxlan source-interface Loopback1\n vxlan udp-port 4789\n vxlan vlan 120 + vni 10120\n vxlan vlan 121 vni 10121\n vxlan vlan 130 vni 10130\n vxlan + vlan 131 vni 10131\n vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_WEB_Zone + vni 11\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing vrf Tenant_A_WEB_Zone\n!\nip + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n + \ seq 20 permit 192.168.254.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n + \ router-id 192.168.255.5\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor + EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor + EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS + send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS\n @@ -380,111 +386,108 @@ cvp_configlets: \ neighbor 172.31.255.6 remote-as 65001\n neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.1 remote-as 65001\n neighbor 192.168.255.1 description - DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n - \ neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 - remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n neighbor - 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as - 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute connected - route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd - 192.168.255.5:12\n route-target both 12:12\n redistribute learned\n - \ vlan 130-131\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n - \ route-target both 11:11\n redistribute learned\n vlan 120-121\n - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor - IPv4-UNDERLAY-PEERS activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.5:12\n - \ route-target import evpn 12:12\n route-target export evpn 12:12\n router-id - 192.168.255.5\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n - \ rd 192.168.255.5:11\n route-target import evpn 11:11\n route-target - export evpn 11:11\n router-id 192.168.255.5\n redistribute connected\n!\nmanagement + DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description + DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description + DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description + DC1-SPINE4_Loopback0\n redistribute connected route-map RM-CONN-2-BGP\n !\n + \ vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target + both 12:12\n redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle + Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n route-target both 11:11\n + \ redistribute learned\n vlan 120-121\n !\n address-family evpn\n + \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no + neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n + \ !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target + import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.5\n + \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n + \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id + 192.168.255.5\n redistribute connected\n!\nend\n" + AVD_DC1-LEAF2A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n!\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n name - MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n trunk group MLAG\n!\nvlan 3010\n + \ name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk group MLAG\n!\nvlan 3011\n name + MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ trunk group MLAG\n!\nvlan 3019\n name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk + group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-LEAF2B_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1-L2LEAF1A_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n switchport - mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description server01_MLAG_PortChanne1\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 210-211\n switchport - mode trunk\n mlag 10\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet2\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.9/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet2\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.11/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet2\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.13/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.15/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-LEAF2B_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-LEAF2B_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF1A_Ethernet1\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet10\n description server01_MLAG_Eth2\n no - shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.6/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.6/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.6/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.106/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface - Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.2/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.2/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.2/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.2/31\n!\ninterface Vxlan1\n description DC1-LEAF2A_VTEP\n + \ description MLAG_DC1-LEAF2B_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1-L2LEAF1A_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n mlag 7\n!\ninterface + Port-Channel10\n description SERVER_server01_MLAG\n no shutdown\n switchport + trunk allowed vlan 210-211\n switchport mode trunk\n switchport\n mlag 10\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet2\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.9/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet2\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.11/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.13/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet2\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.15/31\n!\ninterface + Ethernet5\n description MLAG_DC1-LEAF2B_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-LEAF2B_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF1A_Ethernet1\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet10\n description SERVER_server01_MLAG_Eth2\n no shutdown\n channel-group + 10 mode active\n!\ninterface Loopback0\n description ROUTER_ID\n no shutdown\n + \ ip address 192.168.255.6/32\n!\ninterface Loopback1\n description VXLAN_TUNNEL_SOURCE\n + \ no shutdown\n ip address 192.168.254.6/32\n!\ninterface Loopback100\n description + Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n + \ no shutdown\n vrf MGMT\n ip address 192.168.200.106/24\n!\ninterface Vlan110\n + \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3010\n + \ description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_WEB_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3011\n description + MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n + \ ip address 10.255.251.2/31\n!\ninterface Vlan3012\n description MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.2/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3029\n + \ description MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_C_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan4093\n description + MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.2/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.2/31\n!\ninterface Vxlan1\n description DC1-LEAF2A_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -502,162 +505,166 @@ cvp_configlets: \ seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_LEAF2\n \ local-interface Vlan4094\n peer-address 10.255.252.3\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.6\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2B\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.3 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.3 description DC1-LEAF2B\n - \ neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.8 - remote-as 65001\n neighbor 172.31.255.8 description DC1-SPINE1_Ethernet2\n neighbor - 172.31.255.10 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.10 remote-as - 65001\n neighbor 172.31.255.10 description DC1-SPINE2_Ethernet2\n neighbor - 172.31.255.12 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.12 remote-as - 65001\n neighbor 172.31.255.12 description DC1-SPINE3_Ethernet2\n neighbor - 172.31.255.14 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.14 remote-as - 65001\n neighbor 172.31.255.14 description DC1-SPINE4_Ethernet2\n neighbor - 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as - 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor - 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description - DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.6:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.6:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n route-target - both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle - Tenant_B_OP_Zone\n rd 192.168.255.6:20\n route-target both 20:20\n redistribute - learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd - 192.168.255.6:30\n route-target both 30:30\n redistribute learned\n - \ vlan 310-311\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.6\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.6\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2B\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan4093\n neighbor 172.31.255.8 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.8 remote-as 65001\n neighbor + 172.31.255.8 description DC1-SPINE1_Ethernet2\n neighbor 172.31.255.10 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.10 remote-as 65001\n neighbor + 172.31.255.10 description DC1-SPINE2_Ethernet2\n neighbor 172.31.255.12 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.12 remote-as 65001\n neighbor + 172.31.255.12 description DC1-SPINE3_Ethernet2\n neighbor 172.31.255.14 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.14 remote-as 65001\n neighbor + 172.31.255.14 description DC1-SPINE4_Ethernet2\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.6:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.6:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.6:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd + 192.168.255.6:11\n route-target both 11:11\n redistribute learned\n + \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.6:20\n + \ route-target both 20:20\n redistribute learned\n vlan 210-211\n + \ !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.6:30\n route-target + both 30:30\n redistribute learned\n vlan 310-311\n !\n address-family + evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n + \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.6:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.6\n update wait-install\n + \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.3 description DC1-LEAF2B_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.6:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.6:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.6\n \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.6:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.6\n update wait-install\n neighbor 10.255.251.3 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.6:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.6\n update wait-install\n - \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n route-target import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.6\n \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.6:20\n - \ route-target import evpn 20:20\n route-target export evpn 20:20\n router-id - 192.168.255.6\n update wait-install\n neighbor 10.255.251.3 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_OP_Zone\n - \ rd 192.168.255.6:30\n route-target import evpn 30:30\n route-target - export evpn 30:30\n router-id 192.168.255.6\n update wait-install\n - \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.6:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.6:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3029\n redistribute + connected\n!\nend\n" + AVD_DC1-LEAF2B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n!\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n name - MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n trunk group MLAG\n!\nvlan 3010\n + \ name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk group MLAG\n!\nvlan 3011\n name + MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ trunk group MLAG\n!\nvlan 3019\n name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk + group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-LEAF2A_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1-L2LEAF1A_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n switchport - mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description server01_MLAG_PortChanne1\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 210-211\n switchport - mode trunk\n mlag 10\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet3\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.17/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet3\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.19/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet3\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.21/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.23/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-LEAF2A_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-LEAF2A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF1A_Ethernet2\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet10\n description server01_MLAG_Eth3\n no - shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.7/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.6/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.7/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.107/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface - Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.3/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.3/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.3/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.3/31\n!\ninterface Vxlan1\n description DC1-LEAF2B_VTEP\n + \ description MLAG_DC1-LEAF2A_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1-L2LEAF1A_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n mlag 7\n!\ninterface + Port-Channel10\n description SERVER_server01_MLAG\n no shutdown\n switchport + trunk allowed vlan 210-211\n switchport mode trunk\n switchport\n mlag 10\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet3\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.17/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet3\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.19/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.21/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet3\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.23/31\n!\ninterface + Ethernet5\n description MLAG_DC1-LEAF2A_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-LEAF2A_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF1A_Ethernet2\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet10\n description SERVER_server01_MLAG_Eth3\n no shutdown\n channel-group + 10 mode active\n!\ninterface Loopback0\n description ROUTER_ID\n no shutdown\n + \ ip address 192.168.255.7/32\n!\ninterface Loopback1\n description VXLAN_TUNNEL_SOURCE\n + \ no shutdown\n ip address 192.168.254.6/32\n!\ninterface Loopback100\n description + Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address 10.255.1.7/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n + \ no shutdown\n vrf MGMT\n ip address 192.168.200.107/24\n!\ninterface Vlan110\n + \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3010\n + \ description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_WEB_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3011\n description + MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n + \ ip address 10.255.251.3/31\n!\ninterface Vlan3012\n description MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.3/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3029\n + \ description MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_C_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan4093\n description + MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.3/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.3/31\n!\ninterface Vxlan1\n description DC1-LEAF2B_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -675,110 +682,116 @@ cvp_configlets: \ seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_LEAF2\n \ local-interface Vlan4094\n peer-address 10.255.252.2\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.7\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2A\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.2 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.2 description DC1-LEAF2A\n - \ neighbor 172.31.255.16 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.16 - remote-as 65001\n neighbor 172.31.255.16 description DC1-SPINE1_Ethernet3\n - \ neighbor 172.31.255.18 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.18 - remote-as 65001\n neighbor 172.31.255.18 description DC1-SPINE2_Ethernet3\n - \ neighbor 172.31.255.20 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.20 - remote-as 65001\n neighbor 172.31.255.20 description DC1-SPINE3_Ethernet3\n - \ neighbor 172.31.255.22 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.22 - remote-as 65001\n neighbor 172.31.255.22 description DC1-SPINE4_Ethernet3\n - \ neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 - remote-as 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor - 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as - 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor - 192.168.255.3 description DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description - DC1-SPINE4\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.7:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.7:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.7:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.7:11\n route-target - both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle - Tenant_B_OP_Zone\n rd 192.168.255.7:20\n route-target both 20:20\n redistribute - learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd - 192.168.255.7:30\n route-target both 30:30\n redistribute learned\n - \ vlan 310-311\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.7:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.7\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.7\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2A\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan4093\n neighbor 172.31.255.16 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.16 remote-as 65001\n neighbor + 172.31.255.16 description DC1-SPINE1_Ethernet3\n neighbor 172.31.255.18 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.18 remote-as 65001\n neighbor + 172.31.255.18 description DC1-SPINE2_Ethernet3\n neighbor 172.31.255.20 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.20 remote-as 65001\n neighbor + 172.31.255.20 description DC1-SPINE3_Ethernet3\n neighbor 172.31.255.22 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.22 remote-as 65001\n neighbor + 172.31.255.22 description DC1-SPINE4_Ethernet3\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.7:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.7:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.7:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd + 192.168.255.7:11\n route-target both 11:11\n redistribute learned\n + \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.7:20\n + \ route-target both 20:20\n redistribute learned\n vlan 210-211\n + \ !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.7:30\n route-target + both 30:30\n redistribute learned\n vlan 310-311\n !\n address-family + evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n + \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.7:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.7\n update wait-install\n + \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.2 description DC1-LEAF2A_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.7:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.7\n \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.7:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.7\n update wait-install\n neighbor 10.255.251.2 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.7:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.7\n update wait-install\n - \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.7:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.7:11\n route-target import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.7\n \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.7:20\n - \ route-target import evpn 20:20\n route-target export evpn 20:20\n router-id - 192.168.255.7\n update wait-install\n neighbor 10.255.251.2 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_OP_Zone\n - \ rd 192.168.255.7:30\n route-target import evpn 30:30\n route-target - export evpn 30:30\n router-id 192.168.255.7\n update wait-install\n - \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.7:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.7:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3029\n redistribute + connected\n!\nend\n" + AVD_DC1-SPINE1: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE1\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.0/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.8/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.16/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet1\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.24/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet1\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.32/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.32/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.40/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.48/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.1/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.101/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.1\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.1/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.101/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.1\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -790,65 +803,66 @@ cvp_configlets: description DC1-LEAF2A_Ethernet1\n neighbor 172.31.255.17 peer group IPv4-UNDERLAY-PEERS\n \ neighbor 172.31.255.17 remote-as 65102\n neighbor 172.31.255.17 description DC1-LEAF2B_Ethernet1\n neighbor 172.31.255.25 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.25 remote-as 65103\n neighbor 172.31.255.25 description - DC1-SVC3A_Ethernet1\n neighbor 172.31.255.33 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.33 remote-as 65103\n neighbor 172.31.255.33 description - DC1-SVC3B_Ethernet1\n neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.41 remote-as 65104\n neighbor 172.31.255.41 description - DC1-BL1A_Ethernet1\n neighbor 172.31.255.49 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.49 remote-as 65104\n neighbor 172.31.255.49 description - DC1-BL1B_Ethernet1\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 172.31.255.25 remote-as 65103\n neighbor 172.31.255.25 shutdown\n + \ neighbor 172.31.255.25 description DC1-SVC3A_Ethernet1\n neighbor 172.31.255.33 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.33 remote-as 65103\n neighbor + 172.31.255.33 shutdown\n neighbor 172.31.255.33 description DC1-SVC3B_Ethernet1\n + \ neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.41 + remote-as 65104\n neighbor 172.31.255.41 description DC1-BL1A_Ethernet1\n neighbor + 172.31.255.49 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.49 remote-as + 65104\n neighbor 172.31.255.49 description DC1-BL1B_Ethernet1\n neighbor 192.168.255.5 + peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.5 remote-as 65101\n neighbor + 192.168.255.5 description DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.6 remote-as 65102\n neighbor + 192.168.255.6 description DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 remote-as 65102\n neighbor + 192.168.255.7 description DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as 65103\n neighbor + 192.168.255.8 shutdown\n neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n + \ neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 + remote-as 65103\n neighbor 192.168.255.9 shutdown\n neighbor 192.168.255.9 + description DC1-SVC3B_Loopback0\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + DC1-BL1A_Loopback0\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description + DC1-BL1B_Loopback0\n redistribute connected route-map RM-CONN-2-BGP\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n!\nend\n" + AVD_DC1-SPINE2: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE2\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.2/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.10/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.18/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet2\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.26/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet2\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.34/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.34/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.42/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.50/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.2/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.102/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.2\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.2/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.102/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.2\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -861,64 +875,65 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.19 remote-as 65102\n neighbor 172.31.255.19 description DC1-LEAF2B_Ethernet2\n neighbor 172.31.255.27 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.27 remote-as 65103\n neighbor - 172.31.255.27 description DC1-SVC3A_Ethernet2\n neighbor 172.31.255.35 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.35 remote-as 65103\n neighbor - 172.31.255.35 description DC1-SVC3B_Ethernet2\n neighbor 172.31.255.43 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.43 remote-as 65104\n neighbor - 172.31.255.43 description DC1-BL1A_Ethernet2\n neighbor 172.31.255.51 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.51 remote-as 65104\n neighbor 172.31.255.51 - description DC1-BL1B_Ethernet2\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.27 shutdown\n neighbor 172.31.255.27 description DC1-SVC3A_Ethernet2\n + \ neighbor 172.31.255.35 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.35 + remote-as 65103\n neighbor 172.31.255.35 shutdown\n neighbor 172.31.255.35 + description DC1-SVC3B_Ethernet2\n neighbor 172.31.255.43 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.43 remote-as 65104\n neighbor 172.31.255.43 description + DC1-BL1A_Ethernet2\n neighbor 172.31.255.51 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.51 remote-as 65104\n neighbor 172.31.255.51 description + DC1-BL1B_Ethernet2\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SPINE3: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE3: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE3\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet3\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.4/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.12/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet3\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.20/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet3\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.28/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet3\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.36/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.36/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.44/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.52/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.3/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.103/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.3\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.3/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.103/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.3\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -931,64 +946,65 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.21 remote-as 65102\n neighbor 172.31.255.21 description DC1-LEAF2B_Ethernet3\n neighbor 172.31.255.29 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.29 remote-as 65103\n neighbor - 172.31.255.29 description DC1-SVC3A_Ethernet3\n neighbor 172.31.255.37 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.37 remote-as 65103\n neighbor - 172.31.255.37 description DC1-SVC3B_Ethernet3\n neighbor 172.31.255.45 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.45 remote-as 65104\n neighbor - 172.31.255.45 description DC1-BL1A_Ethernet3\n neighbor 172.31.255.53 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.53 remote-as 65104\n neighbor 172.31.255.53 - description DC1-BL1B_Ethernet3\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.29 shutdown\n neighbor 172.31.255.29 description DC1-SVC3A_Ethernet3\n + \ neighbor 172.31.255.37 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.37 + remote-as 65103\n neighbor 172.31.255.37 shutdown\n neighbor 172.31.255.37 + description DC1-SVC3B_Ethernet3\n neighbor 172.31.255.45 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.45 remote-as 65104\n neighbor 172.31.255.45 description + DC1-BL1A_Ethernet3\n neighbor 172.31.255.53 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.53 remote-as 65104\n neighbor 172.31.255.53 description + DC1-BL1B_Ethernet3\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SPINE4: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE4: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE4\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet4\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.6/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.14/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet4\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.22/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet4\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.30/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet4\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.38/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.38/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.46/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.54/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.4/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.104/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.4\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.4/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.104/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.4\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -1001,40 +1017,42 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.23 remote-as 65102\n neighbor 172.31.255.23 description DC1-LEAF2B_Ethernet4\n neighbor 172.31.255.31 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.31 remote-as 65103\n neighbor - 172.31.255.31 description DC1-SVC3A_Ethernet4\n neighbor 172.31.255.39 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.39 remote-as 65103\n neighbor - 172.31.255.39 description DC1-SVC3B_Ethernet4\n neighbor 172.31.255.47 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.47 remote-as 65104\n neighbor - 172.31.255.47 description DC1-BL1A_Ethernet4\n neighbor 172.31.255.55 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.55 remote-as 65104\n neighbor 172.31.255.55 - description DC1-BL1B_Ethernet4\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.31 shutdown\n neighbor 172.31.255.31 description DC1-SVC3A_Ethernet4\n + \ neighbor 172.31.255.39 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.39 + remote-as 65103\n neighbor 172.31.255.39 shutdown\n neighbor 172.31.255.39 + description DC1-SVC3B_Ethernet4\n neighbor 172.31.255.47 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.47 remote-as 65104\n neighbor 172.31.255.47 description + DC1-BL1A_Ethernet4\n neighbor 172.31.255.55 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.55 remote-as 65104\n neighbor 172.31.255.55 description + DC1-BL1B_Ethernet4\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SVC3A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SVC3A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-SVC3A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-SVC3A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -1042,51 +1060,48 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf - instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance - Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-SVC3B_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1_L2LEAF2_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description - server03_ESI_PortChanne1\n no shutdown\n switchport\n switchport trunk allowed - vlan 110-111,210-211\n switchport mode trunk\n evpn ethernet-segment\n identifier - 0000:0000:0303:0202:0101\n route-target import 03:03:02:02:01:01\n lacp - system-id 0303.0202.0101\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet4\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.25/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet4\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.27/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet4\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.29/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.31/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-SVC3B_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-SVC3B_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF2A_Ethernet1\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet8\n description DC1-L2LEAF2B_Ethernet1\n - \ no shutdown\n channel-group 7 mode active\n!\ninterface Ethernet10\n description - server03_ESI_Eth1\n no shutdown\n channel-group 10 mode active\n!\ninterface - Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip address - 192.168.255.8/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n - \ no shutdown\n ip address 192.168.254.8/32\n!\ninterface Loopback100\n description - Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.8/32\n!\ninterface Management1\n description oob_management\n - \ no shutdown\n vrf MGMT\n ip address 192.168.200.108/24\n!\ninterface Vlan110\n - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3010\n name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk + group MLAG\n!\nvlan 3011\n name MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group + MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n trunk group MLAG\n!\nvlan + 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n trunk group MLAG\n!\nvlan 3019\n + \ name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk group MLAG\n!\nvlan 3020\n name + MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk + group MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n + \ name MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance + Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface + Port-Channel5\n description MLAG_DC1-SVC3B_Port-Channel5\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1_L2LEAF2_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n switchport mode + trunk\n switchport\n mlag 7\n!\ninterface Port-Channel10\n description SERVER_server03_ESI\n + \ no shutdown\n switchport trunk allowed vlan 110-111,210-211\n switchport + mode trunk\n switchport\n evpn ethernet-segment\n identifier 0000:0000:0303:0202:0101\n + \ route-target import 03:03:02:02:01:01\n lacp system-id 0303.0202.0101\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet4\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.25/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet4\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.27/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.29/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet4\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.31/31\n!\ninterface + Ethernet5\n description MLAG_DC1-SVC3B_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-SVC3B_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF2A_Ethernet1\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet8\n description DC1-L2LEAF2B_Ethernet1\n no shutdown\n channel-group + 7 mode active\n!\ninterface Ethernet10\n description SERVER_server03_ESI_Eth1\n + \ no shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.8/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.8/32\n!\ninterface + Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n + \ vrf Tenant_A_OP_Zone\n ip address 10.255.1.8/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.108/24\n!\ninterface + Vlan110\n description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n + \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n @@ -1109,28 +1124,25 @@ cvp_configlets: \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n - \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.6/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.6/31\n!\ninterface Vxlan1\n description DC1-SVC3A_VTEP\n + \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan3010\n description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3011\n + \ description MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_APP_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3012\n description + MLAG_L3_VRF_Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n + \ ip address 10.255.251.6/31\n!\ninterface Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3029\n description + MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n + \ ip address 10.255.251.6/31\n!\ninterface Vlan3030\n description MLAG_L3_VRF_Tenant_C_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan4093\n description MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.6/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.6/31\n!\ninterface Vxlan1\n description DC1-SVC3A_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -1152,101 +1164,110 @@ cvp_configlets: permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_SVC3\n \ local-interface Vlan4094\n peer-address 10.255.252.7\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.8\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65103\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-SVC3B\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.7 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.7 description DC1-SVC3B\n - \ neighbor 172.31.255.24 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.24 - remote-as 65001\n neighbor 172.31.255.24 description DC1-SPINE1_Ethernet4\n - \ neighbor 172.31.255.26 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.26 - remote-as 65001\n neighbor 172.31.255.26 description DC1-SPINE2_Ethernet4\n - \ neighbor 172.31.255.28 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.28 - remote-as 65001\n neighbor 172.31.255.28 description DC1-SPINE3_Ethernet4\n - \ neighbor 172.31.255.30 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.30 - remote-as 65001\n neighbor 172.31.255.30 description DC1-SPINE4_Ethernet4\n - \ neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 - remote-as 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor - 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as - 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor - 192.168.255.3 description DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description - DC1-SPINE4\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.8:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.8:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.8:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.8:14\n route-target - both 14:14\n redistribute learned\n vlan 150\n !\n vlan-aware-bundle - Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n route-target both 11:11\n - \ redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n - \ rd 192.168.255.8:20\n route-target both 20:20\n redistribute learned\n - \ vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n - \ route-target both 21:21\n redistribute learned\n vlan 250\n !\n - \ vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.8:30\n route-target - both 30:30\n redistribute learned\n vlan 310-311\n !\n vlan-aware-bundle - Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n route-target both 31:31\n - \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor - EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS - activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.8:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.8\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.8\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65103\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-SVC3B\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan4093\n neighbor 172.31.255.24 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.24 remote-as 65001\n neighbor + 172.31.255.24 description DC1-SPINE1_Ethernet4\n neighbor 172.31.255.26 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.26 remote-as 65001\n neighbor + 172.31.255.26 description DC1-SPINE2_Ethernet4\n neighbor 172.31.255.28 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.28 remote-as 65001\n neighbor + 172.31.255.28 description DC1-SPINE3_Ethernet4\n neighbor 172.31.255.30 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.30 remote-as 65001\n neighbor + 172.31.255.30 description DC1-SPINE4_Ethernet4\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.8:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.8:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.8:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd + 192.168.255.8:14\n route-target both 14:14\n redistribute learned\n + \ vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n + \ route-target both 11:11\n redistribute learned\n vlan 120-121\n + \ !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.8:20\n route-target + both 20:20\n redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle + Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n route-target both 21:21\n + \ redistribute learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n + \ rd 192.168.255.8:30\n route-target both 30:30\n redistribute learned\n + \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n + \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.8:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.8\n update wait-install\n + \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.7 description DC1-SVC3B_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.8:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.8:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.8:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.8:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.8:14\n route-target import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n - \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_B_OP_Zone\n - \ rd 192.168.255.8:20\n route-target import evpn 20:20\n route-target - export evpn 20:20\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3013\n redistribute + connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n route-target + import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.8:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3019\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.8:30\n - \ route-target import evpn 30:30\n route-target export evpn 30:30\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n - \ rd 192.168.255.8:31\n route-target import evpn 31:31\n route-target - export evpn 31:31\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SVC3B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.8:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3029\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-SVC3B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-SVC3B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-SVC3B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -1254,121 +1275,117 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf - instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance - Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-SVC3A_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1_L2LEAF2_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 7\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet5\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3010\n name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk + group MLAG\n!\nvlan 3011\n name MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group + MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n trunk group MLAG\n!\nvlan + 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n trunk group MLAG\n!\nvlan 3019\n + \ name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk group MLAG\n!\nvlan 3020\n name + MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk + group MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n + \ name MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance + Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface + Port-Channel5\n description MLAG_DC1-SVC3A_Port-Channel5\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1_L2LEAF2_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n switchport mode + trunk\n switchport\n mlag 7\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet5\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.33/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet5\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.35/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-SPINE3_Ethernet5\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.37/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet5\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.39/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-SVC3A_Ethernet5\n + \ ip address 172.31.255.39/31\n!\ninterface Ethernet5\n description MLAG_DC1-SVC3A_Ethernet5\n \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-SVC3A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface + MLAG_DC1-SVC3A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description DC1-L2LEAF2A_Ethernet2\n no shutdown\n channel-group 7 mode active\n!\ninterface Ethernet8\n description DC1-L2LEAF2B_Ethernet2\n \ no shutdown\n channel-group 7 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.9/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.8/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.9/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.109/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n - \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface - Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n - \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.7/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.7/31\n!\ninterface - Vxlan1\n description DC1-SVC3B_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni - 10120\n vxlan vlan 121 vni 10121\n vxlan vlan 130 vni 10130\n vxlan vlan - 131 vni 10131\n vxlan vlan 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan - vlan 150 vni 10150\n vxlan vlan 210 vni 20210\n vxlan vlan 211 vni 20211\n - \ vxlan vlan 250 vni 20250\n vxlan vlan 310 vni 30310\n vxlan vlan 311 vni - 30311\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan - vrf Tenant_A_DB_Zone vni 13\n vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf - Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf - Tenant_B_OP_Zone vni 20\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone - vni 30\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address - 00:dc:00:00:00:0a\n!\nip address virtual source-nat vrf Tenant_A_OP_Zone address - 10.255.1.9\n!\nip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip - routing vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf - Tenant_A_WAN_Zone\nip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip - routing vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf - Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit - 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n - \ domain-id DC1_SVC3\n local-interface Vlan4094\n peer-address 10.255.252.6\n - \ peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay non-mlag - 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP - permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map - RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link - less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter - bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n - \ router-id 192.168.255.9\n maximum-paths 4 ecmp 4\n update wait-install\n - \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS - peer group\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor - EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor - EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS - send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.9/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.8/32\n!\ninterface + Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n + \ vrf Tenant_A_OP_Zone\n ip address 10.255.1.9/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.109/24\n!\ninterface + Vlan110\n description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n + \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf Tenant_A_WAN_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface + Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n + \ no shutdown\n vrf Tenant_B_WAN_Zone\n ip address virtual 10.2.50.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan350\n description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n + \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan3010\n description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3011\n + \ description MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_APP_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3012\n description + MLAG_L3_VRF_Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n + \ ip address 10.255.251.7/31\n!\ninterface Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3029\n description + MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n + \ ip address 10.255.251.7/31\n!\ninterface Vlan3030\n description MLAG_L3_VRF_Tenant_C_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan4093\n description MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.7/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.7/31\n!\ninterface Vxlan1\n description DC1-SVC3B_VTEP\n + \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan + vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n + \ vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan 140 vni + 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n vxlan vlan + 210 vni 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan + vlan 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n + \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n + \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n + \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n + \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n + \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip + address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.9\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing vrf Tenant_A_DB_Zone\nip + routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf + Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list + PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n seq 20 + permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_SVC3\n + \ local-interface Vlan4094\n peer-address 10.255.252.6\n peer-link Port-Channel5\n + \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.9\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor @@ -1377,8 +1394,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.6 description DC1-SVC3A\n neighbor 172.31.255.32 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.32 remote-as 65001\n neighbor + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan4093\n neighbor 172.31.255.32 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.32 remote-as 65001\n neighbor 172.31.255.32 description DC1-SPINE1_Ethernet5\n neighbor 172.31.255.34 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.34 remote-as 65001\n neighbor 172.31.255.34 description DC1-SPINE2_Ethernet5\n neighbor 172.31.255.36 peer @@ -1387,63 +1404,69 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.38 remote-as 65001\n neighbor 172.31.255.38 description DC1-SPINE4_Ethernet5\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n - \ rd 192.168.255.9:12\n route-target both 12:12\n redistribute learned\n - \ vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.9:13\n - \ route-target both 13:13\n redistribute learned\n vlan 140-141\n - \ !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target - both 10:10\n redistribute learned\n vlan 110-111\n !\n vlan-aware-bundle - Tenant_A_WAN_Zone\n rd 192.168.255.9:14\n route-target both 14:14\n - \ redistribute learned\n vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n - \ rd 192.168.255.9:11\n route-target both 11:11\n redistribute learned\n - \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.9:20\n - \ route-target both 20:20\n redistribute learned\n vlan 210-211\n - \ !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target - both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle - Tenant_C_OP_Zone\n rd 192.168.255.9:30\n route-target both 30:30\n redistribute - learned\n vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd - 192.168.255.9:31\n route-target both 31:31\n redistribute learned\n - \ vlan 350\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.9:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.9\n + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.9:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.9:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd + 192.168.255.9:14\n route-target both 14:14\n redistribute learned\n + \ vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n + \ route-target both 11:11\n redistribute learned\n vlan 120-121\n + \ !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.9:20\n route-target + both 20:20\n redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle + Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target both 21:21\n + \ redistribute learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n + \ rd 192.168.255.9:30\n route-target both 30:30\n redistribute learned\n + \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.9:31\n + \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.9:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.9\n update wait-install\n + \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.6 description DC1-SVC3A_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.9:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.9:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.9:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.9:14\n route-target import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n - \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_B_OP_Zone\n - \ rd 192.168.255.9:20\n route-target import evpn 20:20\n route-target - export evpn 20:20\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3013\n redistribute + connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n route-target + import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.9:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3019\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.9:30\n - \ route-target import evpn 30:30\n route-target export evpn 30:30\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n - \ rd 192.168.255.9:31\n route-target import evpn 31:31\n route-target - export evpn 31:31\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.9:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3029\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.9:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3030\n redistribute + connected\n!\nend\n" cvp_topology: DC1_BL1: devices: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp/cv_server_configlets.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp/cv_server_configlets.yml index 05137d98676..33c55eab76e 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp/cv_server_configlets.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/intended/structured_configs/cvp/cv_server_configlets.yml @@ -1,63 +1,64 @@ cvp_configlets: - AVD_DC1-BL1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + AVD_DC1-BL1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege 15 + role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-BL1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n description MLAG_PEER_DC1-BL1B_Po5\n - \ no shutdown\n switchport\n switchport mode trunk\n switchport trunk group - LEAF_PEER_L3\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - P2P_LINK_TO_DC1-SPINE1_Ethernet6\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.41/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet6\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.43/31\n!\ninterface - Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet6\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.45/31\n!\ninterface Ethernet4\n - \ description P2P_LINK_TO_DC1-SPINE4_Ethernet6\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.47/31\n!\ninterface Ethernet5\n description - MLAG_PEER_DC1-BL1B_Ethernet5\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet6\n description MLAG_PEER_DC1-BL1B_Ethernet6\n no shutdown\n channel-group - 5 mode active\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n no - shutdown\n ip address 192.168.255.10/32\n!\ninterface Loopback1\n description - VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode mstp\nno + spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 150\n + \ name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ trunk group MLAG\n!\nvlan 3020\n name MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk + group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n + \ description MLAG_DC1-BL1B_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description P2P_LINK_TO_DC1-SPINE1_Ethernet6\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.41/31\n!\ninterface Ethernet2\n description + P2P_LINK_TO_DC1-SPINE2_Ethernet6\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.43/31\n!\ninterface Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet6\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.45/31\n!\ninterface + Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet6\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.47/31\n!\ninterface Ethernet5\n + \ description MLAG_DC1-BL1B_Ethernet5\n no shutdown\n channel-group 5 mode + active\n!\ninterface Ethernet6\n description MLAG_DC1-BL1B_Ethernet6\n no + shutdown\n channel-group 5 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.10/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.110/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.10/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.10/31\n!\ninterface - Vxlan1\n description DC1-BL1A_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 150 vni 10150\n vxlan vlan 250 vni 20250\n vxlan vlan 350 vni - 30350\n vxlan vrf Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_B_WAN_Zone vni - 21\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip - routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing - vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n - \ seq 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq - 32\n!\nmlag configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n - \ peer-address 10.255.252.11\n peer-link Port-Channel5\n reload-delay mlag - 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map - RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map + Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.10/31\n!\ninterface Vlan3030\n description + MLAG_L3_VRF_Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n + \ ip address 10.255.251.10/31\n!\ninterface Vlan4093\n description MLAG_L3\n + \ no shutdown\n mtu 1500\n ip address 10.255.251.10/31\n!\ninterface Vlan4094\n + \ description MLAG\n no shutdown\n mtu 1500\n no autostate\n ip address + 10.255.252.10/31\n!\ninterface Vxlan1\n description DC1-BL1A_VTEP\n vxlan + source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 150 vni 10150\n vxlan + vlan 250 vni 20250\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_WAN_Zone + vni 14\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_WAN_Zone + vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq + 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag + configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n peer-address + 10.255.252.11\n peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay + non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP + permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65104\n @@ -75,8 +76,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.11 description DC1-BL1B\n neighbor 172.31.255.40 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.40 remote-as 65001\n neighbor + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan4093\n neighbor 172.31.255.40 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.40 remote-as 65001\n neighbor 172.31.255.40 description DC1-SPINE1_Ethernet6\n neighbor 172.31.255.42 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.42 remote-as 65001\n neighbor 172.31.255.42 description DC1-SPINE2_Ethernet6\n neighbor 172.31.255.44 peer @@ -85,91 +86,94 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.46 remote-as 65001\n neighbor 172.31.255.46 description DC1-SPINE4_Ethernet6\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n - \ rd 192.168.255.10:14\n route-target both 14:14\n redistribute - learned\n vlan 150\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd - 192.168.255.10:21\n route-target both 21:21\n redistribute learned\n - \ vlan 250\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n - \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n - \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family - ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS - activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_WAN_Zone\n - \ rd 192.168.255.10:14\n route-target import evpn 14:14\n route-target - export evpn 14:14\n router-id 192.168.255.10\n update wait-install\n - \ neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.10:14\n + \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n + \ vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.10:21\n route-target + both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle + Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n route-target both 31:31\n + \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER + activate\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.10:14\n route-target + import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.10\n + \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3013\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.10:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.10\n \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n - \ route-target import evpn 31:31\n route-target export evpn 31:31\n router-id - 192.168.255.10\n update wait-install\n neighbor 10.255.251.11 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n - \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-BL1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.10:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.10\n + \ update wait-install\n neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.11 description DC1-BL1B_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-BL1B: "!\nno enable password\nno aaa root\n!\nusername admin privilege 15 + role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-BL1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n description MLAG_PEER_DC1-BL1A_Po5\n - \ no shutdown\n switchport\n switchport mode trunk\n switchport trunk group - LEAF_PEER_L3\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - P2P_LINK_TO_DC1-SPINE1_Ethernet7\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.49/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet7\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.51/31\n!\ninterface - Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet7\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.53/31\n!\ninterface Ethernet4\n - \ description P2P_LINK_TO_DC1-SPINE4_Ethernet7\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.55/31\n!\ninterface Ethernet5\n description - MLAG_PEER_DC1-BL1A_Ethernet5\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet6\n description MLAG_PEER_DC1-BL1A_Ethernet6\n no shutdown\n channel-group - 5 mode active\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n no - shutdown\n ip address 192.168.255.11/32\n!\ninterface Loopback1\n description - VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode mstp\nno + spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 150\n + \ name Tenant_A_WAN_Zone_1\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ trunk group MLAG\n!\nvlan 3020\n name MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk + group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n + \ description MLAG_DC1-BL1A_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description P2P_LINK_TO_DC1-SPINE1_Ethernet7\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.49/31\n!\ninterface Ethernet2\n description + P2P_LINK_TO_DC1-SPINE2_Ethernet7\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.51/31\n!\ninterface Ethernet3\n description P2P_LINK_TO_DC1-SPINE3_Ethernet7\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.53/31\n!\ninterface + Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet7\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.55/31\n!\ninterface Ethernet5\n + \ description MLAG_DC1-BL1A_Ethernet5\n no shutdown\n channel-group 5 mode + active\n!\ninterface Ethernet6\n description MLAG_DC1-BL1A_Ethernet6\n no + shutdown\n channel-group 5 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.11/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.10/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.111/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.11/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.11/31\n!\ninterface - Vxlan1\n description DC1-BL1B_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 150 vni 10150\n vxlan vlan 250 vni 20250\n vxlan vlan 350 vni - 30350\n vxlan vrf Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_B_WAN_Zone vni - 21\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip - routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing - vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n - \ seq 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq - 32\n!\nmlag configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n - \ peer-address 10.255.252.10\n peer-link Port-Channel5\n reload-delay mlag - 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map - RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map + Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.11/31\n!\ninterface Vlan3030\n description + MLAG_L3_VRF_Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n + \ ip address 10.255.251.11/31\n!\ninterface Vlan4093\n description MLAG_L3\n + \ no shutdown\n mtu 1500\n ip address 10.255.251.11/31\n!\ninterface Vlan4094\n + \ description MLAG\n no shutdown\n mtu 1500\n no autostate\n ip address + 10.255.252.11/31\n!\ninterface Vxlan1\n description DC1-BL1B_VTEP\n vxlan + source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 150 vni 10150\n vxlan + vlan 250 vni 20250\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_WAN_Zone + vni 14\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_WAN_Zone + vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq + 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag + configuration\n domain-id DC1_BL1\n local-interface Vlan4094\n peer-address + 10.255.252.10\n peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay + non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP + permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65104\n @@ -187,8 +191,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.10 description DC1-BL1A\n neighbor 172.31.255.48 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.48 remote-as 65001\n neighbor + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan4093\n neighbor 172.31.255.48 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.48 remote-as 65001\n neighbor 172.31.255.48 description DC1-SPINE1_Ethernet7\n neighbor 172.31.255.50 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.50 remote-as 65001\n neighbor 172.31.255.50 description DC1-SPINE2_Ethernet7\n neighbor 172.31.255.52 peer @@ -197,64 +201,67 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.54 remote-as 65001\n neighbor 172.31.255.54 description DC1-SPINE4_Ethernet7\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n - \ rd 192.168.255.11:14\n route-target both 14:14\n redistribute - learned\n vlan 150\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd - 192.168.255.11:21\n route-target both 21:21\n redistribute learned\n - \ vlan 250\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n - \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n - \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family - ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS - activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_WAN_Zone\n - \ rd 192.168.255.11:14\n route-target import evpn 14:14\n route-target - export evpn 14:14\n router-id 192.168.255.11\n update wait-install\n - \ neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.11:14\n + \ route-target both 14:14\n redistribute learned\n vlan 150\n !\n + \ vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.11:21\n route-target + both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle + Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n route-target both 31:31\n + \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER + activate\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.11:14\n route-target + import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.11\n + \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3013\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.11:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.11\n \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n - \ route-target import evpn 31:31\n route-target export evpn 31:31\n router-id - 192.168.255.11\n update wait-install\n neighbor 10.255.251.10 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n - \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.11:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.11\n + \ update wait-install\n neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.10 description DC1-BL1A_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-L2LEAF1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nspanning-tree mst 0 priority 16384\n!\nno enable password\nno aaa root\n!\nusername - admin privilege 15 role network-admin nopassword\nusername cvpadmin privilege - 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan - 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan - 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf - instance MGMT\n!\ninterface Port-Channel1\n description DC1_LEAF2_Po7\n no - shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n - \ switchport mode trunk\n!\ninterface Ethernet1\n description DC1-LEAF2A_Ethernet7\n - \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet2\n description - DC1-LEAF2B_Ethernet7\n no shutdown\n channel-group 1 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.112/24\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan + 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan + 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan + 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n + \ description DC1_LEAF2_Po7\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n!\ninterface + Ethernet1\n description DC1-LEAF2A_Ethernet7\n no shutdown\n channel-group + 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF2B_Ethernet7\n no + shutdown\n channel-group 1 mode active\n!\ninterface Management1\n description + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.112/24\nno + ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp local-interface + vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-L2LEAF2A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -262,35 +269,35 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG_PEER\n trunk group - MLAG\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 1\n!\ninterface Port-Channel3\n description - MLAG_PEER_DC1-L2LEAF2B_Po3\n no shutdown\n switchport\n switchport mode - trunk\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - DC1-SVC3A_Ethernet7\n no shutdown\n channel-group 1 mode active\n!\ninterface - Ethernet2\n description DC1-SVC3B_Ethernet7\n no shutdown\n channel-group - 1 mode active\n!\ninterface Ethernet3\n description MLAG_PEER_DC1-L2LEAF2B_Ethernet3\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG\n trunk group MLAG\n!\nvrf + instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n no + shutdown\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n + \ switchport mode trunk\n switchport\n mlag 1\n!\ninterface Port-Channel3\n + \ description MLAG_DC1-L2LEAF2B_Port-Channel3\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description DC1-SVC3A_Ethernet7\n shutdown\n channel-group 1 mode active\n!\ninterface + Ethernet2\n description DC1-SVC3B_Ethernet7\n shutdown\n channel-group 1 + mode active\n!\ninterface Ethernet3\n description MLAG_DC1-L2LEAF2B_Ethernet3\n \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet4\n description - MLAG_PEER_DC1-L2LEAF2B_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.113/24\n!\ninterface Vlan4094\n description MLAG_PEER\n - \ no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.16/31\nno - ip routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface + MLAG_DC1-L2LEAF2B_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.113/24\n!\ninterface Vlan4094\n description MLAG\n no + shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.16/31\nno ip + routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.17\n peer-link Port-Channel3\n reload-delay - mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nmanagement + mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-L2LEAF2B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-L2LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-L2LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-L2LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4094\nspanning-tree mst 0 priority 16384\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -298,76 +305,75 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG_PEER\n trunk group - MLAG\n!\nvrf instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 1\n!\ninterface Port-Channel3\n description - MLAG_PEER_DC1-L2LEAF2A_Po3\n no shutdown\n switchport\n switchport mode - trunk\n switchport trunk group MLAG\n!\ninterface Ethernet1\n description - DC1-SVC3A_Ethernet8\n no shutdown\n channel-group 1 mode active\n!\ninterface - Ethernet2\n description DC1-SVC3B_Ethernet8\n no shutdown\n channel-group - 1 mode active\n!\ninterface Ethernet3\n description MLAG_PEER_DC1-L2LEAF2A_Ethernet3\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 4094\n name MLAG\n trunk group MLAG\n!\nvrf + instance MGMT\n!\ninterface Port-Channel1\n description DC1_SVC3_Po7\n no + shutdown\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n + \ switchport mode trunk\n switchport\n mlag 1\n!\ninterface Port-Channel3\n + \ description MLAG_DC1-L2LEAF2A_Port-Channel3\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Ethernet1\n + \ description DC1-SVC3A_Ethernet8\n shutdown\n channel-group 1 mode active\n!\ninterface + Ethernet2\n description DC1-SVC3B_Ethernet8\n shutdown\n channel-group 1 + mode active\n!\ninterface Ethernet3\n description MLAG_DC1-L2LEAF2A_Ethernet3\n \ no shutdown\n channel-group 3 mode active\n!\ninterface Ethernet4\n description - MLAG_PEER_DC1-L2LEAF2A_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.114/24\n!\ninterface Vlan4094\n description MLAG_PEER\n - \ no shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.17/31\nno - ip routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface + MLAG_DC1-L2LEAF2A_Ethernet4\n no shutdown\n channel-group 3 mode active\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.114/24\n!\ninterface Vlan4094\n description MLAG\n no + shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.17/31\nno ip + routing vrf MGMT\n!\nmlag configuration\n domain-id DC1_L2LEAF2\n local-interface Vlan4094\n peer-address 10.255.252.16\n peer-link Port-Channel3\n reload-delay - mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nmanagement + mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nend\n" + AVD_DC1-LEAF1A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nspanning-tree mst 0 priority 4096\n!\nno enable password\nno aaa root\n!\nusername - admin privilege 15 role network-admin nopassword\nusername cvpadmin privilege - 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan - 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan - 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvrf - instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\ninterface - Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet1\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.1/31\n!\ninterface Ethernet2\n - \ description P2P_LINK_TO_DC1-SPINE2_Ethernet1\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.3/31\n!\ninterface Ethernet3\n description - P2P_LINK_TO_DC1-SPINE3_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.5/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet1\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.7/31\n!\ninterface - Ethernet6\n description server02_SINGLE_NODE_TRUNK_Eth1\n no shutdown\n switchport - trunk allowed vlan 110-111,210-211\n switchport mode trunk\n switchport\n!\ninterface - Ethernet7\n description server02_SINGLE_NODE_Eth1\n no shutdown\n switchport - access vlan 110\n switchport mode access\n switchport\n!\ninterface Loopback0\n - \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.5/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.5/32\n!\ninterface Management1\n description oob_management\n no - shutdown\n vrf MGMT\n ip address 192.168.200.105/24\n!\ninterface Vlan120\n - \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n - \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual - 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n - \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface - Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface - Vxlan1\n description DC1-LEAF1A_VTEP\n vxlan source-interface Loopback1\n - \ vxlan udp-port 4789\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n - \ vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vrf Tenant_A_APP_Zone - vni 12\n vxlan vrf Tenant_A_WEB_Zone vni 11\n!\nip virtual-router mac-address - 00:dc:00:00:00:0a\n!\nip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip - routing vrf Tenant_A_WEB_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq - 10 permit 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nip - route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n - \ match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop - interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n router-id 192.168.255.5\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n - \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS - password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n - \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nspanning-tree mst 0 priority 4096\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan + 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan + 131\n name Tenant_A_APP_Zone_2\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet1\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.1/31\n!\ninterface + Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet1\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.3/31\n!\ninterface Ethernet3\n + \ description P2P_LINK_TO_DC1-SPINE3_Ethernet1\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.5/31\n!\ninterface Ethernet4\n description + P2P_LINK_TO_DC1-SPINE4_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.7/31\n!\ninterface Ethernet6\n description SERVER_server02_SINGLE_NODE_TRUNK_Eth1\n + \ no shutdown\n switchport trunk allowed vlan 110-111,210-211\n switchport + mode trunk\n switchport\n!\ninterface Ethernet7\n description SERVER_server02_SINGLE_NODE_Eth1\n + \ no shutdown\n switchport access vlan 110\n switchport mode access\n switchport\n!\ninterface + Loopback0\n description ROUTER_ID\n no shutdown\n ip address 192.168.255.5/32\n!\ninterface + Loopback1\n description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.5/32\n!\ninterface + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip + address 192.168.200.105/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n + \ no shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST + source-interface lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n + \ description Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n + \ ip address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface + Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.31.1/24\n!\ninterface Vxlan1\n description DC1-LEAF1A_VTEP\n + \ vxlan source-interface Loopback1\n vxlan udp-port 4789\n vxlan vlan 120 + vni 10120\n vxlan vlan 121 vni 10121\n vxlan vlan 130 vni 10130\n vxlan + vlan 131 vni 10131\n vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_WEB_Zone + vni 11\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing vrf Tenant_A_WEB_Zone\n!\nip + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n + \ seq 20 permit 192.168.254.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65101\n + \ router-id 192.168.255.5\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor + EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor + EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS + send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS\n @@ -380,111 +386,108 @@ cvp_configlets: \ neighbor 172.31.255.6 remote-as 65001\n neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.1 remote-as 65001\n neighbor 192.168.255.1 description - DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n - \ neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 - remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n neighbor - 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as - 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute connected - route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd - 192.168.255.5:12\n route-target both 12:12\n redistribute learned\n - \ vlan 130-131\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n - \ route-target both 11:11\n redistribute learned\n vlan 120-121\n - \ !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n - \ address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor - IPv4-UNDERLAY-PEERS activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.5:12\n - \ route-target import evpn 12:12\n route-target export evpn 12:12\n router-id - 192.168.255.5\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n - \ rd 192.168.255.5:11\n route-target import evpn 11:11\n route-target - export evpn 11:11\n router-id 192.168.255.5\n redistribute connected\n!\nmanagement + DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description + DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description + DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description + DC1-SPINE4_Loopback0\n redistribute connected route-map RM-CONN-2-BGP\n !\n + \ vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target + both 12:12\n redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle + Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n route-target both 11:11\n + \ redistribute learned\n vlan 120-121\n !\n address-family evpn\n + \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no + neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n + \ !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.5:12\n route-target + import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.5\n + \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.5:11\n + \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id + 192.168.255.5\n redistribute connected\n!\nend\n" + AVD_DC1-LEAF2A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n!\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n name - MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n trunk group MLAG\n!\nvlan 3010\n + \ name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk group MLAG\n!\nvlan 3011\n name + MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ trunk group MLAG\n!\nvlan 3019\n name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk + group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-LEAF2B_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1-L2LEAF1A_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n switchport - mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description server01_MLAG_PortChanne1\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 210-211\n switchport - mode trunk\n mlag 10\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet2\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.9/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet2\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.11/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet2\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.13/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.15/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-LEAF2B_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-LEAF2B_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF1A_Ethernet1\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet10\n description server01_MLAG_Eth2\n no - shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.6/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.6/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.6/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.106/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface - Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.2/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.2/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.2/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.2/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.2/31\n!\ninterface Vxlan1\n description DC1-LEAF2A_VTEP\n + \ description MLAG_DC1-LEAF2B_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1-L2LEAF1A_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n mlag 7\n!\ninterface + Port-Channel10\n description SERVER_server01_MLAG\n no shutdown\n switchport + trunk allowed vlan 210-211\n switchport mode trunk\n switchport\n mlag 10\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet2\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.9/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet2\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.11/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.13/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet2\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.15/31\n!\ninterface + Ethernet5\n description MLAG_DC1-LEAF2B_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-LEAF2B_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF1A_Ethernet1\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet10\n description SERVER_server01_MLAG_Eth2\n no shutdown\n channel-group + 10 mode active\n!\ninterface Loopback0\n description ROUTER_ID\n no shutdown\n + \ ip address 192.168.255.6/32\n!\ninterface Loopback1\n description VXLAN_TUNNEL_SOURCE\n + \ no shutdown\n ip address 192.168.254.6/32\n!\ninterface Loopback100\n description + Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n + \ no shutdown\n vrf MGMT\n ip address 192.168.200.106/24\n!\ninterface Vlan110\n + \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3010\n + \ description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_WEB_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3011\n description + MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n + \ ip address 10.255.251.2/31\n!\ninterface Vlan3012\n description MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.2/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan3029\n + \ description MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_C_OP_Zone\n ip address 10.255.251.2/31\n!\ninterface Vlan4093\n description + MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.2/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.2/31\n!\ninterface Vxlan1\n description DC1-LEAF2A_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -502,162 +505,166 @@ cvp_configlets: \ seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_LEAF2\n \ local-interface Vlan4094\n peer-address 10.255.252.3\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.6\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2B\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.3 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.3 description DC1-LEAF2B\n - \ neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.8 - remote-as 65001\n neighbor 172.31.255.8 description DC1-SPINE1_Ethernet2\n neighbor - 172.31.255.10 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.10 remote-as - 65001\n neighbor 172.31.255.10 description DC1-SPINE2_Ethernet2\n neighbor - 172.31.255.12 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.12 remote-as - 65001\n neighbor 172.31.255.12 description DC1-SPINE3_Ethernet2\n neighbor - 172.31.255.14 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.14 remote-as - 65001\n neighbor 172.31.255.14 description DC1-SPINE4_Ethernet2\n neighbor - 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as - 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor - 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description - DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.6:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.6:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n route-target - both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle - Tenant_B_OP_Zone\n rd 192.168.255.6:20\n route-target both 20:20\n redistribute - learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd - 192.168.255.6:30\n route-target both 30:30\n redistribute learned\n - \ vlan 310-311\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.6:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.6\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.6\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2B\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan4093\n neighbor 172.31.255.8 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.8 remote-as 65001\n neighbor + 172.31.255.8 description DC1-SPINE1_Ethernet2\n neighbor 172.31.255.10 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.10 remote-as 65001\n neighbor + 172.31.255.10 description DC1-SPINE2_Ethernet2\n neighbor 172.31.255.12 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.12 remote-as 65001\n neighbor + 172.31.255.12 description DC1-SPINE3_Ethernet2\n neighbor 172.31.255.14 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.14 remote-as 65001\n neighbor + 172.31.255.14 description DC1-SPINE4_Ethernet2\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.6:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.6:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.6:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd + 192.168.255.6:11\n route-target both 11:11\n redistribute learned\n + \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.6:20\n + \ route-target both 20:20\n redistribute learned\n vlan 210-211\n + \ !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.6:30\n route-target + both 30:30\n redistribute learned\n vlan 310-311\n !\n address-family + evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n + \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.6:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.6\n update wait-install\n + \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.3 description DC1-LEAF2B_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.6:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.6:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.6\n \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.6:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.6\n update wait-install\n neighbor 10.255.251.3 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.6:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.6\n update wait-install\n - \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.6:11\n route-target import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.6\n \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.6:20\n - \ route-target import evpn 20:20\n route-target export evpn 20:20\n router-id - 192.168.255.6\n update wait-install\n neighbor 10.255.251.3 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_OP_Zone\n - \ rd 192.168.255.6:30\n route-target import evpn 30:30\n route-target - export evpn 30:30\n router-id 192.168.255.6\n update wait-install\n - \ neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.6:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.6:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.6\n + \ update wait-install\n neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3029\n redistribute + connected\n!\nend\n" + AVD_DC1-LEAF2B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan 140\n name Tenant_A_DB_BZone_1\n!\nvlan 141\n name Tenant_A_DB_Zone_2\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n trunk group LEAF_PEER_L3\n!\nvlan - 4093\n name LEAF_PEER_L3\n trunk group LEAF_PEER_L3\n!\nvlan 4094\n name - MLAG_PEER\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n trunk group MLAG\n!\nvlan 3010\n + \ name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk group MLAG\n!\nvlan 3011\n name + MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ trunk group MLAG\n!\nvlan 3019\n name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk + group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n trunk group + MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n name + MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-LEAF2A_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1-L2LEAF1A_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131\n switchport - mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description server01_MLAG_PortChanne1\n - \ no shutdown\n switchport\n switchport trunk allowed vlan 210-211\n switchport - mode trunk\n mlag 10\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet3\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.17/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet3\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.19/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet3\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.21/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.23/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-LEAF2A_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-LEAF2A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF1A_Ethernet2\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet10\n description server01_MLAG_Eth3\n no - shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.7/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.6/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.7/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.107/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface - Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.3/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.3/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.3/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.3/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.3/31\n!\ninterface Vxlan1\n description DC1-LEAF2B_VTEP\n + \ description MLAG_DC1-LEAF2A_Port-Channel5\n no shutdown\n switchport mode + trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1-L2LEAF1A_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131\n switchport mode trunk\n switchport\n mlag 7\n!\ninterface + Port-Channel10\n description SERVER_server01_MLAG\n no shutdown\n switchport + trunk allowed vlan 210-211\n switchport mode trunk\n switchport\n mlag 10\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet3\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.17/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet3\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.19/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.21/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet3\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.23/31\n!\ninterface + Ethernet5\n description MLAG_DC1-LEAF2A_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-LEAF2A_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF1A_Ethernet2\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet10\n description SERVER_server01_MLAG_Eth3\n no shutdown\n channel-group + 10 mode active\n!\ninterface Loopback0\n description ROUTER_ID\n no shutdown\n + \ ip address 192.168.255.7/32\n!\ninterface Loopback1\n description VXLAN_TUNNEL_SOURCE\n + \ no shutdown\n ip address 192.168.254.6/32\n!\ninterface Loopback100\n description + Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address 10.255.1.7/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n + \ no shutdown\n vrf MGMT\n ip address 192.168.200.107/24\n!\ninterface Vlan110\n + \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip + address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3010\n + \ description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_WEB_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3011\n description + MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n + \ ip address 10.255.251.3/31\n!\ninterface Vlan3012\n description MLAG_L3_VRF_Tenant_A_DB_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.3/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan3029\n + \ description MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_C_OP_Zone\n ip address 10.255.251.3/31\n!\ninterface Vlan4093\n description + MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.3/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.3/31\n!\ninterface Vxlan1\n description DC1-LEAF2B_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -675,110 +682,116 @@ cvp_configlets: \ seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_LEAF2\n \ local-interface Vlan4094\n peer-address 10.255.252.2\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.7\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2A\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.2 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.2 description DC1-LEAF2A\n - \ neighbor 172.31.255.16 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.16 - remote-as 65001\n neighbor 172.31.255.16 description DC1-SPINE1_Ethernet3\n - \ neighbor 172.31.255.18 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.18 - remote-as 65001\n neighbor 172.31.255.18 description DC1-SPINE2_Ethernet3\n - \ neighbor 172.31.255.20 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.20 - remote-as 65001\n neighbor 172.31.255.20 description DC1-SPINE3_Ethernet3\n - \ neighbor 172.31.255.22 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.22 - remote-as 65001\n neighbor 172.31.255.22 description DC1-SPINE4_Ethernet3\n - \ neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 - remote-as 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor - 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as - 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor - 192.168.255.3 description DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description - DC1-SPINE4\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.7:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.7:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.7:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.7:11\n route-target - both 11:11\n redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle - Tenant_B_OP_Zone\n rd 192.168.255.7:20\n route-target both 20:20\n redistribute - learned\n vlan 210-211\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd - 192.168.255.7:30\n route-target both 30:30\n redistribute learned\n - \ vlan 310-311\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.7:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.7\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65102\n router-id 192.168.255.7\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65102\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-LEAF2A\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan4093\n neighbor 172.31.255.16 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.16 remote-as 65001\n neighbor + 172.31.255.16 description DC1-SPINE1_Ethernet3\n neighbor 172.31.255.18 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.18 remote-as 65001\n neighbor + 172.31.255.18 description DC1-SPINE2_Ethernet3\n neighbor 172.31.255.20 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.20 remote-as 65001\n neighbor + 172.31.255.20 description DC1-SPINE3_Ethernet3\n neighbor 172.31.255.22 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.22 remote-as 65001\n neighbor + 172.31.255.22 description DC1-SPINE4_Ethernet3\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.7:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.7:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.7:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd + 192.168.255.7:11\n route-target both 11:11\n redistribute learned\n + \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.7:20\n + \ route-target both 20:20\n redistribute learned\n vlan 210-211\n + \ !\n vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.7:30\n route-target + both 30:30\n redistribute learned\n vlan 310-311\n !\n address-family + evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n + \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.7:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.7\n update wait-install\n + \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.2 description DC1-LEAF2A_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.7:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.7\n \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.7:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.7\n update wait-install\n neighbor 10.255.251.2 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.7:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.7\n update wait-install\n - \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.7:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.7:11\n route-target import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.7\n \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.7:20\n - \ route-target import evpn 20:20\n route-target export evpn 20:20\n router-id - 192.168.255.7\n update wait-install\n neighbor 10.255.251.2 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_OP_Zone\n - \ rd 192.168.255.7:30\n route-target import evpn 30:30\n route-target - export evpn 30:30\n router-id 192.168.255.7\n update wait-install\n - \ neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.7:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.7:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.7\n + \ update wait-install\n neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3029\n redistribute + connected\n!\nend\n" + AVD_DC1-SPINE1: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE1\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.0/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.8/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.16/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet1\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.24/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet1\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.32/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.32/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.40/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.48/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.1/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.101/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.1\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.1/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.101/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.1\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -790,65 +803,66 @@ cvp_configlets: description DC1-LEAF2A_Ethernet1\n neighbor 172.31.255.17 peer group IPv4-UNDERLAY-PEERS\n \ neighbor 172.31.255.17 remote-as 65102\n neighbor 172.31.255.17 description DC1-LEAF2B_Ethernet1\n neighbor 172.31.255.25 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.25 remote-as 65103\n neighbor 172.31.255.25 description - DC1-SVC3A_Ethernet1\n neighbor 172.31.255.33 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.33 remote-as 65103\n neighbor 172.31.255.33 description - DC1-SVC3B_Ethernet1\n neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.41 remote-as 65104\n neighbor 172.31.255.41 description - DC1-BL1A_Ethernet1\n neighbor 172.31.255.49 peer group IPv4-UNDERLAY-PEERS\n - \ neighbor 172.31.255.49 remote-as 65104\n neighbor 172.31.255.49 description - DC1-BL1B_Ethernet1\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 172.31.255.25 remote-as 65103\n neighbor 172.31.255.25 shutdown\n + \ neighbor 172.31.255.25 description DC1-SVC3A_Ethernet1\n neighbor 172.31.255.33 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.33 remote-as 65103\n neighbor + 172.31.255.33 shutdown\n neighbor 172.31.255.33 description DC1-SVC3B_Ethernet1\n + \ neighbor 172.31.255.41 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.41 + remote-as 65104\n neighbor 172.31.255.41 description DC1-BL1A_Ethernet1\n neighbor + 172.31.255.49 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.49 remote-as + 65104\n neighbor 172.31.255.49 description DC1-BL1B_Ethernet1\n neighbor 192.168.255.5 + peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.5 remote-as 65101\n neighbor + 192.168.255.5 description DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.6 remote-as 65102\n neighbor + 192.168.255.6 description DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 remote-as 65102\n neighbor + 192.168.255.7 description DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as 65103\n neighbor + 192.168.255.8 shutdown\n neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n + \ neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 + remote-as 65103\n neighbor 192.168.255.9 shutdown\n neighbor 192.168.255.9 + description DC1-SVC3B_Loopback0\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + DC1-BL1A_Loopback0\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description + DC1-BL1B_Loopback0\n redistribute connected route-map RM-CONN-2-BGP\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n!\nend\n" + AVD_DC1-SPINE2: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE2\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.2/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.10/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.18/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet2\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.26/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet2\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.34/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.34/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.42/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.50/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.2/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.102/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.2\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.2/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.102/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.2\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -861,64 +875,65 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.19 remote-as 65102\n neighbor 172.31.255.19 description DC1-LEAF2B_Ethernet2\n neighbor 172.31.255.27 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.27 remote-as 65103\n neighbor - 172.31.255.27 description DC1-SVC3A_Ethernet2\n neighbor 172.31.255.35 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.35 remote-as 65103\n neighbor - 172.31.255.35 description DC1-SVC3B_Ethernet2\n neighbor 172.31.255.43 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.43 remote-as 65104\n neighbor - 172.31.255.43 description DC1-BL1A_Ethernet2\n neighbor 172.31.255.51 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.51 remote-as 65104\n neighbor 172.31.255.51 - description DC1-BL1B_Ethernet2\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.27 shutdown\n neighbor 172.31.255.27 description DC1-SVC3A_Ethernet2\n + \ neighbor 172.31.255.35 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.35 + remote-as 65103\n neighbor 172.31.255.35 shutdown\n neighbor 172.31.255.35 + description DC1-SVC3B_Ethernet2\n neighbor 172.31.255.43 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.43 remote-as 65104\n neighbor 172.31.255.43 description + DC1-BL1A_Ethernet2\n neighbor 172.31.255.51 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.51 remote-as 65104\n neighbor 172.31.255.51 description + DC1-BL1B_Ethernet2\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SPINE3: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE3: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE3\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet3\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.4/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.12/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet3\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.20/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet3\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.28/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet3\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.36/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.36/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.44/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet3\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.52/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.3/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.103/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.3\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.3/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.103/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.3\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -931,64 +946,65 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.21 remote-as 65102\n neighbor 172.31.255.21 description DC1-LEAF2B_Ethernet3\n neighbor 172.31.255.29 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.29 remote-as 65103\n neighbor - 172.31.255.29 description DC1-SVC3A_Ethernet3\n neighbor 172.31.255.37 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.37 remote-as 65103\n neighbor - 172.31.255.37 description DC1-SVC3B_Ethernet3\n neighbor 172.31.255.45 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.45 remote-as 65104\n neighbor - 172.31.255.45 description DC1-BL1A_Ethernet3\n neighbor 172.31.255.53 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.53 remote-as 65104\n neighbor 172.31.255.53 - description DC1-BL1B_Ethernet3\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.29 shutdown\n neighbor 172.31.255.29 description DC1-SVC3A_Ethernet3\n + \ neighbor 172.31.255.37 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.37 + remote-as 65103\n neighbor 172.31.255.37 shutdown\n neighbor 172.31.255.37 + description DC1-SVC3B_Ethernet3\n neighbor 172.31.255.45 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.45 remote-as 65104\n neighbor 172.31.255.45 description + DC1-BL1A_Ethernet3\n neighbor 172.31.255.53 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.53 remote-as 65104\n neighbor 172.31.255.53 description + DC1-BL1B_Ethernet3\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SPINE4: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SPINE4: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE4\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree mode - none\n!\nno enable password\nno aaa root\n!\nusername admin privilege 15 role - network-admin nopassword\nusername cvpadmin privilege 15 role network-admin secret - sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf + MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree mode none\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet4\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.6/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-LEAF2A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.14/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet4\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.22/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SVC3A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n + P2P_LINK_TO_DC1-SVC3A_Ethernet4\n shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.30/31\n!\ninterface Ethernet5\n description P2P_LINK_TO_DC1-SVC3B_Ethernet4\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.38/31\n!\ninterface + \ shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.38/31\n!\ninterface Ethernet6\n description P2P_LINK_TO_DC1-BL1A_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.46/31\n!\ninterface Ethernet7\n \ description P2P_LINK_TO_DC1-BL1B_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.54/31\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.4/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.104/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n!\nip route - vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter bfd\n multihop interval - 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n router-id 192.168.255.4\n - \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n - \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor - EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS update-source - Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.4/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.104/24\n!\nip + routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n + \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nroute-map + RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter + bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65001\n + \ router-id 192.168.255.4\n maximum-paths 4 ecmp 4\n update wait-install\n + \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS + peer group\n neighbor EVPN-OVERLAY-PEERS next-hop-unchanged\n neighbor EVPN-OVERLAY-PEERS + update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS @@ -1001,40 +1017,42 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.23 remote-as 65102\n neighbor 172.31.255.23 description DC1-LEAF2B_Ethernet4\n neighbor 172.31.255.31 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.31 remote-as 65103\n neighbor - 172.31.255.31 description DC1-SVC3A_Ethernet4\n neighbor 172.31.255.39 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.39 remote-as 65103\n neighbor - 172.31.255.39 description DC1-SVC3B_Ethernet4\n neighbor 172.31.255.47 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.47 remote-as 65104\n neighbor - 172.31.255.47 description DC1-BL1A_Ethernet4\n neighbor 172.31.255.55 peer group - IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.55 remote-as 65104\n neighbor 172.31.255.55 - description DC1-BL1B_Ethernet4\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n + 172.31.255.31 shutdown\n neighbor 172.31.255.31 description DC1-SVC3A_Ethernet4\n + \ neighbor 172.31.255.39 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.39 + remote-as 65103\n neighbor 172.31.255.39 shutdown\n neighbor 172.31.255.39 + description DC1-SVC3B_Ethernet4\n neighbor 172.31.255.47 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.47 remote-as 65104\n neighbor 172.31.255.47 description + DC1-BL1A_Ethernet4\n neighbor 172.31.255.55 peer group IPv4-UNDERLAY-PEERS\n + \ neighbor 172.31.255.55 remote-as 65104\n neighbor 172.31.255.55 description + DC1-BL1B_Ethernet4\n neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS\n \ neighbor 192.168.255.5 remote-as 65101\n neighbor 192.168.255.5 description - DC1-LEAF1A\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description DC1-LEAF2A\n - \ neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.7 - remote-as 65102\n neighbor 192.168.255.7 description DC1-LEAF2B\n neighbor - 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.8 remote-as - 65103\n neighbor 192.168.255.8 description DC1-SVC3A\n neighbor 192.168.255.9 + DC1-LEAF1A_Loopback0\n neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.6 remote-as 65102\n neighbor 192.168.255.6 description + DC1-LEAF2A_Loopback0\n neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.7 remote-as 65102\n neighbor 192.168.255.7 description + DC1-LEAF2B_Loopback0\n neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS\n + \ neighbor 192.168.255.8 remote-as 65103\n neighbor 192.168.255.8 shutdown\n + \ neighbor 192.168.255.8 description DC1-SVC3A_Loopback0\n neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.9 remote-as 65103\n neighbor - 192.168.255.9 description DC1-SVC3B\n neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.10 remote-as 65104\n neighbor 192.168.255.10 description - DC1-BL1A\n neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.11 remote-as 65104\n neighbor 192.168.255.11 description DC1-BL1B\n - \ redistribute connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n - \ neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no - neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement + 192.168.255.9 shutdown\n neighbor 192.168.255.9 description DC1-SVC3B_Loopback0\n + \ neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.10 + remote-as 65104\n neighbor 192.168.255.10 description DC1-BL1A_Loopback0\n neighbor + 192.168.255.11 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.11 remote-as + 65104\n neighbor 192.168.255.11 description DC1-BL1B_Loopback0\n redistribute + connected route-map RM-CONN-2-BGP\n !\n address-family evpn\n neighbor + EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS + activate\n neighbor IPv4-UNDERLAY-PEERS activate\n!\nend\n" + AVD_DC1-SVC3A: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no - shutdown\n!\nend\n" - AVD_DC1-SVC3A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-SVC3A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-SVC3A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -1042,51 +1060,48 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf - instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance - Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-SVC3B_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1_L2LEAF2_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 7\n!\ninterface Port-Channel10\n description - server03_ESI_PortChanne1\n no shutdown\n switchport\n switchport trunk allowed - vlan 110-111,210-211\n switchport mode trunk\n evpn ethernet-segment\n identifier - 0000:0000:0303:0202:0101\n route-target import 03:03:02:02:01:01\n lacp - system-id 0303.0202.0101\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet4\n - \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.25/31\n!\ninterface - Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet4\n no shutdown\n mtu - 1500\n no switchport\n ip address 172.31.255.27/31\n!\ninterface Ethernet3\n - \ description P2P_LINK_TO_DC1-SPINE3_Ethernet4\n no shutdown\n mtu 1500\n - \ no switchport\n ip address 172.31.255.29/31\n!\ninterface Ethernet4\n description - P2P_LINK_TO_DC1-SPINE4_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.31/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-SVC3B_Ethernet5\n - \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-SVC3B_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface - Ethernet7\n description DC1-L2LEAF2A_Ethernet1\n no shutdown\n channel-group - 7 mode active\n!\ninterface Ethernet8\n description DC1-L2LEAF2B_Ethernet1\n - \ no shutdown\n channel-group 7 mode active\n!\ninterface Ethernet10\n description - server03_ESI_Eth1\n no shutdown\n channel-group 10 mode active\n!\ninterface - Loopback0\n description EVPN_Overlay_Peering\n no shutdown\n ip address - 192.168.255.8/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n - \ no shutdown\n ip address 192.168.254.8/32\n!\ninterface Loopback100\n description - Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.8/32\n!\ninterface Management1\n description oob_management\n - \ no shutdown\n vrf MGMT\n ip address 192.168.200.108/24\n!\ninterface Vlan110\n - \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3010\n name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk + group MLAG\n!\nvlan 3011\n name MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group + MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n trunk group MLAG\n!\nvlan + 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n trunk group MLAG\n!\nvlan 3019\n + \ name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk group MLAG\n!\nvlan 3020\n name + MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk + group MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n + \ name MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance + Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface + Port-Channel5\n description MLAG_DC1-SVC3B_Port-Channel5\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1_L2LEAF2_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n switchport mode + trunk\n switchport\n mlag 7\n!\ninterface Port-Channel10\n description SERVER_server03_ESI\n + \ no shutdown\n switchport trunk allowed vlan 110-111,210-211\n switchport + mode trunk\n switchport\n evpn ethernet-segment\n identifier 0000:0000:0303:0202:0101\n + \ route-target import 03:03:02:02:01:01\n lacp system-id 0303.0202.0101\n!\ninterface + Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet4\n no shutdown\n mtu + 1500\n no switchport\n ip address 172.31.255.25/31\n!\ninterface Ethernet2\n + \ description P2P_LINK_TO_DC1-SPINE2_Ethernet4\n no shutdown\n mtu 1500\n + \ no switchport\n ip address 172.31.255.27/31\n!\ninterface Ethernet3\n description + P2P_LINK_TO_DC1-SPINE3_Ethernet4\n no shutdown\n mtu 1500\n no switchport\n + \ ip address 172.31.255.29/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet4\n + \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.31/31\n!\ninterface + Ethernet5\n description MLAG_DC1-SVC3B_Ethernet5\n no shutdown\n channel-group + 5 mode active\n!\ninterface Ethernet6\n description MLAG_DC1-SVC3B_Ethernet6\n + \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description + DC1-L2LEAF2A_Ethernet1\n no shutdown\n channel-group 7 mode active\n!\ninterface + Ethernet8\n description DC1-L2LEAF2B_Ethernet1\n no shutdown\n channel-group + 7 mode active\n!\ninterface Ethernet10\n description SERVER_server03_ESI_Eth1\n + \ no shutdown\n channel-group 10 mode active\n!\ninterface Loopback0\n description + ROUTER_ID\n no shutdown\n ip address 192.168.255.8/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.8/32\n!\ninterface + Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n + \ vrf Tenant_A_OP_Zone\n ip address 10.255.1.8/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.108/24\n!\ninterface + Vlan110\n description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n + \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n @@ -1109,28 +1124,25 @@ cvp_configlets: \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n - \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3010\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WEB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WEB_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3011\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_APP_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3012\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3013\n description MLAG_PEER_L3_iBGP: - vrf Tenant_A_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3019\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3020\n description MLAG_PEER_L3_iBGP: - vrf Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_B_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan3029\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n ip - address 10.255.251.6/31\n!\ninterface Vlan3030\n description MLAG_PEER_L3_iBGP: - vrf Tenant_C_WAN_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n - \ ip address 10.255.251.6/31\n!\ninterface Vlan4093\n description MLAG_PEER_L3_PEERING\n - \ no shutdown\n mtu 1500\n ip address 10.255.251.6/31\n!\ninterface Vlan4094\n - \ description MLAG_PEER\n no shutdown\n mtu 1500\n no autostate\n ip - address 10.255.252.6/31\n!\ninterface Vxlan1\n description DC1-SVC3A_VTEP\n + \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan3010\n description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3011\n + \ description MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_APP_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3012\n description + MLAG_L3_VRF_Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n + \ ip address 10.255.251.6/31\n!\ninterface Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface Vlan3029\n description + MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n + \ ip address 10.255.251.6/31\n!\ninterface Vlan3030\n description MLAG_L3_VRF_Tenant_C_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.6/31\n!\ninterface + Vlan4093\n description MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.6/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.6/31\n!\ninterface Vxlan1\n description DC1-SVC3A_VTEP\n \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n @@ -1152,101 +1164,110 @@ cvp_configlets: permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_SVC3\n \ local-interface Vlan4094\n peer-address 10.255.252.7\n peer-link Port-Channel5\n \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 - 192.168.200.5\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list - PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n description - Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal - routing\n set origin incomplete\n!\nrouter bfd\n multihop interval 1200 min-rx - 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.8\n maximum-paths - 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n distance - bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor EVPN-OVERLAY-PEERS - update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS - ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n - \ neighbor EVPN-OVERLAY-PEERS send-community\n neighbor EVPN-OVERLAY-PEERS - maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS - password 7 AQQvKeimxJu+uGQ/yYvv9w==\n neighbor IPv4-UNDERLAY-PEERS send-community\n - \ neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER - peer group\n neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65103\n neighbor MLAG-IPv4-UNDERLAY-PEER - next-hop-self\n neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-SVC3B\n neighbor - MLAG-IPv4-UNDERLAY-PEER password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER - send-community\n neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor - MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.7 - peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor 10.255.251.7 description DC1-SVC3B\n - \ neighbor 172.31.255.24 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.24 - remote-as 65001\n neighbor 172.31.255.24 description DC1-SPINE1_Ethernet4\n - \ neighbor 172.31.255.26 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.26 - remote-as 65001\n neighbor 172.31.255.26 description DC1-SPINE2_Ethernet4\n - \ neighbor 172.31.255.28 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.28 - remote-as 65001\n neighbor 172.31.255.28 description DC1-SPINE3_Ethernet4\n - \ neighbor 172.31.255.30 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.30 - remote-as 65001\n neighbor 172.31.255.30 description DC1-SPINE4_Ethernet4\n - \ neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 - remote-as 65001\n neighbor 192.168.255.1 description DC1-SPINE1\n neighbor - 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as - 65001\n neighbor 192.168.255.2 description DC1-SPINE2\n neighbor 192.168.255.3 - peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor - 192.168.255.3 description DC1-SPINE3\n neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.4 remote-as 65001\n neighbor 192.168.255.4 description - DC1-SPINE4\n redistribute connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle - Tenant_A_APP_Zone\n rd 192.168.255.8:12\n route-target both 12:12\n - \ redistribute learned\n vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n - \ rd 192.168.255.8:13\n route-target both 13:13\n redistribute learned\n - \ vlan 140-141\n !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.8:10\n - \ route-target both 10:10\n redistribute learned\n vlan 110-111\n - \ !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd 192.168.255.8:14\n route-target - both 14:14\n redistribute learned\n vlan 150\n !\n vlan-aware-bundle - Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n route-target both 11:11\n - \ redistribute learned\n vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n - \ rd 192.168.255.8:20\n route-target both 20:20\n redistribute learned\n - \ vlan 210-211\n !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n - \ route-target both 21:21\n redistribute learned\n vlan 250\n !\n - \ vlan-aware-bundle Tenant_C_OP_Zone\n rd 192.168.255.8:30\n route-target - both 30:30\n redistribute learned\n vlan 310-311\n !\n vlan-aware-bundle - Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n route-target both 31:31\n - \ redistribute learned\n vlan 350\n !\n address-family evpn\n neighbor - EVPN-OVERLAY-PEERS activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS - activate\n neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.8:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.8\n + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.8\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n + \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS + maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor + MLAG-IPv4-UNDERLAY-PEER remote-as 65103\n neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER description DC1-SVC3B\n neighbor MLAG-IPv4-UNDERLAY-PEER + password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n + \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER + route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan4093\n neighbor 172.31.255.24 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.24 remote-as 65001\n neighbor + 172.31.255.24 description DC1-SPINE1_Ethernet4\n neighbor 172.31.255.26 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.26 remote-as 65001\n neighbor + 172.31.255.26 description DC1-SPINE2_Ethernet4\n neighbor 172.31.255.28 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.28 remote-as 65001\n neighbor + 172.31.255.28 description DC1-SPINE3_Ethernet4\n neighbor 172.31.255.30 peer + group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.30 remote-as 65001\n neighbor + 172.31.255.30 description DC1-SPINE4_Ethernet4\n neighbor 192.168.255.1 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.8:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.8:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.8:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd + 192.168.255.8:14\n route-target both 14:14\n redistribute learned\n + \ vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n + \ route-target both 11:11\n redistribute learned\n vlan 120-121\n + \ !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.8:20\n route-target + both 20:20\n redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle + Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n route-target both 21:21\n + \ redistribute learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n + \ rd 192.168.255.8:30\n route-target both 30:30\n redistribute learned\n + \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n + \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.8:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.8\n update wait-install\n + \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.7 description DC1-SVC3B_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.8:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.8:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.8:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.8:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.8:14\n route-target import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n - \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_B_OP_Zone\n - \ rd 192.168.255.8:20\n route-target import evpn 20:20\n route-target - export evpn 20:20\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3013\n redistribute + connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.8:11\n route-target + import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.8:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3019\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.8:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.8\n \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.8:30\n - \ route-target import evpn 30:30\n route-target export evpn 30:30\n router-id - 192.168.255.8\n update wait-install\n neighbor 10.255.251.7 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n - \ rd 192.168.255.8:31\n route-target import evpn 31:31\n route-target - export evpn 31:31\n router-id 192.168.255.8\n update wait-install\n - \ neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SVC3B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.8:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3029\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.8:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.8\n + \ update wait-install\n neighbor 10.255.251.7 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.7 description DC1-SVC3B_Vlan3030\n redistribute + connected\n!\nend\n" + AVD_DC1-SVC3B: "!\nno enable password\nno aaa root\n!\nusername admin privilege + 15 role network-admin nopassword\nusername cvpadmin privilege 15 role network-admin + secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nmanagement + api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n no + shutdown\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 + -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\nno ip igmp snooping vlan 120\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname - DC1-SVC3B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nntp - local-interface vrf MGMT Management1\nntp server vrf MGMT 192.168.200.5 prefer\n!\nspanning-tree - mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nno - enable password\nno aaa root\n!\nusername admin privilege 15 role network-admin - nopassword\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan + DC1-SVC3B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.200.5\n!\nspanning-tree + mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority 4096\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan 120\n name Tenant_A_WEB_Zone_1\n!\nvlan 121\n name Tenant_A_WEBZone_2\n!\nvlan 130\n name Tenant_A_APP_Zone_1\n!\nvlan 131\n name Tenant_A_APP_Zone_2\n!\nvlan @@ -1254,121 +1275,117 @@ cvp_configlets: 150\n name Tenant_A_WAN_Zone_1\n!\nvlan 210\n name Tenant_B_OP_Zone_1\n!\nvlan 211\n name Tenant_B_OP_Zone_2\n!\nvlan 250\n name Tenant_B_WAN_Zone_1\n!\nvlan 310\n name Tenant_C_OP_Zone_1\n!\nvlan 311\n name Tenant_C_OP_Zone_2\n!\nvlan - 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_iBGP_Tenant_A_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3010\n name MLAG_iBGP_Tenant_A_WEB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3011\n name MLAG_iBGP_Tenant_A_APP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3012\n name MLAG_iBGP_Tenant_A_DB_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3013\n name MLAG_iBGP_Tenant_A_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3019\n name MLAG_iBGP_Tenant_B_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3020\n name MLAG_iBGP_Tenant_B_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3029\n name MLAG_iBGP_Tenant_C_OP_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 3030\n name MLAG_iBGP_Tenant_C_WAN_Zone\n - \ trunk group LEAF_PEER_L3\n!\nvlan 4093\n name LEAF_PEER_L3\n trunk group - LEAF_PEER_L3\n!\nvlan 4094\n name MLAG_PEER\n trunk group MLAG\n!\nvrf instance - MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf instance Tenant_A_DB_Zone\n!\nvrf - instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf instance - Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance Tenant_B_WAN_Zone\n!\nvrf - instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface Port-Channel5\n - \ description MLAG_PEER_DC1-SVC3A_Po5\n no shutdown\n switchport\n switchport - mode trunk\n switchport trunk group LEAF_PEER_L3\n switchport trunk group - MLAG\n!\ninterface Port-Channel7\n description DC1_L2LEAF2_Po1\n no shutdown\n - \ switchport\n switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n - \ switchport mode trunk\n mlag 7\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet5\n + 350\n name Tenant_C_WAN_Zone_1\n!\nvlan 3009\n name MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3010\n name MLAG_L3_VRF_Tenant_A_WEB_Zone\n trunk + group MLAG\n!\nvlan 3011\n name MLAG_L3_VRF_Tenant_A_APP_Zone\n trunk group + MLAG\n!\nvlan 3012\n name MLAG_L3_VRF_Tenant_A_DB_Zone\n trunk group MLAG\n!\nvlan + 3013\n name MLAG_L3_VRF_Tenant_A_WAN_Zone\n trunk group MLAG\n!\nvlan 3019\n + \ name MLAG_L3_VRF_Tenant_B_OP_Zone\n trunk group MLAG\n!\nvlan 3020\n name + MLAG_L3_VRF_Tenant_B_WAN_Zone\n trunk group MLAG\n!\nvlan 3029\n name MLAG_L3_VRF_Tenant_C_OP_Zone\n + \ trunk group MLAG\n!\nvlan 3030\n name MLAG_L3_VRF_Tenant_C_WAN_Zone\n trunk + group MLAG\n!\nvlan 4093\n name MLAG_L3\n trunk group MLAG\n!\nvlan 4094\n + \ name MLAG\n trunk group MLAG\n!\nvrf instance MGMT\n!\nvrf instance Tenant_A_APP_Zone\n!\nvrf + instance Tenant_A_DB_Zone\n!\nvrf instance Tenant_A_OP_Zone\n!\nvrf instance Tenant_A_WAN_Zone\n!\nvrf + instance Tenant_A_WEB_Zone\n!\nvrf instance Tenant_B_OP_Zone\n!\nvrf instance + Tenant_B_WAN_Zone\n!\nvrf instance Tenant_C_OP_Zone\n!\nvrf instance Tenant_C_WAN_Zone\n!\ninterface + Port-Channel5\n description MLAG_DC1-SVC3A_Port-Channel5\n no shutdown\n switchport + mode trunk\n switchport trunk group MLAG\n switchport\n!\ninterface Port-Channel7\n + \ description DC1_L2LEAF2_Po1\n no shutdown\n switchport trunk allowed vlan + 110-111,120-121,130-131,140-141,150,210-211,250,310-311,350\n switchport mode + trunk\n switchport\n mlag 7\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-SPINE1_Ethernet5\n \ no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.33/31\n!\ninterface Ethernet2\n description P2P_LINK_TO_DC1-SPINE2_Ethernet5\n no shutdown\n mtu 1500\n no switchport\n ip address 172.31.255.35/31\n!\ninterface Ethernet3\n \ description P2P_LINK_TO_DC1-SPINE3_Ethernet5\n no shutdown\n mtu 1500\n \ no switchport\n ip address 172.31.255.37/31\n!\ninterface Ethernet4\n description P2P_LINK_TO_DC1-SPINE4_Ethernet5\n no shutdown\n mtu 1500\n no switchport\n - \ ip address 172.31.255.39/31\n!\ninterface Ethernet5\n description MLAG_PEER_DC1-SVC3A_Ethernet5\n + \ ip address 172.31.255.39/31\n!\ninterface Ethernet5\n description MLAG_DC1-SVC3A_Ethernet5\n \ no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet6\n description - MLAG_PEER_DC1-SVC3A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface + MLAG_DC1-SVC3A_Ethernet6\n no shutdown\n channel-group 5 mode active\n!\ninterface Ethernet7\n description DC1-L2LEAF2A_Ethernet2\n no shutdown\n channel-group 7 mode active\n!\ninterface Ethernet8\n description DC1-L2LEAF2B_Ethernet2\n \ no shutdown\n channel-group 7 mode active\n!\ninterface Loopback0\n description - EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.9/32\n!\ninterface - Loopback1\n description VTEP_VXLAN_Tunnel_Source\n no shutdown\n ip address - 192.168.254.8/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address 10.255.1.9/32\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip - address 192.168.200.109/24\n!\ninterface Vlan110\n description Tenant_A_OP_Zone_1\n - \ no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface - Vlan111\n description Tenant_A_OP_Zone_2\n no shutdown\n vrf Tenant_A_OP_Zone\n - \ ip helper-address 1.1.1.1 vrf MGMT source-interface lo100\n ip address virtual - 10.1.11.1/24\n!\ninterface Vlan120\n description Tenant_A_WEB_Zone_1\n no - shutdown\n vrf Tenant_A_WEB_Zone\n ip helper-address 1.1.1.1 vrf TEST source-interface - lo100\n ip address virtual 10.1.20.1/24\n!\ninterface Vlan121\n description - Tenant_A_WEBZone_2\n shutdown\n mtu 1560\n vrf Tenant_A_WEB_Zone\n ip - address virtual 10.1.10.254/24\n!\ninterface Vlan130\n description Tenant_A_APP_Zone_1\n - \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.30.1/24\n!\ninterface - Vlan131\n description Tenant_A_APP_Zone_2\n no shutdown\n vrf Tenant_A_APP_Zone\n - \ ip address virtual 10.1.31.1/24\n!\ninterface Vlan140\n description Tenant_A_DB_BZone_1\n - \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan141\n description Tenant_A_DB_Zone_2\n no shutdown\n vrf Tenant_A_DB_Zone\n - \ ip address virtual 10.1.41.1/24\n!\ninterface Vlan150\n description Tenant_A_WAN_Zone_1\n - \ no shutdown\n vrf Tenant_A_WAN_Zone\n ip address virtual 10.1.40.1/24\n!\ninterface - Vlan210\n description Tenant_B_OP_Zone_1\n no shutdown\n vrf Tenant_B_OP_Zone\n - \ ip address virtual 10.2.10.1/24\n!\ninterface Vlan211\n description Tenant_B_OP_Zone_2\n - \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.11.1/24\n!\ninterface - Vlan250\n description Tenant_B_WAN_Zone_1\n no shutdown\n vrf Tenant_B_WAN_Zone\n - \ ip address virtual 10.2.50.1/24\n!\ninterface Vlan310\n description Tenant_C_OP_Zone_1\n - \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.10.1/24\n!\ninterface - Vlan311\n description Tenant_C_OP_Zone_2\n no shutdown\n vrf Tenant_C_OP_Zone\n - \ ip address virtual 10.3.11.1/24\n!\ninterface Vlan350\n description Tenant_C_WAN_Zone_1\n - \ no shutdown\n vrf Tenant_C_WAN_Zone\n ip address virtual 10.3.50.1/24\n!\ninterface - Vlan3009\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3010\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3011\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_APP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3012\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_DB_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3013\n description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3019\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3020\n description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_B_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3029\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan3030\n description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone\n no shutdown\n - \ mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface - Vlan4093\n description MLAG_PEER_L3_PEERING\n no shutdown\n mtu 1500\n ip - address 10.255.251.7/31\n!\ninterface Vlan4094\n description MLAG_PEER\n no - shutdown\n mtu 1500\n no autostate\n ip address 10.255.252.7/31\n!\ninterface - Vxlan1\n description DC1-SVC3B_VTEP\n vxlan source-interface Loopback1\n vxlan - virtual-router encapsulation mac-address mlag-system-id\n vxlan udp-port 4789\n - \ vxlan vlan 110 vni 10110\n vxlan vlan 111 vni 50111\n vxlan vlan 120 vni - 10120\n vxlan vlan 121 vni 10121\n vxlan vlan 130 vni 10130\n vxlan vlan - 131 vni 10131\n vxlan vlan 140 vni 10140\n vxlan vlan 141 vni 10141\n vxlan - vlan 150 vni 10150\n vxlan vlan 210 vni 20210\n vxlan vlan 211 vni 20211\n - \ vxlan vlan 250 vni 20250\n vxlan vlan 310 vni 30310\n vxlan vlan 311 vni - 30311\n vxlan vlan 350 vni 30350\n vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan - vrf Tenant_A_DB_Zone vni 13\n vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf - Tenant_A_WAN_Zone vni 14\n vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf - Tenant_B_OP_Zone vni 20\n vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone - vni 30\n vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address - 00:dc:00:00:00:0a\n!\nip address virtual source-nat vrf Tenant_A_OP_Zone address - 10.255.1.9\n!\nip routing\nno ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip - routing vrf Tenant_A_DB_Zone\nip routing vrf Tenant_A_OP_Zone\nip routing vrf - Tenant_A_WAN_Zone\nip routing vrf Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip - routing vrf Tenant_B_WAN_Zone\nip routing vrf Tenant_C_OP_Zone\nip routing vrf - Tenant_C_WAN_Zone\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit - 192.168.255.0/24 eq 32\n seq 20 permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n - \ domain-id DC1_SVC3\n local-interface Vlan4094\n peer-address 10.255.252.6\n - \ peer-link Port-Channel5\n reload-delay mlag 300\n reload-delay non-mlag - 330\n!\nip route vrf MGMT 0.0.0.0/0 192.168.200.5\n!\nroute-map RM-CONN-2-BGP - permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map - RM-MLAG-PEER-IN permit 10\n description Make routes learned over MLAG Peer-link - less preferred on spines to ensure optimal routing\n set origin incomplete\n!\nrouter - bfd\n multihop interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n - \ router-id 192.168.255.9\n maximum-paths 4 ecmp 4\n update wait-install\n - \ no bgp default ipv4-unicast\n distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS - peer group\n neighbor EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor - EVPN-OVERLAY-PEERS bfd\n neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor - EVPN-OVERLAY-PEERS password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS - send-community\n neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS + ROUTER_ID\n no shutdown\n ip address 192.168.255.9/32\n!\ninterface Loopback1\n + \ description VXLAN_TUNNEL_SOURCE\n no shutdown\n ip address 192.168.254.8/32\n!\ninterface + Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n + \ vrf Tenant_A_OP_Zone\n ip address 10.255.1.9/32\n!\ninterface Management1\n + \ description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 192.168.200.109/24\n!\ninterface + Vlan110\n description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n + \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n + \ no shutdown\n vrf Tenant_A_OP_Zone\n ip helper-address 1.1.1.1 vrf MGMT + source-interface lo100\n ip address virtual 10.1.11.1/24\n!\ninterface Vlan120\n + \ description Tenant_A_WEB_Zone_1\n no shutdown\n vrf Tenant_A_WEB_Zone\n + \ ip helper-address 1.1.1.1 vrf TEST source-interface lo100\n ip address virtual + 10.1.20.1/24\n!\ninterface Vlan121\n description Tenant_A_WEBZone_2\n shutdown\n + \ mtu 1560\n vrf Tenant_A_WEB_Zone\n ip address virtual 10.1.10.254/24\n!\ninterface + Vlan130\n description Tenant_A_APP_Zone_1\n no shutdown\n vrf Tenant_A_APP_Zone\n + \ ip address virtual 10.1.30.1/24\n!\ninterface Vlan131\n description Tenant_A_APP_Zone_2\n + \ no shutdown\n vrf Tenant_A_APP_Zone\n ip address virtual 10.1.31.1/24\n!\ninterface + Vlan140\n description Tenant_A_DB_BZone_1\n no shutdown\n vrf Tenant_A_DB_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan141\n description Tenant_A_DB_Zone_2\n + \ no shutdown\n vrf Tenant_A_DB_Zone\n ip address virtual 10.1.41.1/24\n!\ninterface + Vlan150\n description Tenant_A_WAN_Zone_1\n no shutdown\n vrf Tenant_A_WAN_Zone\n + \ ip address virtual 10.1.40.1/24\n!\ninterface Vlan210\n description Tenant_B_OP_Zone_1\n + \ no shutdown\n vrf Tenant_B_OP_Zone\n ip address virtual 10.2.10.1/24\n!\ninterface + Vlan211\n description Tenant_B_OP_Zone_2\n no shutdown\n vrf Tenant_B_OP_Zone\n + \ ip address virtual 10.2.11.1/24\n!\ninterface Vlan250\n description Tenant_B_WAN_Zone_1\n + \ no shutdown\n vrf Tenant_B_WAN_Zone\n ip address virtual 10.2.50.1/24\n!\ninterface + Vlan310\n description Tenant_C_OP_Zone_1\n no shutdown\n vrf Tenant_C_OP_Zone\n + \ ip address virtual 10.3.10.1/24\n!\ninterface Vlan311\n description Tenant_C_OP_Zone_2\n + \ no shutdown\n vrf Tenant_C_OP_Zone\n ip address virtual 10.3.11.1/24\n!\ninterface + Vlan350\n description Tenant_C_WAN_Zone_1\n no shutdown\n vrf Tenant_C_WAN_Zone\n + \ ip address virtual 10.3.50.1/24\n!\ninterface Vlan3009\n description MLAG_L3_VRF_Tenant_A_OP_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan3010\n description MLAG_L3_VRF_Tenant_A_WEB_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_A_WEB_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3011\n + \ description MLAG_L3_VRF_Tenant_A_APP_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_A_APP_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3012\n description + MLAG_L3_VRF_Tenant_A_DB_Zone\n no shutdown\n mtu 1500\n vrf Tenant_A_DB_Zone\n + \ ip address 10.255.251.7/31\n!\ninterface Vlan3013\n description MLAG_L3_VRF_Tenant_A_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_A_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan3019\n description MLAG_L3_VRF_Tenant_B_OP_Zone\n no shutdown\n mtu + 1500\n vrf Tenant_B_OP_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3020\n + \ description MLAG_L3_VRF_Tenant_B_WAN_Zone\n no shutdown\n mtu 1500\n vrf + Tenant_B_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface Vlan3029\n description + MLAG_L3_VRF_Tenant_C_OP_Zone\n no shutdown\n mtu 1500\n vrf Tenant_C_OP_Zone\n + \ ip address 10.255.251.7/31\n!\ninterface Vlan3030\n description MLAG_L3_VRF_Tenant_C_WAN_Zone\n + \ no shutdown\n mtu 1500\n vrf Tenant_C_WAN_Zone\n ip address 10.255.251.7/31\n!\ninterface + Vlan4093\n description MLAG_L3\n no shutdown\n mtu 1500\n ip address 10.255.251.7/31\n!\ninterface + Vlan4094\n description MLAG\n no shutdown\n mtu 1500\n no autostate\n + \ ip address 10.255.252.7/31\n!\ninterface Vxlan1\n description DC1-SVC3B_VTEP\n + \ vxlan source-interface Loopback1\n vxlan virtual-router encapsulation mac-address + mlag-system-id\n vxlan udp-port 4789\n vxlan vlan 110 vni 10110\n vxlan + vlan 111 vni 50111\n vxlan vlan 120 vni 10120\n vxlan vlan 121 vni 10121\n + \ vxlan vlan 130 vni 10130\n vxlan vlan 131 vni 10131\n vxlan vlan 140 vni + 10140\n vxlan vlan 141 vni 10141\n vxlan vlan 150 vni 10150\n vxlan vlan + 210 vni 20210\n vxlan vlan 211 vni 20211\n vxlan vlan 250 vni 20250\n vxlan + vlan 310 vni 30310\n vxlan vlan 311 vni 30311\n vxlan vlan 350 vni 30350\n + \ vxlan vrf Tenant_A_APP_Zone vni 12\n vxlan vrf Tenant_A_DB_Zone vni 13\n + \ vxlan vrf Tenant_A_OP_Zone vni 10\n vxlan vrf Tenant_A_WAN_Zone vni 14\n + \ vxlan vrf Tenant_A_WEB_Zone vni 11\n vxlan vrf Tenant_B_OP_Zone vni 20\n + \ vxlan vrf Tenant_B_WAN_Zone vni 21\n vxlan vrf Tenant_C_OP_Zone vni 30\n + \ vxlan vrf Tenant_C_WAN_Zone vni 31\n!\nip virtual-router mac-address 00:dc:00:00:00:0a\n!\nip + address virtual source-nat vrf Tenant_A_OP_Zone address 10.255.1.9\n!\nip routing\nno + ip routing vrf MGMT\nip routing vrf Tenant_A_APP_Zone\nip routing vrf Tenant_A_DB_Zone\nip + routing vrf Tenant_A_OP_Zone\nip routing vrf Tenant_A_WAN_Zone\nip routing vrf + Tenant_A_WEB_Zone\nip routing vrf Tenant_B_OP_Zone\nip routing vrf Tenant_B_WAN_Zone\nip + routing vrf Tenant_C_OP_Zone\nip routing vrf Tenant_C_WAN_Zone\n!\nip prefix-list + PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24 eq 32\n seq 20 + permit 192.168.254.0/24 eq 32\n!\nmlag configuration\n domain-id DC1_SVC3\n + \ local-interface Vlan4094\n peer-address 10.255.252.6\n peer-link Port-Channel5\n + \ reload-delay mlag 300\n reload-delay non-mlag 330\n!\nip route vrf MGMT 0.0.0.0/0 + 192.168.200.5\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT + 192.168.200.5 prefer\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address + prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nroute-map RM-MLAG-PEER-IN permit 10\n + \ description Make routes learned over MLAG Peer-link less preferred on spines + to ensure optimal routing\n set origin incomplete\n!\nrouter bfd\n multihop + interval 1200 min-rx 1200 multiplier 3\n!\nrouter bgp 65103\n router-id 192.168.255.9\n + \ maximum-paths 4 ecmp 4\n update wait-install\n no bgp default ipv4-unicast\n + \ distance bgp 20 200 200\n neighbor EVPN-OVERLAY-PEERS peer group\n neighbor + EVPN-OVERLAY-PEERS update-source Loopback0\n neighbor EVPN-OVERLAY-PEERS bfd\n + \ neighbor EVPN-OVERLAY-PEERS ebgp-multihop 3\n neighbor EVPN-OVERLAY-PEERS + password 7 q+VNViP5i4rVjW1cxFv2wA==\n neighbor EVPN-OVERLAY-PEERS send-community\n + \ neighbor EVPN-OVERLAY-PEERS maximum-routes 0\n neighbor IPv4-UNDERLAY-PEERS peer group\n neighbor IPv4-UNDERLAY-PEERS password 7 AQQvKeimxJu+uGQ/yYvv9w==\n \ neighbor IPv4-UNDERLAY-PEERS send-community\n neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER peer group\n neighbor @@ -1377,8 +1394,8 @@ cvp_configlets: password 7 vnEaG8gMeQf3d3cN6PktXQ==\n neighbor MLAG-IPv4-UNDERLAY-PEER send-community\n \ neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000\n neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ neighbor 10.255.251.6 description DC1-SVC3A\n neighbor 172.31.255.32 peer - group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.32 remote-as 65001\n neighbor + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan4093\n neighbor 172.31.255.32 + peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.32 remote-as 65001\n neighbor 172.31.255.32 description DC1-SPINE1_Ethernet5\n neighbor 172.31.255.34 peer group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.34 remote-as 65001\n neighbor 172.31.255.34 description DC1-SPINE2_Ethernet5\n neighbor 172.31.255.36 peer @@ -1387,63 +1404,69 @@ cvp_configlets: group IPv4-UNDERLAY-PEERS\n neighbor 172.31.255.38 remote-as 65001\n neighbor 172.31.255.38 description DC1-SPINE4_Ethernet5\n neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.1 remote-as 65001\n neighbor - 192.168.255.1 description DC1-SPINE1\n neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS\n - \ neighbor 192.168.255.2 remote-as 65001\n neighbor 192.168.255.2 description - DC1-SPINE2\n neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS\n neighbor - 192.168.255.3 remote-as 65001\n neighbor 192.168.255.3 description DC1-SPINE3\n - \ neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 - remote-as 65001\n neighbor 192.168.255.4 description DC1-SPINE4\n redistribute - connected route-map RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n - \ rd 192.168.255.9:12\n route-target both 12:12\n redistribute learned\n - \ vlan 130-131\n !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.9:13\n - \ route-target both 13:13\n redistribute learned\n vlan 140-141\n - \ !\n vlan-aware-bundle Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target - both 10:10\n redistribute learned\n vlan 110-111\n !\n vlan-aware-bundle - Tenant_A_WAN_Zone\n rd 192.168.255.9:14\n route-target both 14:14\n - \ redistribute learned\n vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n - \ rd 192.168.255.9:11\n route-target both 11:11\n redistribute learned\n - \ vlan 120-121\n !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.9:20\n - \ route-target both 20:20\n redistribute learned\n vlan 210-211\n - \ !\n vlan-aware-bundle Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target - both 21:21\n redistribute learned\n vlan 250\n !\n vlan-aware-bundle - Tenant_C_OP_Zone\n rd 192.168.255.9:30\n route-target both 30:30\n redistribute - learned\n vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd - 192.168.255.9:31\n route-target both 31:31\n redistribute learned\n - \ vlan 350\n !\n address-family evpn\n neighbor EVPN-OVERLAY-PEERS - activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n - \ neighbor IPv4-UNDERLAY-PEERS activate\n neighbor MLAG-IPv4-UNDERLAY-PEER - activate\n !\n vrf Tenant_A_APP_Zone\n rd 192.168.255.9:12\n route-target - import evpn 12:12\n route-target export evpn 12:12\n router-id 192.168.255.9\n + 192.168.255.1 description DC1-SPINE1_Loopback0\n neighbor 192.168.255.2 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.2 remote-as 65001\n neighbor + 192.168.255.2 description DC1-SPINE2_Loopback0\n neighbor 192.168.255.3 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.3 remote-as 65001\n neighbor + 192.168.255.3 description DC1-SPINE3_Loopback0\n neighbor 192.168.255.4 peer + group EVPN-OVERLAY-PEERS\n neighbor 192.168.255.4 remote-as 65001\n neighbor + 192.168.255.4 description DC1-SPINE4_Loopback0\n redistribute connected route-map + RM-CONN-2-BGP\n !\n vlan-aware-bundle Tenant_A_APP_Zone\n rd 192.168.255.9:12\n + \ route-target both 12:12\n redistribute learned\n vlan 130-131\n + \ !\n vlan-aware-bundle Tenant_A_DB_Zone\n rd 192.168.255.9:13\n route-target + both 13:13\n redistribute learned\n vlan 140-141\n !\n vlan-aware-bundle + Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target both 10:10\n redistribute + learned\n vlan 110-111\n !\n vlan-aware-bundle Tenant_A_WAN_Zone\n rd + 192.168.255.9:14\n route-target both 14:14\n redistribute learned\n + \ vlan 150\n !\n vlan-aware-bundle Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n + \ route-target both 11:11\n redistribute learned\n vlan 120-121\n + \ !\n vlan-aware-bundle Tenant_B_OP_Zone\n rd 192.168.255.9:20\n route-target + both 20:20\n redistribute learned\n vlan 210-211\n !\n vlan-aware-bundle + Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target both 21:21\n + \ redistribute learned\n vlan 250\n !\n vlan-aware-bundle Tenant_C_OP_Zone\n + \ rd 192.168.255.9:30\n route-target both 30:30\n redistribute learned\n + \ vlan 310-311\n !\n vlan-aware-bundle Tenant_C_WAN_Zone\n rd 192.168.255.9:31\n + \ route-target both 31:31\n redistribute learned\n vlan 350\n !\n + \ address-family evpn\n neighbor EVPN-OVERLAY-PEERS activate\n !\n address-family + ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS + activate\n neighbor MLAG-IPv4-UNDERLAY-PEER activate\n !\n vrf Tenant_A_APP_Zone\n + \ rd 192.168.255.9:12\n route-target import evpn 12:12\n route-target + export evpn 12:12\n router-id 192.168.255.9\n update wait-install\n + \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n neighbor + 10.255.251.6 description DC1-SVC3A_Vlan3011\n redistribute connected\n !\n + \ vrf Tenant_A_DB_Zone\n rd 192.168.255.9:13\n route-target import + evpn 13:13\n route-target export evpn 13:13\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_DB_Zone\n rd 192.168.255.9:13\n - \ route-target import evpn 13:13\n route-target export evpn 13:13\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_A_OP_Zone\n - \ rd 192.168.255.9:10\n route-target import evpn 10:10\n route-target - export evpn 10:10\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3012\n redistribute + connected\n !\n vrf Tenant_A_OP_Zone\n rd 192.168.255.9:10\n route-target + import evpn 10:10\n route-target export evpn 10:10\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3009\n redistribute connected\n !\n vrf Tenant_A_WAN_Zone\n rd 192.168.255.9:14\n route-target import evpn 14:14\n route-target export evpn 14:14\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n - \ route-target import evpn 11:11\n route-target export evpn 11:11\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_B_OP_Zone\n - \ rd 192.168.255.9:20\n route-target import evpn 20:20\n route-target - export evpn 20:20\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3013\n redistribute + connected\n !\n vrf Tenant_A_WEB_Zone\n rd 192.168.255.9:11\n route-target + import evpn 11:11\n route-target export evpn 11:11\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3010\n redistribute + connected\n !\n vrf Tenant_B_OP_Zone\n rd 192.168.255.9:20\n route-target + import evpn 20:20\n route-target export evpn 20:20\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3019\n redistribute connected\n !\n vrf Tenant_B_WAN_Zone\n rd 192.168.255.9:21\n route-target import evpn 21:21\n route-target export evpn 21:21\n router-id 192.168.255.9\n \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n - \ redistribute connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.9:30\n - \ route-target import evpn 30:30\n route-target export evpn 30:30\n router-id - 192.168.255.9\n update wait-install\n neighbor 10.255.251.6 peer group - MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n !\n vrf Tenant_C_WAN_Zone\n - \ rd 192.168.255.9:31\n route-target import evpn 31:31\n route-target - export evpn 31:31\n router-id 192.168.255.9\n update wait-install\n - \ neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute - connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n - \ !\n vrf MGMT\n no shutdown\n!\nend\n" + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3020\n redistribute + connected\n !\n vrf Tenant_C_OP_Zone\n rd 192.168.255.9:30\n route-target + import evpn 30:30\n route-target export evpn 30:30\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3029\n redistribute + connected\n !\n vrf Tenant_C_WAN_Zone\n rd 192.168.255.9:31\n route-target + import evpn 31:31\n route-target export evpn 31:31\n router-id 192.168.255.9\n + \ update wait-install\n neighbor 10.255.251.6 peer group MLAG-IPv4-UNDERLAY-PEER\n + \ neighbor 10.255.251.6 description DC1-SVC3A_Vlan3030\n redistribute + connected\n!\nend\n" cvp_topology: DC1_BL1: devices: diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/inventory/group_vars/DC1_SERVERS.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/inventory/group_vars/DC1_SERVERS.yml index fc12da1838e..3c3c213bdb4 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/inventory/group_vars/DC1_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/inventory/group_vars/DC1_SERVERS.yml @@ -22,7 +22,6 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_B port_channel: - description: PortChanne1 mode: active - name: server02_SINGLE_NODE_TRUNK @@ -51,5 +50,4 @@ servers: ethernet_segment: short_esi: '0303:0202:0101' port_channel: - description: PortChanne1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/molecule.yml b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/molecule.yml index 02a39f1bf08..c1d8dbc70ef 100644 --- a/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_config_deploy_cvp/molecule.yml @@ -31,9 +31,5 @@ provisioner: hosts: 'inventory/hosts.yml' group_vars: 'inventory/group_vars/' host_vars: 'inventory/host_vars/' - ansible_args: - - --tags=generate,build - - --skip-tags=online - - --extra-vars verifier: name: ansible diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF1.md index 5e1d2e1fdb0..88674d5aeb7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -108,11 +116,11 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | BGP-SPINE1_Ethernet1 | *trunk | *1,100,200,4092 | *- | *- | 1 | | Ethernet2 | BGP-SPINE2_Ethernet1 | *trunk | *1,100,200,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | -| Ethernet12 | IP Phone | trunk phone | - | 100 | - | - | -| Ethernet13 | IP Phone | trunk phone | - | 100 | - | - | -| Ethernet14 | IP Phone with no native VLAN | trunk phone | - | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet12 | IP Phone | trunk phone | - | 100 | - | - | +| Ethernet13 | IP Phone | trunk phone | - | 100 | - | - | +| Ethernet14 | IP Phone with no native VLAN | trunk phone | - | - | - | - | *Inherited from Port-Channel Interface @@ -122,7 +130,7 @@ vlan 4092 | --------- | ---- | ----------- | ---------- | --------------- | | Ethernet12 | trunk phone | 100 | 200 | untagged | | Ethernet13 | trunk phone | 100 | 200 | untagged | -| Ethernet14 | trunk phone | 1 | 200 | untagged | +| Ethernet14 | trunk phone | - | 200 | untagged | #### Ethernet Interfaces Device Configuration @@ -185,9 +193,9 @@ interface Ethernet14 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | BGP_SPINES_Po1 | switched | trunk | 1,100,200,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | BGP_SPINES_Po1 | trunk | 1,100,200,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -196,9 +204,9 @@ interface Ethernet14 interface Port-Channel1 description BGP_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF2.md index 7b1a510ebb1..0002776a8d6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-LEAF2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -100,8 +108,8 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | BGP-SPINE1_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | BGP-SPINE2_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | *Inherited from Port-Channel Interface @@ -140,9 +148,9 @@ interface Ethernet11 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | BGP_SPINES_Po2 | switched | trunk | 100,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | BGP_SPINES_Po2 | trunk | 100,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -151,9 +159,9 @@ interface Ethernet11 interface Port-Channel1 description BGP_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE1.md index 5a27fc00c35..bd133330533 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -64,6 +66,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -130,7 +138,7 @@ vlan internal order ascending range 1006 1199 | 200 | SVI_200 | - | | 220 | SVI_220 | - | | 4092 | INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -152,7 +160,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -168,16 +176,16 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | BGP-LEAF1_Ethernet1 | *trunk | *1,100,200,4092 | *- | *- | 1 | | Ethernet2 | BGP-LEAF2_Ethernet1 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_BGP-SPINE2_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_BGP-SPINE2_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | +| Ethernet3 | MLAG_BGP-SPINE2_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_BGP-SPINE2_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/3 | routed | - | 192.168.253.4/31 | default | 9214 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/3 | - | 192.168.253.4/31 | default | 9214 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -194,12 +202,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_BGP-SPINE2_Ethernet3 + description MLAG_BGP-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_BGP-SPINE2_Ethernet4 + description MLAG_BGP-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ! @@ -217,11 +225,11 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | BGP-LEAF1_Po1 | switched | trunk | 1,100,200,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | BGP-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_BGP-SPINE2_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | BGP-LEAF1_Po1 | trunk | 1,100,200,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | BGP-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_BGP-SPINE2_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -230,26 +238,25 @@ interface Ethernet5 interface Port-Channel1 description BGP-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description BGP-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_BGP-SPINE2_Po3 + description MLAG_BGP-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -260,20 +267,20 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ``` @@ -289,7 +296,7 @@ interface Loopback0 | Vlan200 | SVI_200 | default | - | False | | Vlan220 | SVI_220 | default | - | False | | Vlan4092 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -335,7 +342,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -473,7 +480,7 @@ router bgp 65001 neighbor 192.168.253.5 remote-as 65000 neighbor 192.168.253.5 description DUMMY-CORE neighbor 192.168.254.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.254.1 description BGP-SPINE2 + neighbor 192.168.254.1 description BGP-SPINE2_Vlan4094 redistribute attached-host redistribute connected ! diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE2.md index 555b75c1762..69fef5364e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/BGP-SPINE2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -64,6 +66,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -130,7 +138,7 @@ vlan internal order ascending range 1006 1199 | 200 | SVI_200 | - | | 220 | SVI_220 | - | | 4092 | INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -152,7 +160,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -168,16 +176,16 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | BGP-LEAF1_Ethernet2 | *trunk | *1,100,200,4092 | *- | *- | 1 | | Ethernet2 | BGP-LEAF2_Ethernet2 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_BGP-SPINE1_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_BGP-SPINE1_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | +| Ethernet3 | MLAG_BGP-SPINE1_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_BGP-SPINE1_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/4 | routed | - | 192.168.253.6/31 | default | 9214 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/4 | - | 192.168.253.6/31 | default | 9214 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -194,12 +202,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_BGP-SPINE1_Ethernet3 + description MLAG_BGP-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_BGP-SPINE1_Ethernet4 + description MLAG_BGP-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ! @@ -217,11 +225,11 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | BGP-LEAF1_Po1 | switched | trunk | 1,100,200,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | BGP-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_BGP-SPINE1_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | BGP-LEAF1_Po1 | trunk | 1,100,200,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | BGP-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_BGP-SPINE1_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -230,26 +238,25 @@ interface Ethernet5 interface Port-Channel1 description BGP-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description BGP-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_BGP-SPINE1_Po3 + description MLAG_BGP-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -260,20 +267,20 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ``` @@ -289,7 +296,7 @@ interface Loopback0 | Vlan200 | SVI_200 | default | - | False | | Vlan220 | SVI_220 | default | - | False | | Vlan4092 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -335,7 +342,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -475,7 +482,7 @@ router bgp 65001 neighbor 192.168.253.7 remote-as 65000 neighbor 192.168.253.7 description DUMMY-CORE neighbor 192.168.254.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.254.0 description BGP-SPINE1 + neighbor 192.168.254.0 description BGP-SPINE1_Vlan4094 redistribute attached-host redistribute connected redistribute static diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-LEAF1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-LEAF1.md index 844d0adb0d6..9376706b22a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-LEAF1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-LEAF1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -36,20 +38,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 172.31.0.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 172.31.0.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -81,6 +83,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -146,9 +154,9 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | ISIS-SPINE1_Po1 | switched | trunk | 110,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | ISIS-SPINE1_Po1 | trunk | 110,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -157,9 +165,9 @@ interface Ethernet1 interface Port-Channel1 description ISIS-SPINE1_Po1 no shutdown - switchport switchport trunk allowed vlan 110,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-SPINE1.md index e5b737b1854..8e369959f08 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/ISIS-SPINE1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -39,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 172.31.0.1 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 172.31.0.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -84,6 +86,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -130,7 +138,7 @@ vlan 4092 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | ISIS-LEAF1_Ethernet1 | *trunk | *110,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 110 | - | - | - | +| Ethernet10 | Endpoint | access | 110 | - | - | - | *Inherited from Port-Channel Interface @@ -157,9 +165,9 @@ interface Ethernet10 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | ISIS-LEAF1_Po1 | switched | trunk | 110,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | ISIS-LEAF1_Po1 | trunk | 110,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -168,9 +176,9 @@ interface Ethernet10 interface Port-Channel1 description ISIS-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110,4092 switchport mode trunk + switchport ``` ### Loopback Interfaces @@ -181,13 +189,13 @@ interface Port-Channel1 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -200,7 +208,7 @@ interface Port-Channel1 ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 isis enable EVPN_UNDERLAY @@ -315,7 +323,7 @@ ip route 10.1.0.0/16 10.1.100.100 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0000.0001.00 | +| Net-ID | 49.0001.1921.6825.5001.00 | | Type | level-2 | | Router-ID | 192.168.255.1 | | Log Adjacency Changes | True | @@ -345,7 +353,7 @@ ip route 10.1.0.0/16 10.1.100.100 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0001.00 + net 49.0001.1921.6825.5001.00 is-type level-2 redistribute connected redistribute static diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF1.md index 0ca18e7d4f6..14f0567aca1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -100,8 +108,8 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | L2ONLY-SPINE1_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | L2ONLY-SPINE2_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | *Inherited from Port-Channel Interface @@ -140,9 +148,9 @@ interface Ethernet11 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | L2ONLY_SPINES_Po1 | switched | trunk | 100,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | L2ONLY_SPINES_Po1 | trunk | 100,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -151,9 +159,9 @@ interface Ethernet11 interface Port-Channel1 description L2ONLY_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF2.md index a593f6968a0..f5b71722f20 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-LEAF2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -100,8 +108,8 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | L2ONLY-SPINE1_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | L2ONLY-SPINE2_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | *Inherited from Port-Channel Interface @@ -140,9 +148,9 @@ interface Ethernet11 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | L2ONLY_SPINES_Po2 | switched | trunk | 100,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | L2ONLY_SPINES_Po2 | trunk | 100,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -151,9 +159,9 @@ interface Ethernet11 interface Port-Channel1 description L2ONLY_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE1.md index 4944ee8638b..e304875d39c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -59,6 +61,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -121,7 +129,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 100 | L2VLAN_100 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -131,7 +139,7 @@ vlan 100 name L2VLAN_100 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -147,8 +155,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | L2ONLY-LEAF1_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | L2ONLY-LEAF2_Ethernet1 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_L2ONLY-SPINE2_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_L2ONLY-SPINE2_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_L2ONLY-SPINE2_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_L2ONLY-SPINE2_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -167,12 +175,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_L2ONLY-SPINE2_Ethernet3 + description MLAG_L2ONLY-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_L2ONLY-SPINE2_Ethernet4 + description MLAG_L2ONLY-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -183,11 +191,11 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | L2ONLY-LEAF1_Po1 | switched | trunk | 100,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | L2ONLY-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_L2ONLY-SPINE2_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | L2ONLY-LEAF1_Po1 | trunk | 100,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | L2ONLY-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_L2ONLY-SPINE2_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -196,25 +204,25 @@ interface Ethernet4 interface Port-Channel1 description L2ONLY-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description L2ONLY-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_L2ONLY-SPINE2_Po3 + description MLAG_L2ONLY-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -223,7 +231,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -236,7 +244,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE2.md index ebf73dc8155..c5c2220edc8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/L2ONLY-SPINE2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -59,6 +61,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -121,7 +129,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 100 | L2VLAN_100 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -131,7 +139,7 @@ vlan 100 name L2VLAN_100 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -147,8 +155,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | L2ONLY-LEAF1_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | L2ONLY-LEAF2_Ethernet2 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_L2ONLY-SPINE1_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_L2ONLY-SPINE1_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_L2ONLY-SPINE1_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_L2ONLY-SPINE1_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -167,12 +175,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_L2ONLY-SPINE1_Ethernet3 + description MLAG_L2ONLY-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_L2ONLY-SPINE1_Ethernet4 + description MLAG_L2ONLY-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -183,11 +191,11 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | L2ONLY-LEAF1_Po1 | switched | trunk | 100,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | L2ONLY-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_L2ONLY-SPINE1_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | L2ONLY-LEAF1_Po1 | trunk | 100,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | L2ONLY-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_L2ONLY-SPINE1_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -196,25 +204,25 @@ interface Ethernet4 interface Port-Channel1 description L2ONLY-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description L2ONLY-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_L2ONLY-SPINE1_Po3 + description MLAG_L2ONLY-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -223,7 +231,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -236,7 +244,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF1.md index faa069bf393..29a3976aea8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -100,8 +108,8 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | OSPF-SPINE1_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | OSPF-SPINE2_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | *Inherited from Port-Channel Interface @@ -140,9 +148,9 @@ interface Ethernet11 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | OSPF_SPINES_Po1 | switched | trunk | 100,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | OSPF_SPINES_Po1 | trunk | 100,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -151,9 +159,9 @@ interface Ethernet11 interface Port-Channel1 description OSPF_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF2.md index 0c254046955..5f7e65b4625 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-LEAF2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Internal VLAN Allocation Policy](#internal-vlan-allocation-policy) - [Internal VLAN Allocation Policy Summary](#internal-vlan-allocation-policy-summary) - [Internal VLAN Allocation Policy Device Configuration](#internal-vlan-allocation-policy-device-configuration) @@ -53,6 +55,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Internal VLAN Allocation Policy ### Internal VLAN Allocation Policy Summary @@ -100,8 +108,8 @@ vlan 4092 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | OSPF-SPINE1_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | OSPF-SPINE2_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | -| Ethernet10 | Endpoint | access | 100 | - | - | - | -| Ethernet11 | Endpoint | access | 100 | - | - | - | +| Ethernet10 | Endpoint | access | 100 | - | - | - | +| Ethernet11 | Endpoint | access | 100 | - | - | - | *Inherited from Port-Channel Interface @@ -140,9 +148,9 @@ interface Ethernet11 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | OSPF_SPINES_Po2 | switched | trunk | 100,4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | OSPF_SPINES_Po2 | trunk | 100,4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -151,9 +159,9 @@ interface Ethernet11 interface Port-Channel1 description OSPF_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ``` ### VLAN Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE1.md index f21b876073e..f9203993354 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE1.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -62,6 +64,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -125,7 +133,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 100 | SVI_100 | - | | 4092 | INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -138,7 +146,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -154,16 +162,16 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | OSPF-LEAF1_Ethernet1 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | OSPF-LEAF2_Ethernet1 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_OSPF-SPINE2_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_OSPF-SPINE2_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | +| Ethernet3 | MLAG_OSPF-SPINE2_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_OSPF-SPINE2_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/1 | routed | - | 192.168.253.0/31 | default | 9214 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/1 | - | 192.168.253.0/31 | default | 9214 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -180,12 +188,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_OSPF-SPINE2_Ethernet3 + description MLAG_OSPF-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_OSPF-SPINE2_Ethernet4 + description MLAG_OSPF-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ! @@ -205,11 +213,11 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | OSPF-LEAF1_Po1 | switched | trunk | 100,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | OSPF-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_OSPF-SPINE2_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | OSPF-LEAF1_Po1 | trunk | 100,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | OSPF-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_OSPF-SPINE2_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -218,26 +226,25 @@ interface Ethernet5 interface Port-Channel1 description OSPF-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description OSPF-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_OSPF-SPINE2_Po3 + description MLAG_OSPF-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -248,20 +255,20 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ip ospf area 0.0.0.0 @@ -275,7 +282,7 @@ interface Loopback0 | --------- | ----------- | --- | ---- | -------- | | Vlan100 | SVI_100 | default | - | False | | Vlan4092 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -303,7 +310,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE2.md index 41adc81df6f..50064647ef2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/devices/OSPF-SPINE2.md @@ -4,6 +4,8 @@ - [Management](#management) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [MLAG](#mlag) - [MLAG Summary](#mlag-summary) - [MLAG Device Configuration](#mlag-device-configuration) @@ -62,6 +64,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## MLAG ### MLAG Summary @@ -125,7 +133,7 @@ vlan internal order ascending range 1006 1199 | ------- | ---- | ------------ | | 100 | SVI_100 | - | | 4092 | INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -138,7 +146,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -154,16 +162,16 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | OSPF-LEAF1_Ethernet2 | *trunk | *100,4092 | *- | *- | 1 | | Ethernet2 | OSPF-LEAF2_Ethernet2 | *trunk | *100,4092 | *- | *- | 2 | -| Ethernet3 | MLAG_PEER_OSPF-SPINE1_Ethernet3 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_OSPF-SPINE1_Ethernet4 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 3 | +| Ethernet3 | MLAG_OSPF-SPINE1_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_OSPF-SPINE1_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/2 | routed | - | 192.168.253.2/31 | default | 9214 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet5 | P2P_LINK_TO_DUMMY-CORE_Ethernet1/2 | - | 192.168.253.2/31 | default | 9214 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -180,12 +188,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_OSPF-SPINE1_Ethernet3 + description MLAG_OSPF-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_OSPF-SPINE1_Ethernet4 + description MLAG_OSPF-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ! @@ -205,11 +213,11 @@ interface Ethernet5 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | OSPF-LEAF1_Po1 | switched | trunk | 100,4092 | - | - | - | - | 1 | - | -| Port-Channel2 | OSPF-LEAF2_Po1 | switched | trunk | 100,4092 | - | - | - | - | 2 | - | -| Port-Channel3 | MLAG_PEER_OSPF-SPINE1_Po3 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | OSPF-LEAF1_Po1 | trunk | 100,4092 | - | - | - | - | 1 | - | +| Port-Channel2 | OSPF-LEAF2_Po1 | trunk | 100,4092 | - | - | - | - | 2 | - | +| Port-Channel3 | MLAG_OSPF-SPINE1_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -218,26 +226,25 @@ interface Ethernet5 interface Port-Channel1 description OSPF-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description OSPF-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_OSPF-SPINE1_Po3 + description MLAG_OSPF-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -248,20 +255,20 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | Router_ID | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | Router_ID | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ip ospf area 0.0.0.0 @@ -275,7 +282,7 @@ interface Loopback0 | --------- | ----------- | --- | ---- | -------- | | Vlan100 | SVI_100 | default | - | False | | Vlan4092 | Inband Management | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 9214 | False | +| Vlan4094 | MLAG | default | 9214 | False | ##### IPv4 @@ -303,7 +310,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-documentation.md b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-documentation.md index eae4ba2d5af..84200716bcb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-documentation.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-documentation.md @@ -18,18 +18,18 @@ | POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | Serial Number | | --- | ---- | ---- | ------------- | -------- | -------------------------- | ------------- | -| L2LS_BGP | leaf | BGP-LEAF1 | - | - | Provisioned | - | -| L2LS_BGP | leaf | BGP-LEAF2 | - | - | Provisioned | - | +| L2LS_BGP | l2leaf | BGP-LEAF1 | - | - | Provisioned | - | +| L2LS_BGP | l2leaf | BGP-LEAF2 | - | - | Provisioned | - | | L2LS_BGP | l3spine | BGP-SPINE1 | - | - | Provisioned | - | | L2LS_BGP | l3spine | BGP-SPINE2 | - | - | Provisioned | - | -| L2LS_ISIS | leaf | ISIS-LEAF1 | 192.168.200.105/24 | vEOS-LAB | Provisioned | - | +| L2LS_ISIS | l2leaf | ISIS-LEAF1 | 192.168.200.105/24 | vEOS-LAB | Provisioned | - | | L2LS_ISIS | l3spine | ISIS-SPINE1 | 192.168.200.101/24 | vEOS-LAB | Provisioned | - | -| L2LS_L2ONLY | leaf | L2ONLY-LEAF1 | - | - | Provisioned | - | -| L2LS_L2ONLY | leaf | L2ONLY-LEAF2 | - | - | Provisioned | - | -| L2LS_L2ONLY | spine | L2ONLY-SPINE1 | - | - | Provisioned | - | -| L2LS_L2ONLY | spine | L2ONLY-SPINE2 | - | - | Provisioned | - | -| L2LS_OSPF | leaf | OSPF-LEAF1 | - | - | Provisioned | - | -| L2LS_OSPF | leaf | OSPF-LEAF2 | - | - | Provisioned | - | +| L2LS_L2ONLY | l2leaf | L2ONLY-LEAF1 | - | - | Provisioned | - | +| L2LS_L2ONLY | l2leaf | L2ONLY-LEAF2 | - | - | Provisioned | - | +| L2LS_L2ONLY | l2spine | L2ONLY-SPINE1 | - | - | Provisioned | - | +| L2LS_L2ONLY | l2spine | L2ONLY-SPINE2 | - | - | Provisioned | - | +| L2LS_OSPF | l2leaf | OSPF-LEAF1 | - | - | Provisioned | - | +| L2LS_OSPF | l2leaf | OSPF-LEAF2 | - | - | Provisioned | - | | L2LS_OSPF | l3spine | OSPF-SPINE1 | - | - | Provisioned | - | | L2LS_OSPF | l3spine | OSPF-SPINE2 | - | - | Provisioned | - | @@ -39,35 +39,35 @@ | POD | Type | Node | Management IP | Inband Interface | | --- | ---- | ---- | ------------- | ---------------- | -| L2LS_BGP | leaf | BGP-LEAF1 | 172.23.254.4/24 | Vlan4092 | -| L2LS_BGP | leaf | BGP-LEAF2 | 172.23.254.5/24 | Vlan4092 | -| L2LS_ISIS | leaf | ISIS-LEAF1 | 172.23.254.4/24 | Vlan4092 | -| L2LS_L2ONLY | leaf | L2ONLY-LEAF1 | 172.23.254.4/24 | Vlan4092 | -| L2LS_L2ONLY | leaf | L2ONLY-LEAF2 | 172.23.254.5/24 | Vlan4092 | -| L2LS_OSPF | leaf | OSPF-LEAF1 | 172.23.254.4/24 | Vlan4092 | -| L2LS_OSPF | leaf | OSPF-LEAF2 | 172.23.254.5/24 | Vlan4092 | +| L2LS_BGP | l2leaf | BGP-LEAF1 | 172.23.254.4/24 | Vlan4092 | +| L2LS_BGP | l2leaf | BGP-LEAF2 | 172.23.254.5/24 | Vlan4092 | +| L2LS_ISIS | l2leaf | ISIS-LEAF1 | 172.23.254.4/24 | Vlan4092 | +| L2LS_L2ONLY | l2leaf | L2ONLY-LEAF1 | 172.23.254.4/24 | Vlan4092 | +| L2LS_L2ONLY | l2leaf | L2ONLY-LEAF2 | 172.23.254.5/24 | Vlan4092 | +| L2LS_OSPF | l2leaf | OSPF-LEAF1 | 172.23.254.4/24 | Vlan4092 | +| L2LS_OSPF | l2leaf | OSPF-LEAF2 | 172.23.254.5/24 | Vlan4092 | ## Fabric Topology | Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | | ---- | ---- | -------------- | --------- | ----------| -------------- | -| leaf | BGP-LEAF1 | Ethernet1 | l3spine | BGP-SPINE1 | Ethernet1 | -| leaf | BGP-LEAF1 | Ethernet2 | l3spine | BGP-SPINE2 | Ethernet1 | -| leaf | BGP-LEAF2 | Ethernet1 | l3spine | BGP-SPINE1 | Ethernet2 | -| leaf | BGP-LEAF2 | Ethernet2 | l3spine | BGP-SPINE2 | Ethernet2 | +| l2leaf | BGP-LEAF1 | Ethernet1 | l3spine | BGP-SPINE1 | Ethernet1 | +| l2leaf | BGP-LEAF1 | Ethernet2 | l3spine | BGP-SPINE2 | Ethernet1 | +| l2leaf | BGP-LEAF2 | Ethernet1 | l3spine | BGP-SPINE1 | Ethernet2 | +| l2leaf | BGP-LEAF2 | Ethernet2 | l3spine | BGP-SPINE2 | Ethernet2 | | l3spine | BGP-SPINE1 | Ethernet3 | mlag_peer | BGP-SPINE2 | Ethernet3 | | l3spine | BGP-SPINE1 | Ethernet4 | mlag_peer | BGP-SPINE2 | Ethernet4 | -| leaf | ISIS-LEAF1 | Ethernet1 | l3spine | ISIS-SPINE1 | Ethernet1 | -| leaf | L2ONLY-LEAF1 | Ethernet1 | spine | L2ONLY-SPINE1 | Ethernet1 | -| leaf | L2ONLY-LEAF1 | Ethernet2 | spine | L2ONLY-SPINE2 | Ethernet1 | -| leaf | L2ONLY-LEAF2 | Ethernet1 | spine | L2ONLY-SPINE1 | Ethernet2 | -| leaf | L2ONLY-LEAF2 | Ethernet2 | spine | L2ONLY-SPINE2 | Ethernet2 | -| spine | L2ONLY-SPINE1 | Ethernet3 | mlag_peer | L2ONLY-SPINE2 | Ethernet3 | -| spine | L2ONLY-SPINE1 | Ethernet4 | mlag_peer | L2ONLY-SPINE2 | Ethernet4 | -| leaf | OSPF-LEAF1 | Ethernet1 | l3spine | OSPF-SPINE1 | Ethernet1 | -| leaf | OSPF-LEAF1 | Ethernet2 | l3spine | OSPF-SPINE2 | Ethernet1 | -| leaf | OSPF-LEAF2 | Ethernet1 | l3spine | OSPF-SPINE1 | Ethernet2 | -| leaf | OSPF-LEAF2 | Ethernet2 | l3spine | OSPF-SPINE2 | Ethernet2 | +| l2leaf | ISIS-LEAF1 | Ethernet1 | l3spine | ISIS-SPINE1 | Ethernet1 | +| l2leaf | L2ONLY-LEAF1 | Ethernet1 | l2spine | L2ONLY-SPINE1 | Ethernet1 | +| l2leaf | L2ONLY-LEAF1 | Ethernet2 | l2spine | L2ONLY-SPINE2 | Ethernet1 | +| l2leaf | L2ONLY-LEAF2 | Ethernet1 | l2spine | L2ONLY-SPINE1 | Ethernet2 | +| l2leaf | L2ONLY-LEAF2 | Ethernet2 | l2spine | L2ONLY-SPINE2 | Ethernet2 | +| l2spine | L2ONLY-SPINE1 | Ethernet3 | mlag_peer | L2ONLY-SPINE2 | Ethernet3 | +| l2spine | L2ONLY-SPINE1 | Ethernet4 | mlag_peer | L2ONLY-SPINE2 | Ethernet4 | +| l2leaf | OSPF-LEAF1 | Ethernet1 | l3spine | OSPF-SPINE1 | Ethernet1 | +| l2leaf | OSPF-LEAF1 | Ethernet2 | l3spine | OSPF-SPINE2 | Ethernet1 | +| l2leaf | OSPF-LEAF2 | Ethernet1 | l3spine | OSPF-SPINE1 | Ethernet2 | +| l2leaf | OSPF-LEAF2 | Ethernet2 | l3spine | OSPF-SPINE2 | Ethernet2 | | l3spine | OSPF-SPINE1 | Ethernet3 | mlag_peer | OSPF-SPINE2 | Ethernet3 | | l3spine | OSPF-SPINE1 | Ethernet4 | mlag_peer | OSPF-SPINE2 | Ethernet4 | @@ -103,12 +103,12 @@ | POD | Node | CLNS Address | | --- | ---- | ------------ | -| L2LS_ISIS | ISIS-SPINE1 | 49.0001.0001.0000.0001.00 | +| L2LS_ISIS | ISIS-SPINE1 | 49.0001.1921.6825.5001.00 | ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-topology.csv b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-topology.csv index 7dcb9d35985..eca57201d34 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-topology.csv +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/documentation/fabric/L2LS-topology.csv @@ -1,59 +1,59 @@ Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -leaf,BGP-LEAF1,Ethernet1,l3spine,BGP-SPINE1,Ethernet1,True -leaf,BGP-LEAF1,Ethernet2,l3spine,BGP-SPINE2,Ethernet1,True -leaf,BGP-LEAF1,Ethernet10,network_port,Endpoint,,True -leaf,BGP-LEAF1,Ethernet11,network_port,Endpoint,,True -leaf,BGP-LEAF1,Ethernet12,network_port,IP Phone,,True -leaf,BGP-LEAF1,Ethernet13,network_port,IP Phone,,True -leaf,BGP-LEAF1,Ethernet14,network_port,IP Phone with no native VLAN,,True -leaf,BGP-LEAF2,Ethernet1,l3spine,BGP-SPINE1,Ethernet2,True -leaf,BGP-LEAF2,Ethernet2,l3spine,BGP-SPINE2,Ethernet2,True -leaf,BGP-LEAF2,Ethernet10,network_port,Endpoint,,True -leaf,BGP-LEAF2,Ethernet11,network_port,Endpoint,,True -l3spine,BGP-SPINE1,Ethernet1,leaf,BGP-LEAF1,Ethernet1,True -l3spine,BGP-SPINE1,Ethernet2,leaf,BGP-LEAF2,Ethernet1,True +l2leaf,BGP-LEAF1,Ethernet1,l3spine,BGP-SPINE1,Ethernet1,True +l2leaf,BGP-LEAF1,Ethernet2,l3spine,BGP-SPINE2,Ethernet1,True +l2leaf,BGP-LEAF1,Ethernet10,network_port,,,True +l2leaf,BGP-LEAF1,Ethernet11,network_port,,,True +l2leaf,BGP-LEAF1,Ethernet12,network_port,,,True +l2leaf,BGP-LEAF1,Ethernet13,network_port,,,True +l2leaf,BGP-LEAF1,Ethernet14,network_port,,,True +l2leaf,BGP-LEAF2,Ethernet1,l3spine,BGP-SPINE1,Ethernet2,True +l2leaf,BGP-LEAF2,Ethernet2,l3spine,BGP-SPINE2,Ethernet2,True +l2leaf,BGP-LEAF2,Ethernet10,network_port,,,True +l2leaf,BGP-LEAF2,Ethernet11,network_port,,,True +l3spine,BGP-SPINE1,Ethernet1,l2leaf,BGP-LEAF1,Ethernet1,True +l3spine,BGP-SPINE1,Ethernet2,l2leaf,BGP-LEAF2,Ethernet1,True l3spine,BGP-SPINE1,Ethernet3,mlag_peer,BGP-SPINE2,Ethernet3,True l3spine,BGP-SPINE1,Ethernet4,mlag_peer,BGP-SPINE2,Ethernet4,True l3spine,BGP-SPINE1,Ethernet5,other,DUMMY-CORE,Ethernet1/3,True -l3spine,BGP-SPINE2,Ethernet1,leaf,BGP-LEAF1,Ethernet2,True -l3spine,BGP-SPINE2,Ethernet2,leaf,BGP-LEAF2,Ethernet2,True +l3spine,BGP-SPINE2,Ethernet1,l2leaf,BGP-LEAF1,Ethernet2,True +l3spine,BGP-SPINE2,Ethernet2,l2leaf,BGP-LEAF2,Ethernet2,True l3spine,BGP-SPINE2,Ethernet3,mlag_peer,BGP-SPINE1,Ethernet3,True l3spine,BGP-SPINE2,Ethernet4,mlag_peer,BGP-SPINE1,Ethernet4,True l3spine,BGP-SPINE2,Ethernet5,other,DUMMY-CORE,Ethernet1/4,True -leaf,ISIS-LEAF1,Ethernet1,l3spine,ISIS-SPINE1,Ethernet1,True -l3spine,ISIS-SPINE1,Ethernet1,leaf,ISIS-LEAF1,Ethernet1,True -l3spine,ISIS-SPINE1,Ethernet10,network_port,Endpoint,,True -leaf,L2ONLY-LEAF1,Ethernet1,spine,L2ONLY-SPINE1,Ethernet1,True -leaf,L2ONLY-LEAF1,Ethernet2,spine,L2ONLY-SPINE2,Ethernet1,True -leaf,L2ONLY-LEAF1,Ethernet10,network_port,Endpoint,,True -leaf,L2ONLY-LEAF1,Ethernet11,network_port,Endpoint,,True -leaf,L2ONLY-LEAF2,Ethernet1,spine,L2ONLY-SPINE1,Ethernet2,True -leaf,L2ONLY-LEAF2,Ethernet2,spine,L2ONLY-SPINE2,Ethernet2,True -leaf,L2ONLY-LEAF2,Ethernet10,network_port,Endpoint,,True -leaf,L2ONLY-LEAF2,Ethernet11,network_port,Endpoint,,True -spine,L2ONLY-SPINE1,Ethernet1,leaf,L2ONLY-LEAF1,Ethernet1,True -spine,L2ONLY-SPINE1,Ethernet2,leaf,L2ONLY-LEAF2,Ethernet1,True -spine,L2ONLY-SPINE1,Ethernet3,mlag_peer,L2ONLY-SPINE2,Ethernet3,True -spine,L2ONLY-SPINE1,Ethernet4,mlag_peer,L2ONLY-SPINE2,Ethernet4,True -spine,L2ONLY-SPINE2,Ethernet1,leaf,L2ONLY-LEAF1,Ethernet2,True -spine,L2ONLY-SPINE2,Ethernet2,leaf,L2ONLY-LEAF2,Ethernet2,True -spine,L2ONLY-SPINE2,Ethernet3,mlag_peer,L2ONLY-SPINE1,Ethernet3,True -spine,L2ONLY-SPINE2,Ethernet4,mlag_peer,L2ONLY-SPINE1,Ethernet4,True -leaf,OSPF-LEAF1,Ethernet1,l3spine,OSPF-SPINE1,Ethernet1,True -leaf,OSPF-LEAF1,Ethernet2,l3spine,OSPF-SPINE2,Ethernet1,True -leaf,OSPF-LEAF1,Ethernet10,network_port,Endpoint,,True -leaf,OSPF-LEAF1,Ethernet11,network_port,Endpoint,,True -leaf,OSPF-LEAF2,Ethernet1,l3spine,OSPF-SPINE1,Ethernet2,True -leaf,OSPF-LEAF2,Ethernet2,l3spine,OSPF-SPINE2,Ethernet2,True -leaf,OSPF-LEAF2,Ethernet10,network_port,Endpoint,,True -leaf,OSPF-LEAF2,Ethernet11,network_port,Endpoint,,True -l3spine,OSPF-SPINE1,Ethernet1,leaf,OSPF-LEAF1,Ethernet1,True -l3spine,OSPF-SPINE1,Ethernet2,leaf,OSPF-LEAF2,Ethernet1,True +l2leaf,ISIS-LEAF1,Ethernet1,l3spine,ISIS-SPINE1,Ethernet1,True +l3spine,ISIS-SPINE1,Ethernet1,l2leaf,ISIS-LEAF1,Ethernet1,True +l3spine,ISIS-SPINE1,Ethernet10,network_port,,,True +l2leaf,L2ONLY-LEAF1,Ethernet1,l2spine,L2ONLY-SPINE1,Ethernet1,True +l2leaf,L2ONLY-LEAF1,Ethernet2,l2spine,L2ONLY-SPINE2,Ethernet1,True +l2leaf,L2ONLY-LEAF1,Ethernet10,network_port,,,True +l2leaf,L2ONLY-LEAF1,Ethernet11,network_port,,,True +l2leaf,L2ONLY-LEAF2,Ethernet1,l2spine,L2ONLY-SPINE1,Ethernet2,True +l2leaf,L2ONLY-LEAF2,Ethernet2,l2spine,L2ONLY-SPINE2,Ethernet2,True +l2leaf,L2ONLY-LEAF2,Ethernet10,network_port,,,True +l2leaf,L2ONLY-LEAF2,Ethernet11,network_port,,,True +l2spine,L2ONLY-SPINE1,Ethernet1,l2leaf,L2ONLY-LEAF1,Ethernet1,True +l2spine,L2ONLY-SPINE1,Ethernet2,l2leaf,L2ONLY-LEAF2,Ethernet1,True +l2spine,L2ONLY-SPINE1,Ethernet3,mlag_peer,L2ONLY-SPINE2,Ethernet3,True +l2spine,L2ONLY-SPINE1,Ethernet4,mlag_peer,L2ONLY-SPINE2,Ethernet4,True +l2spine,L2ONLY-SPINE2,Ethernet1,l2leaf,L2ONLY-LEAF1,Ethernet2,True +l2spine,L2ONLY-SPINE2,Ethernet2,l2leaf,L2ONLY-LEAF2,Ethernet2,True +l2spine,L2ONLY-SPINE2,Ethernet3,mlag_peer,L2ONLY-SPINE1,Ethernet3,True +l2spine,L2ONLY-SPINE2,Ethernet4,mlag_peer,L2ONLY-SPINE1,Ethernet4,True +l2leaf,OSPF-LEAF1,Ethernet1,l3spine,OSPF-SPINE1,Ethernet1,True +l2leaf,OSPF-LEAF1,Ethernet2,l3spine,OSPF-SPINE2,Ethernet1,True +l2leaf,OSPF-LEAF1,Ethernet10,network_port,,,True +l2leaf,OSPF-LEAF1,Ethernet11,network_port,,,True +l2leaf,OSPF-LEAF2,Ethernet1,l3spine,OSPF-SPINE1,Ethernet2,True +l2leaf,OSPF-LEAF2,Ethernet2,l3spine,OSPF-SPINE2,Ethernet2,True +l2leaf,OSPF-LEAF2,Ethernet10,network_port,,,True +l2leaf,OSPF-LEAF2,Ethernet11,network_port,,,True +l3spine,OSPF-SPINE1,Ethernet1,l2leaf,OSPF-LEAF1,Ethernet1,True +l3spine,OSPF-SPINE1,Ethernet2,l2leaf,OSPF-LEAF2,Ethernet1,True l3spine,OSPF-SPINE1,Ethernet3,mlag_peer,OSPF-SPINE2,Ethernet3,True l3spine,OSPF-SPINE1,Ethernet4,mlag_peer,OSPF-SPINE2,Ethernet4,True l3spine,OSPF-SPINE1,Ethernet5,other,DUMMY-CORE,Ethernet1/1,True -l3spine,OSPF-SPINE2,Ethernet1,leaf,OSPF-LEAF1,Ethernet2,True -l3spine,OSPF-SPINE2,Ethernet2,leaf,OSPF-LEAF2,Ethernet2,True +l3spine,OSPF-SPINE2,Ethernet1,l2leaf,OSPF-LEAF1,Ethernet2,True +l3spine,OSPF-SPINE2,Ethernet2,l2leaf,OSPF-LEAF2,Ethernet2,True l3spine,OSPF-SPINE2,Ethernet3,mlag_peer,OSPF-SPINE1,Ethernet3,True l3spine,OSPF-SPINE2,Ethernet4,mlag_peer,OSPF-SPINE1,Ethernet4,True l3spine,OSPF-SPINE2,Ethernet5,other,DUMMY-CORE,Ethernet1/2,True diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF1.cfg index a324d0f7b8b..bd3534a6294 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname BGP-LEAF1 ! -no enable password -no aaa root -! vlan 1 name SVI_1 ! @@ -28,9 +34,9 @@ vrf instance MGMT interface Port-Channel1 description BGP_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport ! interface Ethernet1 description BGP-SPINE1_Ethernet1 @@ -92,11 +98,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF2.cfg index 1f68fab4514..52d06cc32ac 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname BGP-LEAF2 ! -no enable password -no aaa root -! vlan 100 name SVI_100 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description BGP_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ! interface Ethernet1 description BGP-SPINE1_Ethernet2 @@ -60,11 +66,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE1.cfg index 54265013668..bc2e5a5e9c8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname BGP-SPINE1 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 1 name SVI_1 ! @@ -29,7 +35,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -37,26 +43,25 @@ vrf instance MGMT interface Port-Channel1 description BGP-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description BGP-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_BGP-SPINE2_Po3 + description MLAG_BGP-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description BGP-LEAF1_Ethernet1 @@ -69,12 +74,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_BGP-SPINE2_Ethernet3 + description MLAG_BGP-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_BGP-SPINE2_Ethernet4 + description MLAG_BGP-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ! @@ -86,7 +91,7 @@ interface Ethernet5 ip address 192.168.253.4/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! @@ -119,7 +124,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -163,7 +168,7 @@ router bgp 65001 neighbor 192.168.253.5 remote-as 65000 neighbor 192.168.253.5 description DUMMY-CORE neighbor 192.168.254.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.254.1 description BGP-SPINE2 + neighbor 192.168.254.1 description BGP-SPINE2_Vlan4094 redistribute attached-host redistribute connected ! @@ -171,11 +176,4 @@ router bgp 65001 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE2.cfg index 7f2141a03f7..57168907bcc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/BGP-SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname BGP-SPINE2 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 1 name SVI_1 ! @@ -29,7 +35,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -37,26 +43,25 @@ vrf instance MGMT interface Port-Channel1 description BGP-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 1,100,200,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description BGP-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_BGP-SPINE1_Po3 + description MLAG_BGP-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description BGP-LEAF1_Ethernet2 @@ -69,12 +74,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_BGP-SPINE1_Ethernet3 + description MLAG_BGP-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_BGP-SPINE1_Ethernet4 + description MLAG_BGP-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ! @@ -86,7 +91,7 @@ interface Ethernet5 ip address 192.168.253.6/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! @@ -119,7 +124,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -164,7 +169,7 @@ router bgp 65001 neighbor 192.168.253.7 remote-as 65000 neighbor 192.168.253.7 description DUMMY-CORE neighbor 192.168.254.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.254.0 description BGP-SPINE1 + neighbor 192.168.254.0 description BGP-SPINE1_Vlan4094 redistribute attached-host redistribute connected redistribute static @@ -173,11 +178,4 @@ router bgp 65001 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-LEAF1.cfg index 60dfaa01dac..6ed6014cc0e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname ISIS-LEAF1 ! -no enable password -no aaa root -! vlan 110 name SVI_110 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description ISIS-SPINE1_Po1 no shutdown - switchport switchport trunk allowed vlan 110,4092 switchport mode trunk + switchport ! interface Ethernet1 description ISIS-SPINE1_Ethernet1 @@ -32,7 +38,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -47,11 +53,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-SPINE1.cfg index 50bd47ea326..ce1f39c812f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/ISIS-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname ISIS-SPINE1 ! -no enable password -no aaa root -! vlan 110 name SVI_110 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description ISIS-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110,4092 switchport mode trunk + switchport ! interface Ethernet1 description ISIS-LEAF1_Ethernet1 @@ -39,14 +45,14 @@ interface Ethernet10 switchport ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -73,7 +79,7 @@ ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 10.1.0.0/16 10.1.100.100 ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0001.00 + net 49.0001.1921.6825.5001.00 is-type level-2 redistribute connected redistribute static @@ -84,11 +90,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF1.cfg index 739ca7e2eda..99bf2ad4128 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname L2ONLY-LEAF1 ! -no enable password -no aaa root -! vlan 100 name L2VLAN_100 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description L2ONLY_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ! interface Ethernet1 description L2ONLY-SPINE1_Ethernet1 @@ -60,11 +66,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF2.cfg index 1a20006b1e1..690dd48fe26 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname L2ONLY-LEAF2 ! -no enable password -no aaa root -! vlan 100 name L2VLAN_100 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description L2ONLY_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ! interface Ethernet1 description L2ONLY-SPINE1_Ethernet2 @@ -60,11 +66,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE1.cfg index 807ed424ee8..9c99fb3f336 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +19,11 @@ hostname L2ONLY-SPINE1 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name L2VLAN_100 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -25,25 +31,25 @@ vrf instance MGMT interface Port-Channel1 description L2ONLY-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description L2ONLY-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_L2ONLY-SPINE2_Po3 + description MLAG_L2ONLY-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description L2ONLY-LEAF1_Ethernet1 @@ -56,17 +62,17 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_L2ONLY-SPINE2_Ethernet3 + description MLAG_L2ONLY-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_L2ONLY-SPINE2_Ethernet4 + description MLAG_L2ONLY-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -85,11 +91,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE2.cfg index d2f5fb485c4..0c313d823f0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/L2ONLY-SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +19,11 @@ hostname L2ONLY-SPINE2 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name L2VLAN_100 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -25,25 +31,25 @@ vrf instance MGMT interface Port-Channel1 description L2ONLY-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description L2ONLY-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_L2ONLY-SPINE1_Po3 + description MLAG_L2ONLY-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description L2ONLY-LEAF1_Ethernet2 @@ -56,17 +62,17 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_L2ONLY-SPINE1_Ethernet3 + description MLAG_L2ONLY-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_L2ONLY-SPINE1_Ethernet4 + description MLAG_L2ONLY-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -85,11 +91,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF1.cfg index 4d92ec750c1..eb12f6986ce 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OSPF-LEAF1 ! -no enable password -no aaa root -! vlan 100 name SVI_100 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description OSPF_SPINES_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ! interface Ethernet1 description OSPF-SPINE1_Ethernet1 @@ -60,11 +66,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF2.cfg index 436ae55dc33..54814096e4c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OSPF-LEAF2 ! -no enable password -no aaa root -! vlan 100 name SVI_100 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description OSPF_SPINES_Po2 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport ! interface Ethernet1 description OSPF-SPINE1_Ethernet2 @@ -60,11 +66,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 172.31.0.1 ip route 0.0.0.0/0 172.23.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE1.cfg index afb71a70927..d81d1abb0f5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname OSPF-SPINE1 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name SVI_100 ! @@ -20,7 +26,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -28,26 +34,25 @@ vrf instance MGMT interface Port-Channel1 description OSPF-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description OSPF-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_OSPF-SPINE2_Po3 + description MLAG_OSPF-SPINE2_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description OSPF-LEAF1_Ethernet1 @@ -60,12 +65,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_OSPF-SPINE2_Ethernet3 + description MLAG_OSPF-SPINE2_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_OSPF-SPINE2_Ethernet4 + description MLAG_OSPF-SPINE2_Ethernet4 no shutdown channel-group 3 mode active ! @@ -79,7 +84,7 @@ interface Ethernet5 ip ospf area 0.0.0.0 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ip ospf area 0.0.0.0 @@ -98,7 +103,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -129,11 +134,4 @@ router ospf 100 max-lsa 12000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE2.cfg index 4ddbed10bbb..3b4d64268bb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/configs/OSPF-SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname OSPF-SPINE2 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name SVI_100 ! @@ -20,7 +26,7 @@ vlan 4092 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -28,26 +34,25 @@ vrf instance MGMT interface Port-Channel1 description OSPF-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 1 ! interface Port-Channel2 description OSPF-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 100,4092 switchport mode trunk + switchport mlag 2 ! interface Port-Channel3 - description MLAG_PEER_OSPF-SPINE1_Po3 + description MLAG_OSPF-SPINE1_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description OSPF-LEAF1_Ethernet2 @@ -60,12 +65,12 @@ interface Ethernet2 channel-group 2 mode active ! interface Ethernet3 - description MLAG_PEER_OSPF-SPINE1_Ethernet3 + description MLAG_OSPF-SPINE1_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_OSPF-SPINE1_Ethernet4 + description MLAG_OSPF-SPINE1_Ethernet4 no shutdown channel-group 3 mode active ! @@ -79,7 +84,7 @@ interface Ethernet5 ip ospf area 0.0.0.0 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ip ospf area 0.0.0.0 @@ -98,7 +103,7 @@ interface Vlan4092 ip virtual-router address 172.23.254.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -131,11 +136,4 @@ router ospf 100 redistribute static redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF1.yml index 90a87b0f8b2..67fa0468cfc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -26,7 +32,6 @@ ethernet_interfaces: peer_type: l3spine description: BGP-SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -36,65 +41,68 @@ ethernet_interfaces: peer_type: l3spine description: BGP-SPINE2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet12 - peer: IP Phone peer_type: network_port description: IP Phone shutdown: false - type: switched - mode: trunk phone - native_vlan: 100 - phone: - vlan: 200 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 100 + phone: + vlan: 200 + trunk: untagged - name: Ethernet13 - peer: IP Phone peer_type: network_port description: IP Phone shutdown: false - type: switched - mode: trunk phone - native_vlan: 100 - phone: - vlan: 200 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 100 + phone: + vlan: 200 + trunk: untagged - name: Ethernet14 - peer: IP Phone with no native VLAN peer_type: network_port description: IP Phone with no native VLAN shutdown: false - type: switched - mode: trunk phone - phone: - vlan: 200 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + phone: + vlan: 200 + trunk: untagged port_channel_interfaces: - name: Port-Channel1 description: BGP_SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,100,200,4092 shutdown: false - mode: trunk - vlans: 1,100,200,4092 vlans: - id: 1 name: SVI_1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF2.yml index 374d6329d7a..31b678d8971 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-LEAF2.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -26,7 +32,6 @@ ethernet_interfaces: peer_type: l3spine description: BGP-SPINE1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -36,33 +41,34 @@ ethernet_interfaces: peer_type: l3spine description: BGP-SPINE2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' port_channel_interfaces: - name: Port-Channel1 description: BGP_SPINES_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 vlans: - id: 100 name: SVI_100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE1.yml index 561e6a8631c..380cc0def99 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE1.yml @@ -34,7 +34,7 @@ router_bgp: - ip_address: 192.168.254.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: BGP-SPINE2 - description: BGP-SPINE2 + description: BGP-SPINE2_Vlan4094 - ip_address: 192.168.253.5 remote_as: '65000' peer: DUMMY-CORE @@ -54,6 +54,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -66,7 +72,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 1 @@ -86,7 +92,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -123,34 +129,38 @@ vlan_interfaces: - 172.23.254.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_BGP-SPINE2_Po3 - type: switched + description: MLAG_BGP-SPINE2_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: BGP-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,100,200,4092 shutdown: false - mode: trunk - vlans: 1,100,200,4092 mlag: 1 - name: Port-Channel2 description: BGP-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: BGP-SPINE2 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_BGP-SPINE2_Ethernet3 - type: port-channel-member + description: MLAG_BGP-SPINE2_Ethernet3 shutdown: false channel_group: id: 3 @@ -159,8 +169,7 @@ ethernet_interfaces: peer: BGP-SPINE2 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_BGP-SPINE2_Ethernet4 - type: port-channel-member + description: MLAG_BGP-SPINE2_Ethernet4 shutdown: false channel_group: id: 3 @@ -168,20 +177,18 @@ ethernet_interfaces: - name: Ethernet1 peer: BGP-LEAF1 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: BGP-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: BGP-LEAF2 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: BGP-LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -190,7 +197,8 @@ ethernet_interfaces: peer_interface: Ethernet1/3 peer_type: other description: P2P_LINK_TO_DUMMY-CORE_Ethernet1/3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.253.4/31 @@ -211,7 +219,7 @@ route_maps: description: Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 ip_igmp_snooping: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE2.yml index d73e3931c34..80d061562fe 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/BGP-SPINE2.yml @@ -34,7 +34,7 @@ router_bgp: - ip_address: 192.168.254.0 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: BGP-SPINE1 - description: BGP-SPINE1 + description: BGP-SPINE1_Vlan4094 - ip_address: 192.168.253.7 remote_as: '65000' peer: DUMMY-CORE @@ -58,6 +58,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -70,7 +76,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 1 @@ -90,7 +96,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -127,34 +133,38 @@ vlan_interfaces: - 172.23.254.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_BGP-SPINE1_Po3 - type: switched + description: MLAG_BGP-SPINE1_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: BGP-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,100,200,4092 shutdown: false - mode: trunk - vlans: 1,100,200,4092 mlag: 1 - name: Port-Channel2 description: BGP-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: BGP-SPINE1 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_BGP-SPINE1_Ethernet3 - type: port-channel-member + description: MLAG_BGP-SPINE1_Ethernet3 shutdown: false channel_group: id: 3 @@ -163,8 +173,7 @@ ethernet_interfaces: peer: BGP-SPINE1 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_BGP-SPINE1_Ethernet4 - type: port-channel-member + description: MLAG_BGP-SPINE1_Ethernet4 shutdown: false channel_group: id: 3 @@ -172,20 +181,18 @@ ethernet_interfaces: - name: Ethernet1 peer: BGP-LEAF1 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: BGP-LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: BGP-LEAF2 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: BGP-LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -194,7 +201,8 @@ ethernet_interfaces: peer_interface: Ethernet1/4 peer_type: other description: P2P_LINK_TO_DUMMY-CORE_Ethernet1/4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.253.6/31 @@ -215,7 +223,7 @@ route_maps: description: Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 ip_igmp_snooping: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-LEAF1.yml index f99a6234cba..2b90fc13a73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-LEAF1.yml @@ -12,12 +12,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -34,17 +40,18 @@ ethernet_interfaces: peer_type: l3spine description: ISIS-SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: ISIS-SPINE1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110,4092 shutdown: false - mode: trunk - vlans: 110,4092 vlans: - id: 110 name: SVI_110 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-SPINE1.yml index eb4f3eb8b4f..369a9c4d75b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/ISIS-SPINE1.yml @@ -14,12 +14,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -33,31 +39,32 @@ ethernet_interfaces: - name: Ethernet1 peer: ISIS-LEAF1 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: ISIS-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' port_channel_interfaces: - name: Port-Channel1 description: ISIS-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110,4092 shutdown: false - mode: trunk - vlans: 110,4092 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 isis_enable: EVPN_UNDERLAY @@ -65,7 +72,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0000.0001.00 + net: 49.0001.1921.6825.5001.00 router_id: 192.168.255.1 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF1.yml index a8e45025f06..aa9db960a16 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,46 +29,46 @@ ethernet_interfaces: - name: Ethernet1 peer: L2ONLY-SPINE1 peer_interface: Ethernet1 - peer_type: spine + peer_type: l2spine description: L2ONLY-SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: L2ONLY-SPINE2 peer_interface: Ethernet1 - peer_type: spine + peer_type: l2spine description: L2ONLY-SPINE2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' port_channel_interfaces: - name: Port-Channel1 description: L2ONLY_SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 vlans: - id: 100 name: L2VLAN_100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF2.yml index f0898aac80e..4919a0df48b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-LEAF2.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,46 +29,46 @@ ethernet_interfaces: - name: Ethernet1 peer: L2ONLY-SPINE1 peer_interface: Ethernet2 - peer_type: spine + peer_type: l2spine description: L2ONLY-SPINE1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: L2ONLY-SPINE2 peer_interface: Ethernet2 - peer_type: spine + peer_type: l2spine description: L2ONLY-SPINE2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' port_channel_interfaces: - name: Port-Channel1 description: L2ONLY_SPINES_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 vlans: - id: 100 name: L2VLAN_100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE1.yml index 65c2e24784e..6400f024409 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE1.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,7 +29,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -31,40 +37,45 @@ vlans: tenant: L2LS_L2ONLY vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 192.168.254.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_L2ONLY-SPINE2_Po3 - type: switched + description: MLAG_L2ONLY-SPINE2_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: L2ONLY-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 1 - name: Port-Channel2 description: L2ONLY-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: L2ONLY-SPINE2 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_L2ONLY-SPINE2_Ethernet3 - type: port-channel-member + description: MLAG_L2ONLY-SPINE2_Ethernet3 shutdown: false channel_group: id: 3 @@ -73,8 +84,7 @@ ethernet_interfaces: peer: L2ONLY-SPINE2 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_L2ONLY-SPINE2_Ethernet4 - type: port-channel-member + description: MLAG_L2ONLY-SPINE2_Ethernet4 shutdown: false channel_group: id: 3 @@ -82,20 +92,18 @@ ethernet_interfaces: - name: Ethernet1 peer: L2ONLY-LEAF1 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: L2ONLY-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: L2ONLY-LEAF2 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: L2ONLY-LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE2.yml index 1c9b99a16e2..b6670261232 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/L2ONLY-SPINE2.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,7 +29,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -31,40 +37,45 @@ vlans: tenant: L2LS_L2ONLY vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 192.168.254.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_L2ONLY-SPINE1_Po3 - type: switched + description: MLAG_L2ONLY-SPINE1_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: L2ONLY-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 1 - name: Port-Channel2 description: L2ONLY-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: L2ONLY-SPINE1 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_L2ONLY-SPINE1_Ethernet3 - type: port-channel-member + description: MLAG_L2ONLY-SPINE1_Ethernet3 shutdown: false channel_group: id: 3 @@ -73,8 +84,7 @@ ethernet_interfaces: peer: L2ONLY-SPINE1 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_L2ONLY-SPINE1_Ethernet4 - type: port-channel-member + description: MLAG_L2ONLY-SPINE1_Ethernet4 shutdown: false channel_group: id: 3 @@ -82,20 +92,18 @@ ethernet_interfaces: - name: Ethernet1 peer: L2ONLY-LEAF1 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: L2ONLY-LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: L2ONLY-LEAF2 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: L2ONLY-LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF1.yml index 2bc0a736f3e..3b995048ca8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -26,7 +32,6 @@ ethernet_interfaces: peer_type: l3spine description: OSPF-SPINE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -36,33 +41,34 @@ ethernet_interfaces: peer_type: l3spine description: OSPF-SPINE2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' port_channel_interfaces: - name: Port-Channel1 description: OSPF_SPINES_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 vlans: - id: 100 name: SVI_100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF2.yml index 5762a9fe025..533365edf9b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-LEAF2.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -26,7 +32,6 @@ ethernet_interfaces: peer_type: l3spine description: OSPF-SPINE1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -36,33 +41,34 @@ ethernet_interfaces: peer_type: l3spine description: OSPF-SPINE2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' - name: Ethernet11 - peer: Endpoint peer_type: network_port description: Endpoint shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' port_channel_interfaces: - name: Port-Channel1 description: OSPF_SPINES_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 vlans: - id: 100 name: SVI_100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE1.yml index cf793e943aa..6027ae593ec 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE1.yml @@ -11,6 +11,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,7 +29,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -34,7 +40,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -58,34 +64,38 @@ vlan_interfaces: - 172.23.254.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_OSPF-SPINE2_Po3 - type: switched + description: MLAG_OSPF-SPINE2_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: OSPF-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 1 - name: Port-Channel2 description: OSPF-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: OSPF-SPINE2 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_OSPF-SPINE2_Ethernet3 - type: port-channel-member + description: MLAG_OSPF-SPINE2_Ethernet3 shutdown: false channel_group: id: 3 @@ -94,8 +104,7 @@ ethernet_interfaces: peer: OSPF-SPINE2 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_OSPF-SPINE2_Ethernet4 - type: port-channel-member + description: MLAG_OSPF-SPINE2_Ethernet4 shutdown: false channel_group: id: 3 @@ -103,20 +112,18 @@ ethernet_interfaces: - name: Ethernet1 peer: OSPF-LEAF1 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: OSPF-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: OSPF-LEAF2 peer_interface: Ethernet1 - peer_type: leaf + peer_type: l2leaf description: OSPF-LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -125,7 +132,8 @@ ethernet_interfaces: peer_interface: Ethernet1/1 peer_type: other description: P2P_LINK_TO_DUMMY-CORE_Ethernet1/1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.253.0/31 @@ -140,7 +148,7 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 ospf_area: 0.0.0.0 @@ -155,7 +163,8 @@ router_ospf: - Ethernet5 bfd_enable: false redistribute: - connected: {} + connected: + enabled: true ip_igmp_snooping: globally_enabled: true ip_virtual_router_mac_address: 00:1c:73:00:00:99 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE2.yml index 713e560fb60..9fddaf34ca0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/intended/structured_configs/OSPF-SPINE2.yml @@ -14,6 +14,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -26,7 +32,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -37,7 +43,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -61,34 +67,38 @@ vlan_interfaces: - 172.23.254.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_OSPF-SPINE1_Po3 - type: switched + description: MLAG_OSPF-SPINE1_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: OSPF-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 1 - name: Port-Channel2 description: OSPF-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 100,4092 shutdown: false - mode: trunk - vlans: 100,4092 mlag: 2 ethernet_interfaces: - name: Ethernet3 peer: OSPF-SPINE1 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_OSPF-SPINE1_Ethernet3 - type: port-channel-member + description: MLAG_OSPF-SPINE1_Ethernet3 shutdown: false channel_group: id: 3 @@ -97,8 +107,7 @@ ethernet_interfaces: peer: OSPF-SPINE1 peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_OSPF-SPINE1_Ethernet4 - type: port-channel-member + description: MLAG_OSPF-SPINE1_Ethernet4 shutdown: false channel_group: id: 3 @@ -106,20 +115,18 @@ ethernet_interfaces: - name: Ethernet1 peer: OSPF-LEAF1 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: OSPF-LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet2 peer: OSPF-LEAF2 peer_interface: Ethernet2 - peer_type: leaf + peer_type: l2leaf description: OSPF-LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -128,7 +135,8 @@ ethernet_interfaces: peer_interface: Ethernet1/2 peer_type: other description: P2P_LINK_TO_DUMMY-CORE_Ethernet1/2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.253.2/31 @@ -143,7 +151,7 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 ospf_area: 0.0.0.0 @@ -158,8 +166,10 @@ router_ospf: - Ethernet5 bfd_enable: false redistribute: - connected: {} - static: {} + connected: + enabled: true + static: + enabled: true ip_igmp_snooping: globally_enabled: true ip_virtual_router_mac_address: 00:1c:73:00:00:99 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/BGP_LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/BGP_LEAFS.yml index 22ec54cbb04..d56828c2443 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/BGP_LEAFS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/BGP_LEAFS.yml @@ -1,7 +1,7 @@ --- -type: leaf +type: l2leaf -leaf: +l2leaf: defaults: uplink_switches: [ BGP-SPINE1, BGP-SPINE2 ] uplink_interfaces: [ Ethernet1, Ethernet2 ] diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/ISIS_LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/ISIS_LEAFS.yml index d0fb7541e55..7d919a3264f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/ISIS_LEAFS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/ISIS_LEAFS.yml @@ -1,8 +1,8 @@ --- -type: leaf +type: l2leaf -leaf: +l2leaf: defaults: uplink_interfaces: ['Ethernet1'] uplink_switches: ['ISIS-SPINE1'] diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2LS.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2LS.yml index 2c222c79700..d17e1fdb4ea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2LS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2LS.yml @@ -7,9 +7,6 @@ # Two spine and two leaf switches per POD # Core interfaces to non-existing core switch. (to test the underlay routing) -design: - type: l2ls - fabric_name: L2LS mgmt_gateway: 172.31.0.1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_LEAFS.yml index 9d22cd4f3db..c62d46718dd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_LEAFS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_LEAFS.yml @@ -1,7 +1,7 @@ --- -type: leaf +type: l2leaf -leaf: +l2leaf: defaults: uplink_switches: [ L2ONLY-SPINE1, L2ONLY-SPINE2 ] uplink_interfaces: [ Ethernet1, Ethernet2 ] diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_SPINES.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_SPINES.yml index f7f3b1004e9..1aab759fbaf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_SPINES.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/L2ONLY_SPINES.yml @@ -1,7 +1,7 @@ --- -type: spine +type: l2spine -spine: +l2spine: defaults: mlag_peer_ipv4_pool: 192.168.254.0/24 mlag_interfaces: [ Ethernet3, Ethernet4 ] diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/OSPF_LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/OSPF_LEAFS.yml index 72395541e6e..4e6292497c6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/OSPF_LEAFS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/OSPF_LEAFS.yml @@ -1,7 +1,7 @@ --- -type: leaf +type: l2leaf -leaf: +l2leaf: defaults: uplink_switches: [ OSPF-SPINE1, OSPF-SPINE2 ] uplink_interfaces: [ Ethernet1, Ethernet2 ] diff --git a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/all.yml index e7e19d60245..b55dc265b63 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-l2ls/inventory/group_vars/all.yml @@ -1,2 +1,7 @@ --- root_dir: '{{ playbook_dir }}' + +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER1.md index 01f8ede2892..3c5dd0b058d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -53,20 +55,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -98,6 +100,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -172,24 +180,24 @@ vlan 2020 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet6.10 | TENANT_B_SITE_3_INTRA_L3VPN | l3dot1q | - | 10 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet6.10 | TENANT_B_SITE_3_INTRA_L3VPN | - | 10 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE1-LSR1_Ethernet1 | routed | - | 100.64.48.0/31 | default | 9178 | False | - | - | -| Ethernet2 | P2P_LINK_TO_SITE1-LER2_Ethernet2 | routed | - | 100.64.48.4/31 | default | 9178 | False | - | - | -| Ethernet6.10 | TENANT_B_SITE_3_INTRA_L3VPN | l3dot1q | - | 123.1.1.0/31 | TENANT_B_INTRA | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE1-LSR1_Ethernet1 | - | 100.64.48.0/31 | default | 9178 | False | - | - | +| Ethernet2 | P2P_LINK_TO_SITE1-LER2_Ethernet2 | - | 100.64.48.4/31 | default | 9178 | False | - | - | +| Ethernet6.10 | TENANT_B_SITE_3_INTRA_L3VPN | - | 123.1.1.0/31 | TENANT_B_INTRA | - | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE1-LSR1_Ethernet1 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_SITE1-LER2_Ethernet2 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE1-LSR1_Ethernet1 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_SITE1-LER2_Ethernet2 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -269,7 +277,7 @@ interface Ethernet6.10 ip ospf area 0 ! interface Ethernet8 - description CPE_TENANT_A_SITE1_Ethernet1 + description CPE_CPE_TENANT_A_SITE1_Ethernet1 no shutdown channel-group 8 mode active ``` @@ -280,21 +288,21 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -| Port-Channel3.1000 | - | l2dot1q | - | False | 1000 | - | - | True | - | - | - | -| Port-Channel3.1001 | - | l2dot1q | - | False | 1001 | - | - | True | - | - | - | -| Port-Channel3.1002 | - | l2dot1q | - | False | 1002 | - | - | True | - | - | - | -| Port-Channel3.1003 | - | l2dot1q | - | False | 1003 | - | - | True | - | - | - | -| Port-Channel3.1004 | - | l2dot1q | - | False | 1004 | - | - | True | - | - | - | -| Port-Channel8.111 | - | l2dot1q | 111 | False | 111 | - | - | True | - | - | - | -| Port-Channel8.222 | - | l2dot1q | 222 | False | 222 | - | - | True | - | - | - | -| Port-Channel8.333 | - | l2dot1q | 434 | False | 333 | - | - | True | - | - | - | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- | ------------ | ---------------------- | ---------------------- | +| Port-Channel3.1000 | - | - | dot1q | - | 1000 | - | - | client | - | - | - | - | +| Port-Channel3.1001 | - | - | dot1q | - | 1001 | - | - | client | - | - | - | - | +| Port-Channel3.1002 | - | - | dot1q | - | 1002 | - | - | client | - | - | - | - | +| Port-Channel3.1003 | - | - | dot1q | - | 1003 | - | - | client | - | - | - | - | +| Port-Channel3.1004 | - | - | dot1q | - | 1004 | - | - | client | - | - | - | - | +| Port-Channel8.111 | - | 111 | dot1q | - | 111 | - | - | client | - | - | - | - | +| Port-Channel8.222 | - | 222 | dot1q | - | 222 | - | - | client | - | - | - | - | +| Port-Channel8.333 | - | 434 | dot1q | - | 333 | - | - | client | - | - | - | - | ##### EVPN Multihoming @@ -342,7 +350,7 @@ interface Port-Channel3.1004 client dot1q 1004 network client ! interface Port-Channel8 - description CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel + description CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel no shutdown no switchport ! @@ -370,13 +378,13 @@ interface Port-Channel8.333 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.5/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::5/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::5/128 | ##### ISIS @@ -389,15 +397,15 @@ interface Port-Channel8.333 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.5/32 ipv6 address 2000:1234:ffff:ffff::5/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 205 node-segment ipv6 index 205 + isis enable CORE + isis passive ``` ### VLAN Interfaces @@ -538,7 +546,7 @@ router ospf 19 vrf TENANT_B_INTRA | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0005.00 | +| Net-ID | 49.0001.1000.7000.0005.00 | | Type | level-1-2 | | Router-ID | 100.70.0.5 | | Log Adjacency Changes | True | @@ -582,7 +590,7 @@ router ospf 19 vrf TENANT_B_INTRA ```eos ! router isis CORE - net 49.0001.0000.0001.0005.00 + net 49.0001.1000.7000.0005.00 is-type level-1-2 router-id ipv4 100.70.0.5 log-adjacency-changes @@ -696,9 +704,9 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.5:10010 @@ -796,10 +804,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.5 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER2.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER2.md index 0beea4e2c6d..7dd2ce053bd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LER2.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -52,20 +54,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -97,6 +99,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -171,24 +179,24 @@ vlan 2020 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet5.100 | TENANT_B_SITE_3 | l3dot1q | - | 100 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet5.100 | TENANT_B_SITE_3 | - | 100 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE1-LSR2_Ethernet1 | routed | - | 100.64.48.2/31 | default | 9214 | False | - | - | -| Ethernet2 | P2P_LINK_TO_SITE1-LER1_Ethernet2 | routed | - | 100.64.48.5/31 | default | 9178 | False | - | - | -| Ethernet5.100 | TENANT_B_SITE_3 | l3dot1q | - | 192.168.48.0/31 | TENANT_B_WAN | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE1-LSR2_Ethernet1 | - | 100.64.48.2/31 | default | 9214 | False | - | - | +| Ethernet2 | P2P_LINK_TO_SITE1-LER1_Ethernet2 | - | 100.64.48.5/31 | default | 9178 | False | - | - | +| Ethernet5.100 | TENANT_B_SITE_3 | - | 192.168.48.0/31 | TENANT_B_WAN | - | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE1-LSR2_Ethernet1 | routed | - | - | default | 9214 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_SITE1-LER1_Ethernet2 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE1-LSR2_Ethernet1 | - | - | default | 9214 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_SITE1-LER1_Ethernet2 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -263,7 +271,7 @@ interface Ethernet5.100 ip address 192.168.48.0/31 ! interface Ethernet8 - description CPE_TENANT_A_SITE1_Ethernet2 + description CPE_CPE_TENANT_A_SITE1_Ethernet2 no shutdown channel-group 8 mode active ``` @@ -274,21 +282,21 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -| Port-Channel3.1000 | - | l2dot1q | - | False | 1000 | - | - | True | - | - | - | -| Port-Channel3.1001 | - | l2dot1q | - | False | 1001 | - | - | True | - | - | - | -| Port-Channel3.1002 | - | l2dot1q | - | False | 1002 | - | - | True | - | - | - | -| Port-Channel3.1003 | - | l2dot1q | - | False | 1003 | - | - | True | - | - | - | -| Port-Channel3.1004 | - | l2dot1q | - | False | 1004 | - | - | True | - | - | - | -| Port-Channel8.111 | - | l2dot1q | 111 | False | 111 | - | - | True | - | - | - | -| Port-Channel8.222 | - | l2dot1q | 222 | False | 222 | - | - | True | - | - | - | -| Port-Channel8.333 | - | l2dot1q | 434 | False | 333 | - | - | True | - | - | - | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- | ------------ | ---------------------- | ---------------------- | +| Port-Channel3.1000 | - | - | dot1q | - | 1000 | - | - | client | - | - | - | - | +| Port-Channel3.1001 | - | - | dot1q | - | 1001 | - | - | client | - | - | - | - | +| Port-Channel3.1002 | - | - | dot1q | - | 1002 | - | - | client | - | - | - | - | +| Port-Channel3.1003 | - | - | dot1q | - | 1003 | - | - | client | - | - | - | - | +| Port-Channel3.1004 | - | - | dot1q | - | 1004 | - | - | client | - | - | - | - | +| Port-Channel8.111 | - | 111 | dot1q | - | 111 | - | - | client | - | - | - | - | +| Port-Channel8.222 | - | 222 | dot1q | - | 222 | - | - | client | - | - | - | - | +| Port-Channel8.333 | - | 434 | dot1q | - | 333 | - | - | client | - | - | - | - | ##### EVPN Multihoming @@ -336,7 +344,7 @@ interface Port-Channel3.1004 client dot1q 1004 network client ! interface Port-Channel8 - description CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel + description CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel no shutdown no switchport ! @@ -364,13 +372,13 @@ interface Port-Channel8.333 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 100.70.0.6/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | 2000:1234:ffff:ffff::6/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::6/128 | ##### ISIS @@ -383,15 +391,15 @@ interface Port-Channel8.333 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.6/32 ipv6 address 2000:1234:ffff:ffff::6/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 206 node-segment ipv6 index 206 + isis enable CORE + isis passive ``` ### VLAN Interfaces @@ -503,7 +511,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0006.00 | +| Net-ID | 49.0001.1000.7000.0006.00 | | Type | level-1-2 | | Router-ID | 100.70.0.6 | | Log Adjacency Changes | True | @@ -547,7 +555,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0001.0006.00 + net 49.0001.1000.7000.0006.00 is-type level-1-2 router-id ipv4 100.70.0.6 log-adjacency-changes @@ -680,13 +688,13 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.6:10010 @@ -800,10 +808,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.6 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR1.md index 7d6bba193c7..67780f52bbc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -38,20 +40,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -83,6 +85,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -126,19 +134,19 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE1-LER1_Ethernet1 | routed | - | 100.64.48.1/31 | default | 9178 | False | - | - | -| Ethernet3 | P2P_LINK_TO_SITE2-LSR1_Ethernet3 | routed | - | 100.64.48.8/31 | default | 9178 | False | - | - | -| Ethernet4 | P2P_LINK_TO_SITE1-RR1_Ethernet4 | routed | - | 100.64.48.6/31 | default | 9178 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE1-LER1_Ethernet1 | - | 100.64.48.1/31 | default | 9178 | False | - | - | +| Ethernet3 | P2P_LINK_TO_SITE2-LSR1_Ethernet3 | - | 100.64.48.8/31 | default | 9178 | False | - | - | +| Ethernet4 | P2P_LINK_TO_SITE1-RR1_Ethernet4 | - | 100.64.48.6/31 | default | 9178 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE1-LER1_Ethernet1 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_SITE2-LSR1_Ethernet3 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_SITE1-RR1_Ethernet4 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE1-LER1_Ethernet1 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_SITE2-LSR1_Ethernet3 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_SITE1-RR1_Ethernet4 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -224,13 +232,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.1/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::1/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::1/128 | ##### ISIS @@ -243,15 +251,15 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.1/32 ipv6 address 2000:1234:ffff:ffff::1/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 301 node-segment ipv6 index 301 + isis enable CORE + isis passive ``` ## Routing @@ -320,7 +328,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0001.00 | +| Net-ID | 49.0001.1000.7000.0001.00 | | Type | level-2 | | Router-ID | 100.70.0.1 | | Log Adjacency Changes | True | @@ -365,7 +373,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0000.0001.00 + net 49.0001.1000.7000.0001.00 is-type level-2 router-id ipv4 100.70.0.1 log-adjacency-changes @@ -406,10 +414,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.1 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR2.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR2.md index 626c03f9d12..f268c4e3000 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-LSR2.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -38,20 +40,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -83,6 +85,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -126,17 +134,17 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE1-LER2_Ethernet1 | routed | - | 100.64.48.3/31 | default | 9214 | False | - | - | -| Ethernet3 | P2P_LINK_TO_SITE2-LSR2_Ethernet3 | routed | - | 100.64.48.10/31 | default | 9178 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE1-LER2_Ethernet1 | - | 100.64.48.3/31 | default | 9214 | False | - | - | +| Ethernet3 | P2P_LINK_TO_SITE2-LSR2_Ethernet3 | - | 100.64.48.10/31 | default | 9178 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE1-LER2_Ethernet1 | routed | - | - | default | 9214 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_SITE2-LSR2_Ethernet3 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE1-LER2_Ethernet1 | - | - | default | 9214 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_SITE2-LSR2_Ethernet3 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -200,13 +208,13 @@ interface Ethernet3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.2/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::2/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::2/128 | ##### ISIS @@ -219,15 +227,15 @@ interface Ethernet3 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.2/32 ipv6 address 2000:1234:ffff:ffff::2/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 302 node-segment ipv6 index 302 + isis enable CORE + isis passive ``` ## Routing @@ -296,7 +304,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0000.0002.00 | +| Net-ID | 49.0001.1000.7000.0002.00 | | Type | level-2 | | Router-ID | 100.70.0.2 | | Log Adjacency Changes | True | @@ -340,7 +348,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0000.0002.00 + net 49.0001.1000.7000.0002.00 is-type level-2 router-id ipv4 100.70.0.2 log-adjacency-changes @@ -381,10 +389,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.2 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-RR1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-RR1.md index 79e8075ac4c..249decdc892 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-RR1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE1-RR1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.30.30.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.30.30.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.30.30.108/24 @@ -86,6 +88,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -129,15 +137,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet4 | P2P_LINK_TO_SITE1-LSR1_Ethernet4 | routed | - | 100.64.48.7/31 | default | 9178 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet4 | P2P_LINK_TO_SITE1-LSR1_Ethernet4 | - | 100.64.48.7/31 | default | 9178 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet4 | P2P_LINK_TO_SITE1-LSR1_Ethernet4 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet4 | P2P_LINK_TO_SITE1-LSR1_Ethernet4 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -179,13 +187,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 100.70.0.8/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | 2000:1234:ffff:ffff::8/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::8/128 | ##### ISIS @@ -198,15 +206,15 @@ interface Ethernet4 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.8/32 ipv6 address 2000:1234:ffff:ffff::8/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 108 node-segment ipv6 index 108 + isis enable CORE + isis passive ``` ## Routing @@ -275,7 +283,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0002.0008.00 | +| Net-ID | 49.0001.1000.7000.0008.00 | | Type | level-1-2 | | Router-ID | 100.70.0.8 | | Log Adjacency Changes | True | @@ -318,7 +326,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0002.0008.00 + net 49.0001.1000.7000.0008.00 is-type level-1-2 router-id ipv4 100.70.0.8 log-adjacency-changes @@ -455,13 +463,13 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.6 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.6 description SITE1-LER2 + neighbor 100.70.0.6 description SITE1-LER2_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.9 peer group RR-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! address-family evpn neighbor default encapsulation mpls @@ -520,10 +528,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.8 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LER1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LER1.md index 7dd3baf76fc..ccd84069b74 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LER1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LER1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -53,20 +55,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -98,6 +100,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -167,43 +175,43 @@ vlan 2020 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet8 | CPE_TENANT_A_SITE2_eth0 | trunk | 10 | - | - | - | +| Ethernet8 | CPE_CPE_TENANT_A_SITE2_eth0 | trunk | 10 | - | - | - | *Inherited from Port-Channel Interface ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet6.10 | TENANT_B_SITE_5_INTRA_L3VPN | l3dot1q | - | 10 | -| Ethernet6.100 | TENANT_B_SITE_3_OSPF | l3dot1q | - | 100 | -| Ethernet6.101 | TENANT_B_SITE_5 | l3dot1q | - | 101 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet6.10 | TENANT_B_SITE_5_INTRA_L3VPN | - | 10 | - | +| Ethernet6.100 | TENANT_B_SITE_3_OSPF | - | 100 | - | +| Ethernet6.101 | TENANT_B_SITE_5 | - | 101 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE2-LSR1_Ethernet1 | routed | - | 100.64.48.15/31 | default | 9178 | False | - | - | -| Ethernet6 | TENANT_B_SITE_5_WAN_TEST | routed | - | 123.10.10.2/31 | TENANT_B_WAN | - | False | - | - | -| Ethernet6.10 | TENANT_B_SITE_5_INTRA_L3VPN | l3dot1q | - | 123.1.1.2/31 | TENANT_B_INTRA | - | False | - | - | -| Ethernet6.100 | TENANT_B_SITE_3_OSPF | l3dot1q | - | 192.168.48.4/31 | TENANT_B_WAN | - | False | - | - | -| Ethernet6.101 | TENANT_B_SITE_5 | l3dot1q | - | 192.168.48.2/31 | TENANT_B_WAN | - | False | - | - | -| Ethernet11 | P2P_LINK_TO_SITE2-LSR2_Ethernet12 | *routed | 11 | *100.64.49.2/30 | **default | *9178 | *False | **- | **- | -| Ethernet12 | P2P_LINK_TO_SITE2-LSR2_Ethernet13 | *routed | 11 | *100.64.49.2/30 | **default | *9178 | *False | **- | **- | -| Ethernet13 | P2P_LINK_TO_SITE2-LSR2_Ethernet14 | *routed | 220 | *100.64.49.6/30 | **default | *9178 | *False | **- | **- | -| Ethernet14 | P2P_LINK_TO_SITE2-LSR2_Ethernet15 | *routed | 220 | *100.64.49.6/30 | **default | *9178 | *False | **- | **- | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE2-LSR1_Ethernet1 | - | 100.64.48.15/31 | default | 9178 | False | - | - | +| Ethernet6 | TENANT_B_SITE_5_WAN_TEST | - | 123.10.10.2/31 | TENANT_B_WAN | - | False | - | - | +| Ethernet6.10 | TENANT_B_SITE_5_INTRA_L3VPN | - | 123.1.1.2/31 | TENANT_B_INTRA | - | False | - | - | +| Ethernet6.100 | TENANT_B_SITE_3_OSPF | - | 192.168.48.4/31 | TENANT_B_WAN | - | False | - | - | +| Ethernet6.101 | TENANT_B_SITE_5 | - | 192.168.48.2/31 | TENANT_B_WAN | - | False | - | - | +| Ethernet11 | P2P_LINK_TO_SITE2-LSR2_Ethernet12 | 11 | *100.64.49.2/30 | **default | *9178 | *False | **- | **- | +| Ethernet12 | P2P_LINK_TO_SITE2-LSR2_Ethernet13 | 11 | *100.64.49.2/30 | **default | *9178 | *False | **- | **- | +| Ethernet13 | P2P_LINK_TO_SITE2-LSR2_Ethernet14 | 220 | *100.64.49.6/30 | **default | *9178 | *False | **- | **- | +| Ethernet14 | P2P_LINK_TO_SITE2-LSR2_Ethernet15 | 220 | *100.64.49.6/30 | **default | *9178 | *False | **- | **- | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE2-LSR1_Ethernet1 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet11 | P2P_LINK_TO_SITE2-LSR2_Ethernet12 | *routed | 11 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet12 | P2P_LINK_TO_SITE2-LSR2_Ethernet13 | *routed | 11 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet13 | P2P_LINK_TO_SITE2-LSR2_Ethernet14 | *routed | 220 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet14 | P2P_LINK_TO_SITE2-LSR2_Ethernet15 | *routed | 220 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE2-LSR1_Ethernet1 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet11 | P2P_LINK_TO_SITE2-LSR2_Ethernet12 | 11 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet12 | P2P_LINK_TO_SITE2-LSR2_Ethernet13 | 11 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet13 | P2P_LINK_TO_SITE2-LSR2_Ethernet14 | 220 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet14 | P2P_LINK_TO_SITE2-LSR2_Ethernet15 | 220 | *- | *default | *9178 | *False | *- | *- | *- | *- | *Inherited from Port-Channel Interface @@ -290,7 +298,7 @@ interface Ethernet7 no lldp receive ! interface Ethernet8 - description CPE_TENANT_A_SITE2_eth0 + description CPE_CPE_TENANT_A_SITE2_eth0 no shutdown switchport trunk allowed vlan 10 switchport mode trunk @@ -328,25 +336,25 @@ interface Ethernet14 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -| Port-Channel4.1000 | - | l2dot1q | - | False | 1000 | - | - | True | - | - | - | -| Port-Channel4.1001 | - | l2dot1q | - | False | 1001 | - | - | True | - | - | - | -| Port-Channel4.1002 | - | l2dot1q | - | False | 1002 | - | - | True | - | - | - | -| Port-Channel4.1003 | - | l2dot1q | - | False | 1003 | - | - | True | - | - | - | -| Port-Channel4.1004 | - | l2dot1q | - | False | 1004 | - | - | True | - | - | - | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- | ------------ | ---------------------- | ---------------------- | +| Port-Channel4.1000 | - | - | dot1q | - | 1000 | - | - | client | - | - | - | - | +| Port-Channel4.1001 | - | - | dot1q | - | 1001 | - | - | client | - | - | - | - | +| Port-Channel4.1002 | - | - | dot1q | - | 1002 | - | - | client | - | - | - | - | +| Port-Channel4.1003 | - | - | dot1q | - | 1003 | - | - | client | - | - | - | - | +| Port-Channel4.1004 | - | - | dot1q | - | 1004 | - | - | client | - | - | - | - | ##### IPv4 -| Interface | Description | Type | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | ---- | ------- | ---------- | --- | --- | -------- | ------ | ------- | -| Port-Channel11 | P2P_LINK_TO_SITE2-LSR2_Port-Channel12 | routed | - | 100.64.49.2/30 | default | 9178 | False | - | - | -| Port-Channel220 | P2P_LINK_TO_SITE2-LSR2_Port-Channel110 | routed | - | 100.64.49.6/30 | default | 9178 | False | - | - | +| Interface | Description | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------- | ---------- | --- | --- | -------- | ------ | ------- | +| Port-Channel11 | P2P_LINK_TO_SITE2-LSR2_Port-Channel12 | - | 100.64.49.2/30 | default | 9178 | False | - | - | +| Port-Channel220 | P2P_LINK_TO_SITE2-LSR2_Port-Channel110 | - | 100.64.49.6/30 | default | 9178 | False | - | - | ##### ISIS @@ -437,13 +445,13 @@ interface Port-Channel220 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 100.70.0.7/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.7/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | 2000:1234:ffff:ffff::7/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::7/128 | ##### ISIS @@ -456,15 +464,15 @@ interface Port-Channel220 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.7/32 ipv6 address 2000:1234:ffff:ffff::7/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 207 node-segment ipv6 index 207 + isis enable CORE + isis passive ``` ### VLAN Interfaces @@ -610,7 +618,7 @@ router ospf 99 vrf TENANT_B_WAN | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0007.00 | +| Net-ID | 49.0001.1000.7000.0007.00 | | Type | level-1-2 | | Router-ID | 100.70.0.7 | | Log Adjacency Changes | True | @@ -653,7 +661,7 @@ router ospf 99 vrf TENANT_B_WAN ```eos ! router isis CORE - net 49.0001.0000.0001.0007.00 + net 49.0001.1000.7000.0007.00 is-type level-1-2 router-id ipv4 100.70.0.7 log-adjacency-changes @@ -785,9 +793,9 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.7:10010 @@ -910,10 +918,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.7 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR1.md index b31b1c19ec2..96e2bacf5e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -38,20 +40,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -83,6 +85,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -126,19 +134,19 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_SITE2-LER1_Ethernet1 | routed | - | 100.64.48.14/31 | default | 9178 | False | - | - | -| Ethernet3 | P2P_LINK_TO_SITE1-LSR1_Ethernet3 | routed | - | 100.64.48.9/31 | default | 9178 | False | - | - | -| Ethernet4 | P2P_LINK_TO_SITE2-RR1_Ethernet4 | routed | - | 100.64.48.12/31 | default | 9178 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_SITE2-LER1_Ethernet1 | - | 100.64.48.14/31 | default | 9178 | False | - | - | +| Ethernet3 | P2P_LINK_TO_SITE1-LSR1_Ethernet3 | - | 100.64.48.9/31 | default | 9178 | False | - | - | +| Ethernet4 | P2P_LINK_TO_SITE2-RR1_Ethernet4 | - | 100.64.48.12/31 | default | 9178 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_SITE2-LER1_Ethernet1 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_SITE1-LSR1_Ethernet3 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_SITE2-RR1_Ethernet4 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_SITE2-LER1_Ethernet1 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_SITE1-LSR1_Ethernet3 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_SITE2-RR1_Ethernet4 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -224,13 +232,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.3/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::3/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::3/128 | ##### ISIS @@ -243,15 +251,15 @@ interface Ethernet4 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.3/32 ipv6 address 2000:1234:ffff:ffff::3/128 - isis enable CUSTOM_NAME - isis passive mpls ldp interface node-segment ipv4 index 303 node-segment ipv6 index 303 + isis enable CUSTOM_NAME + isis passive ``` ## Routing @@ -320,7 +328,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CUSTOM_NAME | -| Net-ID | 49.0001.0000.0000.0003.00 | +| Net-ID | 49.0001.1000.7000.0003.00 | | Type | level-2 | | Router-ID | 100.70.0.3 | | Log Adjacency Changes | True | @@ -365,7 +373,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CUSTOM_NAME - net 49.0001.0000.0000.0003.00 + net 49.0001.1000.7000.0003.00 is-type level-2 router-id ipv4 100.70.0.3 log-adjacency-changes @@ -406,10 +414,10 @@ router isis CUSTOM_NAME mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.3 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR2.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR2.md index 2c3b5625793..9bad1011f2c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-LSR2.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -39,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -84,6 +86,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -127,25 +135,25 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet3 | P2P_LINK_TO_SITE1-LSR2_Ethernet3 | routed | - | 100.64.48.11/31 | default | 9178 | False | - | - | -| Ethernet12 | P2P_LINK_TO_SITE2-LER1_Ethernet11 | *routed | 12 | *100.64.49.1/30 | **default | *9178 | *False | **- | **- | -| Ethernet13 | P2P_LINK_TO_SITE2-LER1_Ethernet12 | *routed | 12 | *100.64.49.1/30 | **default | *9178 | *False | **- | **- | -| Ethernet14 | P2P_LINK_TO_SITE2-LER1_Ethernet13 | *routed | 110 | *100.64.49.5/30 | **default | *9178 | *False | **- | **- | -| Ethernet15 | P2P_LINK_TO_SITE2-LER1_Ethernet14 | *routed | 110 | *100.64.49.5/30 | **default | *9178 | *False | **- | **- | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet3 | P2P_LINK_TO_SITE1-LSR2_Ethernet3 | - | 100.64.48.11/31 | default | 9178 | False | - | - | +| Ethernet12 | P2P_LINK_TO_SITE2-LER1_Ethernet11 | 12 | *100.64.49.1/30 | **default | *9178 | *False | **- | **- | +| Ethernet13 | P2P_LINK_TO_SITE2-LER1_Ethernet12 | 12 | *100.64.49.1/30 | **default | *9178 | *False | **- | **- | +| Ethernet14 | P2P_LINK_TO_SITE2-LER1_Ethernet13 | 110 | *100.64.49.5/30 | **default | *9178 | *False | **- | **- | +| Ethernet15 | P2P_LINK_TO_SITE2-LER1_Ethernet14 | 110 | *100.64.49.5/30 | **default | *9178 | *False | **- | **- | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet3 | P2P_LINK_TO_SITE1-LSR2_Ethernet3 | routed | - | - | default | 9178 | False | - | - | - | - | -| Ethernet12 | P2P_LINK_TO_SITE2-LER1_Ethernet11 | *routed | 12 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet13 | P2P_LINK_TO_SITE2-LER1_Ethernet12 | *routed | 12 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet14 | P2P_LINK_TO_SITE2-LER1_Ethernet13 | *routed | 110 | *- | *default | *9178 | *False | *- | *- | *- | *- | -| Ethernet15 | P2P_LINK_TO_SITE2-LER1_Ethernet14 | *routed | 110 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet3 | P2P_LINK_TO_SITE1-LSR2_Ethernet3 | - | - | default | 9178 | False | - | - | - | - | +| Ethernet12 | P2P_LINK_TO_SITE2-LER1_Ethernet11 | 12 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet13 | P2P_LINK_TO_SITE2-LER1_Ethernet12 | 12 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet14 | P2P_LINK_TO_SITE2-LER1_Ethernet13 | 110 | *- | *default | *9178 | *False | *- | *- | *- | *- | +| Ethernet15 | P2P_LINK_TO_SITE2-LER1_Ethernet14 | 110 | *- | *default | *9178 | *False | *- | *- | *- | *- | *Inherited from Port-Channel Interface @@ -217,15 +225,15 @@ interface Ethernet15 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | ##### IPv4 -| Interface | Description | Type | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | ---- | ------- | ---------- | --- | --- | -------- | ------ | ------- | -| Port-Channel12 | P2P_LINK_TO_SITE2-LER1_Port-Channel11 | routed | - | 100.64.49.1/30 | default | 9178 | False | - | - | -| Port-Channel110 | P2P_LINK_TO_SITE2-LER1_Port-Channel220 | routed | - | 100.64.49.5/30 | default | 9178 | False | - | - | +| Interface | Description | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------- | ---------- | --- | --- | -------- | ------ | ------- | +| Port-Channel12 | P2P_LINK_TO_SITE2-LER1_Port-Channel11 | - | 100.64.49.1/30 | default | 9178 | False | - | - | +| Port-Channel110 | P2P_LINK_TO_SITE2-LER1_Port-Channel220 | - | 100.64.49.5/30 | default | 9178 | False | - | - | ##### ISIS @@ -287,13 +295,13 @@ interface Port-Channel110 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.4/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::4/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::4/128 | ##### ISIS @@ -306,15 +314,15 @@ interface Port-Channel110 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.4/32 ipv6 address 2000:1234:ffff:ffff::4/128 - isis enable CUSTOM_NAME - isis passive mpls ldp interface node-segment ipv4 index 304 node-segment ipv6 index 304 + isis enable CUSTOM_NAME + isis passive ``` ## Routing @@ -383,7 +391,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CUSTOM_NAME | -| Net-ID | 49.0001.0000.0000.0004.00 | +| Net-ID | 49.0001.1000.7000.0004.00 | | Type | level-2 | | Router-ID | 100.70.0.4 | | Log Adjacency Changes | True | @@ -426,7 +434,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CUSTOM_NAME - net 49.0001.0000.0000.0004.00 + net 49.0001.1000.7000.0004.00 is-type level-2 router-id ipv4 100.70.0.4 log-adjacency-changes @@ -467,10 +475,10 @@ router isis CUSTOM_NAME mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.4 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-RR1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-RR1.md index 879aa3a2d7c..75d217c55c8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-RR1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE2-RR1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -41,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 10.30.30.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.30.30.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.30.30.109/24 @@ -86,6 +88,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -129,15 +137,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet4 | P2P_LINK_TO_SITE2-LSR1_Ethernet4 | routed | - | 100.64.48.13/31 | default | 9178 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet4 | P2P_LINK_TO_SITE2-LSR1_Ethernet4 | - | 100.64.48.13/31 | default | 9178 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet4 | P2P_LINK_TO_SITE2-LSR1_Ethernet4 | routed | - | - | default | 9178 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet4 | P2P_LINK_TO_SITE2-LSR1_Ethernet4 | - | - | default | 9178 | False | - | - | - | - | ##### ISIS @@ -179,13 +187,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | MPLS_Overlay_peering | default | 100.70.0.9/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.9/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | MPLS_Overlay_peering | default | 2000:1234:ffff:ffff::9/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::9/128 | ##### ISIS @@ -198,15 +206,15 @@ interface Ethernet4 ```eos ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.9/32 ipv6 address 2000:1234:ffff:ffff::9/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 109 node-segment ipv6 index 109 + isis enable CORE + isis passive ``` ## Routing @@ -275,7 +283,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0002.0009.00 | +| Net-ID | 49.0001.1000.7000.0009.00 | | Type | level-1-2 | | Router-ID | 100.70.0.9 | | Log Adjacency Changes | True | @@ -318,7 +326,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0002.0009.00 + net 49.0001.1000.7000.0009.00 is-type level-1-2 router-id ipv4 100.70.0.9 log-adjacency-changes @@ -455,13 +463,13 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.6 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.6 description SITE1-LER2 + neighbor 100.70.0.6 description SITE1-LER2_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.8 peer group RR-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 ! address-family evpn neighbor default encapsulation mpls @@ -520,10 +528,10 @@ router bfd mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.9 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE3-LER1.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE3-LER1.md index f3956fd0ace..9f013c123e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE3-LER1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/devices/SITE3-LER1.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management API HTTP](#management-api-http) +- [Authentication](#authentication) + - [Enable Password](#enable-password) - [Spanning Tree](#spanning-tree) - [Spanning Tree Summary](#spanning-tree-summary) - [Spanning Tree Device Configuration](#spanning-tree-device-configuration) @@ -40,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -85,6 +87,12 @@ management api http-commands no shutdown ``` +## Authentication + +### Enable Password + +Enable password has been disabled + ## Spanning Tree ### Spanning Tree Summary @@ -130,13 +138,13 @@ vlan internal order ascending range 1006 1199 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | LSR_Router_ID | default | 100.70.0.10/32 | +| Loopback0 | ROUTER_ID | default | 100.70.0.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | LSR_Router_ID | default | 2000:1234:ffff:ffff::a/128 | +| Loopback0 | ROUTER_ID | default | 2000:1234:ffff:ffff::a/128 | ##### ISIS @@ -149,15 +157,15 @@ vlan internal order ascending range 1006 1199 ```eos ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.10/32 ipv6 address 2000:1234:ffff:ffff::a/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 210 node-segment ipv6 index 210 + isis enable CORE + isis passive ``` ## Routing @@ -239,7 +247,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | CORE | -| Net-ID | 49.0001.0000.0001.0010.00 | +| Net-ID | 49.0001.1000.7000.0010.00 | | Type | level-1-2 | | Router-ID | 100.70.0.10 | | Log Adjacency Changes | True | @@ -281,7 +289,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis CORE - net 49.0001.0000.0001.0010.00 + net 49.0001.1000.7000.0010.00 is-type level-1-2 router-id ipv4 100.70.0.10 log-adjacency-changes @@ -322,10 +330,10 @@ router isis CORE mpls ip ! mpls ldp - interface disabled default router-id 100.70.0.10 - no shutdown transport-address interface Loopback0 + interface disabled default + no shutdown ``` ### MPLS Interfaces diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/fabric/MPLS_CORE-documentation.md b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/fabric/MPLS_CORE-documentation.md index e6e8a8fc079..cd5945b58bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/fabric/MPLS_CORE-documentation.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/documentation/fabric/MPLS_CORE-documentation.md @@ -98,21 +98,21 @@ | POD | Node | CLNS Address | | --- | ---- | ------------ | -| MPLS_CORE | SITE1-LER1 | 49.0001.0000.0001.0005.00 | -| MPLS_CORE | SITE1-LER2 | 49.0001.0000.0001.0006.00 | -| MPLS_CORE | SITE1-LSR1 | 49.0001.0000.0000.0001.00 | -| MPLS_CORE | SITE1-LSR2 | 49.0001.0000.0000.0002.00 | -| MPLS_CORE | SITE1-RR1 | 49.0001.0000.0002.0008.00 | -| MPLS_CORE | SITE2-LER1 | 49.0001.0000.0001.0007.00 | -| MPLS_CORE | SITE2-LSR1 | 49.0001.0000.0000.0003.00 | -| MPLS_CORE | SITE2-LSR2 | 49.0001.0000.0000.0004.00 | -| MPLS_CORE | SITE2-RR1 | 49.0001.0000.0002.0009.00 | -| MPLS_CORE | SITE3-LER1 | 49.0001.0000.0001.0010.00 | +| MPLS_CORE | SITE1-LER1 | 49.0001.1000.7000.0005.00 | +| MPLS_CORE | SITE1-LER2 | 49.0001.1000.7000.0006.00 | +| MPLS_CORE | SITE1-LSR1 | 49.0001.1000.7000.0001.00 | +| MPLS_CORE | SITE1-LSR2 | 49.0001.1000.7000.0002.00 | +| MPLS_CORE | SITE1-RR1 | 49.0001.1000.7000.0008.00 | +| MPLS_CORE | SITE2-LER1 | 49.0001.1000.7000.0007.00 | +| MPLS_CORE | SITE2-LSR1 | 49.0001.1000.7000.0003.00 | +| MPLS_CORE | SITE2-LSR2 | 49.0001.1000.7000.0004.00 | +| MPLS_CORE | SITE2-RR1 | 49.0001.1000.7000.0009.00 | +| MPLS_CORE | SITE3-LER1 | 49.0001.1000.7000.0010.00 | ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER1.cfg index 6438665c8eb..07ca02e69b5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname SITE1-LER1 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 10 name TENANT_A_L2_SERVICE ! @@ -61,7 +67,7 @@ interface Port-Channel3.1004 client dot1q 1004 network client ! interface Port-Channel8 - description CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel + description CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel no shutdown no switchport ! @@ -147,23 +153,23 @@ interface Ethernet6.10 ip ospf area 0 ! interface Ethernet8 - description CPE_TENANT_A_SITE1_Ethernet1 + description CPE_CPE_TENANT_A_SITE1_Ethernet1 no shutdown channel-group 8 mode active ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.5/32 ipv6 address 2000:1234:ffff:ffff::5/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 205 node-segment ipv6 index 205 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -183,6 +189,40 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.5 + transport-address interface Loopback0 + interface disabled default + no shutdown +! +patch panel + patch TEN_A_site2_site5_eline_port_based + connector 1 interface Ethernet6 + connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_A_site2_site5_eline_port_based + ! + patch TEN_B_site3_site5_eline_vlan_based_1000 + connector 1 interface Port-Channel3.1000 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 + ! + patch TEN_B_site3_site5_eline_vlan_based_1001 + connector 1 interface Port-Channel3.1001 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 + ! + patch TEN_B_site3_site5_eline_vlan_based_1002 + connector 1 interface Port-Channel3.1002 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 + ! + patch TEN_B_site3_site5_eline_vlan_based_1003 + connector 1 interface Port-Channel3.1003 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 + ! + patch TEN_B_site3_site5_eline_vlan_based_1004 + connector 1 interface Port-Channel3.1004 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 + ! +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -200,9 +240,9 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.5:10010 @@ -260,15 +300,8 @@ router bgp 65000 redistribute connected redistribute ospf ! -router ospf 19 vrf TENANT_B_INTRA - router-id 123.1.1.0 - passive-interface default - no passive-interface Ethernet6.10 - max-lsa 10000 - redistribute bgp -! router isis CORE - net 49.0001.0000.0001.0005.00 + net 49.0001.1000.7000.0005.00 is-type level-1-2 router-id ipv4 100.70.0.5 log-adjacency-changes @@ -287,46 +320,12 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.5 - no shutdown - transport-address interface Loopback0 -! -patch panel - patch TEN_A_site2_site5_eline_port_based - connector 1 interface Ethernet6 - connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_A_site2_site5_eline_port_based - ! - patch TEN_B_site3_site5_eline_vlan_based_1000 - connector 1 interface Port-Channel3.1000 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 - ! - patch TEN_B_site3_site5_eline_vlan_based_1001 - connector 1 interface Port-Channel3.1001 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 - ! - patch TEN_B_site3_site5_eline_vlan_based_1002 - connector 1 interface Port-Channel3.1002 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 - ! - patch TEN_B_site3_site5_eline_vlan_based_1003 - connector 1 interface Port-Channel3.1003 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 - ! - patch TEN_B_site3_site5_eline_vlan_based_1004 - connector 1 interface Port-Channel3.1004 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 - ! -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +router ospf 19 vrf TENANT_B_INTRA + router-id 123.1.1.0 + passive-interface default + no passive-interface Ethernet6.10 + max-lsa 10000 + redistribute bgp ! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER2.cfg index ecac99bc0be..24815614273 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LER2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname SITE1-LER2 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 10 name TENANT_A_L2_SERVICE ! @@ -63,7 +69,7 @@ interface Port-Channel3.1004 client dot1q 1004 network client ! interface Port-Channel8 - description CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel + description CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel no shutdown no switchport ! @@ -144,23 +150,23 @@ interface Ethernet5.100 ip address 192.168.48.0/31 ! interface Ethernet8 - description CPE_TENANT_A_SITE1_Ethernet2 + description CPE_CPE_TENANT_A_SITE1_Ethernet2 no shutdown channel-group 8 mode active ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.6/32 ipv6 address 2000:1234:ffff:ffff::6/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 206 node-segment ipv6 index 206 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -181,6 +187,36 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.6 + transport-address interface Loopback0 + interface disabled default + no shutdown +! +patch panel + patch TEN_B_site3_site5_eline_vlan_based_1000 + connector 1 interface Port-Channel3.1000 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 + ! + patch TEN_B_site3_site5_eline_vlan_based_1001 + connector 1 interface Port-Channel3.1001 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 + ! + patch TEN_B_site3_site5_eline_vlan_based_1002 + connector 1 interface Port-Channel3.1002 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 + ! + patch TEN_B_site3_site5_eline_vlan_based_1003 + connector 1 interface Port-Channel3.1003 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 + ! + patch TEN_B_site3_site5_eline_vlan_based_1004 + connector 1 interface Port-Channel3.1004 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 + ! +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -198,13 +234,13 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.6:10010 @@ -279,7 +315,7 @@ router bgp 65000 neighbor 192.168.48.1 activate ! router isis CORE - net 49.0001.0000.0001.0006.00 + net 49.0001.1000.7000.0006.00 is-type level-1-2 router-id ipv4 100.70.0.6 log-adjacency-changes @@ -298,43 +334,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.6 - no shutdown - transport-address interface Loopback0 -! -patch panel - patch TEN_B_site3_site5_eline_vlan_based_1000 - connector 1 interface Port-Channel3.1000 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 - ! - patch TEN_B_site3_site5_eline_vlan_based_1001 - connector 1 interface Port-Channel3.1001 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 - ! - patch TEN_B_site3_site5_eline_vlan_based_1002 - connector 1 interface Port-Channel3.1002 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 - ! - patch TEN_B_site3_site5_eline_vlan_based_1003 - connector 1 interface Port-Channel3.1003 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 - ! - patch TEN_B_site3_site5_eline_vlan_based_1004 - connector 1 interface Port-Channel3.1004 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 - ! -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR1.cfg index 7610d9ea8de..66fec44bc98 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE1-LSR1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -79,18 +85,18 @@ interface Ethernet4 ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.1/32 ipv6 address 2000:1234:ffff:ffff::1/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 301 node-segment ipv6 index 301 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -102,8 +108,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.1 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0001.00 + net 49.0001.1000.7000.0001.00 is-type level-2 router-id ipv4 100.70.0.1 log-adjacency-changes @@ -122,21 +136,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.1 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR2.cfg index fd2b7d375cf..62ad236a008 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-LSR2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE1-LSR2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -58,18 +64,18 @@ interface Ethernet3 ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.2/32 ipv6 address 2000:1234:ffff:ffff::2/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 302 node-segment ipv6 index 302 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -81,8 +87,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.2 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0000.0002.00 + net 49.0001.1000.7000.0002.00 is-type level-2 router-id ipv4 100.70.0.2 log-adjacency-changes @@ -101,21 +115,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.2 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-RR1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-RR1.cfg index e8b6fb5be22..7360002b1a7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-RR1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE1-RR1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE1-RR1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet4 @@ -37,18 +43,18 @@ interface Ethernet4 ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.8/32 ipv6 address 2000:1234:ffff:ffff::8/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 108 node-segment ipv6 index 108 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.30.30.108/24 @@ -60,6 +66,14 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.8 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -87,13 +101,13 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.6 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.6 description SITE1-LER2 + neighbor 100.70.0.6 description SITE1-LER2_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.9 peer group RR-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! address-family evpn neighbor default encapsulation mpls @@ -113,7 +127,7 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS activate ! router isis CORE - net 49.0001.0000.0002.0008.00 + net 49.0001.1000.7000.0008.00 is-type level-1-2 router-id ipv4 100.70.0.8 log-adjacency-changes @@ -132,21 +146,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.8 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LER1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LER1.cfg index 37c63f93b48..0ed3b5f8499 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LER1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LER1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname SITE2-LER1 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 10 name TENANT_A_L2_SERVICE ! @@ -165,7 +171,7 @@ interface Ethernet7 no lldp receive ! interface Ethernet8 - description CPE_TENANT_A_SITE2_eth0 + description CPE_CPE_TENANT_A_SITE2_eth0 no shutdown switchport trunk allowed vlan 10 switchport mode trunk @@ -197,18 +203,18 @@ interface Ethernet14 channel-group 220 mode active ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.7/32 ipv6 address 2000:1234:ffff:ffff::7/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 207 node-segment ipv6 index 207 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -230,6 +236,40 @@ ipv6 unicast-routing ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf TENANT_B_INTRA 123.0.10.0/24 Ethernet6.10 123.1.1.3 name TENANT_B_SITE_5_SUBNET ! +mpls ip +! +mpls ldp + router-id 100.70.0.7 + transport-address interface Loopback0 + interface disabled default + no shutdown +! +patch panel + patch TEN_A_site2_site5_eline_port_based + connector 1 interface Ethernet7 + connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_A_site2_site5_eline_port_based + ! + patch TEN_B_site3_site5_eline_vlan_based_1000 + connector 1 interface Port-Channel4.1000 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 + ! + patch TEN_B_site3_site5_eline_vlan_based_1001 + connector 1 interface Port-Channel4.1001 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 + ! + patch TEN_B_site3_site5_eline_vlan_based_1002 + connector 1 interface Port-Channel4.1002 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 + ! + patch TEN_B_site3_site5_eline_vlan_based_1003 + connector 1 interface Port-Channel4.1003 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 + ! + patch TEN_B_site3_site5_eline_vlan_based_1004 + connector 1 interface Port-Channel4.1004 + connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 + ! +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -247,9 +287,9 @@ router bgp 65000 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.8 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 neighbor 100.70.0.9 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.9 description SITE2-RR1 + neighbor 100.70.0.9 description SITE2-RR1_Loopback0 ! vlan 10 rd 100.70.0.7:10010 @@ -332,15 +372,8 @@ router bgp 65000 address-family ipv4 neighbor 192.168.48.3 activate ! -router ospf 99 vrf TENANT_B_WAN - router-id 192.168.48.4 - passive-interface default - no passive-interface Ethernet6.100 - max-lsa 10000 - redistribute bgp -! router isis CORE - net 49.0001.0000.0001.0007.00 + net 49.0001.1000.7000.0007.00 is-type level-1-2 router-id ipv4 100.70.0.7 log-adjacency-changes @@ -359,46 +392,12 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.7 - no shutdown - transport-address interface Loopback0 -! -patch panel - patch TEN_A_site2_site5_eline_port_based - connector 1 interface Ethernet7 - connector 2 pseudowire bgp vpws TENANT_A pseudowire TEN_A_site2_site5_eline_port_based - ! - patch TEN_B_site3_site5_eline_vlan_based_1000 - connector 1 interface Port-Channel4.1000 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1000 - ! - patch TEN_B_site3_site5_eline_vlan_based_1001 - connector 1 interface Port-Channel4.1001 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1001 - ! - patch TEN_B_site3_site5_eline_vlan_based_1002 - connector 1 interface Port-Channel4.1002 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1002 - ! - patch TEN_B_site3_site5_eline_vlan_based_1003 - connector 1 interface Port-Channel4.1003 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1003 - ! - patch TEN_B_site3_site5_eline_vlan_based_1004 - connector 1 interface Port-Channel4.1004 - connector 2 pseudowire bgp vpws TENANT_B pseudowire TEN_B_site3_site5_eline_vlan_based_1004 - ! -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +router ospf 99 vrf TENANT_B_WAN + router-id 192.168.48.4 + passive-interface default + no passive-interface Ethernet6.100 + max-lsa 10000 + redistribute bgp ! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR1.cfg index b453ca44346..3f416f5a07c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE2-LSR1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -79,18 +85,18 @@ interface Ethernet4 ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.3/32 ipv6 address 2000:1234:ffff:ffff::3/128 - isis enable CUSTOM_NAME - isis passive mpls ldp interface node-segment ipv4 index 303 node-segment ipv6 index 303 + isis enable CUSTOM_NAME + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -102,8 +108,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.3 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CUSTOM_NAME - net 49.0001.0000.0000.0003.00 + net 49.0001.1000.7000.0003.00 is-type level-2 router-id ipv4 100.70.0.3 log-adjacency-changes @@ -122,21 +136,6 @@ router isis CUSTOM_NAME segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.3 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR2.cfg index 583de53032a..2cc789e419a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-LSR2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE2-LSR2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel12 @@ -101,18 +107,18 @@ interface Ethernet15 channel-group 110 mode active ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.4/32 ipv6 address 2000:1234:ffff:ffff::4/128 - isis enable CUSTOM_NAME - isis passive mpls ldp interface node-segment ipv4 index 304 node-segment ipv6 index 304 + isis enable CUSTOM_NAME + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -124,8 +130,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.4 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CUSTOM_NAME - net 49.0001.0000.0000.0004.00 + net 49.0001.1000.7000.0004.00 is-type level-2 router-id ipv4 100.70.0.4 log-adjacency-changes @@ -144,21 +158,6 @@ router isis CUSTOM_NAME segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.4 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-RR1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-RR1.cfg index fcc300754e0..f064deb3c74 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-RR1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE2-RR1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname SITE2-RR1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet4 @@ -37,18 +43,18 @@ interface Ethernet4 ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 100.70.0.9/32 ipv6 address 2000:1234:ffff:ffff::9/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 109 node-segment ipv6 index 109 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.30.30.109/24 @@ -60,6 +66,14 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.9 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -87,13 +101,13 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 100.70.0.5 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.5 description SITE1-LER1 + neighbor 100.70.0.5 description SITE1-LER1_Loopback0 neighbor 100.70.0.6 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.6 description SITE1-LER2 + neighbor 100.70.0.6 description SITE1-LER2_Loopback0 neighbor 100.70.0.7 peer group MPLS-OVERLAY-PEERS - neighbor 100.70.0.7 description SITE2-LER1 + neighbor 100.70.0.7 description SITE2-LER1_Loopback0 neighbor 100.70.0.8 peer group RR-OVERLAY-PEERS - neighbor 100.70.0.8 description SITE1-RR1 + neighbor 100.70.0.8 description SITE1-RR1_Loopback0 ! address-family evpn neighbor default encapsulation mpls @@ -113,7 +127,7 @@ router bgp 65000 neighbor RR-OVERLAY-PEERS activate ! router isis CORE - net 49.0001.0000.0002.0009.00 + net 49.0001.1000.7000.0009.00 is-type level-1-2 router-id ipv4 100.70.0.9 log-adjacency-changes @@ -132,21 +146,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.9 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE3-LER1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE3-LER1.cfg index a55adce036d..4d42042df71 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE3-LER1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/configs/SITE3-LER1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,24 +20,21 @@ hostname SITE3-LER1 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 100.70.0.10/32 ipv6 address 2000:1234:ffff:ffff::a/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 210 node-segment ipv6 index 210 + isis enable CORE + isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -42,8 +48,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +mpls ip +! +mpls ldp + router-id 100.70.0.10 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0001.0010.00 + net 49.0001.1000.7000.0010.00 is-type level-1-2 router-id ipv4 100.70.0.10 log-adjacency-changes @@ -62,21 +76,6 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 100.70.0.10 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! management security password encryption-key common diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER1.yml index 423d9203e27..a45b14e64ed 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER1.yml @@ -37,14 +37,13 @@ router_bgp: - ip_address: 100.70.0.8 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-RR1 - description: SITE1-RR1 + description: SITE1-RR1_Loopback0 - ip_address: 100.70.0.9 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-RR1 - description: SITE2-RR1 + description: SITE2-RR1_Loopback0 vrfs: - name: TENANT_B_INTRA - router_id: 100.70.0.5 rd: 100.70.0.5:19 route_targets: import: @@ -55,6 +54,7 @@ router_bgp: - address_family: evpn route_targets: - '65000:19' + router_id: 100.70.0.5 redistribute_routes: - source_protocol: connected - source_protocol: ospf @@ -124,6 +124,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -137,7 +143,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -150,7 +156,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.5/32 ipv6_address: 2000:1234:ffff:ffff::5/128 @@ -165,7 +171,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0005.00 + net: 49.0001.1000.7000.0005.00 router_id: 100.70.0.5 is_type: level-1-2 address_family_ipv4: @@ -206,7 +212,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_SITE1-LSR1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -232,7 +239,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: pe description: P2P_LINK_TO_SITE1-LER2_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1500 @@ -258,28 +266,27 @@ ethernet_interfaces: ip_address: 123.1.1.0/31 shutdown: false description: TENANT_B_SITE_3_INTRA_L3VPN - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: TENANT_B_INTRA ospf_area: '0' ospf_network_point_to_point: true ospf_cost: 10 - name: Ethernet6 - type: routed + switchport: + enabled: false peer_type: point_to_point_service shutdown: false lldp: transmit: false receive: false - name: Ethernet3 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: id: 3 mode: active - name: Ethernet4 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: @@ -290,9 +297,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: cpe port_profile: TENANT_A_WAN_SERVICE_10 - description: CPE_TENANT_A_SITE1_Ethernet1 + description: CPE_CPE_TENANT_A_SITE1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -375,57 +381,53 @@ vlan_interfaces: vrf: TENANT_B_INTRA port_channel_interfaces: - name: Port-Channel3.1000 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1000 + encapsulation: dot1q + vlan: 1000 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1001 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1001 + encapsulation: dot1q + vlan: 1001 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1002 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1002 + encapsulation: dot1q + vlan: 1002 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1003 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1003 + encapsulation: dot1q + vlan: 1003 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1004 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1004 + encapsulation: dot1q + vlan: 1004 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3 - type: routed + switchport: + enabled: false peer_type: system shutdown: false evpn_ethernet_segment: @@ -433,36 +435,34 @@ port_channel_interfaces: route_target: 01:02:00:00:00:34 lacp_id: 0102.0000.0034 - name: Port-Channel8 - description: CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel - type: routed + description: CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel shutdown: false + switchport: + enabled: false - name: Port-Channel8.111 - type: l2dot1q vlan_id: 111 encapsulation_vlan: client: - dot1q: - vlan: 111 + encapsulation: dot1q + vlan: 111 network: - client: true + encapsulation: client - name: Port-Channel8.222 - type: l2dot1q vlan_id: 222 encapsulation_vlan: client: - dot1q: - vlan: 222 + encapsulation: dot1q + vlan: 222 network: - client: true + encapsulation: client - name: Port-Channel8.333 - type: l2dot1q vlan_id: 434 encapsulation_vlan: client: - dot1q: - vlan: 333 + encapsulation: dot1q + vlan: 333 network: - client: true + encapsulation: client router_ospf: process_ids: - id: 19 @@ -473,6 +473,7 @@ router_ospf: - Ethernet6.10 max_lsa: 10000 redistribute: - bgp: {} + bgp: + enabled: true metadata: platform: 7280SR3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER2.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER2.yml index 0bde18b06c9..0a07abe093a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LER2.yml @@ -49,22 +49,21 @@ router_bgp: - ip_address: 100.70.0.8 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-RR1 - description: SITE1-RR1 + description: SITE1-RR1_Loopback0 - ip_address: 100.70.0.9 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-RR1 - description: SITE2-RR1 + description: SITE2-RR1_Loopback0 - ip_address: 100.70.0.5 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-LER1 - description: SITE1-LER1 + description: SITE1-LER1_Loopback0 - ip_address: 100.70.0.7 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-LER1 - description: SITE2-LER1 + description: SITE2-LER1_Loopback0 vrfs: - name: TENANT_B_INTRA - router_id: 100.70.0.6 rd: 100.70.0.6:19 route_targets: import: @@ -75,10 +74,10 @@ router_bgp: - address_family: evpn route_targets: - '65000:19' + router_id: 100.70.0.6 redistribute_routes: - source_protocol: connected - name: TENANT_B_WAN - router_id: 100.70.0.6 rd: 100.70.0.6:20 route_targets: import: @@ -95,6 +94,7 @@ router_bgp: - address_family: vpn-ipv6 route_targets: - '65000:20' + router_id: 100.70.0.6 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -166,6 +166,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -182,7 +188,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -195,7 +201,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 100.70.0.6/32 ipv6_address: 2000:1234:ffff:ffff::6/128 @@ -210,7 +216,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0006.00 + net: 49.0001.1000.7000.0006.00 router_id: 100.70.0.6 is_type: level-1-2 address_family_ipv4: @@ -251,7 +257,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_SITE1-LSR2_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 eos_cli: 'link-debounce time 1000 @@ -277,7 +284,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: pe description: P2P_LINK_TO_SITE1-LER1_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1500 @@ -303,25 +311,24 @@ ethernet_interfaces: ip_address: 192.168.48.0/31 shutdown: false description: TENANT_B_SITE_3 - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: TENANT_B_WAN - name: Ethernet3 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: id: 3 mode: active - name: Ethernet4 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: id: 3 mode: active - name: Ethernet5 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet8 @@ -329,9 +336,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: cpe port_profile: TENANT_A_WAN_SERVICE_10 - description: CPE_TENANT_A_SITE1_Ethernet2 + description: CPE_CPE_TENANT_A_SITE1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -405,57 +411,53 @@ vlan_interfaces: vrf: TENANT_B_INTRA port_channel_interfaces: - name: Port-Channel3.1000 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1000 + encapsulation: dot1q + vlan: 1000 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1001 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1001 + encapsulation: dot1q + vlan: 1001 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1002 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1002 + encapsulation: dot1q + vlan: 1002 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1003 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1003 + encapsulation: dot1q + vlan: 1003 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3.1004 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1004 + encapsulation: dot1q + vlan: 1004 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel3 - type: routed + switchport: + enabled: false peer_type: system shutdown: false evpn_ethernet_segment: @@ -463,35 +465,33 @@ port_channel_interfaces: route_target: 01:02:00:00:00:34 lacp_id: 0102.0000.0034 - name: Port-Channel8 - description: CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel - type: routed + description: CPE_CPE_TENANT_A_SITE1_EVPN-A-A-PortChannel shutdown: false + switchport: + enabled: false - name: Port-Channel8.111 - type: l2dot1q vlan_id: 111 encapsulation_vlan: client: - dot1q: - vlan: 111 + encapsulation: dot1q + vlan: 111 network: - client: true + encapsulation: client - name: Port-Channel8.222 - type: l2dot1q vlan_id: 222 encapsulation_vlan: client: - dot1q: - vlan: 222 + encapsulation: dot1q + vlan: 222 network: - client: true + encapsulation: client - name: Port-Channel8.333 - type: l2dot1q vlan_id: 434 encapsulation_vlan: client: - dot1q: - vlan: 333 + encapsulation: dot1q + vlan: 333 network: - client: true + encapsulation: client metadata: platform: 7280SR3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR1.yml index 470f2198964..1c86ed5d2c5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -19,7 +25,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -32,7 +38,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.1/32 ipv6_address: 2000:1234:ffff:ffff::1/128 @@ -47,7 +53,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0001.00 + net: 49.0001.1000.7000.0001.00 router_id: 100.70.0.1 is_type: level-2 address_family_ipv4: @@ -83,7 +89,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_SITE1-LER1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -109,7 +116,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: rr description: P2P_LINK_TO_SITE1-RR1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -135,7 +143,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_SITE2-LSR1_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR2.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR2.yml index 2c0087d34d6..f4d2ffb8431 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-LSR2.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -19,7 +25,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -32,7 +38,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.2/32 ipv6_address: 2000:1234:ffff:ffff::2/128 @@ -47,7 +53,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0000.0002.00 + net: 49.0001.1000.7000.0002.00 router_id: 100.70.0.2 is_type: level-2 address_family_ipv4: @@ -83,7 +89,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_SITE1-LER2_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 eos_cli: 'link-debounce time 1000 @@ -109,7 +116,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_SITE2-LSR2_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-RR1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-RR1.yml index 2381449da0d..7c3f27cad99 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-RR1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE1-RR1.yml @@ -37,10 +37,10 @@ router_bgp: neighbor_default: encapsulation: mpls peer_groups: - - name: MPLS-OVERLAY-PEERS - activate: true - name: RR-OVERLAY-PEERS activate: true + - name: MPLS-OVERLAY-PEERS + activate: true address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -63,19 +63,19 @@ router_bgp: - ip_address: 100.70.0.5 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-LER1 - description: SITE1-LER1 + description: SITE1-LER1_Loopback0 - ip_address: 100.70.0.6 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-LER2 - description: SITE1-LER2 + description: SITE1-LER2_Loopback0 - ip_address: 100.70.0.7 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-LER1 - description: SITE2-LER1 + description: SITE2-LER1_Loopback0 - ip_address: 100.70.0.9 peer_group: RR-OVERLAY-PEERS peer: SITE2-RR1 - description: SITE2-RR1 + description: SITE2-RR1_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -95,7 +101,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 10.30.30.108/24 @@ -108,7 +114,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 100.70.0.8/32 ipv6_address: 2000:1234:ffff:ffff::8/128 @@ -123,7 +129,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0002.0008.00 + net: 49.0001.1000.7000.0008.00 router_id: 100.70.0.8 is_type: level-1-2 address_family_ipv4: @@ -164,7 +170,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_SITE1-LSR1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LER1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LER1.yml index 9b2f6b71b55..339877884b0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LER1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LER1.yml @@ -49,14 +49,13 @@ router_bgp: - ip_address: 100.70.0.8 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-RR1 - description: SITE1-RR1 + description: SITE1-RR1_Loopback0 - ip_address: 100.70.0.9 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-RR1 - description: SITE2-RR1 + description: SITE2-RR1_Loopback0 vrfs: - name: TENANT_B_INTRA - router_id: 100.70.0.7 rd: 100.70.0.7:19 route_targets: import: @@ -67,11 +66,11 @@ router_bgp: - address_family: evpn route_targets: - '65000:19' + router_id: 100.70.0.7 redistribute_routes: - source_protocol: connected - source_protocol: static - name: TENANT_B_WAN - router_id: 100.70.0.7 rd: 100.70.0.7:20 route_targets: import: @@ -88,6 +87,7 @@ router_bgp: - address_family: vpn-ipv6 route_targets: - '65000:20' + router_id: 100.70.0.7 redistribute_routes: - source_protocol: connected - source_protocol: ospf @@ -173,6 +173,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -189,7 +195,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -202,7 +208,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 100.70.0.7/32 ipv6_address: 2000:1234:ffff:ffff::7/128 @@ -217,7 +223,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0007.00 + net: 49.0001.1000.7000.0007.00 router_id: 100.70.0.7 is_type: level-1-2 address_family_ipv4: @@ -258,7 +264,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: p description: P2P_LINK_TO_SITE2-LSR1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -280,7 +287,6 @@ ethernet_interfaces: igp_sync: true speed: forced 40gfull - name: Ethernet11 - type: port-channel-member peer: SITE2-LSR2 peer_interface: Ethernet12 peer_type: p @@ -291,7 +297,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet12 - type: port-channel-member peer: SITE2-LSR2 peer_interface: Ethernet13 peer_type: p @@ -302,7 +307,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet13 - type: port-channel-member peer: SITE2-LSR2 peer_interface: Ethernet14 peer_type: p @@ -313,7 +317,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet14 - type: port-channel-member peer: SITE2-LSR2 peer_interface: Ethernet15 peer_type: p @@ -328,16 +331,16 @@ ethernet_interfaces: ip_address: 123.1.1.2/31 shutdown: false description: TENANT_B_SITE_5_INTRA_L3VPN - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: TENANT_B_INTRA - name: Ethernet6.100 peer_type: l3_interface ip_address: 192.168.48.4/31 shutdown: false description: TENANT_B_SITE_3_OSPF - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: TENANT_B_WAN ospf_area: '0' ospf_network_point_to_point: true @@ -347,32 +350,32 @@ ethernet_interfaces: ip_address: 192.168.48.2/31 shutdown: false description: TENANT_B_SITE_5 - type: l3dot1q - encapsulation_dot1q_vlan: 101 + encapsulation_dot1q: + vlan: 101 vrf: TENANT_B_WAN - name: Ethernet6 peer_type: l3_interface ip_address: 123.10.10.2/31 shutdown: false description: TENANT_B_SITE_5_WAN_TEST - type: routed + switchport: + enabled: false vrf: TENANT_B_WAN - name: Ethernet7 - type: routed + switchport: + enabled: false peer_type: point_to_point_service shutdown: false lldp: transmit: false receive: false - name: Ethernet4 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: id: 4 mode: active - name: Ethernet5 - type: port-channel-member peer_type: point_to_point_service shutdown: false channel_group: @@ -383,11 +386,13 @@ ethernet_interfaces: peer_interface: eth0 peer_type: cpe port_profile: TENANT_A_WAN_SERVICE_10 - description: CPE_TENANT_A_SITE2_eth0 + description: CPE_CPE_TENANT_A_SITE2_eth0 shutdown: false - type: switched - mode: trunk - vlans: '10' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '10' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel11 @@ -395,7 +400,8 @@ port_channel_interfaces: peer_interface: Port-Channel12 peer_type: p description: P2P_LINK_TO_SITE2-LSR2_Port-Channel12 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1600 @@ -420,7 +426,8 @@ port_channel_interfaces: peer_interface: Port-Channel110 peer_type: p description: P2P_LINK_TO_SITE2-LSR2_Port-Channel110 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1600 @@ -441,57 +448,53 @@ port_channel_interfaces: interface: true igp_sync: true - name: Port-Channel4.1000 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1000 + encapsulation: dot1q + vlan: 1000 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel4.1001 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1001 + encapsulation: dot1q + vlan: 1001 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel4.1002 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1002 + encapsulation: dot1q + vlan: 1002 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel4.1003 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1003 + encapsulation: dot1q + vlan: 1003 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel4.1004 - type: l2dot1q peer_type: point_to_point_service encapsulation_vlan: client: - dot1q: - vlan: 1004 + encapsulation: dot1q + vlan: 1004 network: - client: true + encapsulation: client shutdown: false - name: Port-Channel4 - type: routed + switchport: + enabled: false peer_type: system shutdown: false patch_panel: @@ -581,6 +584,7 @@ router_ospf: - Ethernet6.100 max_lsa: 10000 redistribute: - bgp: {} + bgp: + enabled: true metadata: platform: 7280SR3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR1.yml index 8cb765068d9..beb7eb6784e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -19,7 +25,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -32,7 +38,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.3/32 ipv6_address: 2000:1234:ffff:ffff::3/128 @@ -47,7 +53,7 @@ loopback_interfaces: router_isis: instance: CUSTOM_NAME log_adjacency_changes: true - net: 49.0001.0000.0000.0003.00 + net: 49.0001.1000.7000.0003.00 router_id: 100.70.0.3 is_type: level-2 address_family_ipv4: @@ -83,7 +89,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_SITE1-LSR1_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -109,7 +116,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: rr description: P2P_LINK_TO_SITE2-RR1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -135,7 +143,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: pe description: P2P_LINK_TO_SITE2-LER1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR2.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR2.yml index 87292ca6998..68bb712a621 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-LSR2.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -19,7 +25,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -32,7 +38,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.4/32 ipv6_address: 2000:1234:ffff:ffff::4/128 @@ -47,7 +53,7 @@ loopback_interfaces: router_isis: instance: CUSTOM_NAME log_adjacency_changes: true - net: 49.0001.0000.0000.0004.00 + net: 49.0001.1000.7000.0004.00 router_id: 100.70.0.4 is_type: level-2 address_family_ipv4: @@ -83,7 +89,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: p description: P2P_LINK_TO_SITE1-LSR2_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 @@ -105,7 +112,6 @@ ethernet_interfaces: igp_sync: true speed: forced 40gfull - name: Ethernet12 - type: port-channel-member peer: SITE2-LER1 peer_interface: Ethernet11 peer_type: pe @@ -116,7 +122,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet13 - type: port-channel-member peer: SITE2-LER1 peer_interface: Ethernet12 peer_type: pe @@ -127,7 +132,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet14 - type: port-channel-member peer: SITE2-LER1 peer_interface: Ethernet13 peer_type: pe @@ -138,7 +142,6 @@ ethernet_interfaces: mode: active speed: forced 40gfull - name: Ethernet15 - type: port-channel-member peer: SITE2-LER1 peer_interface: Ethernet14 peer_type: pe @@ -154,7 +157,8 @@ port_channel_interfaces: peer_interface: Port-Channel11 peer_type: pe description: P2P_LINK_TO_SITE2-LER1_Port-Channel11 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1600 @@ -179,7 +183,8 @@ port_channel_interfaces: peer_interface: Port-Channel220 peer_type: pe description: P2P_LINK_TO_SITE2-LER1_Port-Channel220 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1600 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-RR1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-RR1.yml index 2e1ddaafa5f..e2f747b482f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-RR1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE2-RR1.yml @@ -37,10 +37,10 @@ router_bgp: neighbor_default: encapsulation: mpls peer_groups: - - name: MPLS-OVERLAY-PEERS - activate: true - name: RR-OVERLAY-PEERS activate: true + - name: MPLS-OVERLAY-PEERS + activate: true address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -63,19 +63,19 @@ router_bgp: - ip_address: 100.70.0.5 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-LER1 - description: SITE1-LER1 + description: SITE1-LER1_Loopback0 - ip_address: 100.70.0.6 peer_group: MPLS-OVERLAY-PEERS peer: SITE1-LER2 - description: SITE1-LER2 + description: SITE1-LER2_Loopback0 - ip_address: 100.70.0.7 peer_group: MPLS-OVERLAY-PEERS peer: SITE2-LER1 - description: SITE2-LER1 + description: SITE2-LER1_Loopback0 - ip_address: 100.70.0.8 peer_group: RR-OVERLAY-PEERS peer: SITE1-RR1 - description: SITE1-RR1 + description: SITE1-RR1_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -95,7 +101,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 10.30.30.109/24 @@ -108,7 +114,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 100.70.0.9/32 ipv6_address: 2000:1234:ffff:ffff::9/128 @@ -123,7 +129,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0002.0009.00 + net: 49.0001.1000.7000.0009.00 router_id: 100.70.0.9 is_type: level-1-2 address_family_ipv4: @@ -164,7 +170,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: p description: P2P_LINK_TO_SITE2-LSR1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9178 eos_cli: 'link-debounce time 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE3-LER1.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE3-LER1.yml index 20643f51ce5..74fc1d6703f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE3-LER1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/intended/structured_configs/SITE3-LER1.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -22,7 +28,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -35,7 +41,7 @@ management_api_http: eos_cli: "management security\n password encryption-key common\n" loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 100.70.0.10/32 ipv6_address: 2000:1234:ffff:ffff::a/128 @@ -50,7 +56,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0010.00 + net: 49.0001.1000.7000.0010.00 router_id: 100.70.0.10 is_type: level-1-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/MPLS_CORE.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/MPLS_CORE.yml index 22f0930b848..0978c995aa0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/MPLS_CORE.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/MPLS_CORE.yml @@ -2,9 +2,6 @@ # Shared attributes root_dir: '{{ playbook_dir }}' -design: - type: "mpls" - fabric_name: MPLS_CORE underlay_ipv6: true @@ -40,7 +37,7 @@ bgp_peer_groups: # RD/RT Format overlay_rd_type: - admin_subfield: overlay_loopback + admin_subfield: router_id overlay_rt_type: admin_subfield: 65000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/SITE1_CONNECTED_ENDPOINTS.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/SITE1_CONNECTED_ENDPOINTS.yml index 7e67be0475b..bb8036277e4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/SITE1_CONNECTED_ENDPOINTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/SITE1_CONNECTED_ENDPOINTS.yml @@ -20,7 +20,7 @@ cpes: ethernet_segment: short_esi: 0303:0202:0101 port_channel: - description: EVPN-A-A-PortChannel + endpoint_port_channel: EVPN-A-A-PortChannel mode: active subinterfaces: - number: 111 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/all.yml index ed97d539c09..aeb5299e414 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-mpls-isis-sr-ldp/inventory/group_vars/all.yml @@ -1 +1,6 @@ --- + +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF1A.md index 4dfebb55fe6..c73fbaa3c71 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF1A.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -78,6 +79,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -176,9 +181,9 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1-POD1-LEAF1A_Po3 | switched | trunk | 4085 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1-POD1-LEAF1A_Po3 | trunk | 4085 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -187,9 +192,9 @@ interface Ethernet1 interface Port-Channel1 description DC1-POD1-LEAF1A_Po3 no shutdown - switchport switchport trunk allowed vlan 4085 switchport mode trunk + switchport service-profile QOS-PROFILE ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2A.md index a237a915250..f2db89a7e84 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2A.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [MLAG](#mlag) @@ -81,6 +82,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -178,7 +183,7 @@ vlan internal order ascending range 1006 1199 | 2600 | web-l2-vlan-2 | - | | 2601 | l2vlan_with_no_vxlan | - | | 4085 | L2LEAF_INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -218,7 +223,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -234,8 +239,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1.POD1.LEAF2A_Ethernet3 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 1 | | Ethernet2 | DC1-POD1-LEAF2B_Ethernet3 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-POD1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-POD1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -254,12 +259,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet3 + description MLAG_DC1-POD1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet4 + description MLAG_DC1-POD1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -270,10 +275,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | RACK2_MLAG_Po3 | switched | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-POD1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | RACK2_MLAG_Po3 | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-POD1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -282,18 +287,18 @@ interface Ethernet4 interface Port-Channel1 description RACK2_MLAG_Po3 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 1 service-profile QOS-PROFILE ! interface Port-Channel3 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Po3 + description MLAG_DC1-POD1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport service-profile QOS-PROFILE ``` @@ -304,7 +309,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan4085 | L2LEAF_INBAND_MGMT | default | - | False | -| Vlan4094 | MLAG_PEER | default | - | False | +| Vlan4094 | MLAG | default | - | False | ##### IPv4 @@ -323,7 +328,7 @@ interface Vlan4085 ip address 172.21.110.5/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.2/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2B.md index b6b6c6ba146..566021b2335 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-L2LEAF2B.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [MLAG](#mlag) @@ -47,20 +48,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.12/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.12/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.12/24 @@ -109,6 +110,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -206,7 +211,7 @@ vlan internal order ascending range 1006 1199 | 2600 | web-l2-vlan-2 | - | | 2601 | l2vlan_with_no_vxlan | - | | 4085 | L2LEAF_INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -246,7 +251,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -262,8 +267,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1.POD1.LEAF2A_Ethernet4 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 1 | | Ethernet2 | DC1-POD1-LEAF2B_Ethernet4 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-POD1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-POD1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -282,12 +287,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet3 + description MLAG_DC1-POD1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet4 + description MLAG_DC1-POD1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -298,10 +303,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | RACK2_MLAG_Po3 | switched | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-POD1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | RACK2_MLAG_Po3 | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-POD1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -310,18 +315,18 @@ interface Ethernet4 interface Port-Channel1 description RACK2_MLAG_Po3 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 1 service-profile QOS-PROFILE ! interface Port-Channel3 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Po3 + description MLAG_DC1-POD1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport service-profile QOS-PROFILE ``` @@ -332,7 +337,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan4085 | L2LEAF_INBAND_MGMT | default | - | False | -| Vlan4094 | MLAG_PEER | default | - | False | +| Vlan4094 | MLAG | default | - | False | ##### IPv4 @@ -351,7 +356,7 @@ interface Vlan4085 ip address 172.21.110.6/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.3/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF1A.md index 04cda214b89..46489568aa6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF1A.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -86,6 +87,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -163,11 +168,11 @@ vlan 4085 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet3 | routed | - | 172.17.110.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet3 | routed | - | 172.17.110.3/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-RS1_Ethernet3 | routed | - | 172.17.10.4/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet3 | - | 172.17.110.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet3 | - | 172.17.110.3/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-RS1_Ethernet3 | - | 172.17.10.4/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -210,9 +215,9 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | DC1-POD1-L2LEAF1A_Po1 | switched | trunk | 4085 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | DC1-POD1-L2LEAF1A_Po1 | trunk | 4085 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -221,9 +226,9 @@ interface Ethernet4 interface Port-Channel3 description DC1-POD1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 4085 switchport mode trunk + switchport service-profile QOS-PROFILE ``` @@ -235,27 +240,27 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.110.3/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.110.3/32 | +| Loopback0 | ROUTER_ID | default | 172.16.110.3/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.110.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.3/32 ``` @@ -457,25 +462,25 @@ router bgp 65111.100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.5 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.5 remote-as 65101 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF2B.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF2B.md index 2b3486ab097..4424f3ac3d8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-LEAF2B.md @@ -8,6 +8,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [MLAG](#mlag) @@ -59,20 +60,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.9/16 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.9/16 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.9/16 @@ -134,6 +135,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -231,7 +236,7 @@ vlan internal order ascending range 1006 1199 | 2600 | web-l2-vlan-2 | - | | 2601 | l2vlan_with_no_vxlan | - | | 4085 | L2LEAF_INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -271,7 +276,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -287,24 +292,24 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet3 | DC1-POD1-L2LEAF2A_Ethernet2 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 3 | | Ethernet4 | DC1-POD1-L2LEAF2B_Ethernet2 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 3 | -| Ethernet5 | MLAG_PEER_DC1.POD1.LEAF2A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1.POD1.LEAF2A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet16 | server-1_Eth2 | *access | *110 | *- | *- | 16 | +| Ethernet5 | MLAG_DC1.POD1.LEAF2A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1.POD1.LEAF2A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet16 | SERVER_server-1_Eth2 | *access | *110 | *- | *- | 16 | | Ethernet17 | Set using structured_config on server adapter | *access | *110 | *- | *- | 17 | -| Ethernet18 | server-1_Eth6 | *access | *110 | *- | *- | 18 | -| Ethernet19 | server-1_Eth8 | *access | *110 | *- | *- | 19 | +| Ethernet18 | SERVER_server-1_Eth6 | *access | *110 | *- | *- | 18 | +| Ethernet19 | SERVER_server-1_Eth8 | *access | *110 | *- | *- | 19 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet5 | routed | - | 172.17.110.17/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet5 | routed | - | 172.17.110.19/31 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet7 | routed | - | 11.1.0.38/31 | default | - | False | - | - | -| Ethernet11 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet8 | routed | - | 172.17.110.21/31 | default | - | False | - | - | -| Ethernet12 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet8 | routed | - | 172.17.110.23/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet5 | - | 172.17.110.17/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet5 | - | 172.17.110.19/31 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet7 | - | 11.1.0.38/31 | default | - | False | - | - | +| Ethernet11 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet8 | - | 172.17.110.21/31 | default | - | False | - | - | +| Ethernet12 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet8 | - | 172.17.110.23/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -339,12 +344,12 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description MLAG_PEER_DC1.POD1.LEAF2A_Ethernet5 + description MLAG_DC1.POD1.LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1.POD1.LEAF2A_Ethernet6 + description MLAG_DC1.POD1.LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -374,7 +379,7 @@ interface Ethernet12 service-profile QOS-PROFILE ! interface Ethernet16 - description server-1_Eth2 + description SERVER_server-1_Eth2 no shutdown channel-group 16 mode active comment @@ -392,7 +397,7 @@ interface Ethernet17 ! interface Ethernet18 - description server-1_Eth6 + description SERVER_server-1_Eth6 no shutdown channel-group 18 mode active comment @@ -401,7 +406,7 @@ interface Ethernet18 ! interface Ethernet19 - description server-1_Eth8 + description SERVER_server-1_Eth8 no shutdown channel-group 19 mode active comment @@ -416,14 +421,14 @@ interface Ethernet19 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | RACK2_MLAG_Po1 | switched | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 3 | - | -| Port-Channel5 | MLAG_PEER_DC1.POD1.LEAF2A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel16 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 16 | - | -| Port-Channel17 | Set using structured_config on server adapter port-channel | switched | access | 110 | - | - | - | - | 17 | - | -| Port-Channel18 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 18 | - | -| Port-Channel19 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 19 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | RACK2_MLAG_Po1 | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 3 | - | +| Port-Channel5 | MLAG_DC1.POD1.LEAF2A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel16 | PortChannel | access | 110 | - | - | - | - | 16 | - | +| Port-Channel17 | Set using structured_config on server adapter port-channel | access | 110 | - | - | - | - | 17 | - | +| Port-Channel18 | PortChannel | access | 110 | - | - | - | - | 18 | - | +| Port-Channel19 | PortChannel | access | 110 | - | - | - | - | 19 | - | #### Port-Channel Interfaces Device Configuration @@ -432,42 +437,44 @@ interface Ethernet19 interface Port-Channel3 description RACK2_MLAG_Po1 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 3 service-profile QOS-PROFILE ! interface Port-Channel5 - description MLAG_PEER_DC1.POD1.LEAF2A_Po5 + description MLAG_DC1.POD1.LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Port-Channel16 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 16 service-profile bar ! interface Port-Channel17 description Set using structured_config on server adapter port-channel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 17 service-profile foo ! interface Port-Channel18 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 18 service-profile foo comment @@ -476,10 +483,11 @@ interface Port-Channel18 ! interface Port-Channel19 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 19 service-profile foo comment @@ -496,8 +504,8 @@ interface Port-Channel19 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.110.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.110.4/32 | +| Loopback0 | ROUTER_ID | default | 172.16.110.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.110.4/32 | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | 10.100.0.5/32 | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | 10.101.101.5/32 | | Loopback102 | vrf_with_loopbacks_dc1_pod1_only_VTEP_DIAGNOSTICS | vrf_with_loopbacks_dc1_pod1_only | 10.102.101.5/32 | @@ -506,8 +514,8 @@ interface Port-Channel19 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | - | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | - | | Loopback102 | vrf_with_loopbacks_dc1_pod1_only_VTEP_DIAGNOSTICS | vrf_with_loopbacks_dc1_pod1_only | - | @@ -517,12 +525,12 @@ interface Port-Channel19 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.4/32 ! @@ -559,7 +567,7 @@ interface Loopback102 | Vlan1101 | test_svi | vrf_with_loopbacks_from_pod_pools | - | False | | Vlan1102 | test_svi | vrf_with_loopbacks_dc1_pod1_only | - | False | | Vlan4085 | L2LEAF_INBAND_MGMT | default | - | False | -| Vlan4094 | MLAG_PEER | default | - | False | +| Vlan4094 | MLAG | default | - | False | ##### IPv4 @@ -633,7 +641,7 @@ interface Vlan4085 ip virtual-router address 172.21.110.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.3/31 @@ -921,15 +929,15 @@ router bgp 65112.100 neighbor 11.1.0.39 bfd neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.1 route-map RM-EVPN-FILTER-AS65101 out neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.1 route-map RM-EVPN-FILTER-AS65110.100 out neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.110.3 route-map RM-EVPN-FILTER-AS65111.100 out neighbor 172.17.110.16 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.110.16 remote-as 65110.100 @@ -944,7 +952,7 @@ router bgp 65112.100 neighbor 172.17.110.22 remote-as 65110.100 neighbor 172.17.110.22 description DC1-POD1-SPINE2_Ethernet8 neighbor 172.20.110.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 172.20.110.2 description DC1.POD1.LEAF2A + neighbor 172.20.110.2 description DC1.POD1.LEAF2A_Vlan4094 redistribute attached-host redistribute connected ! diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE1.md index beaa5013e6f..6eb4274743c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE1.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -77,6 +78,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -137,16 +142,16 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet1 | routed | - | 172.16.11.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet1 | routed | - | 172.16.11.65/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet1 | routed | - | 172.17.110.0/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet1 | routed | - | 172.17.110.8/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet1 | routed | - | 172.17.110.16/31 | default | - | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-RS1_Ethernet2 | routed | - | 172.17.10.2/31 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet11 | routed | - | 172.17.110.12/31 | default | - | False | - | - | -| Ethernet8 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet11 | routed | - | 172.17.110.20/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet1 | - | 172.16.11.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet1 | - | 172.16.11.65/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet1 | - | 172.17.110.0/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet1 | - | 172.17.110.8/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet1 | - | 172.17.110.16/31 | default | - | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-RS1_Ethernet2 | - | 172.17.10.2/31 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet11 | - | 172.17.110.12/31 | default | - | False | - | - | +| Ethernet8 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet11 | - | 172.17.110.20/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -231,20 +236,20 @@ interface Ethernet8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.110.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.110.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.1/32 ``` @@ -397,25 +402,25 @@ router bgp 65110.100 neighbor 172.16.11.64 description DC1-SUPER-SPINE2_Ethernet1 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.3 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.3 remote-as 65101 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE2.md index b1af2564b09..f04598f6635 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD1-SPINE2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -39,20 +40,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.6/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.6/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.6/24 @@ -101,6 +102,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -161,15 +166,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet2 | routed | - | 172.16.11.3/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet2 | routed | - | 172.16.11.67/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet2 | routed | - | 172.17.110.2/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet2 | routed | - | 172.17.110.10/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet2 | routed | - | 172.17.110.18/31 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet12 | routed | - | 172.17.110.14/31 | default | - | False | - | - | -| Ethernet8 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet12 | routed | - | 172.17.110.22/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet2 | - | 172.16.11.3/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet2 | - | 172.16.11.67/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet2 | - | 172.17.110.2/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet2 | - | 172.17.110.10/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet2 | - | 172.17.110.18/31 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet12 | - | 172.17.110.14/31 | default | - | False | - | - | +| Ethernet8 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet12 | - | 172.17.110.22/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -247,20 +252,20 @@ interface Ethernet8 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.110.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.110.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.2/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-LEAF1A.md index d93e2befe58..c49ef7f9933 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-LEAF1A.md @@ -8,6 +8,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -56,20 +57,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.15/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.15/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.15/24 @@ -131,6 +132,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -243,11 +248,11 @@ vlan 2601 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet3 | routed | - | 172.17.120.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet3 | routed | - | 172.17.120.3/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-RS2_Ethernet3 | routed | - | 172.17.10.12/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet3 | - | 172.17.120.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet3 | - | 172.17.120.3/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-RS2_Ethernet3 | - | 172.17.10.12/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -287,8 +292,8 @@ interface Ethernet3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.120.3/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.120.3/32 | +| Loopback0 | ROUTER_ID | default | 172.16.120.3/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.120.3/32 | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | 10.100.0.3/32 | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | 10.101.102.3/32 | @@ -296,8 +301,8 @@ interface Ethernet3 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | - | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | - | @@ -306,12 +311,12 @@ interface Ethernet3 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.120.3/32 ! @@ -629,11 +634,11 @@ router bgp 65121 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.120.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.1 remote-as 65120 - neighbor 172.16.120.1 description DC1-POD2-SPINE1 + neighbor 172.16.120.1 description DC1-POD2-SPINE1_Loopback0 neighbor 172.16.120.1 route-map RM-EVPN-FILTER-AS65120 out neighbor 172.16.120.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.2 remote-as 65120 - neighbor 172.16.120.2 description DC1-POD2-SPINE2 + neighbor 172.16.120.2 description DC1-POD2-SPINE2_Loopback0 neighbor 172.16.120.2 route-map RM-EVPN-FILTER-AS65120 out neighbor 172.17.10.13 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.13 remote-as 65102 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE1.md index 8cdf2e122ce..97cd0f1cece 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.13/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.13/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.13/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,13 +171,13 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet3 | routed | - | 172.16.12.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet3 | routed | - | 172.16.12.65/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet1 | routed | - | 172.17.120.0/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-RS2_Ethernet2 | routed | - | 172.17.10.10/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet5 | routed | - | 11.1.1.18/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet3 | - | 172.16.12.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet3 | - | 172.16.12.65/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet1 | - | 172.17.120.0/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-RS2_Ethernet2 | - | 172.17.10.10/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet5 | - | 11.1.1.18/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -227,20 +232,20 @@ interface Ethernet5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.120.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.120.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.1/32 ``` @@ -388,7 +393,7 @@ router bgp 65120 neighbor 172.16.12.64 description DC1-SUPER-SPINE2_Ethernet3 neighbor 172.16.120.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.10.11 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.11 remote-as 65102 neighbor 172.17.10.11 description DC1-RS2_Ethernet2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE2.md index 91ddd0a0b0e..1f6ac072aae 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-POD2-SPINE2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.14/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.14/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.14/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,12 +171,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet4 | routed | - | 172.16.12.3/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet4 | routed | - | 172.16.12.67/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet2 | routed | - | 172.17.120.2/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet5 | routed | - | 200.200.200.101/24 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet4 | - | 172.16.12.3/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet4 | - | 172.16.12.67/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet2 | - | 172.17.120.2/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet5 | - | 200.200.200.101/24 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -220,20 +225,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.120.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.120.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.2/32 ``` @@ -377,7 +382,7 @@ router bgp 65120 neighbor 172.16.12.66 description DC1-SUPER-SPINE2_Ethernet4 neighbor 172.16.120.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.120.3 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.120.3 remote-as 65121 neighbor 172.17.120.3 description DC1-POD2-LEAF1A_Ethernet2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS1.md index b43980b26c1..cf1ba547a9b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS1.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -78,6 +79,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -138,11 +143,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet5 | routed | - | 172.17.10.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet6 | routed | - | 172.17.10.3/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet4 | routed | - | 172.17.10.5/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet5 | - | 172.17.10.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet6 | - | 172.17.10.3/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet4 | - | 172.17.10.5/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -178,20 +183,20 @@ interface Ethernet3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.10.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.10.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.10.1/32 ``` @@ -333,25 +338,25 @@ router bgp 65101 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.0 remote-as 65100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS2.md index 37d29090927..e8e14c4493d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-RS2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.4/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.4/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.4/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,11 +171,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet5 | routed | - | 172.17.10.9/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet4 | routed | - | 172.17.10.11/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet3 | routed | - | 172.17.10.13/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet5 | - | 172.17.10.9/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet4 | - | 172.17.10.11/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet3 | - | 172.17.10.13/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -206,20 +211,20 @@ interface Ethernet3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.10.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.10.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.10.2/32 ``` @@ -359,19 +364,19 @@ router bgp 65102 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.8 remote-as 65100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE1.md index 434a510a41a..7762eb2879f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE1.md @@ -6,6 +6,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -76,6 +77,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -136,14 +141,14 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet1 | routed | - | 172.16.11.0/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet1 | routed | - | 172.16.11.2/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet1 | routed | - | 172.16.12.0/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet1 | routed | - | 172.16.12.2/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-RS1_Ethernet1 | routed | - | 172.17.10.0/31 | default | - | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet4 | routed | - | 11.1.2.0/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet1 | - | 172.16.11.0/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet1 | - | 172.16.11.2/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet1 | - | 172.16.12.0/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet1 | - | 172.16.12.2/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-RS1_Ethernet1 | - | 172.17.10.0/31 | default | - | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet4 | - | 11.1.2.0/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -209,20 +214,20 @@ interface Ethernet6 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.100.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.100.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.100.1/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE2.md index be3c1ac7e6f..ac58f133e9e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1-SUPER-SPINE2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.2/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.2/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.2/24 @@ -104,6 +105,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -164,14 +169,14 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet2 | routed | - | 172.16.11.64/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet2 | routed | - | 172.16.11.66/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet2 | routed | - | 172.16.12.64/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet2 | routed | - | 172.16.12.66/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-RS2_Ethernet1 | routed | - | 172.17.10.8/31 | default | - | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet4 | routed | - | 11.1.2.2/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet2 | - | 172.16.11.64/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet2 | - | 172.16.11.66/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet2 | - | 172.16.12.64/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet2 | - | 172.16.12.66/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-RS2_Ethernet1 | - | 172.17.10.8/31 | default | - | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet4 | - | 11.1.2.2/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -235,20 +240,20 @@ interface Ethernet6 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.100.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.100.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.100.2/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1.POD1.LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1.POD1.LEAF2A.md index 6cdbc3f0b65..335bec501f9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1.POD1.LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC1.POD1.LEAF2A.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [MLAG](#mlag) @@ -108,6 +109,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -207,7 +212,7 @@ vlan internal order ascending range 1006 1199 | 2600 | web-l2-vlan-2 | - | | 2601 | l2vlan_with_no_vxlan | - | | 4085 | L2LEAF_INBAND_MGMT | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -247,7 +252,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -263,24 +268,24 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet3 | DC1-POD1-L2LEAF2A_Ethernet1 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 3 | | Ethernet4 | DC1-POD1-L2LEAF2B_Ethernet1 | *trunk | *110-113,1100-1102,2500,2600-2601,4085 | *- | *- | 3 | -| Ethernet5 | MLAG_PEER_DC1-POD1-LEAF2B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-POD1-LEAF2B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet16 | server-1_Eth1 | *access | *110 | *- | *- | 16 | +| Ethernet5 | MLAG_DC1-POD1-LEAF2B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-POD1-LEAF2B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet16 | SERVER_server-1_Eth1 | *access | *110 | *- | *- | 16 | | Ethernet17 | Set using structured_config on server adapter | *access | *110 | *- | *- | 17 | -| Ethernet18 | server-1_Eth5 | *access | *110 | *- | *- | 18 | -| Ethernet19 | server-1_Eth7 | *access | *110 | *- | *- | 19 | +| Ethernet18 | SERVER_server-1_Eth5 | *access | *110 | *- | *- | 18 | +| Ethernet19 | SERVER_server-1_Eth7 | *access | *110 | *- | *- | 19 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet4 | routed | - | 172.17.110.9/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet4 | routed | - | 172.17.110.11/31 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet6 | routed | - | 100.100.100.101/24 | default | - | False | - | - | -| Ethernet11 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet7 | routed | - | 172.17.110.13/31 | default | - | False | - | - | -| Ethernet12 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet7 | routed | - | 172.17.110.15/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet4 | - | 172.17.110.9/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet4 | - | 172.17.110.11/31 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet6 | - | 100.100.100.101/24 | default | - | False | - | - | +| Ethernet11 | P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet7 | - | 172.17.110.13/31 | default | - | False | - | - | +| Ethernet12 | P2P_LINK_TO_DC1-POD1-SPINE2_Ethernet7 | - | 172.17.110.15/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -315,12 +320,12 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description MLAG_PEER_DC1-POD1-LEAF2B_Ethernet5 + description MLAG_DC1-POD1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-POD1-LEAF2B_Ethernet6 + description MLAG_DC1-POD1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -349,7 +354,7 @@ interface Ethernet12 service-profile QOS-PROFILE ! interface Ethernet16 - description server-1_Eth1 + description SERVER_server-1_Eth1 no shutdown channel-group 16 mode active comment @@ -367,7 +372,7 @@ interface Ethernet17 ! interface Ethernet18 - description server-1_Eth5 + description SERVER_server-1_Eth5 no shutdown channel-group 18 mode active comment @@ -376,7 +381,7 @@ interface Ethernet18 ! interface Ethernet19 - description server-1_Eth7 + description SERVER_server-1_Eth7 no shutdown channel-group 19 mode active comment @@ -391,14 +396,14 @@ interface Ethernet19 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | RACK2_MLAG_Po1 | switched | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 3 | - | -| Port-Channel5 | MLAG_PEER_DC1-POD1-LEAF2B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel16 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 16 | - | -| Port-Channel17 | Set using structured_config on server adapter port-channel | switched | access | 110 | - | - | - | - | 17 | - | -| Port-Channel18 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 18 | - | -| Port-Channel19 | server-1_PortChannel | switched | access | 110 | - | - | - | - | 19 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | RACK2_MLAG_Po1 | trunk | 110-113,1100-1102,2500,2600-2601,4085 | - | - | - | - | 3 | - | +| Port-Channel5 | MLAG_DC1-POD1-LEAF2B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel16 | PortChannel | access | 110 | - | - | - | - | 16 | - | +| Port-Channel17 | Set using structured_config on server adapter port-channel | access | 110 | - | - | - | - | 17 | - | +| Port-Channel18 | PortChannel | access | 110 | - | - | - | - | 18 | - | +| Port-Channel19 | PortChannel | access | 110 | - | - | - | - | 19 | - | #### Port-Channel Interfaces Device Configuration @@ -407,42 +412,44 @@ interface Ethernet19 interface Port-Channel3 description RACK2_MLAG_Po1 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 3 service-profile QOS-PROFILE ! interface Port-Channel5 - description MLAG_PEER_DC1-POD1-LEAF2B_Po5 + description MLAG_DC1-POD1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Port-Channel16 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 16 service-profile bar ! interface Port-Channel17 description Set using structured_config on server adapter port-channel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 17 service-profile foo ! interface Port-Channel18 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 18 service-profile foo comment @@ -451,10 +458,11 @@ interface Port-Channel18 ! interface Port-Channel19 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 19 service-profile foo comment @@ -471,8 +479,8 @@ interface Port-Channel19 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.110.4/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.110.4/32 | +| Loopback0 | ROUTER_ID | default | 172.16.110.4/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.110.4/32 | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | 10.100.0.4/32 | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | 10.101.101.4/32 | | Loopback102 | vrf_with_loopbacks_dc1_pod1_only_VTEP_DIAGNOSTICS | vrf_with_loopbacks_dc1_pod1_only | 10.102.101.4/32 | @@ -481,8 +489,8 @@ interface Port-Channel19 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | - | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | - | | Loopback102 | vrf_with_loopbacks_dc1_pod1_only_VTEP_DIAGNOSTICS | vrf_with_loopbacks_dc1_pod1_only | - | @@ -492,12 +500,12 @@ interface Port-Channel19 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.4/32 ! @@ -534,7 +542,7 @@ interface Loopback102 | Vlan1101 | test_svi | vrf_with_loopbacks_from_pod_pools | - | False | | Vlan1102 | test_svi | vrf_with_loopbacks_dc1_pod1_only | - | False | | Vlan4085 | L2LEAF_INBAND_MGMT | default | - | False | -| Vlan4094 | MLAG_PEER | default | - | False | +| Vlan4094 | MLAG | default | - | False | ##### IPv4 @@ -608,7 +616,7 @@ interface Vlan4085 ip virtual-router address 172.21.110.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.2/31 @@ -892,19 +900,19 @@ router bgp 65112.100 neighbor 100.100.100.201 description DC2-POD1-LEAF1A neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.1 route-map RM-EVPN-FILTER-AS65101 out neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.1 route-map RM-EVPN-FILTER-AS65110.100 out neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.110.3 route-map RM-EVPN-FILTER-AS65111.100 out neighbor 172.16.120.3 peer group EVPN-OVERLAY-CORE neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.110.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.110.8 remote-as 65110.100 neighbor 172.17.110.8 description DC1-POD1-SPINE1_Ethernet4 @@ -918,7 +926,7 @@ router bgp 65112.100 neighbor 172.17.110.14 remote-as 65110.100 neighbor 172.17.110.14 description DC1-POD1-SPINE2_Ethernet7 neighbor 172.20.110.3 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 172.20.110.3 description DC1-POD1-LEAF2B + neighbor 172.20.110.3 description DC1-POD1-LEAF2B_Vlan4094 redistribute attached-host redistribute connected ! diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF1A.md index 26404d815c5..923cc0861d9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF1A.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.23/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.23/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.23/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -204,9 +209,9 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC2-POD1-LEAF1A_Po3 | switched | trunk | 4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC2-POD1-LEAF1A_Po3 | trunk | 4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -215,9 +220,9 @@ interface Ethernet1 interface Port-Channel1 description DC2-POD1-LEAF1A_Po3 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF2A.md index 81e5870bdc4..f43552e7175 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-L2LEAF2A.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.25/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.25/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.25/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -204,9 +209,9 @@ interface Ethernet1 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC2-POD1-LEAF2A_Po3 | switched | trunk | 4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC2-POD1-LEAF2A_Po3 | trunk | 4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -215,9 +220,9 @@ interface Ethernet1 interface Port-Channel1 description DC2-POD1-LEAF2A_Po3 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF1A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF1A.md index 0dc9a2c18c5..2416ec2a5f7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF1A.md @@ -8,6 +8,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.22/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.22/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.22/24 @@ -132,6 +133,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -214,12 +219,12 @@ vlan 4092 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet3 | routed | - | 172.17.210.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet3 | routed | - | 172.17.210.3/31 | default | - | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet7 | routed | - | 100.100.100.201/24 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet7 | routed | - | 11.1.0.39/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet3 | - | 172.17.210.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet3 | - | 172.17.210.3/31 | default | - | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet7 | - | 100.100.100.201/24 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet7 | - | 11.1.0.39/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -266,9 +271,9 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | DC2-POD1-L2LEAF1A_Po1 | switched | trunk | 4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | DC2-POD1-L2LEAF1A_Po1 | trunk | 4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -277,9 +282,9 @@ interface Ethernet7 interface Port-Channel3 description DC2-POD1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ``` @@ -291,8 +296,8 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.210.3/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.210.3/32 | +| Loopback0 | ROUTER_ID | default | 172.16.210.3/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.210.3/32 | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | 10.100.0.3/32 | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | 10.101.201.3/32 | @@ -300,8 +305,8 @@ interface Port-Channel3 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | vrf_with_loopbacks_from_overlapping_pool_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_overlapping_pool | - | | Loopback101 | vrf_with_loopbacks_from_pod_pools_VTEP_DIAGNOSTICS | vrf_with_loopbacks_from_pod_pools | - | @@ -310,12 +315,12 @@ interface Port-Channel3 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.210.3/32 ! @@ -566,19 +571,19 @@ router bgp 65211 neighbor 100.100.100.101 description DC1.POD1.LEAF2A neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.210.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.4 remote-as 65212 - neighbor 172.16.210.4 description DC2-POD1-LEAF2A + neighbor 172.16.210.4 description DC2-POD1-LEAF2A_Loopback0 neighbor 172.17.210.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.0 remote-as 65210 neighbor 172.17.210.0 description DC2-POD1-SPINE1_Ethernet3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF2A.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF2A.md index 819a7599861..1195f395762 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-LEAF2A.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -53,20 +54,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.24/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.24/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.24/24 @@ -115,6 +116,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -197,10 +202,10 @@ vlan 4092 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet4 | routed | - | 172.17.210.5/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet4 | routed | - | 172.17.210.7/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet4 | - | 172.17.210.5/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet4 | - | 172.17.210.7/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -234,9 +239,9 @@ interface Ethernet3 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel3 | DC2-POD1-L2LEAF2A_Po1 | switched | trunk | 4092 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel3 | DC2-POD1-L2LEAF2A_Po1 | trunk | 4092 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -245,9 +250,9 @@ interface Ethernet3 interface Port-Channel3 description DC2-POD1-L2LEAF2A_Po1 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ``` @@ -259,27 +264,27 @@ interface Port-Channel3 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.210.4/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 172.18.210.4/32 | +| Loopback0 | ROUTER_ID | default | 172.16.210.4/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 172.18.210.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.210.4/32 ``` @@ -469,7 +474,7 @@ router bgp 65212 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.17.210.4 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.4 remote-as 65210 neighbor 172.17.210.4 description DC2-POD1-SPINE1_Ethernet4 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE1.md index 2fd1312d0ca..4c0daad799d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.20/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.20/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.20/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,13 +171,13 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet1 | routed | - | 172.16.21.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet1 | routed | - | 172.16.21.65/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet1 | routed | - | 172.17.210.0/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet1 | routed | - | 172.17.210.4/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet5 | routed | - | 11.1.1.19/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet1 | - | 172.16.21.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet1 | - | 172.16.21.65/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet1 | - | 172.17.210.0/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet1 | - | 172.17.210.4/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet5 | - | 11.1.1.19/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -225,20 +230,20 @@ interface Ethernet5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.210.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.210.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.1/32 ``` @@ -381,10 +386,10 @@ router bgp 65210 neighbor 11.1.1.18 description DC1-POD2-SPINE1 neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.21.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.16.21.0 remote-as 65200 neighbor 172.16.21.0 description DC2-SUPER-SPINE1_Ethernet1 @@ -393,10 +398,10 @@ router bgp 65210 neighbor 172.16.21.64 description DC2-SUPER-SPINE2_Ethernet1 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.210.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.1 remote-as 65211 neighbor 172.17.210.1 description DC2-POD1-LEAF1A_Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE2.md index 2da0f8e9304..25aab895702 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-POD1-SPINE2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.21/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.21/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.21/24 @@ -104,6 +105,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -164,13 +169,13 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet2 | routed | - | 172.16.21.3/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet2 | routed | - | 172.16.21.67/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet2 | routed | - | 172.17.210.2/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet2 | routed | - | 172.17.210.6/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet4 | routed | - | 200.200.200.201/24 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet2 | - | 172.16.21.3/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet2 | - | 172.16.21.67/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet2 | - | 172.17.210.2/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet2 | - | 172.17.210.6/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet4 | - | 200.200.200.201/24 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -224,20 +229,20 @@ interface Ethernet5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.210.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.210.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.2/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS1.md index 3896e2bcb6b..f9130f23bb4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.18/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.18/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.18/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,10 +171,10 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet3 | routed | - | 172.17.20.1/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet6 | routed | - | 172.17.20.3/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet3 | - | 172.17.20.1/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet6 | - | 172.17.20.3/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -198,20 +203,20 @@ interface Ethernet2 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.20.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.20.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.20.1/32 ``` @@ -348,16 +353,16 @@ router bgp 65201 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.20.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.20.0 remote-as 65200 neighbor 172.17.20.0 description DC2-SUPER-SPINE1_Ethernet3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS2.md index 1ff04714dbc..2eb84dafb63 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-RS2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.19/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.19/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.19/24 @@ -104,6 +105,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -164,10 +169,10 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet5 | routed | - | 172.17.20.9/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet7 | routed | - | 172.17.20.11/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet5 | - | 172.17.20.9/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet7 | - | 172.17.20.11/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -196,20 +201,20 @@ interface Ethernet2 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.20.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.20.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.20.2/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE1.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE1.md index 82a358ec8d3..a663d8db5d0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE1.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.16/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.16/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.16/24 @@ -106,6 +107,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -166,15 +171,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet1 | routed | - | 172.16.21.0/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet1 | routed | - | 172.16.21.2/31 | default | - | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC2-RS1_Ethernet1 | routed | - | 172.17.20.0/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet6 | routed | - | 11.1.2.1/31 | default | - | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC2-RS2_Ethernet1 | routed | - | 172.17.20.8/31 | default | - | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC2-RS1_Ethernet2 | routed | - | 172.17.20.2/31 | default | - | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC2-RS2_Ethernet2 | routed | - | 172.17.20.10/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet1 | - | 172.16.21.0/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet1 | - | 172.16.21.2/31 | default | - | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC2-RS1_Ethernet1 | - | 172.17.20.0/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet6 | - | 11.1.2.1/31 | default | - | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC2-RS2_Ethernet1 | - | 172.17.20.8/31 | default | - | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC2-RS1_Ethernet2 | - | 172.17.20.2/31 | default | - | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC2-RS2_Ethernet2 | - | 172.17.20.10/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -241,20 +246,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.200.1/32 | +| Loopback0 | ROUTER_ID | default | 172.16.200.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.200.1/32 ``` @@ -400,10 +405,10 @@ router bgp 65200 no neighbor 11.1.2.0 bfd neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.21.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.16.21.1 remote-as 65210 neighbor 172.16.21.1 description DC2-POD1-SPINE1_Ethernet1 @@ -412,10 +417,10 @@ router bgp 65200 neighbor 172.16.21.3 description DC2-POD1-SPINE2_Ethernet1 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.20.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.20.1 remote-as 65201 neighbor 172.17.20.1 description DC2-RS1_Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE2.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE2.md index ecaf6b6c709..a797db57b5f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/devices/DC2-SUPER-SPINE2.md @@ -7,6 +7,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [SNMP](#snmp) - [Spanning Tree](#spanning-tree) @@ -42,20 +43,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.1.17/24 | 192.168.1.254 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.1.17/24 | 192.168.1.254 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.17/24 @@ -104,6 +105,10 @@ management api http-commands username admin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### SNMP @@ -164,11 +169,11 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet2 | routed | - | 172.16.21.64/31 | default | - | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet2 | routed | - | 172.16.21.66/31 | default | - | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet6 | routed | - | 11.1.2.3/31 | default | - | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet2 | - | 172.16.21.64/31 | default | - | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet2 | - | 172.16.21.66/31 | default | - | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet6 | - | 11.1.2.3/31 | default | - | False | - | - | #### Ethernet Interfaces Device Configuration @@ -205,20 +210,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 172.16.200.2/32 | +| Loopback0 | ROUTER_ID | default | 172.16.200.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.200.2/32 ``` diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/fabric/TWODC_5STAGE_CLOS-documentation.md b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/fabric/TWODC_5STAGE_CLOS-documentation.md index f5947785f41..800c7c93958 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/fabric/TWODC_5STAGE_CLOS-documentation.md +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/documentation/fabric/TWODC_5STAGE_CLOS-documentation.md @@ -223,7 +223,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 172.18.110.0/24 | 256 | 3 | 1.18 % | | 172.18.120.0/24 | 256 | 1 | 0.4 % | | 172.18.210.0/24 | 256 | 2 | 0.79 % | @@ -245,31 +245,20 @@ | Key | Type | Description | | --- | ---- | ----------- | -| access_points | access_point | Access Point | -| cameras | camera | Camera | -| cpes | cpe | CPE | -| firewalls | firewall | Firewall | -| generic_devices | generic_device | Generic Device | -| load_balancers | load_balancer | Load Balancer | -| phones | phone | Phone | -| printers | printer | Printer | -| routers | router | Router | | servers | server | Server | -| storage_arrays | storage_array | Storage Array | -| workstations | workstation | Workstation | ### Servers -| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Type | Mode | VLANs | Profile | -| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ---- | ----- | ------- | -| server-1 | Eth2 | DC1-POD1-LEAF2B | Ethernet16 | server-1_Eth2 | False | switched | access | 110 | TENANT_A | -| server-1 | Eth4 | DC1-POD1-LEAF2B | Ethernet17 | Set using structured_config on server adapter | False | switched | access | 110 | TENANT_A | -| server-1 | Eth6 | DC1-POD1-LEAF2B | Ethernet18 | server-1_Eth6 | False | switched | access | 110 | NESTED_TENANT_A | -| server-1 | Eth8 | DC1-POD1-LEAF2B | Ethernet19 | server-1_Eth8 | False | switched | access | 110 | NESTED_TENANT_A | -| server-1 | Eth1 | DC1.POD1.LEAF2A | Ethernet16 | server-1_Eth1 | False | switched | access | 110 | TENANT_A | -| server-1 | Eth3 | DC1.POD1.LEAF2A | Ethernet17 | Set using structured_config on server adapter | False | switched | access | 110 | TENANT_A | -| server-1 | Eth5 | DC1.POD1.LEAF2A | Ethernet18 | server-1_Eth5 | False | switched | access | 110 | NESTED_TENANT_A | -| server-1 | Eth7 | DC1.POD1.LEAF2A | Ethernet19 | server-1_Eth7 | False | switched | access | 110 | NESTED_TENANT_A | +| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Mode | Access VLAN | Trunk Allowed VLANs | Profile | +| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ----------- | ------------------- | ------- | +| server-1 | Eth1 | DC1.POD1.LEAF2A | Ethernet16 | SERVER_server-1_Eth1 | False | access | 110 | - | TENANT_A | +| server-1 | Eth3 | DC1.POD1.LEAF2A | Ethernet17 | Set using structured_config on server adapter | False | access | 110 | - | TENANT_A | +| server-1 | Eth5 | DC1.POD1.LEAF2A | Ethernet18 | SERVER_server-1_Eth5 | False | access | 110 | - | NESTED_TENANT_A | +| server-1 | Eth7 | DC1.POD1.LEAF2A | Ethernet19 | SERVER_server-1_Eth7 | False | access | 110 | - | NESTED_TENANT_A | +| server-1 | Eth2 | DC1-POD1-LEAF2B | Ethernet16 | SERVER_server-1_Eth2 | False | access | 110 | - | TENANT_A | +| server-1 | Eth4 | DC1-POD1-LEAF2B | Ethernet17 | Set using structured_config on server adapter | False | access | 110 | - | TENANT_A | +| server-1 | Eth6 | DC1-POD1-LEAF2B | Ethernet18 | SERVER_server-1_Eth6 | False | access | 110 | - | NESTED_TENANT_A | +| server-1 | Eth8 | DC1-POD1-LEAF2B | Ethernet19 | SERVER_server-1_Eth8 | False | access | 110 | - | NESTED_TENANT_A | ### Port Profiles diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF1A.cfg index 05b84a3c479..05564c2ea9a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,11 +24,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD1 DC1-POD1-L2LEAF1A spanning-tree mode mstp spanning-tree mst 0 priority 8192 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4085 name L2LEAF_INBAND_MGMT ! @@ -26,9 +32,9 @@ vrf instance MGMT interface Port-Channel1 description DC1-POD1-LEAF1A_Po3 no shutdown - switchport switchport trunk allowed vlan 4085 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -45,13 +51,6 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.1.254 ip route 0.0.0.0/0 172.21.110.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2A.cfg index 36706e711d6..3fb734f08ce 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -14,11 +25,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 8192 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -53,7 +59,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -61,18 +67,18 @@ vrf instance MGMT interface Port-Channel1 description RACK2_MLAG_Po3 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 1 service-profile QOS-PROFILE ! interface Port-Channel3 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Po3 + description MLAG_DC1-POD1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -86,12 +92,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet3 + description MLAG_DC1-POD1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet4 + description MLAG_DC1-POD1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! @@ -101,7 +107,7 @@ interface Vlan4085 ip address 172.21.110.5/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.2/31 @@ -118,13 +124,6 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 192.168.1.254 ip route 0.0.0.0/0 172.21.110.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1002 description Loopback created from raw_eos_cli under l2leaf node-group RACK2_MLAG diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2B.cfg index 5bb7dc69f20..740b2e0250e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-L2LEAF2B.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -14,11 +25,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 8192 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -53,7 +59,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -61,18 +67,18 @@ vrf instance MGMT interface Port-Channel1 description RACK2_MLAG_Po3 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 1 service-profile QOS-PROFILE ! interface Port-Channel3 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Po3 + description MLAG_DC1-POD1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -86,17 +92,17 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet3 + description MLAG_DC1-POD1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet4 + description MLAG_DC1-POD1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.12/24 @@ -107,7 +113,7 @@ interface Vlan4085 ip address 172.21.110.6/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.3/31 @@ -124,13 +130,6 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 192.168.1.254 ip route 0.0.0.0/0 172.21.110.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1003 description Loopback created from raw_eos_cli under l2leaf node DC1-POD1-L2LEAF2B diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF1A.cfg index 51204e94640..e83ab9595f6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD1 DC1-POD1-LEAF1A ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4085 name L2LEAF_INBAND_MGMT ! @@ -25,9 +31,9 @@ vrf instance MGMT interface Port-Channel3 description DC1-POD1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 4085 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -61,12 +67,12 @@ interface Ethernet4 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.3/32 ! @@ -132,25 +138,25 @@ router bgp 65111.100 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.5 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.5 remote-as 65101 @@ -177,13 +183,6 @@ router bgp 65111.100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1002 description Loopback created from raw_eos_cli under node DC1-POD1-LEAF1A diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF2B.cfg index 1dbe93d51a1..de2f938cce4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-LEAF2B.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -15,11 +26,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -54,7 +60,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance Common_VRF @@ -70,42 +76,44 @@ vrf instance vrf_with_loopbacks_from_pod_pools interface Port-Channel3 description RACK2_MLAG_Po1 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 3 service-profile QOS-PROFILE ! interface Port-Channel5 - description MLAG_PEER_DC1.POD1.LEAF2A_Po5 + description MLAG_DC1.POD1.LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Port-Channel16 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 16 service-profile bar ! interface Port-Channel17 description Set using structured_config on server adapter port-channel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 17 service-profile foo ! interface Port-Channel18 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 18 service-profile foo comment @@ -114,10 +122,11 @@ interface Port-Channel18 ! interface Port-Channel19 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 19 service-profile foo comment @@ -154,12 +163,12 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description MLAG_PEER_DC1.POD1.LEAF2A_Ethernet5 + description MLAG_DC1.POD1.LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1.POD1.LEAF2A_Ethernet6 + description MLAG_DC1.POD1.LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -189,7 +198,7 @@ interface Ethernet12 service-profile QOS-PROFILE ! interface Ethernet16 - description server-1_Eth2 + description SERVER_server-1_Eth2 no shutdown channel-group 16 mode active comment @@ -207,7 +216,7 @@ interface Ethernet17 ! interface Ethernet18 - description server-1_Eth6 + description SERVER_server-1_Eth6 no shutdown channel-group 18 mode active comment @@ -216,7 +225,7 @@ interface Ethernet18 ! interface Ethernet19 - description server-1_Eth8 + description SERVER_server-1_Eth8 no shutdown channel-group 19 mode active comment @@ -225,12 +234,12 @@ interface Ethernet19 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.4/32 ! @@ -253,7 +262,7 @@ interface Loopback102 ip address 10.102.101.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.9/16 @@ -312,7 +321,7 @@ interface Vlan4085 ip virtual-router address 172.21.110.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.3/31 @@ -418,15 +427,15 @@ router bgp 65112.100 neighbor 11.1.0.39 bfd neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.1 route-map RM-EVPN-FILTER-AS65101 out neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.1 route-map RM-EVPN-FILTER-AS65110.100 out neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.110.3 route-map RM-EVPN-FILTER-AS65111.100 out neighbor 172.17.110.16 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.110.16 remote-as 65110.100 @@ -441,7 +450,7 @@ router bgp 65112.100 neighbor 172.17.110.22 remote-as 65110.100 neighbor 172.17.110.22 description DC1-POD1-SPINE2_Ethernet8 neighbor 172.20.110.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 172.20.110.2 description DC1.POD1.LEAF2A + neighbor 172.20.110.2 description DC1.POD1.LEAF2A_Vlan4094 redistribute attached-host redistribute connected ! @@ -554,13 +563,6 @@ router bgp 65112.100 router-id 172.16.110.5 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1002 description Loopback created from raw_eos_cli under l3leaf node-group RACK2_MLAG diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE1.cfg index 02be6bf78ae..1e066c9e7b3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD1 DC1-POD1-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -90,7 +96,7 @@ interface Ethernet8 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.1/32 ! @@ -148,25 +154,25 @@ router bgp 65110.100 neighbor 172.16.11.64 description DC1-SUPER-SPINE2_Ethernet1 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.3 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.3 remote-as 65101 @@ -200,13 +206,6 @@ router bgp 65110.100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE2.cfg index 353951b1105..ac7eb281d00 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD1-SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD1 DC1-POD1-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -83,12 +89,12 @@ interface Ethernet8 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.6/24 @@ -134,13 +140,6 @@ router bgp 65110.100 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-LEAF1A.cfg index 66e5bec8c3f..35cc7ecaf3a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,11 +24,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD2 DC1-POD2-LEAF1A ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -84,12 +90,12 @@ interface Ethernet3 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.120.3/32 ! @@ -106,7 +112,7 @@ interface Loopback101 ip address 10.101.102.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.15/24 @@ -219,11 +225,11 @@ router bgp 65121 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.120.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.1 remote-as 65120 - neighbor 172.16.120.1 description DC1-POD2-SPINE1 + neighbor 172.16.120.1 description DC1-POD2-SPINE1_Loopback0 neighbor 172.16.120.1 route-map RM-EVPN-FILTER-AS65120 out neighbor 172.16.120.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.2 remote-as 65120 - neighbor 172.16.120.2 description DC1-POD2-SPINE2 + neighbor 172.16.120.2 description DC1-POD2-SPINE2_Loopback0 neighbor 172.16.120.2 route-map RM-EVPN-FILTER-AS65120 out neighbor 172.17.10.13 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.13 remote-as 65102 @@ -330,13 +336,6 @@ router bgp 65121 router-id 172.16.120.3 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE1.cfg index 322cc23ab46..574908af357 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD2 DC1-POD2-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -60,12 +66,12 @@ interface Ethernet5 ip address 11.1.1.18/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.13/24 @@ -113,7 +119,7 @@ router bgp 65120 neighbor 172.16.12.64 description DC1-SUPER-SPINE2_Ethernet3 neighbor 172.16.120.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.10.11 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.11 remote-as 65102 neighbor 172.17.10.11 description DC1-RS2_Ethernet2 @@ -134,13 +140,6 @@ router bgp 65120 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE2.cfg index a7c10d3286d..ceeaf08bf79 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-POD2-SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1_POD2 DC1-POD2-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -54,12 +60,12 @@ interface Ethernet4 ptp enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.120.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.14/24 @@ -104,7 +110,7 @@ router bgp 65120 neighbor 172.16.12.66 description DC1-SUPER-SPINE2_Ethernet4 neighbor 172.16.120.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.120.3 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.120.3 remote-as 65121 neighbor 172.17.120.3 description DC1-POD2-LEAF1A_Ethernet2 @@ -126,13 +132,6 @@ router bgp 65120 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS1.cfg index 751101b1bf6..1eabc2a84dd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1-RS1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -41,7 +47,7 @@ interface Ethernet3 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.10.1/32 ! @@ -99,25 +105,25 @@ router bgp 65101 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.110.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.4 remote-as 65112.100 - neighbor 172.16.110.4 description DC1.POD1.LEAF2A + neighbor 172.16.110.4 description DC1.POD1.LEAF2A_Loopback0 neighbor 172.16.110.5 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.5 remote-as 65112.100 - neighbor 172.16.110.5 description DC1-POD1-LEAF2B + neighbor 172.16.110.5 description DC1-POD1-LEAF2B_Loopback0 neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.0 remote-as 65100 @@ -144,13 +150,6 @@ router bgp 65101 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS2.cfg index eaf1fcab6a8..02b6b974523 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-RS2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1-RS2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -41,12 +47,12 @@ interface Ethernet3 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.10.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.4/24 @@ -105,19 +111,19 @@ router bgp 65102 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.20.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.20.1 remote-as 65201 - neighbor 172.16.20.1 description DC2-RS1 + neighbor 172.16.20.1 description DC2-RS1_Loopback0 neighbor 172.16.20.1 route-map RM-EVPN-FILTER-AS65201 out neighbor 172.16.200.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.200.1 remote-as 65200 - neighbor 172.16.200.1 description DC2-SUPER-SPINE1 + neighbor 172.16.200.1 description DC2-SUPER-SPINE1_Loopback0 neighbor 172.16.200.1 route-map RM-EVPN-FILTER-AS65200 out neighbor 172.16.210.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.1 remote-as 65210 - neighbor 172.16.210.1 description DC2-POD1-SPINE1 + neighbor 172.16.210.1 description DC2-POD1-SPINE1_Loopback0 neighbor 172.16.210.1 route-map RM-EVPN-FILTER-AS65210 out neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.16.210.3 route-map RM-EVPN-FILTER-AS65211 out neighbor 172.17.10.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.10.8 remote-as 65100 @@ -144,13 +150,6 @@ router bgp 65102 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE1.cfg index 375f19b9249..d171926cac6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1-SUPER-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -71,7 +77,7 @@ interface Ethernet6 ptp enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.100.1/32 ! @@ -121,13 +127,6 @@ router bgp 65100 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE2.cfg index 03d7ba3988f..709e678d336 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1-SUPER-SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC1 DC1-SUPER-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -69,12 +75,12 @@ interface Ethernet6 ip address 11.1.2.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.100.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.2/24 @@ -124,13 +130,6 @@ router bgp 65100 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1.POD1.LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1.POD1.LEAF2A.cfg index 19ec2b0d3ef..d8b3cd6c3d3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1.POD1.LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC1.POD1.LEAF2A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -16,11 +27,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -55,7 +61,7 @@ vlan 4085 name L2LEAF_INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance Common_VRF @@ -71,42 +77,44 @@ vrf instance vrf_with_loopbacks_from_pod_pools interface Port-Channel3 description RACK2_MLAG_Po1 no shutdown - switchport switchport trunk allowed vlan 110-113,1100-1102,2500,2600-2601,4085 switchport mode trunk + switchport mlag 3 service-profile QOS-PROFILE ! interface Port-Channel5 - description MLAG_PEER_DC1-POD1-LEAF2B_Po5 + description MLAG_DC1-POD1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport service-profile QOS-PROFILE ! interface Port-Channel16 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 16 service-profile bar ! interface Port-Channel17 description Set using structured_config on server adapter port-channel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 17 service-profile foo ! interface Port-Channel18 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 18 service-profile foo comment @@ -115,10 +123,11 @@ interface Port-Channel18 ! interface Port-Channel19 - description server-1_PortChannel + description PortChannel no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 19 service-profile foo comment @@ -155,12 +164,12 @@ interface Ethernet4 channel-group 3 mode active ! interface Ethernet5 - description MLAG_PEER_DC1-POD1-LEAF2B_Ethernet5 + description MLAG_DC1-POD1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-POD1-LEAF2B_Ethernet6 + description MLAG_DC1-POD1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -189,7 +198,7 @@ interface Ethernet12 service-profile QOS-PROFILE ! interface Ethernet16 - description server-1_Eth1 + description SERVER_server-1_Eth1 no shutdown channel-group 16 mode active comment @@ -207,7 +216,7 @@ interface Ethernet17 ! interface Ethernet18 - description server-1_Eth5 + description SERVER_server-1_Eth5 no shutdown channel-group 18 mode active comment @@ -216,7 +225,7 @@ interface Ethernet18 ! interface Ethernet19 - description server-1_Eth7 + description SERVER_server-1_Eth7 no shutdown channel-group 19 mode active comment @@ -225,12 +234,12 @@ interface Ethernet19 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.110.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.110.4/32 ! @@ -306,7 +315,7 @@ interface Vlan4085 ip virtual-router address 172.21.110.1 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 172.20.110.2/31 @@ -409,19 +418,19 @@ router bgp 65112.100 neighbor 100.100.100.201 description DC2-POD1-LEAF1A neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.1 route-map RM-EVPN-FILTER-AS65101 out neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.1 route-map RM-EVPN-FILTER-AS65110.100 out neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.110.3 route-map RM-EVPN-FILTER-AS65111.100 out neighbor 172.16.120.3 peer group EVPN-OVERLAY-CORE neighbor 172.16.120.3 remote-as 65121 - neighbor 172.16.120.3 description DC1-POD2-LEAF1A + neighbor 172.16.120.3 description DC1-POD2-LEAF1A_Loopback0 neighbor 172.17.110.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.110.8 remote-as 65110.100 neighbor 172.17.110.8 description DC1-POD1-SPINE1_Ethernet4 @@ -435,7 +444,7 @@ router bgp 65112.100 neighbor 172.17.110.14 remote-as 65110.100 neighbor 172.17.110.14 description DC1-POD1-SPINE2_Ethernet7 neighbor 172.20.110.3 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 172.20.110.3 description DC1-POD1-LEAF2B + neighbor 172.20.110.3 description DC1-POD1-LEAF2B_Vlan4094 redistribute attached-host redistribute connected ! @@ -538,13 +547,6 @@ router bgp 65112.100 router-id 172.16.110.4 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1002 description Loopback created from raw_eos_cli under l3leaf node-group RACK2_MLAG diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF1A.cfg index 23eb8866d54..f637693545c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,11 +24,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-L2LEAF1A spanning-tree mode mstp spanning-tree mst 0 priority 8192 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4092 name INBAND_MGMT ! @@ -26,9 +32,9 @@ vrf instance MGMT interface Port-Channel1 description DC2-POD1-LEAF1A_Po3 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -37,7 +43,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.23/24 @@ -51,13 +57,6 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.1.254 ip route 0.0.0.0/0 172.21.210.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1011 description Loopback created from raw_eos_cli under l2leaf defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF2A.cfg index a844368ef31..7f1dcef5e8e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-L2LEAF2A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,11 +24,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-L2LEAF2A spanning-tree mode mstp spanning-tree mst 0 priority 8192 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4092 name INBAND_MGMT ! @@ -26,9 +32,9 @@ vrf instance MGMT interface Port-Channel1 description DC2-POD1-LEAF2A_Po3 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -37,7 +43,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.25/24 @@ -51,13 +57,6 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.1.254 ip route 0.0.0.0/0 172.21.210.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1011 description Loopback created from raw_eos_cli under l2leaf defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF1A.cfg index f82bd1c69ba..3b9e6e3bedb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF1A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -14,11 +25,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-LEAF1A spanning-tree mode rstp spanning-tree priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4092 name INBAND_MGMT ! @@ -35,9 +41,9 @@ vrf instance vrf_with_loopbacks_from_pod_pools interface Port-Channel3 description DC2-POD1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -75,12 +81,12 @@ interface Ethernet7 ptp enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.210.3/32 ! @@ -97,7 +103,7 @@ interface Loopback101 ip address 10.101.201.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.22/24 @@ -173,19 +179,19 @@ router bgp 65211 neighbor 100.100.100.101 description DC1.POD1.LEAF2A neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.16.210.4 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.4 remote-as 65212 - neighbor 172.16.210.4 description DC2-POD1-LEAF2A + neighbor 172.16.210.4 description DC2-POD1-LEAF2A_Loopback0 neighbor 172.17.210.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.0 remote-as 65210 neighbor 172.17.210.0 description DC2-POD1-SPINE1_Ethernet3 @@ -239,13 +245,6 @@ router bgp 65211 router-id 172.16.210.3 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1010 description Loopback created from raw_eos_cli under l3leaf defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF2A.cfg index 33028321e5d..76055048d33 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-LEAF2A.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,11 +24,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-LEAF2A spanning-tree mode rstp spanning-tree priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vlan 4092 name INBAND_MGMT ! @@ -26,9 +32,9 @@ vrf instance MGMT interface Port-Channel3 description DC2-POD1-L2LEAF2A_Po1 no shutdown - switchport switchport trunk allowed vlan 4092 switchport mode trunk + switchport service-profile QOS-PROFILE ! interface Ethernet1 @@ -53,17 +59,17 @@ interface Ethernet3 channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 172.18.210.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.24/24 @@ -120,7 +126,7 @@ router bgp 65212 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.210.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.210.3 remote-as 65211 - neighbor 172.16.210.3 description DC2-POD1-LEAF1A + neighbor 172.16.210.3 description DC2-POD1-LEAF1A_Loopback0 neighbor 172.17.210.4 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.4 remote-as 65210 neighbor 172.17.210.4 description DC2-POD1-SPINE1_Ethernet4 @@ -140,13 +146,6 @@ router bgp 65212 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1010 description Loopback created from raw_eos_cli under l3leaf defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE1.cfg index 641567a0464..60d18cc3640 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -58,12 +64,12 @@ interface Ethernet5 ip address 11.1.1.19/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.20/24 @@ -103,10 +109,10 @@ router bgp 65210 neighbor 11.1.1.18 description DC1-POD2-SPINE1 neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.21.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.16.21.0 remote-as 65200 neighbor 172.16.21.0 description DC2-SUPER-SPINE1_Ethernet1 @@ -115,10 +121,10 @@ router bgp 65210 neighbor 172.16.21.64 description DC2-SUPER-SPINE2_Ethernet1 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.210.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.210.1 remote-as 65211 neighbor 172.17.210.1 description DC2-POD1-LEAF1A_Ethernet1 @@ -138,13 +144,6 @@ router bgp 65210 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1009 description Loopback created from raw_eos_cli under spine defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE2.cfg index e15d4e61894..108b51800b6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-POD1-SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2_POD1 DC2-POD1-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -59,12 +65,12 @@ interface Ethernet5 ptp enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.210.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.21/24 @@ -110,13 +116,6 @@ router bgp 65210 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1009 description Loopback created from raw_eos_cli under spine defaults in DC2 POD1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS1.cfg index 8934532d64b..e12be2c01db 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2-RS1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -34,12 +40,12 @@ interface Ethernet2 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.20.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.18/24 @@ -76,16 +82,16 @@ router bgp 65201 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.20.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.20.0 remote-as 65200 neighbor 172.17.20.0 description DC2-SUPER-SPINE1_Ethernet3 @@ -105,13 +111,6 @@ router bgp 65201 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS2.cfg index 4cd53374168..6e9a95a9830 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-RS2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2-RS2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -34,12 +40,12 @@ interface Ethernet2 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.20.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.19/24 @@ -75,13 +81,6 @@ router bgp 65201 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE1.cfg index 3b04b163213..d2db0a14d11 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE1.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2-SUPER-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -72,12 +78,12 @@ interface Ethernet7 service-profile QOS-PROFILE ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.200.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.16/24 @@ -118,10 +124,10 @@ router bgp 65200 no neighbor 11.1.2.0 bfd neighbor 172.16.10.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.1 remote-as 65101 - neighbor 172.16.10.1 description DC1-RS1 + neighbor 172.16.10.1 description DC1-RS1_Loopback0 neighbor 172.16.10.2 peer group EVPN-OVERLAY-PEERS neighbor 172.16.10.2 remote-as 65102 - neighbor 172.16.10.2 description DC1-RS2 + neighbor 172.16.10.2 description DC1-RS2_Loopback0 neighbor 172.16.21.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.16.21.1 remote-as 65210 neighbor 172.16.21.1 description DC2-POD1-SPINE1_Ethernet1 @@ -130,10 +136,10 @@ router bgp 65200 neighbor 172.16.21.3 description DC2-POD1-SPINE2_Ethernet1 neighbor 172.16.110.1 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.1 remote-as 65110.100 - neighbor 172.16.110.1 description DC1-POD1-SPINE1 + neighbor 172.16.110.1 description DC1-POD1-SPINE1_Loopback0 neighbor 172.16.110.3 peer group EVPN-OVERLAY-PEERS neighbor 172.16.110.3 remote-as 65111.100 - neighbor 172.16.110.3 description DC1-POD1-LEAF1A + neighbor 172.16.110.3 description DC1-POD1-LEAF1A_Loopback0 neighbor 172.17.20.1 peer group IPv4-UNDERLAY-PEERS neighbor 172.17.20.1 remote-as 65201 neighbor 172.17.20.1 description DC2-RS1_Ethernet1 @@ -159,13 +165,6 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE2.cfg index cb184be1ece..8003656f166 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/configs/DC2-SUPER-SPINE2.cfg @@ -1,4 +1,15 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +23,6 @@ snmp-server location TWODC_5STAGE_CLOS DC2 DC2-SUPER-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin secret sha512 $6$eJ5TvI8oru5i9e8G$R1X/SbtGTk9xoEHEBQASc7SC2nHYmi.crVgp2pXuCXwxsXEA81e4E0cXgQ6kX08fIeQzauqhv2kS.RGJFCon5/ -! vrf instance MGMT ! interface Ethernet1 @@ -42,12 +48,12 @@ interface Ethernet4 ip address 11.1.2.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 172.16.200.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.1.17/24 @@ -86,13 +92,6 @@ router bgp 65200 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! interface Loopback1111 description Loopback created from raw_eos_cli under platform_settings vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF1A.yml index 05f729fd922..2052d286f7d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF1A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -40,18 +46,19 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-POD1-LEAF1A_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1-POD1-LEAF1A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4085' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4085' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2A.yml index 1772f195c2c..9deb0448203 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -38,7 +44,7 @@ snmp_server: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -76,7 +82,7 @@ vlans: name: L2LEAF_INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 172.20.110.2/31 @@ -87,28 +93,31 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-POD1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-POD1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk service_profile: QOS-PROFILE - trunk_groups: - - MLAG - name: Port-Channel1 description: RACK2_MLAG_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-113,1100-1102,2500,2600-2601,4085 shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: 110-113,1100-1102,2500,2600-2601,4085 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-POD1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-POD1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -117,8 +126,7 @@ ethernet_interfaces: peer: DC1-POD1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-POD1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -129,7 +137,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1.POD1.LEAF2A_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -139,7 +146,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-POD1-LEAF2B_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2B.yml index b4662042681..ad0c41acd4c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-L2LEAF2B.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.12/24 @@ -46,7 +52,7 @@ snmp_server: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -84,7 +90,7 @@ vlans: name: L2LEAF_INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 172.20.110.3/31 @@ -95,28 +101,31 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-POD1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-POD1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk service_profile: QOS-PROFILE - trunk_groups: - - MLAG - name: Port-Channel1 description: RACK2_MLAG_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-113,1100-1102,2500,2600-2601,4085 shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: 110-113,1100-1102,2500,2600-2601,4085 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-POD1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-POD1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -125,8 +134,7 @@ ethernet_interfaces: peer: DC1-POD1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-POD1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -137,7 +145,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1.POD1.LEAF2A_Ethernet4 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -147,7 +154,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-POD1-LEAF2B_Ethernet4 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF1A.yml index f977f5740ba..e28a1792687 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF1A.yml @@ -57,36 +57,36 @@ router_bgp: - ip_address: 172.16.210.3 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF1A - description: DC2-POD1-LEAF1A + description: DC2-POD1-LEAF1A_Loopback0 remote_as: '65211' route_map_out: RM-EVPN-FILTER-AS65211 - ip_address: 172.16.210.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-SPINE1 - description: DC2-POD1-SPINE1 + description: DC2-POD1-SPINE1_Loopback0 remote_as: '65210' route_map_out: RM-EVPN-FILTER-AS65210 - ip_address: 172.16.20.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-RS1 - description: DC2-RS1 + description: DC2-RS1_Loopback0 remote_as: '65201' route_map_out: RM-EVPN-FILTER-AS65201 - ip_address: 172.16.200.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-SUPER-SPINE1 - description: DC2-SUPER-SPINE1 + description: DC2-SUPER-SPINE1_Loopback0 remote_as: '65200' route_map_out: RM-EVPN-FILTER-AS65200 - ip_address: 172.16.110.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF2B - description: DC1-POD1-LEAF2B + description: DC1-POD1-LEAF2B_Loopback0 remote_as: '65112.100' - ip_address: 172.16.110.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1.POD1.LEAF2A - description: DC1.POD1.LEAF2A + description: DC1.POD1.LEAF2A_Loopback0 remote_as: '65112.100' address_family_evpn: peer_groups: @@ -111,6 +111,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -140,7 +146,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.1/31 @@ -153,7 +160,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.3/31 @@ -163,7 +171,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-POD1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -174,23 +181,26 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS1_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.4/31 port_channel_interfaces: - name: Port-Channel3 description: DC1-POD1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4085' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4085' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.110.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.110.3/32 router_bfd: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF2B.yml index bed933c4d29..3ed0c3f7360 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-LEAF2B.yml @@ -57,7 +57,7 @@ router_bgp: - ip_address: 172.20.110.2 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1.POD1.LEAF2A - description: DC1.POD1.LEAF2A + description: DC1.POD1.LEAF2A_Vlan4094 - ip_address: 172.17.110.16 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65110.100' @@ -81,19 +81,19 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' route_map_out: RM-EVPN-FILTER-AS65111.100 - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' route_map_out: RM-EVPN-FILTER-AS65110.100 - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' route_map_out: RM-EVPN-FILTER-AS65101 - ip_address: 1.1.1.1 @@ -117,11 +117,11 @@ router_bgp: enable: true inter_domain: false peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true route: import_match_failure_action: discard address_family_rtc: @@ -132,7 +132,6 @@ router_bgp: activate: true vrfs: - name: Common_VRF - router_id: 172.16.110.5 eos_cli: 'comment Comment created from raw_eos_cli under BGP for VRF Common_VRF @@ -150,10 +149,10 @@ router_bgp: - address_family: evpn route_targets: - 1025:1025 + router_id: 172.16.110.5 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_dc1_pod1_only - router_id: 172.16.110.5 rd: 172.16.110.5:1102 route_targets: import: @@ -164,10 +163,10 @@ router_bgp: - address_family: evpn route_targets: - 1102:1102 + router_id: 172.16.110.5 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_overlapping_pool - router_id: 172.16.110.5 rd: 172.16.110.5:1100 route_targets: import: @@ -178,10 +177,10 @@ router_bgp: - address_family: evpn route_targets: - 1100:1100 + router_id: 172.16.110.5 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_pod_pools - router_id: 172.16.110.5 rd: 172.16.110.5:1101 route_targets: import: @@ -192,6 +191,7 @@ router_bgp: - address_family: evpn route_targets: - 1101:1101 + router_id: 172.16.110.5 redistribute_routes: - source_protocol: connected vlans: @@ -308,6 +308,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -337,7 +343,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.9/16 @@ -355,7 +361,7 @@ snmp_server: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -393,7 +399,7 @@ vlans: name: L2LEAF_INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 172.20.110.3/31 @@ -474,41 +480,45 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1.POD1.LEAF2A_Po5 - type: switched + description: MLAG_DC1.POD1.LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk service_profile: QOS-PROFILE - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel3 description: RACK2_MLAG_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-113,1100-1102,2500,2600-2601,4085 shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: 110-113,1100-1102,2500,2600-2601,4085 mlag: 3 - name: Port-Channel16 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: bar - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 16 - name: Port-Channel17 description: Set using structured_config on server adapter port-channel - type: switched shutdown: false service_profile: foo - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 17 - name: Port-Channel18 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: foo eos_cli: 'comment @@ -518,12 +528,13 @@ port_channel_interfaces: EOF ' - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 18 - name: Port-Channel19 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: foo eos_cli: 'comment @@ -533,16 +544,17 @@ port_channel_interfaces: EOF ' - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 19 ethernet_interfaces: - name: Ethernet5 peer: DC1.POD1.LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1.POD1.LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_DC1.POD1.LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -551,8 +563,7 @@ ethernet_interfaces: peer: DC1.POD1.LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1.POD1.LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_DC1.POD1.LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -566,7 +577,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.17/31 @@ -579,7 +591,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.19/31 @@ -589,7 +602,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-POD1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -599,7 +611,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-POD1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -612,7 +623,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.21/31 @@ -625,7 +637,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.23/31 @@ -634,7 +647,8 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: l3leaf description: P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet7 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.0.38/31 ptp: @@ -644,7 +658,7 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: TENANT_A - description: server-1_Eth2 + description: SERVER_server-1_Eth2 shutdown: false eos_cli: 'comment @@ -653,7 +667,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 16 mode: active @@ -671,7 +684,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 17 mode: active @@ -680,7 +692,7 @@ ethernet_interfaces: peer_interface: Eth6 peer_type: server port_profile: NESTED_TENANT_A - description: server-1_Eth6 + description: SERVER_server-1_Eth6 shutdown: false eos_cli: 'comment @@ -689,7 +701,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 18 mode: active @@ -698,7 +709,7 @@ ethernet_interfaces: peer_interface: Eth8 peer_type: server port_profile: NESTED_TENANT_A - description: server-1_Eth8 + description: SERVER_server-1_Eth8 shutdown: false eos_cli: 'comment @@ -707,7 +718,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 19 mode: active @@ -752,11 +762,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.110.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.110.4/32 - name: Loopback102 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE1.yml index 2309df066ac..ac1bdb8ffef 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE1.yml @@ -81,36 +81,36 @@ router_bgp: - ip_address: 172.16.210.3 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF1A - description: DC2-POD1-LEAF1A + description: DC2-POD1-LEAF1A_Loopback0 remote_as: '65211' route_map_out: RM-EVPN-FILTER-AS65211 - ip_address: 172.16.210.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-SPINE1 - description: DC2-POD1-SPINE1 + description: DC2-POD1-SPINE1_Loopback0 remote_as: '65210' route_map_out: RM-EVPN-FILTER-AS65210 - ip_address: 172.16.20.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-RS1 - description: DC2-RS1 + description: DC2-RS1_Loopback0 remote_as: '65201' route_map_out: RM-EVPN-FILTER-AS65201 - ip_address: 172.16.200.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-SUPER-SPINE1 - description: DC2-SUPER-SPINE1 + description: DC2-SUPER-SPINE1_Loopback0 remote_as: '65200' route_map_out: RM-EVPN-FILTER-AS65200 - ip_address: 172.16.110.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF2B - description: DC1-POD1-LEAF2B + description: DC1-POD1-LEAF2B_Loopback0 remote_as: '65112.100' - ip_address: 172.16.110.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1.POD1.LEAF2A - description: DC1.POD1.LEAF2A + description: DC1.POD1.LEAF2A_Loopback0 remote_as: '65112.100' address_family_evpn: peer_groups: @@ -133,6 +133,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -161,7 +167,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.1/31 @@ -174,7 +181,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.65/31 @@ -187,7 +195,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.0/31 @@ -200,7 +209,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.8/31 @@ -213,7 +223,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.16/31 @@ -224,7 +235,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS1_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.2/31 - name: Ethernet7 peer: DC1.POD1.LEAF2A @@ -235,7 +247,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.12/31 @@ -248,13 +261,14 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.20/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.110.1/32 router_bfd: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE2.yml index b2fd6784937..37035b2ea0d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD1-SPINE2.yml @@ -73,6 +73,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -86,7 +92,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.6/24 @@ -109,7 +115,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.3/31 @@ -122,7 +129,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.67/31 @@ -135,7 +143,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.2/31 @@ -148,7 +157,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.10/31 @@ -161,7 +171,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.18/31 @@ -174,7 +185,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.14/31 @@ -187,13 +199,14 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.22/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.110.2/32 metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-LEAF1A.yml index d7484d93382..6897b473c63 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-LEAF1A.yml @@ -56,13 +56,13 @@ router_bgp: - ip_address: 172.16.120.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD2-SPINE1 - description: DC1-POD2-SPINE1 + description: DC1-POD2-SPINE1_Loopback0 remote_as: '65120' route_map_out: RM-EVPN-FILTER-AS65120 - ip_address: 172.16.120.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD2-SPINE2 - description: DC1-POD2-SPINE2 + description: DC1-POD2-SPINE2_Loopback0 remote_as: '65120' route_map_out: RM-EVPN-FILTER-AS65120 address_family_evpn: @@ -77,7 +77,6 @@ router_bgp: activate: true vrfs: - name: Common_VRF - router_id: 172.16.120.3 eos_cli: 'comment Comment created from raw_eos_cli under BGP for VRF Common_VRF @@ -95,10 +94,10 @@ router_bgp: - address_family: evpn route_targets: - 1025:1025 + router_id: 172.16.120.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_dc1_pod1_only - router_id: 172.16.120.3 rd: 172.16.120.3:1102 route_targets: import: @@ -109,10 +108,10 @@ router_bgp: - address_family: evpn route_targets: - 1102:1102 + router_id: 172.16.120.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_overlapping_pool - router_id: 172.16.120.3 rd: 172.16.120.3:1100 route_targets: import: @@ -123,10 +122,10 @@ router_bgp: - address_family: evpn route_targets: - 1100:1100 + router_id: 172.16.120.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_pod_pools - router_id: 172.16.120.3 rd: 172.16.120.3:1101 route_targets: import: @@ -137,6 +136,7 @@ router_bgp: - address_family: evpn route_targets: - 1101:1101 + router_id: 172.16.120.3 redistribute_routes: - source_protocol: connected vlans: @@ -223,6 +223,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -248,7 +254,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.15/24 @@ -272,7 +278,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.120.1/31 @@ -285,7 +292,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.120.3/31 @@ -296,15 +304,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS2_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.12/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.120.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.120.3/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE1.yml index d362f7b4f2f..7a5d39893c7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE1.yml @@ -62,7 +62,7 @@ router_bgp: - ip_address: 172.16.120.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD2-LEAF1A - description: DC1-POD2-LEAF1A + description: DC1-POD2-LEAF1A_Loopback0 remote_as: '65121' - ip_address: 11.1.1.19 remote_as: '65210' @@ -90,6 +90,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -103,7 +109,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.13/24 @@ -126,7 +132,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.1/31 @@ -139,7 +146,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.65/31 @@ -152,7 +160,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.120.0/31 @@ -163,19 +172,21 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS2_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.10/31 - name: Ethernet5 peer: DC2-POD1-SPINE1 peer_interface: Ethernet5 peer_type: spine description: P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet5 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.1.18/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.120.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE2.yml index ad4a068892c..8b14bc60c2a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-POD2-SPINE2.yml @@ -56,7 +56,7 @@ router_bgp: - ip_address: 172.16.120.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD2-LEAF1A - description: DC1-POD2-LEAF1A + description: DC1-POD2-LEAF1A_Loopback0 remote_as: '65121' - ip_address: 200.200.200.201 remote_as: '65210' @@ -86,6 +86,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -99,7 +105,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.14/24 @@ -122,7 +128,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.3/31 @@ -135,7 +142,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.67/31 @@ -148,7 +156,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.120.2/31 @@ -157,14 +166,15 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: spine description: P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet5 - type: routed + switchport: + enabled: false shutdown: false ip_address: 200.200.200.101/24 ptp: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.120.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS1.yml index 18940be9014..59becb96864 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS1.yml @@ -59,36 +59,36 @@ router_bgp: - ip_address: 172.16.210.3 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF1A - description: DC2-POD1-LEAF1A + description: DC2-POD1-LEAF1A_Loopback0 remote_as: '65211' route_map_out: RM-EVPN-FILTER-AS65211 - ip_address: 172.16.210.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-SPINE1 - description: DC2-POD1-SPINE1 + description: DC2-POD1-SPINE1_Loopback0 remote_as: '65210' route_map_out: RM-EVPN-FILTER-AS65210 - ip_address: 172.16.20.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-RS1 - description: DC2-RS1 + description: DC2-RS1_Loopback0 remote_as: '65201' route_map_out: RM-EVPN-FILTER-AS65201 - ip_address: 172.16.200.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-SUPER-SPINE1 - description: DC2-SUPER-SPINE1 + description: DC2-SUPER-SPINE1_Loopback0 remote_as: '65200' route_map_out: RM-EVPN-FILTER-AS65200 - ip_address: 172.16.110.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF2B - description: DC1-POD1-LEAF2B + description: DC1-POD1-LEAF2B_Loopback0 remote_as: '65112.100' - ip_address: 172.16.110.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1.POD1.LEAF2A - description: DC1.POD1.LEAF2A + description: DC1.POD1.LEAF2A_Loopback0 remote_as: '65112.100' address_family_evpn: peer_groups: @@ -111,6 +111,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -137,7 +143,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet5 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.1/31 - name: Ethernet2 peer: DC1-POD1-SPINE1 @@ -146,7 +153,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-POD1-SPINE1_Ethernet6 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.3/31 - name: Ethernet3 peer: DC1-POD1-LEAF1A @@ -155,11 +163,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-POD1-LEAF1A_Ethernet4 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.5/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.10.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS2.yml index e1b96c4ad6d..609f6d09fc5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-RS2.yml @@ -59,25 +59,25 @@ router_bgp: - ip_address: 172.16.210.3 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF1A - description: DC2-POD1-LEAF1A + description: DC2-POD1-LEAF1A_Loopback0 remote_as: '65211' route_map_out: RM-EVPN-FILTER-AS65211 - ip_address: 172.16.210.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-SPINE1 - description: DC2-POD1-SPINE1 + description: DC2-POD1-SPINE1_Loopback0 remote_as: '65210' route_map_out: RM-EVPN-FILTER-AS65210 - ip_address: 172.16.20.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-RS1 - description: DC2-RS1 + description: DC2-RS1_Loopback0 remote_as: '65201' route_map_out: RM-EVPN-FILTER-AS65201 - ip_address: 172.16.200.1 peer_group: EVPN-OVERLAY-PEERS peer: DC2-SUPER-SPINE1 - description: DC2-SUPER-SPINE1 + description: DC2-SUPER-SPINE1_Loopback0 remote_as: '65200' route_map_out: RM-EVPN-FILTER-AS65200 address_family_evpn: @@ -101,6 +101,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -114,7 +120,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.4/24 @@ -135,7 +141,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet5 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.9/31 - name: Ethernet2 peer: DC1-POD2-SPINE1 @@ -144,7 +151,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet4 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.11/31 - name: Ethernet3 peer: DC1-POD2-LEAF1A @@ -153,11 +161,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-POD2-LEAF1A_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.13/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.10.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE1.yml index 8910d452d53..d7d6677900b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE1.yml @@ -70,6 +70,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -98,7 +104,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.0/31 @@ -111,7 +118,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.2/31 @@ -124,7 +132,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.0/31 @@ -137,7 +146,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.2/31 @@ -148,14 +158,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS1_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.0/31 - name: Ethernet6 peer: DC2-SUPER-SPINE1 peer_interface: Ethernet4 peer_type: super-spine description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.2.0/31 mac_security: @@ -164,7 +176,7 @@ ethernet_interfaces: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.100.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE2.yml index 0167cfbd597..3ec09b0439f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1-SUPER-SPINE2.yml @@ -69,6 +69,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -82,7 +88,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.2/24 @@ -105,7 +111,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.64/31 @@ -118,7 +125,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.11.66/31 @@ -131,7 +139,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.64/31 @@ -144,7 +153,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.12.66/31 @@ -155,19 +165,21 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-RS2_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.10.8/31 - name: Ethernet6 peer: DC2-SUPER-SPINE2 peer_interface: Ethernet4 peer_type: super-spine description: P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.2.2/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.100.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1.POD1.LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1.POD1.LEAF2A.yml index 4c1a5aad816..0d26200798f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1.POD1.LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC1.POD1.LEAF2A.yml @@ -57,7 +57,7 @@ router_bgp: - ip_address: 172.20.110.3 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: DC1-POD1-LEAF2B - description: DC1-POD1-LEAF2B + description: DC1-POD1-LEAF2B_Vlan4094 - ip_address: 172.17.110.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65110.100' @@ -81,25 +81,25 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' route_map_out: RM-EVPN-FILTER-AS65111.100 - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' route_map_out: RM-EVPN-FILTER-AS65110.100 - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' route_map_out: RM-EVPN-FILTER-AS65101 - ip_address: 172.16.120.3 peer_group: EVPN-OVERLAY-CORE peer: DC1-POD2-LEAF1A - description: DC1-POD2-LEAF1A + description: DC1-POD2-LEAF1A_Loopback0 remote_as: '65121' - ip_address: 100.100.100.201 remote_as: '65211' @@ -115,11 +115,11 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true route: import_match_failure_action: discard address_family_rtc: @@ -130,7 +130,6 @@ router_bgp: activate: true vrfs: - name: Common_VRF - router_id: 172.16.110.4 eos_cli: 'comment Comment created from raw_eos_cli under BGP for VRF Common_VRF @@ -148,10 +147,10 @@ router_bgp: - address_family: evpn route_targets: - 1025:1025 + router_id: 172.16.110.4 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_dc1_pod1_only - router_id: 172.16.110.4 rd: 172.16.110.4:1102 route_targets: import: @@ -162,10 +161,10 @@ router_bgp: - address_family: evpn route_targets: - 1102:1102 + router_id: 172.16.110.4 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_overlapping_pool - router_id: 172.16.110.4 rd: 172.16.110.4:1100 route_targets: import: @@ -176,10 +175,10 @@ router_bgp: - address_family: evpn route_targets: - 1100:1100 + router_id: 172.16.110.4 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_pod_pools - router_id: 172.16.110.4 rd: 172.16.110.4:1101 route_targets: import: @@ -190,6 +189,7 @@ router_bgp: - address_family: evpn route_targets: - 1101:1101 + router_id: 172.16.110.4 redistribute_routes: - source_protocol: connected vlans: @@ -276,6 +276,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -315,7 +321,7 @@ snmp_server: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 @@ -353,7 +359,7 @@ vlans: name: L2LEAF_INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 172.20.110.2/31 @@ -434,41 +440,45 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-POD1-LEAF2B_Po5 - type: switched + description: MLAG_DC1-POD1-LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk service_profile: QOS-PROFILE - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel3 description: RACK2_MLAG_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-113,1100-1102,2500,2600-2601,4085 shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: 110-113,1100-1102,2500,2600-2601,4085 mlag: 3 - name: Port-Channel16 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: bar - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 16 - name: Port-Channel17 description: Set using structured_config on server adapter port-channel - type: switched shutdown: false service_profile: foo - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 17 - name: Port-Channel18 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: foo eos_cli: 'comment @@ -478,12 +488,13 @@ port_channel_interfaces: EOF ' - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 18 - name: Port-Channel19 - description: server-1_PortChannel - type: switched + description: PortChannel shutdown: false service_profile: foo eos_cli: 'comment @@ -493,16 +504,17 @@ port_channel_interfaces: EOF ' - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 19 ethernet_interfaces: - name: Ethernet5 peer: DC1-POD1-LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-POD1-LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -511,8 +523,7 @@ ethernet_interfaces: peer: DC1-POD1-LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-POD1-LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-POD1-LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -526,7 +537,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.9/31 @@ -539,7 +551,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.11/31 @@ -549,7 +562,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-POD1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -559,7 +571,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-POD1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -572,7 +583,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.13/31 @@ -585,7 +597,8 @@ ethernet_interfaces: service_profile: QOS-PROFILE mac_security: profile: MACSEC_PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.110.15/31 @@ -594,7 +607,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false ip_address: 100.100.100.101/24 - name: Ethernet16 @@ -602,7 +616,7 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: TENANT_A - description: server-1_Eth1 + description: SERVER_server-1_Eth1 shutdown: false eos_cli: 'comment @@ -611,7 +625,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 16 mode: active @@ -629,7 +642,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 17 mode: active @@ -638,7 +650,7 @@ ethernet_interfaces: peer_interface: Eth5 peer_type: server port_profile: NESTED_TENANT_A - description: server-1_Eth5 + description: SERVER_server-1_Eth5 shutdown: false eos_cli: 'comment @@ -647,7 +659,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 18 mode: active @@ -656,7 +667,7 @@ ethernet_interfaces: peer_interface: Eth7 peer_type: server port_profile: NESTED_TENANT_A - description: server-1_Eth7 + description: SERVER_server-1_Eth7 shutdown: false eos_cli: 'comment @@ -665,7 +676,6 @@ ethernet_interfaces: EOF ' - type: port-channel-member channel_group: id: 19 mode: active @@ -714,11 +724,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.110.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.110.4/32 - name: Loopback102 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF1A.yml index f700917c893..299a99dedcc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF1A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -28,7 +34,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.23/24 @@ -49,18 +55,19 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-POD1-LEAF1A_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC2-POD1-LEAF1A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4092' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4092' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF2A.yml index 5b427bc9a14..ca745655c2a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-L2LEAF2A.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -28,7 +34,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.25/24 @@ -49,18 +55,19 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-POD1-LEAF2A_Ethernet3 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC2-POD1-LEAF2A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4092' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4092' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF1A.yml index 0f8fdceb5dc..35078e53882 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF1A.yml @@ -50,27 +50,27 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' - ip_address: 172.16.10.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS2 - description: DC1-RS2 + description: DC1-RS2_Loopback0 remote_as: '65102' - ip_address: 172.16.210.4 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF2A - description: DC2-POD1-LEAF2A + description: DC2-POD1-LEAF2A_Loopback0 remote_as: '65212' - ip_address: 100.100.100.101 remote_as: '65112.100' @@ -95,7 +95,6 @@ router_bgp: only: true vrfs: - name: Common_VRF - router_id: 172.16.210.3 eos_cli: 'comment Comment created from raw_eos_cli under BGP for VRF Common_VRF @@ -113,10 +112,10 @@ router_bgp: - address_family: evpn route_targets: - 1025:1025 + router_id: 172.16.210.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_dc1_pod1_only - router_id: 172.16.210.3 rd: 172.16.210.3:1102 route_targets: import: @@ -127,10 +126,10 @@ router_bgp: - address_family: evpn route_targets: - 1102:1102 + router_id: 172.16.210.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_overlapping_pool - router_id: 172.16.210.3 rd: 172.16.210.3:1100 route_targets: import: @@ -141,10 +140,10 @@ router_bgp: - address_family: evpn route_targets: - 1100:1100 + router_id: 172.16.210.3 redistribute_routes: - source_protocol: connected - name: vrf_with_loopbacks_from_pod_pools - router_id: 172.16.210.3 rd: 172.16.210.3:1101 route_targets: import: @@ -155,6 +154,7 @@ router_bgp: - address_family: evpn route_targets: - 1101:1101 + router_id: 172.16.210.3 redistribute_routes: - source_protocol: connected static_routes: @@ -168,6 +168,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: rstp rstp_priority: 4096 @@ -194,7 +200,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.22/24 @@ -217,7 +223,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.1/31 @@ -228,7 +235,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.3/31 @@ -238,7 +246,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-POD1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active @@ -247,7 +254,8 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: l3leaf description: P2P_LINK_TO_DC1.POD1.LEAF2A_Ethernet7 - type: routed + switchport: + enabled: false shutdown: false ip_address: 100.100.100.201/24 - name: Ethernet7 @@ -255,7 +263,8 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: l3leaf description: P2P_LINK_TO_DC1-POD1-LEAF2B_Ethernet7 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.0.39/31 ptp: @@ -263,18 +272,20 @@ ethernet_interfaces: port_channel_interfaces: - name: Port-Channel3 description: DC2-POD1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4092' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4092' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.210.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.210.3/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF2A.yml index 3465564f379..977110b3639 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-LEAF2A.yml @@ -49,7 +49,7 @@ router_bgp: - ip_address: 172.16.210.3 peer_group: EVPN-OVERLAY-PEERS peer: DC2-POD1-LEAF1A - description: DC2-POD1-LEAF1A + description: DC2-POD1-LEAF1A_Loopback0 remote_as: '65211' address_family_evpn: peer_groups: @@ -70,6 +70,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: rstp rstp_priority: 4096 @@ -84,7 +90,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.24/24 @@ -106,7 +112,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet4 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.5/31 @@ -117,7 +124,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet4 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.7/31 @@ -127,25 +135,26 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-POD1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 3 mode: active port_channel_interfaces: - name: Port-Channel3 description: DC2-POD1-L2LEAF2A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '4092' shutdown: false - mode: trunk service_profile: QOS-PROFILE - vlans: '4092' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.210.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 172.18.210.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE1.yml index b892eacb91d..df39d281fa8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE1.yml @@ -59,22 +59,22 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' - ip_address: 172.16.10.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS2 - description: DC1-RS2 + description: DC1-RS2_Loopback0 remote_as: '65102' - ip_address: 11.1.1.18 remote_as: '65120' @@ -102,6 +102,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -115,7 +121,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.20/24 @@ -137,7 +143,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.1/31 @@ -148,7 +155,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.65/31 @@ -159,7 +167,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.0/31 @@ -170,7 +179,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.4/31 @@ -179,12 +189,13 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: spine description: P2P_LINK_TO_DC1-POD2-SPINE1_Ethernet5 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.1.19/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.210.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE2.yml index c314b9ce075..348ea2d5433 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-POD1-SPINE2.yml @@ -63,6 +63,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -76,7 +82,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.21/24 @@ -98,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.3/31 @@ -109,7 +116,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE2_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.67/31 @@ -120,7 +128,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-LEAF1A_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.2/31 @@ -131,7 +140,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-LEAF2A_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.17.210.6/31 @@ -140,14 +150,15 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: spine description: P2P_LINK_TO_DC1-POD2-SPINE2_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false ip_address: 200.200.200.201/24 ptp: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.210.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS1.yml index 75bb15fddc6..8ba28efdb08 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS1.yml @@ -49,22 +49,22 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' - ip_address: 172.16.10.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS2 - description: DC1-RS2 + description: DC1-RS2_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -87,6 +87,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -100,7 +106,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.18/24 @@ -121,7 +127,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet3 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.1/31 - name: Ethernet2 peer: DC2-SUPER-SPINE1 @@ -130,11 +137,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet6 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.20.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS2.yml index 7f861a51f78..30e22704338 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-RS2.yml @@ -47,6 +47,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -60,7 +66,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.19/24 @@ -81,7 +87,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet5 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.9/31 - name: Ethernet2 peer: DC2-SUPER-SPINE1 @@ -90,11 +97,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SUPER-SPINE1_Ethernet7 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.11/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.20.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE1.yml index c5ce0f837fb..71dc79ed6a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE1.yml @@ -69,22 +69,22 @@ router_bgp: - ip_address: 172.16.110.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-LEAF1A - description: DC1-POD1-LEAF1A + description: DC1-POD1-LEAF1A_Loopback0 remote_as: '65111.100' - ip_address: 172.16.110.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-POD1-SPINE1 - description: DC1-POD1-SPINE1 + description: DC1-POD1-SPINE1_Loopback0 remote_as: '65110.100' - ip_address: 172.16.10.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS1 - description: DC1-RS1 + description: DC1-RS1_Loopback0 remote_as: '65101' - ip_address: 172.16.10.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-RS2 - description: DC1-RS2 + description: DC1-RS2_Loopback0 remote_as: '65102' - ip_address: 11.1.2.0 remote_as: '65100' @@ -113,6 +113,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -126,7 +132,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.16/24 @@ -147,7 +153,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.0/31 @@ -158,7 +165,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.2/31 @@ -169,7 +177,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-RS1_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.0/31 - name: Ethernet5 peer: DC2-RS2 @@ -178,7 +187,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-RS2_Ethernet1 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.8/31 - name: Ethernet6 peer: DC2-RS1 @@ -187,7 +197,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-RS1_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.2/31 - name: Ethernet7 peer: DC2-RS2 @@ -196,14 +207,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-RS2_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ip_address: 172.17.20.10/31 - name: Ethernet4 peer: DC1-SUPER-SPINE1 peer_interface: Ethernet6 peer_type: super-spine description: P2P_LINK_TO_DC1-SUPER-SPINE1_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.2.1/31 mac_security: @@ -212,7 +225,7 @@ ethernet_interfaces: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.200.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE2.yml index ad13baf5d25..558ae85ed91 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/intended/structured_configs/DC2-SUPER-SPINE2.yml @@ -52,6 +52,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -65,7 +71,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.1.17/24 @@ -86,7 +92,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE1_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.64/31 @@ -97,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-POD1-SPINE2_Ethernet2 shutdown: false service_profile: QOS-PROFILE - type: routed + switchport: + enabled: false ptp: enable: true ip_address: 172.16.21.66/31 @@ -106,12 +114,13 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: super-spine description: P2P_LINK_TO_DC1-SUPER-SPINE2_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false ip_address: 11.1.2.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 172.16.200.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/inventory/group_vars/all.yml index e7e19d60245..b55dc265b63 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs-twodc-5stage-clos/inventory/group_vars/all.yml @@ -1,2 +1,7 @@ --- root_dir: '{{ playbook_dir }}' + +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/custom_templates/overlay-loopback.j2 b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/custom_templates/overlay-loopback.j2 new file mode 100644 index 00000000000..cdc6c86282e --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/custom_templates/overlay-loopback.j2 @@ -0,0 +1 @@ +CUSTOM_ROUTER_ID diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host1.cfg index e24069d7094..b316d0f31df 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,18 +17,15 @@ service routing protocols model multi-agent ! hostname host1 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description CUSTOM_ROUTER_ID no shutdown ip address 192.168.255.101/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.101/32 ! @@ -64,11 +70,4 @@ router bgp 101 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host2.cfg index 39eecb4d112..59d7b7ede52 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/configs/host2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,24 +17,23 @@ service routing protocols model multi-agent ! hostname host2 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description MPLS_Overlay_peering + description MY_OVERLAY_LOOPBACK no shutdown ip address 10.42.0.102/32 + node-segment ipv4 index 102 isis enable CORE isis passive - node-segment ipv4 index 102 ! ip virtual-router mac-address 00:1c:73:00:dc:01 ! ip routing no ip routing vrf MGMT ! +mpls ip +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -41,8 +49,6 @@ router bgp 102 neighbor MPLS-OVERLAY-PEERS send-community neighbor MPLS-OVERLAY-PEERS maximum-routes 0 ! - address-family evpn - ! address-family ipv4 no neighbor MPLS-OVERLAY-PEERS activate ! @@ -51,6 +57,7 @@ router bgp 102 neighbor default encapsulation mpls next-hop-self source-interface Loopback0 ! router isis CORE + net 49.0001.0100.4200.0102.00 is-type level-2 router-id ipv4 10.42.0.102 log-adjacency-changes @@ -61,13 +68,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host1.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host1.yml index 81a727e5531..95df1ef3f08 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host1.yml @@ -43,6 +43,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -52,11 +58,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: CUSTOM_ROUTER_ID shutdown: false ip_address: 192.168.255.101/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.101/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host2.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host2.yml index c3fca80239b..031cde096d5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/intended/structured_configs/host2.yml @@ -19,8 +19,6 @@ router_bgp: send_community: all maximum_routes: 0 remote_as: '102' - address_family_evpn: - peer_groups: [] address_family_ipv4: peer_groups: - name: MPLS-OVERLAY-PEERS @@ -38,6 +36,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -47,7 +51,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: MY_OVERLAY_LOOPBACK shutdown: false ip_address: 10.42.0.102/32 isis_enable: CORE @@ -57,7 +61,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: null + net: 49.0001.0100.4200.0102.00 router_id: 10.42.0.102 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/group_vars/all.yml index c04bc5daac3..8b437f9a469 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/group_vars/all.yml @@ -3,3 +3,8 @@ root_dir: '{{ playbook_dir }}' is_for_test: true fabric_name: EOS_DESIGNS_DEPRECATED_VARS + +eos_designs_documentation: + enable: false +eos_cli_config_gen_documentation: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/custom_node_type_keys.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/custom_node_type_keys.yml new file mode 100644 index 00000000000..09a3e49a0c2 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/custom_node_type_keys.yml @@ -0,0 +1,14 @@ +--- +custom_node_type_keys: + - key: l3leaf + type: l3leaf + connected_endpoints: true + default_evpn_role: client + mlag_support: true + network_services: + l2: true + l3: true + vtep: true + interface_descriptions: + # Testing custom template using the deprecated overlay_loopback_interface + overlay_loopback_interface: 'custom_templates/overlay-loopback.j2' diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/node_type.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/node_type.yml index f0ee118c042..17572cae5f9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/node_type.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host1/node_type.yml @@ -1,3 +1,5 @@ +--- +# Not testing anything, but just a placeholder for future tests. type: l3leaf l3leaf: defaults: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/node_type.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/node_type.yml index cbb67532f1e..f04ebf63de9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/node_type.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/node_type.yml @@ -1,4 +1,6 @@ type: pe + +# Testing the deprecated design.type. To be removed in AVD6.0.0. design: type: mpls diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/overlay_loopback_description.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/overlay_loopback_description.yml new file mode 100644 index 00000000000..6ab84b1cb68 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/inventory/host_vars/host2/overlay_loopback_description.yml @@ -0,0 +1,3 @@ +--- +# Testing the deprecated overlay loopback description override +overlay_loopback_description: "MY_OVERLAY_LOOPBACK" diff --git a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/molecule.yml b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/molecule.yml index 823d55751a6..81be3f6c92b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_deprecated_vars/molecule.yml @@ -32,8 +32,6 @@ provisioner: hosts: 'inventory/hosts.yml' group_vars: 'inventory/group_vars/' host_vars: 'inventory/host_vars/' - ansible_args: - - --skip-tags=documentation env: # Custom pythonpath to allow loading custom ip_addressing and descriptions modules. # See CUSTOM_PYTHON_MODULES_TESTS group vars for details. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/DUPLICATE_VLANS_MLAG.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/DUPLICATE_VLANS_MLAG.yml index 523f280d803..fe5d61ac260 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/DUPLICATE_VLANS_MLAG.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/DUPLICATE_VLANS_MLAG.yml @@ -38,5 +38,5 @@ tenants: expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for MLAG Peering VLAN in VRF 'Tenant_C_WAN_Zone' - (check for duplicate VRF VNI/ID). {'id': 2, 'name': 'MLAG_iBGP_Tenant_C_WAN_Zone', 'tenant': 'Tenant_C'} conflicts with - {'id': 2, 'name': 'MLAG_iBGP_Tenant_C_OP_Zone', 'tenant': 'Tenant_C'}. + (check for duplicate VRF VNI/ID). {'id': 2, 'name': 'MLAG_L3_VRF_Tenant_C_WAN_Zone', 'tenant': 'Tenant_C'} conflicts with + {'id': 2, 'name': 'MLAG_L3_VRF_Tenant_C_OP_Zone', 'tenant': 'Tenant_C'}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/all.yml index e7e19d60245..c17da49bcc5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/group_vars/all.yml @@ -1,2 +1,7 @@ --- root_dir: '{{ playbook_dir }}' + +eos_designs_documentation: + enable: false +eos_cli_config_gen_documentation: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/connected-endpoints-wrong-profile-lacp-fallback.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/connected-endpoints-wrong-profile-lacp-fallback.yml index 83f6170b6ef..648903d9085 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/connected-endpoints-wrong-profile-lacp-fallback.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/connected-endpoints-wrong-profile-lacp-fallback.yml @@ -28,5 +28,4 @@ port_profiles: native_vlan: 123 expected_error_message: >- - The 'profile' of every port-channel lacp fallback individual setting must be defined in the 'port_profiles'. - First occurrence seen of a missing profile is 'INDIVIDUAL_TRUNK' for the connected endpoint with the name 'INDIVIDUAL_1'. + Profile 'INDIVIDUAL_TRUNK' applied under 'server[INDIVIDUAL_1].adapters[0].port_channel.lacp_fallback.individual' does not exist in `port_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-connected-endpoints.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-connected-endpoints.yml index 13b4ffbc9ab..d313c322c44 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-connected-endpoints.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-connected-endpoints.yml @@ -26,5 +26,5 @@ servers: expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under connected_endpoints. - {'name': 'Ethernet10', 'peer_interface': 'Eth2', 'description': 'server02_Eth2', 'peer': 'server02'} conflicts with - {'name': 'Ethernet10', 'peer_interface': 'Eth1', 'description': 'server01_ES1_Eth1', 'peer': 'server01_ES1'}. + {'name': 'Ethernet10', 'peer_interface': 'Eth2', 'description': 'SERVER_server02_Eth2', 'peer': 'server02'} conflicts with + {'name': 'Ethernet10', 'peer_interface': 'Eth1', 'description': 'SERVER_server01_ES1_Eth1', 'peer': 'server01_ES1'}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-core-interfaces-with-port-channel.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-core-interfaces-with-port-channel.yml index 84edfe95621..afd060fbeb2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-core-interfaces-with-port-channel.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-core-interfaces-with-port-channel.yml @@ -51,6 +51,6 @@ expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under core_interfaces p2p_link port-Channel members. {'name': 'Ethernet1', 'peer': 'core-2-ospf-ldp', 'peer_interface': 'Ethernet12', 'channel_group': {'id': 1, 'mode': 'active'}, - 'description': 'P2P_LINK_TO_core-2-ospf-ldp_Ethernet12', 'type': 'port-channel-member'} + 'description': 'P2P_LINK_TO_core-2-ospf-ldp_Ethernet12'} conflicts with {'name': 'Ethernet1', 'peer': 'peer1', 'peer_interface': 'Ethernet2', 'channel_group': None, - 'description': 'P2P_LINK_TO_peer1_Ethernet2', 'type': 'routed'}. + 'description': 'P2P_LINK_TO_peer1_Ethernet2'}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-1.yml index 5700af3932d..ccf9a1f947d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-1.yml @@ -23,8 +23,6 @@ pe: id: 42 type: pe -design: - type: mpls tenants: - name: TENANT_A @@ -36,6 +34,11 @@ tenants: interfaces: [ "Ethernet6" ] port_channel: mode: 'active' + - id: 27 + nodes: [ "duplicate-interfaces-point-to-point-services-2" ] + interfaces: [ "Ethernet6" ] + port_channel: + mode: 'active' - name: TENANT_B point_to_point_services: @@ -44,7 +47,12 @@ tenants: - id: 57 nodes: [ "duplicate-interfaces-point-to-point-services-1" ] interfaces: [ "Ethernet6" ] + - id: 58 + nodes: [ "duplicate-interfaces-point-to-point-services-3" ] + interfaces: [ "Ethernet6" ] + port_channel: + mode: 'active' expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under point_to_point_services. - {'name': 'Ethernet6', 'type': 'routed'} conflicts with {'name': 'Ethernet6', 'type': 'port-channel-member'}. + {'name': 'Ethernet6', 'switchport': {'enabled': False}} conflicts with {'name': 'Ethernet6', 'switchport': None}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-2.yml index 37cd23e7986..011f8d884c5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-2.yml @@ -23,19 +23,22 @@ pe: id: 42 type: pe -design: - type: mpls tenants: - name: TENANT_A point_to_point_services: - name: TEN_A_site2_site5_eline_port_based endpoints: - - id: 26 + - id: 27 nodes: [ "duplicate-interfaces-point-to-point-services-2" ] interfaces: [ "Ethernet6" ] port_channel: mode: 'active' + - id: 26 + nodes: [ "duplicate-interfaces-point-to-point-services-1" ] + interfaces: [ "Ethernet6" ] + port_channel: + mode: 'active' - name: TENANT_B point_to_point_services: @@ -46,6 +49,11 @@ tenants: interfaces: [ "Ethernet6" ] port_channel: mode: 'on' + - id: 58 + nodes: [ "duplicate-interfaces-point-to-point-services-3" ] + interfaces: [ "Ethernet6" ] + port_channel: + mode: 'on' expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under point_to_point_services. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-3.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-3.yml index 0a089f71f62..c2581fa8dab 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-3.yml @@ -23,8 +23,6 @@ pe: id: 42 type: pe -design: - type: mpls tenants: - name: TENANT_A @@ -37,6 +35,9 @@ tenants: - id: 26 nodes: [ "duplicate-interfaces-point-to-point-services-3" ] interfaces: [ "Ethernet6" ] + - id: 25 + nodes: [ "duplicate-interfaces-point-to-point-services-1" ] + interfaces: [ "Ethernet6" ] - name: TENANT_B point_to_point_services: @@ -47,6 +48,9 @@ tenants: - id: 57 nodes: [ "duplicate-interfaces-point-to-point-services-3" ] interfaces: [ "Ethernet6" ] + - id: 58 + nodes: [ "duplicate-interfaces-point-to-point-services-2" ] + interfaces: [ "Ethernet6" ] expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under point_to_point_services. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-4.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-4.yml index b4352b8881e..fe46ce6f272 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-interfaces-point-to-point-services-4.yml @@ -23,8 +23,6 @@ pe: id: 42 type: pe -design: - type: mpls tenants: - name: TENANT @@ -45,9 +43,11 @@ tenants: - id: 26 nodes: [ "duplicate-interfaces-point-to-point-services-4" ] interfaces: [ "Ethernet6" ] # interface name would be Ethernet6.1000 (duplicate) + - id: 25 + nodes: [ "duplicate-interfaces-point-to-point-services-3" ] + interfaces: [ "Ethernet6" ] expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Ethernet Interfaces defined under point_to_point_services. - {'name': 'Ethernet6.1000', 'encapsulation_vlan': {'client': {'dot1q': {'vlan': 1000}}, 'network': {'client': True}}, 'peer_type': - 'point_to_point_service', 'type': 'l2dot1q'} conflicts with {'name': 'Ethernet6.1000', 'encapsulation_vlan': None, 'peer_type': 'l3_interface', - 'type': 'l3dot1q'}. + {'name': 'Ethernet6.1000', 'encapsulation_vlan': {'client': {'encapsulation': 'dot1q', 'vlan': 1000}, 'network': {'encapsulation': 'client'}}, + 'peer_type': 'point_to_point_service'} conflicts with {'name': 'Ethernet6.1000', 'encapsulation_vlan': None, 'peer_type': 'l3_interface'}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-l3-interfaces-network-services.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-l3-interfaces-network-services.yml index ac6dc54746e..65b3e78af52 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-l3-interfaces-network-services.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-l3-interfaces-network-services.yml @@ -23,8 +23,6 @@ pe: id: 42 type: pe -design: - type: mpls tenants: - name: TENANT_B diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-vrfs-tenant-igmp-snooping-conflict.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-vrfs-tenant-igmp-snooping-conflict.yml index 2371d2b1218..472a6c97283 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-vrfs-tenant-igmp-snooping-conflict.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/duplicate-vrfs-tenant-igmp-snooping-conflict.yml @@ -50,4 +50,4 @@ tenants: expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for IGMP snooping for SVIs in VRF 'VRF1'. {'id': 100, 'querier': {'enabled': True, 'address': '192.168.255.101'}} conflicts with {'id': 100, 'querier': - {'enabled': False, 'address': '192.168.255.101'}}. + {'enabled': False}}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-parent-port-profile-does-not-exist.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-parent-port-profile-does-not-exist.yml new file mode 100644 index 00000000000..e1c74811f49 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-parent-port-profile-does-not-exist.yml @@ -0,0 +1,24 @@ +--- +type: l3leaf + +port_profiles: + - profile: PROFILE-1 + parent_profile: THIS-PROFILE-DOES-NOT-EXIST + +l3leaf: + nodes: + - name: failure-connected-endpoint-parent-port-profile-does-not-exist + loopback_ipv4_pool: 192.168.42.0/24 + vtep_loopback_ipv4_pool: 192.168.255.0/24 + bgp_as: 65042 + id: 1 + +servers: + - name: TEST-ENDPOINT + adapters: + - switches: [failure-connected-endpoint-parent-port-profile-does-not-exist] + switch_ports: [Ethernet9] + profile: PROFILE-1 + +expected_error_message: >- + Profile 'THIS-PROFILE-DOES-NOT-EXIST' applied under port profile 'PROFILE-1' does not exist in `port_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-port-profile-does-not-exist.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-port-profile-does-not-exist.yml new file mode 100644 index 00000000000..b0298e83227 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-connected-endpoint-port-profile-does-not-exist.yml @@ -0,0 +1,24 @@ +--- +type: l3leaf + +port_profiles: + - profile: PROFILE-1 + +l3leaf: + nodes: + - name: failure-connected-endpoint-port-profile-does-not-exist + loopback_ipv4_pool: 192.168.42.0/24 + vtep_loopback_ipv4_pool: 192.168.255.0/24 + bgp_as: 65042 + id: 1 + +servers: + - name: TEST-ENDPOINT + adapters: + - switches: [failure-connected-endpoint-port-profile-does-not-exist] + switch_ports: [Ethernet9] + profile: THIS-PROFILE-DOES-NOT-EXIST + +expected_error_message: >- + Profile 'THIS-PROFILE-DOES-NOT-EXIST' applied under 'servers[TEST-ENDPOINT].adapters[0]' + does not exist in `port_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-l3-interface-profile-does-not-exist.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-l3-interface-profile-does-not-exist.yml new file mode 100644 index 00000000000..043343fe955 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-l3-interface-profile-does-not-exist.yml @@ -0,0 +1,21 @@ +--- +type: l3leaf + +l3_interface_profiles: + - profile: PROFILE-1 + +l3leaf: + nodes: + - name: failure-l3-interface-profile-does-not-exist + loopback_ipv4_pool: 192.168.42.0/24 + vtep_loopback_ipv4_pool: 192.168.255.0/24 + bgp_as: 65042 + id: 1 + l3_interfaces: + - name: Ethernet1 + profile: THIS-PROFILE-DOES-NOT-EXIST + ip_address: 10.12.12.12/24 + +expected_error_message: >- + Profile 'THIS-PROFILE-DOES-NOT-EXIST' applied under l3_interface 'Ethernet1' does + not exist in `l3_interface_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-l3-with-pim.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-l3-with-pim.yml index e7307f97717..cdd741458d1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-l3-with-pim.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-l3-with-pim.yml @@ -43,4 +43,4 @@ tenants: expected_error_message: >- 'pim: enabled' set on l3_interface 'Ethernet1' on 'failure-missing-evpn-multicast-l3-with-pim' - requires evpn_l3_multicast: enabled: true under VRF 'Tenant_A_OP_Zone_MC' or Tenant 'FABRIC' + requires 'evpn_l3_multicast.enabled: true' under VRF 'Tenant_A_OP_Zone_MC' or Tenant 'FABRIC' diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-with-pim.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-with-pim.yml new file mode 100644 index 00000000000..5331621e5ed --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-missing-evpn-multicast-with-pim.yml @@ -0,0 +1,48 @@ +type: l3leaf +underlay_multicast: true +# When this is set to false, the VRF won't have evpn_l3_multicast enabled +# and PIM will fail +evpn_multicast: false + +l3leaf: + defaults: + # LOOPBACK AND VTEP MANAGEMENT + loopback_ipv4_pool: 10.10.0.0/24 + vtep_loopback_ipv4_pool: 10.11.0.0/24 + vtep_loopback: Loopback1 + nodes: + - name: failure-missing-evpn-multicast-with-pim + id: 3 + bgp_as: 65101 + filter: + tags: ['evpn-multicast-pegs'] + +tenants: + - name: FABRIC + mac_vrf_vni_base: 10000 + evpn_l3_multicast: + enabled: true + evpn_underlay_l3_multicast_group_ipv4_pool: 232.0.0.0/20 + vrfs: + - name: Tenant_A_OP_Zone_MC + description: "Tenant_A_OP_Zone" + vrf_vni: 10 + vtep_diagnostic: + loopback: 31 + loopback_ip_range: 10.255.1.0/24 + svis: + - id: 210 + name: Tenant_A_OP_Zone_1 + tags: ['evpn-multicast-l3'] + l3_interfaces: + - nodes: [ failure-missing-evpn-multicast-with-pim ] + interfaces: [ Ethernet1 ] + ip_addresses: [ 10.254.248.0/31 ] + descriptions: [ "L3 Link to RPs" ] + enabled: true + pim: + enabled: true + +expected_error_message: >- + 'pim: enabled' set on l3_interface 'Ethernet1' on 'failure-missing-evpn-multicast-with-pim' + requires 'evpn_multicast: true' at the fabric level diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-port-channel.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-port-channel.yml index 962ae2d3f88..97d0c3d40ee 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-port-channel.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-port-channel.yml @@ -17,17 +17,17 @@ servers: - switch_ports: [Ethernet1] switches: [failure-port-channel] port_channel: - description: Description1 + endpoint_port_channel: Description1 mode: active channel_id: 42 - switch_ports: [Ethernet2] switches: [failure-port-channel] port_channel: - description: Description2 + endpoint_port_channel: Description2 mode: active channel_id: 42 expected_error_message: >- Found duplicate objects with conflicting data while generating configuration for Port-channel Interfaces defined under - connected_endpoints. {'name': 'Port-Channel42', 'description': 'server1_Description2'} conflicts with - {'name': 'Port-Channel42', 'description': 'server1_Description1'}. + connected_endpoints. {'name': 'Port-Channel42', 'description': 'SERVER_server1_Description2'} conflicts with + {'name': 'Port-Channel42', 'description': 'SERVER_server1_Description1'}. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-grandparent-profile-does-not-exist.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-grandparent-profile-does-not-exist.yml new file mode 100644 index 00000000000..3508452a1cf --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-grandparent-profile-does-not-exist.yml @@ -0,0 +1,28 @@ +--- +type: l3leaf + +svi_profiles: + - profile: PROFILE-1 + parent_profile: THIS-PROFILE-DOES-NOT-EXIST + +l3leaf: + nodes: + - name: failure-svi-grandparent-profile-does-not-exist + loopback_ipv4_pool: 192.168.42.0/24 + vtep_loopback_ipv4_pool: 192.168.255.0/24 + bgp_as: 65042 + id: 1 + +tenants: + - name: TENANT-1 + vrfs: + - name: VRF-1 + svis: + - name: TEST-SVI + id: 42 + profile: PROFILE-1 + nodes: + - node: failure-svi-grandparent-profile-does-not-exist + +expected_error_message: >- + Profile 'THIS-PROFILE-DOES-NOT-EXIST' applied under SVI Profile 'PROFILE-1' does not exist in `svi_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-parent-profile-does-not-exist.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-parent-profile-does-not-exist.yml new file mode 100644 index 00000000000..914a605e682 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/failure-svi-parent-profile-does-not-exist.yml @@ -0,0 +1,28 @@ +--- +type: l3leaf + +svi_profiles: + - profile: PROFILE-1 + +l3leaf: + nodes: + - name: failure-svi-parent-profile-does-not-exist + loopback_ipv4_pool: 192.168.42.0/24 + vtep_loopback_ipv4_pool: 192.168.255.0/24 + bgp_as: 65042 + id: 1 + +tenants: + - name: TENANT-1 + vrfs: + - name: VRF-1 + svis: + - name: TEST-SVI + id: 42 + profile: THIS-PROFILE-DOES-NOT-EXIST + nodes: + - node: failure-svi-parent-profile-does-not-exist + +expected_error_message: >- + Profile 'THIS-PROFILE-DOES-NOT-EXIST' applied under SVI 'TEST-SVI' does + not exist in `svi_profiles`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/invalid-wan-role-overlay-routing-protocol.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/invalid-wan-role-overlay-routing-protocol.yml index 26f78e6f2ce..12c81ec9a84 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/invalid-wan-role-overlay-routing-protocol.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/invalid-wan-role-overlay-routing-protocol.yml @@ -1,5 +1,5 @@ --- -wan_mode: autovpn +wan_mode: legacy-autovpn type: wan_router fabric_name: FABRIC_WAN_ROLE_OVERLAY_ROUTING_PROTOCOL diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/ipv4-acl-in-missing-on-wan-interface.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/ipv4-acl-in-missing-on-wan-interface.yml index 0c2656b2281..f538738b46c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/ipv4-acl-in-missing-on-wan-interface.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/ipv4-acl-in-missing-on-wan-interface.yml @@ -1,6 +1,6 @@ --- type: wan_router -wan_mode: autovpn +wan_mode: legacy-autovpn wan_router: nodes: - bgp_as: 65000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/isis-system-id-format-missing-node-id.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/isis-system-id-format-missing-node-id.yml new file mode 100644 index 00000000000..a51bae75fa9 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/isis-system-id-format-missing-node-id.yml @@ -0,0 +1,25 @@ +underlay_routing_protocol: isis +overlay_routing_protocol: ibgp + +bgp_as: 65000 + +isis_default_is_type: level-2 +isis_default_circuit_type: level-2 +isis_system_id_format: "node_id" + +type: "pe" + +pe: + defaults: + virtual_router_mac_address: 00:c1:00:00:00:11 + node_sid_base: 100 + is_type: level-2 + loopback_ipv4_pool: 172.28.4.0/22 + overlay_address_families: [ "evpn" ] + nodes: + - name: "isis-system-id-format-missing-node-id" + id: 1 + +expected_error_message: >- + 'isis_system_id_prefix' is required when 'isis_system_id_format' is set to 'node_id'. + 'isis_system_id_prefix' was not set for 'isis-system-id-format-missing-node-id' diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/missing-key-evpn-gateway-remote-peer.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/missing-key-evpn-gateway-remote-peer.yml new file mode 100644 index 00000000000..2a822ddf78c --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/missing-key-evpn-gateway-remote-peer.yml @@ -0,0 +1,23 @@ +--- +type: l3leaf + +l3leaf: + defaults: + loopback_ipv4_pool: 192.168.255.0/24 + loopback_ipv4_offset: 8 + vtep_loopback_ipv4_pool: 192.168.254.0/24 + bgp_as: 65101 + nodes: + - name: missing-key-evpn-gateway-remote-peer + id: 1 + bgp_as: 65104 + mgmt_ip: 192.168.200.110/24 + evpn_gateway: + remote_peers: + # Missing bgp_as + - hostname: not-in-the-inventory + ip_address: 192.168.42.42 + +expected_error_message: >- + The EVPN Gateway remote peer 'not-in-the-inventory' is missing either a `bpg_as` + or an `ip_address`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/sflow-settings-missing-destinations.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/sflow-settings-missing-destinations.yml new file mode 100644 index 00000000000..4c744cfd3f0 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/host_vars/sflow-settings-missing-destinations.yml @@ -0,0 +1,15 @@ +type: l2leaf +l2leaf: + nodes: + - name: sflow-settings-missing-destinations + id: 1 + +servers: + - name: test + adapters: + - switches: [sflow-settings-missing-destinations] + switch_ports: [Ethernet1] + sflow: true + +expected_error_message: >- + `sflow_settings.destinations` is required to configure `sflow`. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/hosts.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/hosts.yml index 3fc2676e32f..7d5bc888a78 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/hosts.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/inventory/hosts.yml @@ -93,14 +93,22 @@ all: failure-missing-evpn-vlan-bundle_svi: failure-missing-evpn-multicast-l3-with-pim: failure-missing-evpn-multicast-peg-rps: + failure-missing-evpn-multicast-with-pim: failure-duplicate-evpn-vlan-bundle-name: failure-no-local-path-group-in-default-policy: + failure-l3-interface-profile-does-not-exist: + failure-svi-parent-profile-does-not-exist: + failure-svi-grandparent-profile-does-not-exist: + failure-connected-endpoint-port-profile-does-not-exist: + failure-connected-endpoint-parent-port-profile-does-not-exist: ipv4-acl-in-missing-on-wan-interface: ipv4-acls: + isis-system-id-format-missing-node-id: missing-avt-id-cv-pathfinder: missing-prefix-list-in-cv-pathfinder: missing-prefix-list-definition-cv-pathfinder: missing-data-plane_cpu-allocation-max: + missing-key-evpn-gateway-remote-peer: ntp-settings-server-vrf-missing-mgmt-ip: ntp-settings-server-vrf-missing-inband-mgmt-interface: source-interfaces-domain-lookup-duplicate-vrf: @@ -119,6 +127,7 @@ all: source-interfaces-tacacs-missing-inband-mgmt-interface: source-interfaces-tacacs-missing-mgmt-ip: ul-filter-evpn-default-vrf-services: + sflow-settings-missing-destinations: sflow-settings-missing-inband-mgmt-interface: sflow-settings-missing-mgmt-ip: core-interfaces-p2p-links-as: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/molecule.yml b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/molecule.yml index 823d55751a6..81be3f6c92b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_negative_unit_tests/molecule.yml @@ -32,8 +32,6 @@ provisioner: hosts: 'inventory/hosts.yml' group_vars: 'inventory/group_vars/' host_vars: 'inventory/host_vars/' - ansible_args: - - --skip-tags=documentation env: # Custom pythonpath to allow loading custom ip_addressing and descriptions modules. # See CUSTOM_PYTHON_MODULES_TESTS group vars for details. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_interface_descriptions_with_data.py b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_interface_descriptions_with_data.py index 157db2c325b..8a2200e1c2f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_interface_descriptions_with_data.py +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_interface_descriptions_with_data.py @@ -82,6 +82,15 @@ def mlag_port_channel_interface(self, data: InterfaceDescriptionData) -> str: """ return f"{self._custom_description_prefix}_MLAG_PEER_{data.mlag_peer}_Po{data.mlag_port_channel_id}" + def mlag_peer_svi(self, data: InterfaceDescriptionData) -> str: # noqa: ARG002 + return "MLAG_PEER" + + def mlag_peer_l3_svi(self, data: InterfaceDescriptionData) -> str: # noqa: ARG002 + return "MLAG_PEER_L3_PEERING" + + def mlag_peer_l3_vrf_svi(self, data: InterfaceDescriptionData) -> str: + return f"MLAG_PEER_L3_iBGP: vrf {data.vrf}" + def connected_endpoints_ethernet_interface(self, data: InterfaceDescriptionData) -> str: """ Implementation using new data. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_ip_addressing.py b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_ip_addressing.py index 08f202021fd..f3c6fd5351b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_ip_addressing.py +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_modules/custom_ip_addressing.py @@ -3,8 +3,7 @@ # that can be found in the LICENSE file. from functools import cached_property -# TODO: AVD5.0 change this to import from PyAVD instead and remove the python_modules folder. -from ansible_collections.arista.avd.roles.eos_designs.python_modules.ip_addressing import AvdIpAddressing +from pyavd.api.ip_addressing import AvdIpAddressing class CustomAvdIpAddressing(AvdIpAddressing): diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2 index 068dff89268..69eaa445d8d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2 @@ -1 +1 @@ -{{ description_prefix }}_{{ peer }}_{{ peer_interface }} +{{ description_prefix }}_{{ peer }}_{{ peer_interface }}_{{ adapter_description }} diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2 index 3ef8272ab2b..0d88024b223 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2 @@ -1 +1 @@ -{{ description_prefix }}_{{ peer }}_{{ adapter_port_channel_description }} +{{ description_prefix }}_{{ peer }}_{{ adapter_description }}_{{ adapter_port_channel_description }}_{{ adapter_port_channel_id }} diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/loopbacks/overlay-loopback.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/loopbacks/router-id-loopback.j2 similarity index 100% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/loopbacks/overlay-loopback.j2 rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/loopbacks/router-id-loopback.j2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/ethernet-interfaces.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/ethernet-interfaces.j2 index 6e17ad75e76..1275bddaa1f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/ethernet-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/ethernet-interfaces.j2 @@ -1 +1 @@ -{{ description_prefix }}_MLAG_PEER_{{ switch.mlag_peer }}_{{ mlag_interface }} +{{ description_prefix }}_MLAG_PEER_{{ mlag_peer }}_{{ mlag_interface }} diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2 index ab55f7bfd45..6e45f0ead15 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2 @@ -1 +1 @@ -{{ description_prefix }}_MLAG_PEER_{{ switch.mlag_peer }}_Po{{ switch.mlag_interfaces[0] | regex_findall("\d") | join }} +{{ description_prefix }}_MLAG_PEER_{{ mlag_peer }}_Eth{{ mlag_interfaces[0] | regex_findall("\d") | join }}_Eth{{ mlag_interfaces[1] | regex_findall("\d") | join }}_Po{{ mlag_port_channel_id }} diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/underlay/port-channel-interfaces.j2 b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/underlay/port-channel-interfaces.j2 index f77d9649c3a..4585bd76ac5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/underlay/port-channel-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/custom_templates/interface_descriptions/underlay/port-channel-interfaces.j2 @@ -1 +1 @@ -{{ description_prefix }}_{{ link.channel_description | arista.avd.default(link.peer) | upper }}_Po{{ link.peer_channel_group_id }} +{{ description_prefix }}_{{ link.peer | upper }}_Po{{ link.channel_group_id }}_To_Po{{ link.peer_channel_group_id }}_{{ link.channel_description }} diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF1.cfg index 9eb5b4a64e4..0551acb1cf4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,60 +19,56 @@ hostname 7010TX-LEAF1 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_7010TX-LEAF2_Po5 + description MLAG_7010TX-LEAF2_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_7010TX-LEAF2_Ethernet5 + description MLAG_7010TX-LEAF2_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_7010TX-LEAF2_Ethernet6 + description MLAG_7010TX-LEAF2_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.116/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown ip address 10.10.224.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 10.10.255.4/31 @@ -121,7 +126,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.5 description 7010TX-LEAF2 + neighbor 10.10.224.5 description 7010TX-LEAF2_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -132,11 +137,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF2.cfg index 492804b4ca1..4fb7c4ae7b5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/7010TX-LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,55 +19,51 @@ hostname 7010TX-LEAF2 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_7010TX-LEAF1_Po5 + description MLAG_7010TX-LEAF1_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_7010TX-LEAF1_Ethernet5 + description MLAG_7010TX-LEAF1_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_7010TX-LEAF1_Ethernet6 + description MLAG_7010TX-LEAF1_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.36/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.117/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown ip address 10.10.224.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown no autostate ip address 10.10.255.5/31 @@ -109,7 +114,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.4 description 7010TX-LEAF1 + neighbor 10.10.224.4 description 7010TX-LEAF1_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -120,11 +125,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1A.cfg index 744cd5ed9e5..c55ffde98fe 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF1A spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.105/24 @@ -76,11 +82,4 @@ router bgp 65101 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1B.cfg index c30ba703ad4..10d2bf5d239 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF1B spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.106/24 @@ -76,11 +82,4 @@ router bgp 65102 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF2.cfg index 5829e63227b..e832a2e1c23 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF2 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.107/24 @@ -76,11 +82,4 @@ router bgp 65103 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3A.cfg index 75c9e11a62a..cf9c8a49c5c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Po3 + description MLAG_AUTO_BGP_ASN_LEAF3B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF3B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF3B_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.109/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.8/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.9 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.9 description AUTO_BGP_ASN_LEAF3B + neighbor 10.255.251.9 description AUTO_BGP_ASN_LEAF3B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65105 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3B.cfg index 2442a265e43..5736430b20b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF3B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Po3 + description MLAG_AUTO_BGP_ASN_LEAF3A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF3A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF3A_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.110/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.9/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.8 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.8 description AUTO_BGP_ASN_LEAF3A + neighbor 10.255.251.8 description AUTO_BGP_ASN_LEAF3A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65105 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4A.cfg index 8a604f6ae9a..8d81ffcec7b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Po3 + description MLAG_AUTO_BGP_ASN_LEAF4B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF4B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF4B_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.111/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.12/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65222 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.13 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.13 description AUTO_BGP_ASN_LEAF4B + neighbor 10.255.251.13 description AUTO_BGP_ASN_LEAF4B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65222 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4B.cfg index b7b65031fa0..163e7882c73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF4B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Po3 + description MLAG_AUTO_BGP_ASN_LEAF4A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF4A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF4A_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.112/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.13/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65222 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.12 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.12 description AUTO_BGP_ASN_LEAF4A + neighbor 10.255.251.12 description AUTO_BGP_ASN_LEAF4A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65222 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF5A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF5A.cfg index 61a1b96b758..7bf8f684392 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF5A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF5A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF5A spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.11/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.113/24 @@ -76,11 +82,4 @@ router bgp 65333 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7A.cfg index 072591c216c..b7018fdfb93 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Po3 + description MLAG_AUTO_BGP_ASN_LEAF7B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF7B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF7B_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.13/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.115/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.20/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65222.0 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.21 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.21 description AUTO_BGP_ASN_LEAF7B + neighbor 10.255.251.21 description AUTO_BGP_ASN_LEAF7B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65222.0 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7B.cfg index 0b7e64f6d3b..6e8beee62e7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF7B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,61 +21,57 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Po3 + description MLAG_AUTO_BGP_ASN_LEAF7A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Ethernet3 + description MLAG_AUTO_BGP_ASN_LEAF7A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Ethernet4 + description MLAG_AUTO_BGP_ASN_LEAF7A_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.14/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.116/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.21/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 65222.0 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.20 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.20 description AUTO_BGP_ASN_LEAF7A + neighbor 10.255.251.20 description AUTO_BGP_ASN_LEAF7A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -139,11 +144,4 @@ router bgp 65222.0 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8A.cfg index d9f14df0d54..aef53ec7406 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF8A spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.15/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.15/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.117/24 @@ -76,11 +82,4 @@ router bgp 65222.12 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8B.cfg index e0f18ad3c6d..087a8fead90 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_ASN_LEAF8B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_ASN_LEAF8B spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.16/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.16/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.118/24 @@ -76,11 +82,4 @@ router bgp 65222.13 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_UNGROUPED_LEAF6.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_UNGROUPED_LEAF6.cfg index 5de9e264099..b86c0b72ec9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_UNGROUPED_LEAF6.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_BGP_UNGROUPED_LEAF6.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,23 +20,20 @@ hostname AUTO_BGP_UNGROUPED_LEAF6 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.12/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.202.114/24 @@ -76,11 +82,4 @@ router bgp 65110 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_LEAF01.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_LEAF01.cfg index 8bef2f94b8e..1548214a130 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_LEAF01.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_LEAF01.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname AUTO_NODE_TYPE_LEAF01 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -31,17 +37,17 @@ interface Ethernet2 ip address 172.31.255.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.203.12/24 @@ -89,10 +95,10 @@ router bgp 65101 neighbor 172.31.255.2 description AUTO_NODE_TYPE_SPINE02_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65100 - neighbor 192.168.255.1 description AUTO_NODE_TYPE_SPINE01 + neighbor 192.168.255.1 description AUTO_NODE_TYPE_SPINE01_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65100 - neighbor 192.168.255.2 description AUTO_NODE_TYPE_SPINE02 + neighbor 192.168.255.2 description AUTO_NODE_TYPE_SPINE02_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -102,11 +108,4 @@ router bgp 65101 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE01.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE01.cfg index 16d7a061cc3..28a0a5c7bc2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE01.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE01.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname AUTO_NODE_TYPE_SPINE01 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -30,12 +36,12 @@ interface Ethernet2 ip address 172.31.255.4/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.203.10 @@ -78,10 +84,10 @@ router bgp 65100 neighbor 172.31.255.5 description AUTO_NODE_TYPE_UNGROUPED_LEAF02_Ethernet1 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description AUTO_NODE_TYPE_LEAF01 + neighbor 192.168.255.3 description AUTO_NODE_TYPE_LEAF01_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65102 - neighbor 192.168.255.4 description AUTO_NODE_TYPE_UNGROUPED_LEAF02 + neighbor 192.168.255.4 description AUTO_NODE_TYPE_UNGROUPED_LEAF02_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -91,11 +97,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE02.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE02.cfg index 7d20f6a2eb7..5469f616e05 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE02.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_SPINE02.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname AUTO_NODE_TYPE_SPINE02 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -30,12 +36,12 @@ interface Ethernet2 ip address 172.31.255.6/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.203.11 @@ -78,10 +84,10 @@ router bgp 65100 neighbor 172.31.255.7 description AUTO_NODE_TYPE_UNGROUPED_LEAF02_Ethernet2 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description AUTO_NODE_TYPE_LEAF01 + neighbor 192.168.255.3 description AUTO_NODE_TYPE_LEAF01_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65102 - neighbor 192.168.255.4 description AUTO_NODE_TYPE_UNGROUPED_LEAF02 + neighbor 192.168.255.4 description AUTO_NODE_TYPE_UNGROUPED_LEAF02_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -91,11 +97,4 @@ router bgp 65100 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.cfg index ddaa7f539be..bfaae62f942 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname AUTO_NODE_TYPE_UNGROUPED_LEAF02 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -31,17 +37,17 @@ interface Ethernet2 ip address 172.31.255.7/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.203.13/24 @@ -89,10 +95,10 @@ router bgp 65102 neighbor 172.31.255.6 description AUTO_NODE_TYPE_SPINE02_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65100 - neighbor 192.168.255.1 description AUTO_NODE_TYPE_SPINE01 + neighbor 192.168.255.1 description AUTO_NODE_TYPE_SPINE01_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65100 - neighbor 192.168.255.2 description AUTO_NODE_TYPE_SPINE02 + neighbor 192.168.255.2 description AUTO_NODE_TYPE_SPINE02_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -102,11 +108,4 @@ router bgp 65102 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.cfg index 504154e25d8..7f6e76e8e2a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname CUSTOM-PYTHON_MODULES-L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 110 name Tenant_A_OP_Zone_1 ! vlan 3000 - name MLAG_iBGP_TEST_VRF - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST_VRF + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -35,10 +41,9 @@ vrf instance TEST_VRF interface Port-Channel3 description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1B_Po3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-SPINE1_Ethernet1 @@ -79,7 +84,7 @@ interface Loopback1 ip address 192.168.254.21/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -170,7 +175,7 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.11 description CUSTOM-PYTHON_MODULES-L3LEAF1B + neighbor 10.255.251.11 description CUSTOM-PYTHON_MODULES-L3LEAF1B_Vlan4093 neighbor 172.31.255.20 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.20 remote-as 65001 neighbor 172.31.255.20 description CUSTOM-PYTHON_MODULES-SPINE1_Ethernet1 @@ -179,7 +184,7 @@ router bgp 65101 neighbor 172.31.255.25 description CUSTOM-PYTHON_MODULES-L3LEAF2_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description CUSTOM-PYTHON_MODULES-SPINE1 + neighbor 192.168.255.1 description CUSTOM-PYTHON_MODULES-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 110 @@ -202,16 +207,10 @@ router bgp 65101 router-id 192.168.255.21 update wait-install neighbor 10.255.240.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.240.11 description CUSTOM-PYTHON_MODULES-L3LEAF1B_Vlan3000 neighbor 172.16.0.25 remote-as 65103 neighbor 172.16.0.25 peer group IPv4-UNDERLAY-PEERS neighbor 172.16.0.25 description CUSTOM-PYTHON_MODULES-L3LEAF2_Ethernet1.1_vrf_TEST_VRF redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.cfg index f42b9f5db28..412779a53d6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname CUSTOM-PYTHON_MODULES-L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 110 name Tenant_A_OP_Zone_1 ! vlan 3000 - name MLAG_iBGP_TEST_VRF - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST_VRF + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -35,10 +41,9 @@ vrf instance TEST_VRF interface Port-Channel3 description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1A_Po3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-SPINE1_Ethernet2 @@ -68,7 +73,7 @@ interface Loopback1 ip address 192.168.254.21/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -159,13 +164,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.10 description CUSTOM-PYTHON_MODULES-L3LEAF1A + neighbor 10.255.251.10 description CUSTOM-PYTHON_MODULES-L3LEAF1A_Vlan4093 neighbor 172.31.255.22 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.22 remote-as 65001 neighbor 172.31.255.22 description CUSTOM-PYTHON_MODULES-SPINE1_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description CUSTOM-PYTHON_MODULES-SPINE1 + neighbor 192.168.255.1 description CUSTOM-PYTHON_MODULES-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 110 @@ -188,13 +193,7 @@ router bgp 65101 router-id 192.168.255.22 update wait-install neighbor 10.255.240.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.240.10 description CUSTOM-PYTHON_MODULES-L3LEAF1A_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF2.cfg index 4dc99362333..bdccb6bbf73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-L3LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname CUSTOM-PYTHON_MODULES-L3LEAF2 ! -no enable password -no aaa root -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -115,11 +121,4 @@ router bgp 65103 neighbor 172.16.0.24 description CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet3.1_vrf_TEST_VRF redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-SPINE1.cfg index 12c2ab9c091..9ce48135387 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-PYTHON_MODULES-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname CUSTOM-PYTHON_MODULES-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -35,7 +41,7 @@ interface Loopback0 ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -77,10 +83,10 @@ router bgp 65001 neighbor 172.31.255.23 description CUSTOM-PYTHON_MODULES-L3LEAF1B_Ethernet1 neighbor 192.168.255.21 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.21 remote-as 65101 - neighbor 192.168.255.21 description CUSTOM-PYTHON_MODULES-L3LEAF1A + neighbor 192.168.255.21 description CUSTOM-PYTHON_MODULES-L3LEAF1A_Loopback0 neighbor 192.168.255.22 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.22 remote-as 65101 - neighbor 192.168.255.22 description CUSTOM-PYTHON_MODULES-L3LEAF1B + neighbor 192.168.255.22 description CUSTOM-PYTHON_MODULES-L3LEAF1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -90,11 +96,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1A.cfg new file mode 100644 index 00000000000..3aaf78e5638 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1A.cfg @@ -0,0 +1,87 @@ +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +vlan internal order ascending range 1006 1199 +! +transceiver qsfp default-mode 4x10G +! +service routing protocols model multi-agent +! +hostname CUSTOM-TEMPLATES-L2LEAF1A +! +no spanning-tree vlan-id 4094 +! +vlan 4094 + name MLAG + trunk group MLAG +! +vrf instance MGMT +! +interface Port-Channel1 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Po1_To_Po5_CUSTOM_TEMPLATES_L3LEAF1 + no shutdown + switchport trunk allowed vlan none + switchport mode trunk + switchport + mlag 1 +! +interface Port-Channel3 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Port-Channel3 + no shutdown + switchport mode trunk + switchport trunk group MLAG + switchport +! +interface Ethernet1 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet5 + no shutdown + channel-group 1 mode active +! +interface Ethernet2 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet5 + no shutdown + channel-group 1 mode active +! +interface Ethernet3 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet3 + no shutdown + channel-group 3 mode active +! +interface Ethernet4 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet4 + no shutdown + channel-group 3 mode active +! +interface Management1 + description OOB_MANAGEMENT + no shutdown + vrf MGMT + ip address 192.168.200.103/24 +! +interface Vlan4094 + description MLAG + no shutdown + mtu 9214 + no autostate + ip address 10.255.252.0/31 +no ip routing vrf MGMT +! +mlag configuration + domain-id CUSTOM_TEMPLATES_L2LEAF1 + local-interface Vlan4094 + peer-address 10.255.252.1 + peer-link Port-Channel3 + reload-delay mlag 300 + reload-delay non-mlag 330 +! +ip route vrf MGMT 0.0.0.0/0 192.168.200.1 +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1B.cfg new file mode 100644 index 00000000000..8250c78b3ff --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L2LEAF1B.cfg @@ -0,0 +1,87 @@ +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +vlan internal order ascending range 1006 1199 +! +transceiver qsfp default-mode 4x10G +! +service routing protocols model multi-agent +! +hostname CUSTOM-TEMPLATES-L2LEAF1B +! +no spanning-tree vlan-id 4094 +! +vlan 4094 + name MLAG + trunk group MLAG +! +vrf instance MGMT +! +interface Port-Channel1 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Po1_To_Po5_CUSTOM_TEMPLATES_L3LEAF1 + no shutdown + switchport trunk allowed vlan none + switchport mode trunk + switchport + mlag 1 +! +interface Port-Channel3 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Port-Channel3 + no shutdown + switchport mode trunk + switchport trunk group MLAG + switchport +! +interface Ethernet1 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet6 + no shutdown + channel-group 1 mode active +! +interface Ethernet2 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet6 + no shutdown + channel-group 1 mode active +! +interface Ethernet3 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet3 + no shutdown + channel-group 3 mode active +! +interface Ethernet4 + description MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet4 + no shutdown + channel-group 3 mode active +! +interface Management1 + description OOB_MANAGEMENT + no shutdown + vrf MGMT + ip address 192.168.200.103/24 +! +interface Vlan4094 + description MLAG + no shutdown + mtu 9214 + no autostate + ip address 10.255.252.1/31 +no ip routing vrf MGMT +! +mlag configuration + domain-id CUSTOM_TEMPLATES_L2LEAF1 + local-interface Vlan4094 + peer-address 10.255.252.0 + peer-link Port-Channel3 + reload-delay mlag 300 + reload-delay non-mlag 330 +! +ip route vrf MGMT 0.0.0.0/0 192.168.200.1 +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1A.cfg index ce28f1fcf43..7dacef2ee40 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname CUSTOM-TEMPLATES-L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 110 name Tenant_A_OP_Zone_1 ! vlan 3000 - name MLAG_iBGP_TEST_VRF - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST_VRF + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,12 +39,19 @@ vrf instance MGMT vrf instance TEST_VRF ! interface Port-Channel3 - description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Po3 + description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Eth3_Eth4_Po3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport +! +interface Port-Channel5 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Po5_To_Po1_CUSTOM_TEMPLATES_L2LEAF1 + no shutdown + switchport trunk allowed vlan none + switchport mode trunk + switchport + mlag 5 ! interface Ethernet1 description TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-SPINE1_Ethernet1 @@ -57,8 +70,18 @@ interface Ethernet4 no shutdown channel-group 3 mode active ! +interface Ethernet5 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet1 + no shutdown + channel-group 5 mode active +! +interface Ethernet6 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet1 + no shutdown + channel-group 5 mode active +! interface Ethernet11 - description TEST_CUSTOM_PREFIX_SERVER-1_Nic1 + description TEST_CUSTOM_PREFIX_SERVER-1_Nic1_management no shutdown switchport mode trunk switchport @@ -74,7 +97,7 @@ interface Loopback1 ip address 192.168.254.21/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -86,20 +109,20 @@ interface Vlan110 ip address virtual 10.1.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST_VRF + description MLAG_L3_VRF_TEST_VRF no shutdown mtu 9214 vrf TEST_VRF ip address 10.255.240.10/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.10/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -165,13 +188,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.11 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.11 description CUSTOM-TEMPLATES-L3LEAF1B + neighbor 10.255.251.11 description CUSTOM-TEMPLATES-L3LEAF1B_Vlan4093 neighbor 172.31.255.20 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.20 remote-as 65001 neighbor 172.31.255.20 description CUSTOM-TEMPLATES-SPINE1_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description CUSTOM-TEMPLATES-SPINE1 + neighbor 192.168.255.1 description CUSTOM-TEMPLATES-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 110 @@ -194,13 +217,7 @@ router bgp 65101 router-id 192.168.255.21 update wait-install neighbor 10.255.240.11 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.240.11 description CUSTOM-TEMPLATES-L3LEAF1B_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1B.cfg index 139f1a734a4..2e3c310c6d2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname CUSTOM-TEMPLATES-L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 110 name Tenant_A_OP_Zone_1 ! vlan 3000 - name MLAG_iBGP_TEST_VRF - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST_VRF + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,18 +39,25 @@ vrf instance MGMT vrf instance TEST_VRF ! interface Port-Channel3 - description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Po3 + description TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Eth3_Eth4_Po3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! -interface Port-Channel12 - description TEST_CUSTOM_PREFIX_SERVER-2_portchannel +interface Port-Channel5 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Po5_To_Po1_CUSTOM_TEMPLATES_L2LEAF1 no shutdown + switchport trunk allowed vlan none + switchport mode trunk switchport + mlag 5 +! +interface Port-Channel12 + description TEST_CUSTOM_PREFIX_SERVER-2_data_portchannel_12 + no shutdown switchport mode trunk + switchport ! interface Ethernet1 description TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-SPINE1_Ethernet2 @@ -63,13 +76,23 @@ interface Ethernet4 no shutdown channel-group 3 mode active ! +interface Ethernet5 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet2 + no shutdown + channel-group 5 mode active +! +interface Ethernet6 + description TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet2 + no shutdown + channel-group 5 mode active +! interface Ethernet12 - description TEST_CUSTOM_PREFIX_SERVER-2_Nic1 + description TEST_CUSTOM_PREFIX_SERVER-2_Nic1_data no shutdown channel-group 12 mode active ! interface Ethernet13 - description TEST_CUSTOM_PREFIX_SERVER-2_Nic2 + description TEST_CUSTOM_PREFIX_SERVER-2_Nic2_data no shutdown channel-group 12 mode active ! @@ -84,7 +107,7 @@ interface Loopback1 ip address 192.168.254.21/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -96,20 +119,20 @@ interface Vlan110 ip address virtual 10.1.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST_VRF + description MLAG_L3_VRF_TEST_VRF no shutdown mtu 9214 vrf TEST_VRF ip address 10.255.240.11/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.11/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -175,13 +198,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.10 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.10 description CUSTOM-TEMPLATES-L3LEAF1A + neighbor 10.255.251.10 description CUSTOM-TEMPLATES-L3LEAF1A_Vlan4093 neighbor 172.31.255.22 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.22 remote-as 65001 neighbor 172.31.255.22 description CUSTOM-TEMPLATES-SPINE1_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description CUSTOM-TEMPLATES-SPINE1 + neighbor 192.168.255.1 description CUSTOM-TEMPLATES-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 110 @@ -204,13 +227,7 @@ router bgp 65101 router-id 192.168.255.22 update wait-install neighbor 10.255.240.10 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.240.10 description CUSTOM-TEMPLATES-L3LEAF1A_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-SPINE1.cfg index bcc5e41c72f..72265e6db48 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/CUSTOM-TEMPLATES-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname CUSTOM-TEMPLATES-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -35,7 +41,7 @@ interface Loopback0 ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -77,10 +83,10 @@ router bgp 65001 neighbor 172.31.255.23 description CUSTOM-TEMPLATES-L3LEAF1B_Ethernet1 neighbor 192.168.255.21 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.21 remote-as 65101 - neighbor 192.168.255.21 description CUSTOM-TEMPLATES-L3LEAF1A + neighbor 192.168.255.21 description CUSTOM-TEMPLATES-L3LEAF1A_Loopback0 neighbor 192.168.255.22 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.22 remote-as 65101 - neighbor 192.168.255.22 description CUSTOM-TEMPLATES-L3LEAF1B + neighbor 192.168.255.22 description CUSTOM-TEMPLATES-L3LEAF1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -90,11 +96,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1A.cfg index 1f4a99219aa..fa42e49fb57 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1A.cfg @@ -1,13 +1,34 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key, -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! vlan internal order ascending range 1006 1199 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +hardware speed-group 5/1 serdes 25G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -19,6 +40,8 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! +platform sand lag hardware-only +! sflow vrf OOB destination 10.0.200.90 sflow vrf OOB destination 192.168.200.10 sflow vrf OOB source-interface Management99 @@ -26,26 +49,10 @@ sflow vrf OOB source-interface Management99 snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-BL1A ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -hardware speed-group 5/1 serdes 25G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! clock timezone correctly_templated_timezone ! vlan 150 @@ -179,18 +186,18 @@ interface Ethernet4000 ip address 10.3.2.1/21 ! interface Loopback0 - description MY_OVERLAY_LOOPBACK + description MY_ROUTER_ID_LOOPBACK no shutdown ip address 192.168.255.14/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.14/32 ip address 192.168.255.255/32 secondary ! interface Management99 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -235,8 +242,6 @@ hardware tcam ! mac address-table aging-time 42 ! -ip virtual-router mac-address 00:dc:00:00:00:0a -! event-handler evpn-blacklist-recovery trigger on-logging regex EVPN-3-BLACKLISTED_DUPLICATE_MAC @@ -244,6 +249,8 @@ event-handler evpn-blacklist-recovery delay 300 asynchronous ! +ip virtual-router mac-address 00:dc:00:00:00:0a +! ip access-list TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet12 15 deny ip any host 10.10.40.10 ! @@ -323,6 +330,9 @@ router bgp 65104 neighbor 172.31.254.166 peer group UNDERLAY-PEERS neighbor 172.31.254.166 remote-as 65001 neighbor 172.31.254.166 description DC1-SPINE4_Ethernet22 + neighbor 192.168.42.42 peer group EVPN-OVERLAY-CORE + neighbor 192.168.42.42 remote-as 65042 + neighbor 192.168.42.42 description DC1-BL2B neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 neighbor 192.168.255.1 description DC1-SPINE1 @@ -467,12 +477,4 @@ router ospf 14 vrf Tenant_A_WAN_Zone redistribute connected route-map RM_TEST redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1B.cfg index b46aa8d2f08..24e373bc4cb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL1B.cfg @@ -1,13 +1,34 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown ! vlan internal order ascending range 1006 1199 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +hardware speed-group 5/1 serdes 25G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -18,6 +39,8 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! +platform sand lag hardware-only +! sflow vrf OOB destination 10.0.200.90 sflow vrf OOB destination 192.168.200.10 sflow vrf OOB source-interface Management99 @@ -25,26 +48,10 @@ sflow vrf OOB source-interface Management99 snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-BL1B ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -hardware speed-group 5/1 serdes 25G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -170,17 +177,17 @@ interface Ethernet4000 ip address 10.1.2.3/12 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.15/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.15/32 ! interface Management99 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -447,12 +454,4 @@ router ospf 14 vrf Tenant_A_WAN_Zone redistribute connected route-map RM_TEST redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2A.cfg index 1713d7717da..ec3b43b861e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,27 +33,15 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-BL2A ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -91,17 +94,17 @@ interface Ethernet4 ip address 172.31.254.231/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.16/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.16/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.117/24 @@ -158,6 +161,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -327,12 +334,4 @@ router bgp 65106 neighbor 2.2.2.2 activate neighbor 2.2.2.3 activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2B.cfg index eb28cfbc0cc..458218babd5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-BL2B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,25 +33,13 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-BL2B ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -89,17 +92,17 @@ interface Ethernet4 ip address 172.31.255.7/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.17/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.17/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.118/24 @@ -138,6 +141,9 @@ interface Vxlan1 vxlan vrf Tenant_B_WAN_Zone vni 21 vxlan vrf Tenant_C_WAN_Zone vni 31 ! +hardware tcam + system profile vxlan-routing +! ip virtual-router mac-address 00:dc:00:00:00:0a ! ip routing @@ -153,6 +159,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -322,12 +332,4 @@ router bgp 65107 address-family ipv6 neighbor BEBA::C0CA:C07A activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1A.cfg index 367e1e95ad5..75100a991c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,26 +35,14 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-CL1A ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -107,11 +110,11 @@ vrf instance MGMT interface Port-Channel1151 description MLAG_PEER_DC1-CL1B_Po1151 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet26 @@ -158,17 +161,17 @@ interface Ethernet4 ip address 172.31.255.39/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.18/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.18/32 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.119/24 @@ -226,6 +229,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -248,7 +255,7 @@ router bgp 65108 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65108 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1-CL1B + neighbor MLAG-PEERS description MLAG_PEER_DC1-CL1B neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -359,12 +366,4 @@ router bgp 65108 neighbor MLAG-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1B.cfg index f2d7a46d356..8731c7986bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-CL1B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,26 +35,14 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-CL1B ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -107,11 +110,11 @@ vrf instance MGMT interface Port-Channel1311 description MLAG_PEER_DC1-CL1A_Po1311 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet27 @@ -158,17 +161,17 @@ interface Ethernet4 ip address 172.31.255.71/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.19/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.18/32 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.120/24 @@ -226,6 +229,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -252,7 +259,7 @@ router bgp 65109 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65109 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1-CL1A + neighbor MLAG-PEERS description MLAG_PEER_DC1-CL1A neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -364,12 +371,4 @@ router bgp 65109 neighbor MLAG-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1A.cfg index 5f895218cce..9c316cc2fa9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF1A ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,24 +78,24 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1-L2LEAF1B_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel5 description server03_ESI_L2LEAF_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport mlag 5 ! interface Ethernet1 @@ -125,7 +128,7 @@ interface Ethernet5 channel-group 5 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -148,12 +151,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1B.cfg index 0f06f3c4a77..799c87ac8e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF1B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF1B ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,24 +78,24 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1-L2LEAF1A_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel5 description server03_ESI_L2LEAF_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport mlag 5 ! interface Ethernet1 @@ -125,7 +128,7 @@ interface Ethernet5 channel-group 5 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.115/24 @@ -148,12 +151,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2A.cfg index b77e7c4b585..ab595aa4def 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF2A ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -102,16 +105,16 @@ vrf instance MGMT interface Port-Channel3 description MLAG_PEER_DC1-L2LEAF2B_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel1001 description DC1_SVC3_Po1007 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1001 ! interface Ethernet1 @@ -137,7 +140,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -162,12 +165,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2B.cfg index a92e9031964..b7d45469e52 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF2B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF2B ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -102,16 +105,16 @@ vrf instance MGMT interface Port-Channel3 description MLAG_PEER_DC1-L2LEAF2A_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel1001 description DC1_SVC3_Po1007 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1001 ! interface Ethernet1 @@ -137,7 +140,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -162,12 +165,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF3A.cfg index e172d622202..d15a27f4faf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF3A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,24 +35,12 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF3A ! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -70,9 +73,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po9 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet9 @@ -85,7 +88,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.116/24 @@ -93,12 +96,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF4A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF4A.cfg index a81cbe4a7e0..62de0c988cc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF4A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-L2LEAF4A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,24 +35,12 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1-L2LEAF4A ! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -70,9 +73,9 @@ vrf instance MGMT interface Port-Channel1001 description DC1_LEAF2_Po1013 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet13 @@ -85,7 +88,7 @@ interface Ethernet2 channel-group 1001 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.119/24 @@ -93,12 +96,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF1A.cfg index 40b85219f60..9cd66486353 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,25 +35,13 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackA DC1-LEAF1A ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 113 name Tenant_A_OP_Zone_4 ! @@ -145,12 +148,12 @@ interface Ethernet30 ip address 172.31.254.7/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.42.42/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.43.43/32 ! @@ -161,7 +164,7 @@ interface Loopback100 ip address 10.255.1.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -265,16 +268,20 @@ ip routing vrf Tenant_A_APP_Zone ip routing vrf Tenant_A_OP_Zone ip routing vrf Tenant_A_WEB_Zone ! -ipv6 unicast-routing vrf 12345678 -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing vrf 12345678 +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_A_APP_Zone 10.2.32.0/24 Vlan132 name VARP ip route vrf Tenant_A_APP_Zone 10.3.32.0/24 Vlan132 name VARP ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -392,12 +399,4 @@ router ospf 9 vrf Tenant_A_OP_Zone no passive-interface Vlan113 redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2A.cfg index 6422c9f36d5..0050e57b98a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -10,6 +25,12 @@ vlan internal order ascending range 1006 1199 ! no ip igmp snooping vlan 120 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +hardware speed-group 5/1 serdes 25G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -20,33 +41,15 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management99 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackC DC1-LEAF2A ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -hardware speed-group 5/1 serdes 25G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -137,9 +140,9 @@ vrf instance Tenant_D_OP_Zone interface Port-Channel7 description DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -148,9 +151,9 @@ interface Port-Channel7 interface Port-Channel9 description DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -159,9 +162,9 @@ interface Port-Channel9 interface Port-Channel10 description server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport spanning-tree bpduguard disable spanning-tree bpdufilter disable ! @@ -169,8 +172,9 @@ interface Port-Channel11 description server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport spanning-tree bpduguard enable spanning-tree bpdufilter enable ! @@ -185,25 +189,25 @@ interface Port-Channel12 interface Port-Channel20 description FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ! interface Port-Channel26 - description PHONE03_port_channel_Port-Channel to Phone + description PHONE03_port_channel Port-Channel to phone no shutdown - switchport switchport trunk native vlan 210 switchport phone vlan 211 switchport phone trunk untagged switchport mode trunk phone + switchport ! interface Port-Channel30 description DC1_L2LEAF6_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:a8be:743c:0a1a route-target import a8:be:74:3c:0a:1a @@ -212,9 +216,9 @@ interface Port-Channel30 interface Port-Channel141 description DC1_L2LEAF5_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:fa91:ce62:ce95 route-target import fa:91:ce:62:ce:95 @@ -223,9 +227,9 @@ interface Port-Channel141 interface Port-Channel1013 description DC1-L2LEAF4A_Po1001 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:a36b:7013:457b route-target import a3:6b:70:13:45:7b @@ -409,12 +413,12 @@ interface Ethernet56/1 ip address 172.31.254.47/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ! @@ -438,7 +442,7 @@ interface Loopback123 ip ospf area 1 ! interface Management99 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -653,13 +657,13 @@ ip routing vrf Tenant_B_OP_Zone ip routing vrf Tenant_C_OP_Zone ip routing vrf Tenant_D_OP_Zone ! -ipv6 unicast-routing vrf 12345678 -ipv6 unicast-routing vrf Tenant_D_OP_Zone -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing vrf 12345678 +ipv6 unicast-routing vrf Tenant_D_OP_Zone +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_D_OP_Zone 0.0.0.0/0 10.3.11.4 ip route vrf Tenant_D_OP_Zone 1.1.1.0/24 10.3.11.4 track bfd name Track-bfd-network-services @@ -668,6 +672,10 @@ ip route vrf Tenant_D_OP_Zone 10.3.11.0/24 Vlan411 name VARP ipv6 route vrf Tenant_D_OP_Zone ::/0 2001:db8:311::4 name IPv6-test-2 ipv6 route vrf Tenant_D_OP_Zone 2001:dba::/32 2001:db8:310::1 track bfd name Track-bfd-network-services ! +ntp local-interface vrf MGMT Management99 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -870,12 +878,4 @@ router ospf 16 vrf Tenant_A_OSPF no passive-interface Ethernet23 redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2B.cfg index 0c62e938676..7c405c096b3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-LEAF2B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -10,6 +25,12 @@ vlan internal order ascending range 1006 1199 ! no ip igmp snooping vlan 120 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +hardware speed-group 5/1 serdes 25G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -20,33 +41,15 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management99 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackD DC1-LEAF2B ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -hardware speed-group 5/1 serdes 25G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -137,9 +140,9 @@ vrf instance Tenant_D_OP_Zone interface Port-Channel7 description DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -148,9 +151,9 @@ interface Port-Channel7 interface Port-Channel9 description DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -159,9 +162,9 @@ interface Port-Channel9 interface Port-Channel10 description server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport spanning-tree bpduguard disable spanning-tree bpdufilter disable ! @@ -169,8 +172,9 @@ interface Port-Channel11 description server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport spanning-tree bpduguard enable spanning-tree bpdufilter enable ! @@ -185,25 +189,25 @@ interface Port-Channel12 interface Port-Channel20 description FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ! interface Port-Channel26 - description PHONE03_port_channel_Port-Channel to Phone + description PHONE03_port_channel Port-Channel to phone no shutdown - switchport switchport trunk native vlan 210 switchport phone vlan 211 switchport phone trunk untagged switchport mode trunk phone + switchport ! interface Port-Channel30 description DC1_L2LEAF6_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:a8be:743c:0a1a route-target import a8:be:74:3c:0a:1a @@ -212,9 +216,9 @@ interface Port-Channel30 interface Port-Channel141 description DC1_L2LEAF5_Po1 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:fa91:ce62:ce95 route-target import fa:91:ce:62:ce:95 @@ -223,9 +227,9 @@ interface Port-Channel141 interface Port-Channel1013 description DC1-L2LEAF4A_Po1001 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:a36b:7013:457b route-target import a3:6b:70:13:45:7b @@ -373,12 +377,12 @@ interface Ethernet56/1 ip address 172.31.254.79/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.11/32 ! @@ -403,7 +407,7 @@ interface Loopback123 ! interface Management99 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -618,13 +622,13 @@ ip routing vrf Tenant_B_OP_Zone ip routing vrf Tenant_C_OP_Zone ip routing vrf Tenant_D_OP_Zone ! -ipv6 unicast-routing vrf 12345678 -ipv6 unicast-routing vrf Tenant_D_OP_Zone -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing vrf 12345678 +ipv6 unicast-routing vrf Tenant_D_OP_Zone +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_D_OP_Zone 0.0.0.0/0 10.3.11.4 ip route vrf Tenant_D_OP_Zone 1.1.1.0/24 10.3.11.4 track bfd name Track-bfd-network-services @@ -632,6 +636,10 @@ ip route vrf Tenant_D_OP_Zone 10.3.11.0/24 Vlan411 name VARP ! ipv6 route vrf Tenant_D_OP_Zone ::/0 2001:db8:311::4 name IPv6-test-2 ! +ntp local-interface vrf MGMT Management99 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -833,12 +841,4 @@ router ospf 16 vrf Tenant_A_OSPF no passive-interface Ethernet24 redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE1.cfg index cccf262bf02..4252ea3caa6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE1.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,23 +33,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vrf instance MGMT ! interface Ethernet1/1 @@ -193,12 +196,12 @@ interface Ethernet220 ip address 10.10.101.8/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -211,6 +214,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -362,12 +369,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE2.cfg index 771cdbf16c6..56cf09ac256 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE2.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,25 +33,13 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SPINE2 ! spanning-tree mode none ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vrf instance MGMT ! interface Ethernet1/1/1 @@ -160,12 +163,12 @@ interface Ethernet29 ip address 172.31.255.162/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -181,6 +184,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -302,12 +309,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE3.cfg index 5713f5e4f48..77b510d53fd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE3.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,23 +33,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SPINE3 ! spanning-tree mode none ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vrf instance MGMT ! interface Ethernet1/1/1 @@ -158,16 +161,19 @@ interface Ethernet29 ip address 172.31.255.164/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 ! +hardware tcam + system profile vxlan-routing +! ip routing no ip routing vrf MGMT ! @@ -176,6 +182,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -297,12 +307,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE4.cfg index 5503cb31ce6..3edd25aca09 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SPINE4.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,23 +33,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SPINE4 ! spanning-tree mode none ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vrf instance MGMT ! interface Ethernet1/1 @@ -143,7 +146,7 @@ interface Ethernet27 ! interface Ethernet28 description P2P_LINK_TO_DC1_UNDEPLOYED_LEAF1A_Ethernet52/1 - shutdown + no shutdown mtu 1500 speed 100g-2 no switchport @@ -151,19 +154,19 @@ interface Ethernet28 ! interface Ethernet29 description P2P_LINK_TO_DC1_UNDEPLOYED_LEAF1B_Ethernet52/1 - shutdown + no shutdown mtu 1500 speed forced 100gfull no switchport ip address 172.31.255.166/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -176,6 +179,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -241,11 +248,9 @@ router bgp 65001 neighbor 172.31.255.71 description DC1-CL1B_Ethernet4 neighbor 172.31.255.135 peer group UNDERLAY-PEERS neighbor 172.31.255.135 remote-as 65110 - neighbor 172.31.255.135 shutdown neighbor 172.31.255.135 description DC1_UNDEPLOYED_LEAF1A_Ethernet52/1 neighbor 172.31.255.167 peer group UNDERLAY-PEERS neighbor 172.31.255.167 remote-as 65111 - neighbor 172.31.255.167 shutdown neighbor 172.31.255.167 description DC1_UNDEPLOYED_LEAF1B_Ethernet52/1 neighbor 192.168.42.42 peer group EVPN-OVERLAY-PEERS neighbor 192.168.42.42 remote-as 65101 @@ -282,11 +287,9 @@ router bgp 65001 neighbor 192.168.255.19 description DC1-CL1B neighbor 192.168.255.21 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.21 remote-as 65110 - neighbor 192.168.255.21 shutdown neighbor 192.168.255.21 description DC1_UNDEPLOYED_LEAF1A neighbor 192.168.255.22 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.22 remote-as 65111 - neighbor 192.168.255.22 shutdown neighbor 192.168.255.22 description DC1_UNDEPLOYED_LEAF1B redistribute connected route-map RM-CONN-2-BGP ! @@ -297,12 +300,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3A.cfg index dad517d8a80..1c0e089a63c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,26 +35,14 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SVC3A ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 2 name MLAG_iBGP_Tenant_C_OP_Zone trunk group LEAF_PEER_L3 @@ -162,9 +165,9 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel10 description server03_ESI_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -173,9 +176,9 @@ interface Port-Channel10 interface Port-Channel14 description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 l2 mru 9000 mlag 14 @@ -190,9 +193,9 @@ interface Port-Channel14 interface Port-Channel15 description server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpduguard disable @@ -205,9 +208,9 @@ interface Port-Channel15 interface Port-Channel17 description server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -222,9 +225,9 @@ interface Port-Channel17 interface Port-Channel18 description server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -240,9 +243,9 @@ interface Port-Channel18 interface Port-Channel19 description server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -258,37 +261,41 @@ interface Port-Channel19 interface Port-Channel22 description server15_port_channel_with_disabled_phy_interfaces_server15_port_channel_with_disabled_phy_interfaces no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ! interface Port-Channel23 description server16_port_channel_with_disabled_port_channel_server16_port_channel_with_disabled_port_channel shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 23 ! interface Port-Channel24 description server17_port_channel_with_disabled_phy_and_po_interfaces_server17_port_channel_with_disabled_phy_and_po_interfaces shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 24 ! interface Port-Channel27 description server18_monitoring_session_source_po_server18_monitoring_session_source_po no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 27 ! interface Port-Channel31 description server24_port_channel_lacp_timer_profile_server24_port_channel_with_lacp_timer no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 31 ! interface Port-Channel32 @@ -300,9 +307,9 @@ interface Port-Channel32 interface Port-Channel33 description server26_port_channel_lacp_timer_profile_server26_port_channel_with_lacp_timer no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 33 ! interface Port-Channel34 @@ -314,33 +321,35 @@ interface Port-Channel34 interface Port-Channel42 description server21_monitoring_session_destination_po_server21_monitoring_session_destination_po no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 42 ! interface Port-Channel1007 description DC1_L2LEAF2_Po1001 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1007 ! interface Port-Channel1291 description server22_port_channel_with_custom_id_server22_port_channel_with_custom_id no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 1291 ! interface Port-Channel2000 description MLAG_PEER_DC1-SVC3B_Po2000 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet7 description DC1-L2LEAF2A_Ethernet1 @@ -596,12 +605,12 @@ interface Ethernet54/1 channel-group 2000 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.12/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -612,7 +621,7 @@ interface Loopback100 ip address 10.255.1.12/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -857,26 +866,27 @@ ip routing vrf Tenant_B_WAN_Zone ip routing vrf Tenant_C_OP_Zone ip routing vrf Tenant_C_WAN_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! +ip prefix-list PL-MLAG-PEER-VRFS + seq 10 permit 10.255.251.6/31 + seq 20 permit 172.31.11.6/31 +! +monitor session MonitoringSessionServer18WithDest mac access-group mac_acl monitor session MonitoringSessionServer18WithDest source Ethernet25 rx ip access-group MyIpACL priority 5 monitor session MonitoringSessionServer18WithDest source Ethernet28 tx mac access-group MyMacACL priority 5 monitor session MonitoringSessionServer18WithDest source Port-Channel27 tx mac access-group MyMacACL priority 5 monitor session MonitoringSessionServer18WithDest destination Ethernet26 monitor session MonitoringSessionServer18WithDest destination Ethernet40 monitor session MonitoringSessionServer18WithDest destination Port-Channel42 -monitor session MonitoringSessionServer18WithDest header remove size 200 -monitor session MonitoringSessionServer18WithDest mac access-group mac_acl +monitor session MonitoringSessionServer18WithDest truncate size 20 +monitor session MonitoringSessionServer18WithDest sample 10 monitor session MonitoringSessionServer18WithDest rate-limit per-ingress-chip 30 bps monitor session MonitoringSessionServer18WithDest rate-limit per-egress-chip 30 bps -monitor session MonitoringSessionServer18WithDest sample 10 -monitor session MonitoringSessionServer18WithDest truncate size 20 -! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -ip prefix-list PL-MLAG-PEER-VRFS - seq 10 permit 10.255.251.6/31 - seq 20 permit 172.31.11.6/31 +monitor session MonitoringSessionServer18WithDest header remove size 200 +monitor session MonitoringSessionServer18WithoutDest source Ethernet25 tx ! mlag configuration domain-id custom_mlag_domain_id @@ -888,6 +898,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -919,7 +933,7 @@ router bgp 65103 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65103 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1-SVC3B + neighbor MLAG-PEERS description MLAG_PEER_DC1-SVC3B neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -1038,6 +1052,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_DB_Zone @@ -1047,6 +1062,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_OP_Zone @@ -1056,6 +1072,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1067,6 +1084,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_WEB_Zone @@ -1076,6 +1094,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 172.31.11.7 peer group MLAG-PEERS + neighbor 172.31.11.7 description DC1-SVC3B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_B_OP_Zone @@ -1085,6 +1104,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1094,6 +1114,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected ! vrf Tenant_C_OP_Zone @@ -1103,6 +1124,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1112,14 +1134,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.251.7 peer group MLAG-PEERS + neighbor 10.255.251.7 description DC1-SVC3B redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3B.cfg index 182a6387d61..50b7338bfaf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1-SVC3B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,26 +35,14 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1-SVC3B ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 2 name MLAG_iBGP_Tenant_C_OP_Zone trunk group LEAF_PEER_L3 @@ -162,9 +165,9 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel14 description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 l2 mru 9000 mlag 14 @@ -179,9 +182,9 @@ interface Port-Channel14 interface Port-Channel15 description server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpduguard disable @@ -194,9 +197,9 @@ interface Port-Channel15 interface Port-Channel17 description server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -211,9 +214,9 @@ interface Port-Channel17 interface Port-Channel18 description server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -229,9 +232,9 @@ interface Port-Channel18 interface Port-Channel19 description server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -247,37 +250,41 @@ interface Port-Channel19 interface Port-Channel22 description server15_port_channel_with_disabled_phy_interfaces_server15_port_channel_with_disabled_phy_interfaces no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ! interface Port-Channel23 description server16_port_channel_with_disabled_port_channel_server16_port_channel_with_disabled_port_channel shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 23 ! interface Port-Channel24 description server17_port_channel_with_disabled_phy_and_po_interfaces_server17_port_channel_with_disabled_phy_and_po_interfaces shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 24 ! interface Port-Channel27 description server18_monitoring_session_source_po_server18_monitoring_session_source_po no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 27 ! interface Port-Channel31 description server24_port_channel_lacp_timer_profile_server24_port_channel_with_lacp_timer no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 31 ! interface Port-Channel32 @@ -289,9 +296,9 @@ interface Port-Channel32 interface Port-Channel33 description server26_port_channel_lacp_timer_profile_server26_port_channel_with_lacp_timer no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 33 ! interface Port-Channel34 @@ -303,33 +310,35 @@ interface Port-Channel34 interface Port-Channel42 description server21_monitoring_session_destination_po_server21_monitoring_session_destination_po no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 42 ! interface Port-Channel1007 description DC1_L2LEAF2_Po1001 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1007 ! interface Port-Channel1291 description server22_port_channel_with_custom_id_server22_port_channel_with_custom_id no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 1291 ! interface Port-Channel2000 description MLAG_PEER_DC1-SVC3A_Po2000 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet7 description DC1-L2LEAF2A_Ethernet2 @@ -562,12 +571,12 @@ interface Ethernet54/1 channel-group 2000 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.13/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -578,7 +587,7 @@ interface Loopback100 ip address 10.255.1.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -823,18 +832,6 @@ ip routing vrf Tenant_B_WAN_Zone ip routing vrf Tenant_C_OP_Zone ip routing vrf Tenant_C_WAN_Zone ! -monitor session MonitoringSessionServer18WithDest source Ethernet25 rx ip access-group MyIpACL priority 5 -monitor session MonitoringSessionServer18WithDest source Port-Channel27 tx mac access-group MyMacACL priority 5 -monitor session MonitoringSessionServer18WithDest destination Ethernet26 -monitor session MonitoringSessionServer18WithDest destination Port-Channel42 -monitor session MonitoringSessionServer18WithDest encapsulation gre metadata tx -monitor session MonitoringSessionServer18WithDest header remove size 20 -monitor session MonitoringSessionServer18WithDest ip access-group ip_acl -monitor session MonitoringSessionServer18WithDest rate-limit per-ingress-chip 30 bps -monitor session MonitoringSessionServer18WithDest rate-limit per-egress-chip 30 bps -monitor session MonitoringSessionServer18WithDest sample 10 -monitor session MonitoringSessionServer18WithDest truncate size 20 -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 @@ -843,6 +840,19 @@ ip prefix-list PL-MLAG-PEER-VRFS seq 10 permit 10.255.251.6/31 seq 20 permit 172.31.11.6/31 ! +monitor session MonitoringSessionServer18WithDest ip access-group ip_acl +monitor session MonitoringSessionServer18WithDest source Ethernet25 rx ip access-group MyIpACL priority 5 +monitor session MonitoringSessionServer18WithDest source Port-Channel27 tx mac access-group MyMacACL priority 5 +monitor session MonitoringSessionServer18WithDest destination Ethernet26 +monitor session MonitoringSessionServer18WithDest destination Port-Channel42 +monitor session MonitoringSessionServer18WithDest truncate size 20 +monitor session MonitoringSessionServer18WithDest sample 10 +monitor session MonitoringSessionServer18WithDest rate-limit per-ingress-chip 30 bps +monitor session MonitoringSessionServer18WithDest rate-limit per-egress-chip 30 bps +monitor session MonitoringSessionServer18WithDest header remove size 20 +monitor session MonitoringSessionServer18WithDest encapsulation gre metadata tx +monitor session MonitoringSessionServer18WithoutDest source Ethernet25 tx +! mlag configuration domain-id custom_mlag_domain_id local-interface Vlan4092 @@ -853,6 +863,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -884,7 +898,7 @@ router bgp 65103 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65103 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1-SVC3A + neighbor MLAG-PEERS description MLAG_PEER_DC1-SVC3A neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -1003,6 +1017,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_DB_Zone @@ -1012,6 +1027,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_OP_Zone @@ -1021,6 +1037,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1032,6 +1049,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_WEB_Zone @@ -1041,6 +1059,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 172.31.11.6 peer group MLAG-PEERS + neighbor 172.31.11.6 description DC1-SVC3A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_B_OP_Zone @@ -1050,6 +1069,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1059,6 +1079,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected ! vrf Tenant_C_OP_Zone @@ -1068,6 +1089,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1077,14 +1099,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.251.6 peer group MLAG-PEERS + neighbor 10.255.251.6 description DC1-SVC3A redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5A.cfg index f30da111566..fbc2b2ecf3e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1.L2LEAF5A ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,17 +78,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po141 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1.L2LEAF5B_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet14/1 @@ -108,7 +111,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.120/24 @@ -131,12 +134,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5B.cfg index 9ca3de8aa0c..058ae5bd0c8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF5B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1.L2LEAF5B ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -75,17 +78,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po141 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,160-161 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1.L2LEAF5A_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet15/1 @@ -108,7 +111,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.121/24 @@ -131,12 +134,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6A.cfg index 32e0cbe2cf1..16297cadec2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1.L2LEAF6A ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -114,17 +117,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po30 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1.L2LEAF6B_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet30 @@ -142,7 +145,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.122/24 @@ -165,12 +168,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6B.cfg index d9b3b81a4e7..be323b9d083 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1.L2LEAF6B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,10 +35,6 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS rackE DC1.L2LEAF6B ! @@ -31,14 +42,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -114,17 +117,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po30 no shutdown - switchport switchport trunk allowed vlan 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 description MLAG_PEER_DC1.L2LEAF6A_Po3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-LEAF2B_Ethernet31 @@ -142,7 +145,7 @@ interface Ethernet4 channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.123/24 @@ -165,12 +168,8 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1A.cfg index 586d1480a6d..cc424199403 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -10,6 +25,12 @@ vlan internal order ascending range 1006 1199 ! no ip igmp snooping vlan 120 ! +hardware speed-group 1 serdes 25G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 10G +hardware speed-group 4 serdes 25G +hardware speed-group 5/1 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -20,34 +41,16 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management42 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1_UNDEPLOYED_LEAF1A ! -hardware speed-group 1 serdes 25G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 10G -hardware speed-group 4 serdes 25G -hardware speed-group 5/1 serdes 10G -! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 2 name MLAG_iBGP_Tenant_C_OP_Zone trunk group LEAF_PEER_L3 @@ -170,11 +173,11 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel571 description MLAG_PEER_DC1_UNDEPLOYED_LEAF1B_Po571 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet49/1 description P2P_LINK_TO_DC1-SPINE1_Ethernet28 @@ -221,12 +224,12 @@ interface Ethernet58/1 channel-group 571 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.21/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.21/32 ! @@ -237,7 +240,7 @@ interface Loopback100 ip address 10.255.1.21/32 ! interface Management42 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.121/24 @@ -503,6 +506,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management42 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -534,7 +541,7 @@ router bgp 65110 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65110 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1_UNDEPLOYED_LEAF1B + neighbor MLAG-PEERS description MLAG_PEER_DC1_UNDEPLOYED_LEAF1B neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -653,6 +660,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_DB_Zone @@ -662,6 +670,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_OP_Zone @@ -671,6 +680,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected ! vrf Tenant_A_WAN_Zone @@ -682,6 +692,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_WEB_Zone @@ -691,6 +702,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 172.31.11.25 peer group MLAG-PEERS + neighbor 172.31.11.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_B_OP_Zone @@ -700,6 +712,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected ! vrf Tenant_B_WAN_Zone @@ -709,6 +722,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected ! vrf Tenant_C_OP_Zone @@ -718,6 +732,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected ! vrf Tenant_C_WAN_Zone @@ -727,14 +742,7 @@ router bgp 65110 router-id 192.168.255.21 update wait-install neighbor 10.255.251.25 peer group MLAG-PEERS + neighbor 10.255.251.25 description DC1_UNDEPLOYED_LEAF1B redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1B.cfg index 6a7be4d6c4c..befde58c932 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DC1_UNDEPLOYED_LEAF1B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -10,6 +25,12 @@ vlan internal order ascending range 1006 1199 ! no ip igmp snooping vlan 120 ! +hardware speed-group 1 serdes 25G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 10G +hardware speed-group 4 serdes 25G +hardware speed-group 5/1 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent @@ -20,34 +41,16 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management42 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS DC1_UNDEPLOYED_LEAF1B ! -hardware speed-group 1 serdes 25G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 10G -hardware speed-group 4 serdes 25G -hardware speed-group 5/1 serdes 10G -! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4090,4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 2 name MLAG_iBGP_Tenant_C_OP_Zone trunk group LEAF_PEER_L3 @@ -170,11 +173,11 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel571 description MLAG_PEER_DC1_UNDEPLOYED_LEAF1A_Po571 no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet49/1 description P2P_LINK_TO_DC1-SPINE1_Ethernet29 @@ -221,12 +224,12 @@ interface Ethernet58/1 channel-group 571 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.22/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.21/32 ! @@ -237,7 +240,7 @@ interface Loopback100 ip address 10.255.1.22/32 ! interface Management42 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.122/24 @@ -503,6 +506,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management42 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -534,7 +541,7 @@ router bgp 65111 neighbor MLAG-PEERS peer group neighbor MLAG-PEERS remote-as 65111 neighbor MLAG-PEERS next-hop-self - neighbor MLAG-PEERS description DC1_UNDEPLOYED_LEAF1A + neighbor MLAG-PEERS description MLAG_PEER_DC1_UNDEPLOYED_LEAF1A neighbor MLAG-PEERS password 7 15AwQNBEJ1nyF/kBEtoAGw== neighbor MLAG-PEERS send-community neighbor MLAG-PEERS maximum-routes 12000 @@ -653,6 +660,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_DB_Zone @@ -662,6 +670,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_OP_Zone @@ -671,6 +680,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected ! vrf Tenant_A_WAN_Zone @@ -682,6 +692,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_A_WEB_Zone @@ -691,6 +702,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 172.31.11.24 peer group MLAG-PEERS + neighbor 172.31.11.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected route-map RM-CONN-2-BGP-VRFS ! vrf Tenant_B_OP_Zone @@ -700,6 +712,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected ! vrf Tenant_B_WAN_Zone @@ -709,6 +722,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected ! vrf Tenant_C_OP_Zone @@ -718,6 +732,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected ! vrf Tenant_C_WAN_Zone @@ -727,14 +742,7 @@ router bgp 65111 router-id 192.168.255.22 update wait-install neighbor 10.255.251.24 peer group MLAG-PEERS + neighbor 10.255.251.24 description DC1_UNDEPLOYED_LEAF1A redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF1.cfg index b0258b90d50..f4123858958 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname DUP-LEAF1 ! -no enable password -no aaa root -! vlan 100 name Duplicate_SVI_100_LEAF1 ! @@ -23,17 +29,17 @@ vrf instance TEST description TEST ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.0.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.10.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -107,11 +113,4 @@ router bgp 65000 router-id 10.0.0.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF2.cfg index 6184de05109..6333e5adadc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/DUP-LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname DUP-LEAF2 ! -no enable password -no aaa root -! vlan 100 name Duplicate_SVI_100_LEAF2 ! @@ -23,17 +29,17 @@ vrf instance TEST description TEST ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.0.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.10.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -107,11 +113,4 @@ router bgp 65000 router-id 10.0.0.2 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-DISABLED.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-DISABLED.cfg index ad49de8ad34..3cfd4dd6f3e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-DISABLED.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-DISABLED.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-DISABLED ! -no enable password -no aaa root -! vlan 1 name MULTICAST_ENABLED_1 ! @@ -53,6 +59,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -172,12 +184,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -236,7 +248,7 @@ interface Loopback60 ip address 10.255.60.8/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -300,6 +312,16 @@ interface Vlan131 no shutdown vrf TEN_C_L3_MULTICAST_ENABLED_130_131 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -413,6 +435,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -514,25 +538,22 @@ router bgp 65106 neighbor 172.31.255.10 description EVPN-MULTICAST-SPINE1_Ethernet6 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 1 rd 192.168.255.8:10001 route-target both 10001:10001 - redistribute igmp redistribute learned ! vlan 110 rd 192.168.255.8:10110 route-target both 10110:10110 - redistribute igmp redistribute learned ! vlan 111 rd 192.168.255.8:10111 route-target both 10111:10111 - redistribute igmp redistribute learned ! vlan 130 @@ -545,6 +566,16 @@ router bgp 65106 route-target both 10131:10131 redistribute learned ! + vlan 136 + rd 192.168.255.8:10136 + route-target both 10136:10136 + redistribute learned + ! + vlan 137 + rd 192.168.255.8:10137 + route-target both 10137:10137 + redistribute learned + ! vlan 140 rd 192.168.255.8:10140 route-target both 10140:10140 @@ -563,13 +594,11 @@ router bgp 65106 vlan 2 rd 192.168.255.8:10002 route-target both 10002:10002 - redistribute igmp redistribute learned ! vlan 210 rd 192.168.255.8:10210 route-target both 10210:10210 - redistribute igmp redistribute learned ! vlan 211 @@ -610,7 +639,6 @@ router bgp 65106 vlan 252 rd 192.168.255.8:10252 route-target both 10252:10252 - redistribute igmp redistribute learned ! vlan 256 @@ -621,7 +649,6 @@ router bgp 65106 vlan 257 rd 192.168.255.8:10257 route-target both 10257:10257 - redistribute igmp redistribute learned ! vlan 260 @@ -632,7 +659,6 @@ router bgp 65106 vlan 3 rd 192.168.255.8:10003 route-target both 10003:10003 - redistribute igmp redistribute learned ! vlan 310 @@ -663,7 +689,6 @@ router bgp 65106 vlan 4092 rd 192.168.255.8:14092 route-target both 14092:14092 - redistribute igmp redistribute learned ! vlan 5 @@ -689,13 +714,11 @@ router bgp 65106 vlan 8 rd 192.168.255.8:10008 route-target both 10008:10008 - redistribute igmp redistribute learned ! vlan 9 rd 192.168.255.8:10009 route-target both 10009:10009 - redistribute igmp redistribute learned ! address-family evpn @@ -755,9 +778,9 @@ router bgp 65106 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.8:31 - route-target import evpn 31:31 - route-target export evpn 31:31 + rd 192.168.255.8:66 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.8 redistribute connected ! @@ -814,11 +837,4 @@ router multicast ipv4 routing ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L2LEAF1A.cfg index c4ea9906355..649d8ada8f7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L2LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-L2LEAF1A ! -no enable password -no aaa root -! vlan 1 name MULTICAST_ENABLED_1 ! @@ -50,6 +56,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -118,9 +130,9 @@ vrf instance MGMT interface Port-Channel1 description EVPN_MULTICAST_L3LEAF1_Po6 no shutdown - switchport - switchport trunk allowed vlan 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 + switchport trunk allowed vlan 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 switchport mode trunk + switchport ! interface Ethernet1 description EVPN-MULTICAST-L3LEAF1A_Ethernet6 @@ -133,7 +145,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -141,11 +153,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1A.cfg index 504fcf2c78c..5106fbf6846 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -24,6 +33,10 @@ ip igmp snooping vlan 110 fast-leave ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 192.168.255.3 ip igmp snooping vlan 111 fast-leave +ip igmp snooping vlan 136 querier +ip igmp snooping vlan 136 querier address 192.168.255.3 +ip igmp snooping vlan 137 querier +ip igmp snooping vlan 137 querier address 192.168.255.3 ip igmp snooping vlan 210 querier ip igmp snooping vlan 210 querier address 192.168.255.3 ip igmp snooping vlan 210 fast-leave @@ -45,10 +58,10 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-L3LEAF1A ! -no spanning-tree vlan-id 4093-4094 +sflow vrf sflow_vrf destination 10.10.10.12 1234 +sflow run ! -no enable password -no aaa root +no spanning-tree vlan-id 4093-4094 ! vlan 1 name MULTICAST_ENABLED_1 @@ -89,6 +102,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -150,74 +169,74 @@ vlan 550 name L3_MULTICAST_ENABLED_550 ! vlan 3010 - name MLAG_iBGP_MULTICAST_ENABLED_110_111 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_110_111 + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_MULTICAST_ENABLED_210_DISABLED_211 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_MULTICAST_DISABLED_310_311 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_DISABLED_310_311 + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_MULTICAST_ENABLED_1_2 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_1_2 + trunk group MLAG ! vlan 3021 - name MLAG_iBGP_MULTICAST_ENABLED_3_DISABLED_4 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 + trunk group MLAG ! vlan 3022 - name MLAG_iBGP_MULTICAST_DISABLED_5_6 - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_130_131 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_DISABLED_5_6 + trunk group MLAG ! vlan 3031 - name MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + trunk group MLAG ! vlan 3032 - name MLAG_iBGP_TEN_C_L3_MULTICAST_DISABLED_330_331 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 + trunk group MLAG ! vlan 3040 - name MLAG_iBGP_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + trunk group MLAG ! vlan 3041 - name MLAG_iBGP_TEN_D_L3_MULTICAST_DISABLED_240_241 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 + trunk group MLAG ! vlan 3050 - name MLAG_iBGP_TEN_E_PEG_L3_MULTICAST_ENABLED - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED + trunk group MLAG ! vlan 3051 - name MLAG_iBGP_TEN_E_L3_MULTICAST_TRANSIT - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT + trunk group MLAG ! vlan 3054 - name MLAG_iBGP_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + trunk group MLAG ! vlan 3059 - name MLAG_iBGP_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + trunk group MLAG +! +vlan 3065 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 + trunk group MLAG ! vlan 4092 name MULTICAST_ENABLED_4092 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -268,19 +287,18 @@ vrf instance TEN_E_PEG_L3_MULTICAST_ENABLED description PEG_L3_MULTICAST_ENABLED in Tenant E ! interface Port-Channel3 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Po3 + description MLAG_EVPN-MULTICAST-L3LEAF1B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel6 description EVPN-MULTICAST-L2LEAF1A_Po1 no shutdown - switchport - switchport trunk allowed vlan 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 + switchport trunk allowed vlan 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 switchport mode trunk + switchport mlag 6 ! interface Ethernet1 @@ -292,12 +310,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Ethernet3 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Ethernet3 + description MLAG_EVPN-MULTICAST-L3LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Ethernet4 + description MLAG_EVPN-MULTICAST-L3LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ! @@ -312,6 +330,7 @@ interface Ethernet7 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.0/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet8 no shutdown @@ -319,6 +338,7 @@ interface Ethernet8 vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE ip address 10.1.55.0/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet9 no shutdown @@ -326,6 +346,7 @@ interface Ethernet9 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.1.52.0/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet10 no shutdown @@ -333,14 +354,15 @@ interface Ethernet10 vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES ip address 10.1.60.0/31 pim ipv4 sparse-mode + sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -399,7 +421,7 @@ interface Loopback60 ip address 10.255.60.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -468,6 +490,20 @@ interface Vlan131 pim ipv4 sparse-mode ip virtual-router address 10.1.14.1 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + pim ipv4 sparse-mode + pim ipv4 local-interface Loopback31 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + pim ipv4 sparse-mode + pim ipv4 local-interface Loopback31 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -577,119 +613,119 @@ interface Vlan550 ip address virtual 10.1.56.1/24 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_110_111 + description MLAG_L3_VRF_MULTICAST_ENABLED_110_111 no shutdown mtu 9214 vrf MULTICAST_ENABLED_110_111 ip address 10.255.251.0/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_210_DISABLED_211 + description MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 no shutdown mtu 9214 vrf MULTICAST_ENABLED_210_DISABLED_211 ip address 10.255.251.0/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_310_311 + description MLAG_L3_VRF_MULTICAST_DISABLED_310_311 no shutdown mtu 9214 vrf MULTICAST_DISABLED_310_311 ip address 10.255.251.0/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_1_2 + description MLAG_L3_VRF_MULTICAST_ENABLED_1_2 no shutdown mtu 9214 vrf MULTICAST_ENABLED_1_2 ip address 10.255.251.0/31 ! interface Vlan3021 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_3_DISABLED_4 + description MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 no shutdown mtu 9214 vrf MULTICAST_ENABLED_3_DISABLED_4 ip address 10.255.251.0/31 ! interface Vlan3022 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_5_6 + description MLAG_L3_VRF_MULTICAST_DISABLED_5_6 no shutdown mtu 9214 vrf MULTICAST_DISABLED_5_6 ip address 10.255.251.0/31 ! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - no shutdown - mtu 9214 - vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - ip address 10.255.251.0/31 -! interface Vlan3031 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 no shutdown mtu 9214 vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 ip address 10.255.251.0/31 ! interface Vlan3032 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_DISABLED_330_331 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 no shutdown mtu 9214 vrf TEN_C_L3_MULTICAST_DISABLED_330_331 ip address 10.255.251.0/31 ! interface Vlan3040 - description MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + description MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 no shutdown mtu 9214 vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 ip address 10.255.251.0/31 ! interface Vlan3041 - description MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_DISABLED_240_241 + description MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 no shutdown mtu 9214 vrf TEN_D_L3_MULTICAST_DISABLED_240_241 ip address 10.255.251.0/31 ! interface Vlan3050 - description MLAG_PEER_L3_iBGP: vrf TEN_E_PEG_L3_MULTICAST_ENABLED + description MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED no shutdown mtu 9214 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.255.251.0/31 ! interface Vlan3051 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_TRANSIT + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.255.251.0/31 ! interface Vlan3054 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE ip address 10.255.251.0/31 ! interface Vlan3059 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES ip address 10.255.251.0/31 ! +interface Vlan3065 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 + no shutdown + mtu 9214 + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip address 10.255.251.0/31 +! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.0/31 pim ipv4 sparse-mode ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -713,6 +749,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -757,13 +795,15 @@ interface Vxlan1 vxlan vlan 9 multicast group 232.0.16.9 vxlan vlan 110 multicast group 232.0.0.109 vxlan vlan 111 multicast group 232.0.0.110 + vxlan vlan 136 multicast group 236.0.0.135 + vxlan vlan 137 multicast group 236.0.0.136 vxlan vlan 210 multicast group 232.0.0.209 vxlan vlan 252 multicast group 232.0.0.251 vxlan vlan 257 multicast group 232.0.1.0 vxlan vlan 4092 multicast group 232.0.15.251 - vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.31 + vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.66 vxlan vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 multicast group 232.0.32.32 - vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.40 + vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.2 vxlan vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE multicast group 232.0.96.54 vxlan vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES multicast group 232.0.96.59 vxlan vrf TEN_E_L3_MULTICAST_TRANSIT multicast group 232.0.96.51 @@ -855,13 +895,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan4093 neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.0 remote-as 65001 neighbor 172.31.255.0 description EVPN-MULTICAST-SPINE1_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle MULTICAST_DISABLED_5_6 @@ -964,10 +1004,11 @@ router bgp 65101 vlan 330-331 ! vlan-aware-bundle TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.3:31 - route-target both 31:31 + rd 192.168.255.3:66 + route-target both 66:66 + redistribute igmp redistribute learned - vlan 130-131 + vlan 130-131,136-137 ! vlan-aware-bundle TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 rd 192.168.255.3:32 @@ -1026,6 +1067,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3022 redistribute connected ! vrf MULTICAST_DISABLED_310_311 @@ -1035,6 +1077,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3012 redistribute connected ! vrf MULTICAST_ENABLED_1_2 @@ -1044,6 +1087,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3020 redistribute connected ! vrf MULTICAST_ENABLED_3_DISABLED_4 @@ -1053,6 +1097,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3021 redistribute connected ! vrf MULTICAST_ENABLED_110_111 @@ -1062,6 +1107,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3010 redistribute connected ! vrf MULTICAST_ENABLED_210_DISABLED_211 @@ -1071,6 +1117,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3011 redistribute connected ! vrf TEN_C_L3_MULTICAST_DISABLED_330_331 @@ -1080,16 +1127,18 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3032 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.3:31 + rd 192.168.255.3:66 evpn multicast - route-target import evpn 31:31 - route-target export evpn 31:31 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3065 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 @@ -1100,6 +1149,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3031 redistribute connected ! vrf TEN_D_L3_MULTICAST_DISABLED_240_241 @@ -1109,6 +1159,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3041 redistribute connected ! vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 @@ -1119,6 +1170,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3040 redistribute connected ! vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE @@ -1129,6 +1181,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3054 redistribute connected ! vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES @@ -1141,6 +1194,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3059 redistribute connected ! vrf TEN_E_L3_MULTICAST_TRANSIT @@ -1153,6 +1207,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3051 redistribute connected ! vrf TEN_E_PEG_L3_MULTICAST_ENABLED @@ -1163,6 +1218,7 @@ router bgp 65101 router-id 192.168.255.3 update wait-install neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.1 description EVPN-MULTICAST-L3LEAF1B_Vlan3050 redistribute connected ! router multicast @@ -1223,11 +1279,4 @@ router pim sparse-mode rp address 10.1.52.130 rp address 10.1.52.140 access-list RPS_ACL_VRF_Tenant_E_1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1B.cfg index 495fcda8c36..c81b18a834e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -24,6 +33,10 @@ ip igmp snooping vlan 110 fast-leave ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 192.168.255.4 ip igmp snooping vlan 111 fast-leave +ip igmp snooping vlan 136 querier +ip igmp snooping vlan 136 querier address 192.168.255.4 +ip igmp snooping vlan 137 querier +ip igmp snooping vlan 137 querier address 192.168.255.4 ip igmp snooping vlan 210 querier ip igmp snooping vlan 210 querier address 192.168.255.4 ip igmp snooping vlan 210 fast-leave @@ -45,10 +58,10 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-L3LEAF1B ! -no spanning-tree vlan-id 4093-4094 +sflow vrf sflow_vrf destination 10.10.10.12 1234 +sflow run ! -no enable password -no aaa root +no spanning-tree vlan-id 4093-4094 ! vlan 1 name MULTICAST_ENABLED_1 @@ -89,6 +102,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -150,74 +169,74 @@ vlan 550 name L3_MULTICAST_ENABLED_550 ! vlan 3010 - name MLAG_iBGP_MULTICAST_ENABLED_110_111 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_110_111 + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_MULTICAST_ENABLED_210_DISABLED_211 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_MULTICAST_DISABLED_310_311 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_DISABLED_310_311 + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_MULTICAST_ENABLED_1_2 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_1_2 + trunk group MLAG ! vlan 3021 - name MLAG_iBGP_MULTICAST_ENABLED_3_DISABLED_4 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 + trunk group MLAG ! vlan 3022 - name MLAG_iBGP_MULTICAST_DISABLED_5_6 - trunk group LEAF_PEER_L3 -! -vlan 3030 - name MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_130_131 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_MULTICAST_DISABLED_5_6 + trunk group MLAG ! vlan 3031 - name MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + trunk group MLAG ! vlan 3032 - name MLAG_iBGP_TEN_C_L3_MULTICAST_DISABLED_330_331 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 + trunk group MLAG ! vlan 3040 - name MLAG_iBGP_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + trunk group MLAG ! vlan 3041 - name MLAG_iBGP_TEN_D_L3_MULTICAST_DISABLED_240_241 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 + trunk group MLAG ! vlan 3050 - name MLAG_iBGP_TEN_E_PEG_L3_MULTICAST_ENABLED - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED + trunk group MLAG ! vlan 3051 - name MLAG_iBGP_TEN_E_L3_MULTICAST_TRANSIT - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT + trunk group MLAG ! vlan 3054 - name MLAG_iBGP_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + trunk group MLAG ! vlan 3059 - name MLAG_iBGP_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + trunk group MLAG +! +vlan 3065 + name MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 + trunk group MLAG ! vlan 4092 name MULTICAST_ENABLED_4092 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -268,19 +287,18 @@ vrf instance TEN_E_PEG_L3_MULTICAST_ENABLED description PEG_L3_MULTICAST_ENABLED in Tenant E ! interface Port-Channel3 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Po3 + description MLAG_EVPN-MULTICAST-L3LEAF1A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel6 description EVPN-MULTICAST-L2LEAF1A_Po1 no shutdown - switchport - switchport trunk allowed vlan 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 + switchport trunk allowed vlan 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 switchport mode trunk + switchport mlag 6 ! interface Ethernet1 @@ -292,12 +310,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Ethernet3 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Ethernet3 + description MLAG_EVPN-MULTICAST-L3LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Ethernet4 + description MLAG_EVPN-MULTICAST-L3LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ! @@ -312,6 +330,7 @@ interface Ethernet7 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.2/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet8 no shutdown @@ -319,6 +338,7 @@ interface Ethernet8 vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE ip address 10.1.55.2/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet9 no shutdown @@ -326,6 +346,7 @@ interface Ethernet9 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.1.52.2/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet10 no shutdown @@ -333,14 +354,15 @@ interface Ethernet10 vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES ip address 10.1.60.2/31 pim ipv4 sparse-mode + sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -399,7 +421,7 @@ interface Loopback60 ip address 10.255.60.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -468,6 +490,20 @@ interface Vlan131 pim ipv4 sparse-mode ip virtual-router address 10.1.14.1 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + pim ipv4 sparse-mode + pim ipv4 local-interface Loopback31 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + pim ipv4 sparse-mode + pim ipv4 local-interface Loopback31 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -577,119 +613,119 @@ interface Vlan550 ip address virtual 10.1.56.1/24 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_110_111 + description MLAG_L3_VRF_MULTICAST_ENABLED_110_111 no shutdown mtu 9214 vrf MULTICAST_ENABLED_110_111 ip address 10.255.251.1/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_210_DISABLED_211 + description MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 no shutdown mtu 9214 vrf MULTICAST_ENABLED_210_DISABLED_211 ip address 10.255.251.1/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_310_311 + description MLAG_L3_VRF_MULTICAST_DISABLED_310_311 no shutdown mtu 9214 vrf MULTICAST_DISABLED_310_311 ip address 10.255.251.1/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_1_2 + description MLAG_L3_VRF_MULTICAST_ENABLED_1_2 no shutdown mtu 9214 vrf MULTICAST_ENABLED_1_2 ip address 10.255.251.1/31 ! interface Vlan3021 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_3_DISABLED_4 + description MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 no shutdown mtu 9214 vrf MULTICAST_ENABLED_3_DISABLED_4 ip address 10.255.251.1/31 ! interface Vlan3022 - description MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_5_6 + description MLAG_L3_VRF_MULTICAST_DISABLED_5_6 no shutdown mtu 9214 vrf MULTICAST_DISABLED_5_6 ip address 10.255.251.1/31 ! -interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - no shutdown - mtu 9214 - vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - ip address 10.255.251.1/31 -! interface Vlan3031 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 no shutdown mtu 9214 vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 ip address 10.255.251.1/31 ! interface Vlan3032 - description MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_DISABLED_330_331 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 no shutdown mtu 9214 vrf TEN_C_L3_MULTICAST_DISABLED_330_331 ip address 10.255.251.1/31 ! interface Vlan3040 - description MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + description MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 no shutdown mtu 9214 vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 ip address 10.255.251.1/31 ! interface Vlan3041 - description MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_DISABLED_240_241 + description MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 no shutdown mtu 9214 vrf TEN_D_L3_MULTICAST_DISABLED_240_241 ip address 10.255.251.1/31 ! interface Vlan3050 - description MLAG_PEER_L3_iBGP: vrf TEN_E_PEG_L3_MULTICAST_ENABLED + description MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED no shutdown mtu 9214 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.255.251.1/31 ! interface Vlan3051 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_TRANSIT + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.255.251.1/31 ! interface Vlan3054 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE ip address 10.255.251.1/31 ! interface Vlan3059 - description MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + description MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES no shutdown mtu 9214 vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES ip address 10.255.251.1/31 ! +interface Vlan3065 + description MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 + no shutdown + mtu 9214 + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip address 10.255.251.1/31 +! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.1/31 pim ipv4 sparse-mode ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -713,6 +749,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -757,13 +795,15 @@ interface Vxlan1 vxlan vlan 9 multicast group 232.0.16.9 vxlan vlan 110 multicast group 232.0.0.109 vxlan vlan 111 multicast group 232.0.0.110 + vxlan vlan 136 multicast group 236.0.0.135 + vxlan vlan 137 multicast group 236.0.0.136 vxlan vlan 210 multicast group 232.0.0.209 vxlan vlan 252 multicast group 232.0.0.251 vxlan vlan 257 multicast group 232.0.1.0 vxlan vlan 4092 multicast group 232.0.15.251 - vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.31 + vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.66 vxlan vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 multicast group 232.0.32.32 - vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.40 + vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.2 vxlan vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE multicast group 232.0.96.54 vxlan vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES multicast group 232.0.96.59 vxlan vrf TEN_E_L3_MULTICAST_TRANSIT multicast group 232.0.96.51 @@ -855,13 +895,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan4093 neighbor 172.31.255.2 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.2 remote-as 65001 neighbor 172.31.255.2 description EVPN-MULTICAST-SPINE1_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle MULTICAST_DISABLED_5_6 @@ -964,10 +1004,11 @@ router bgp 65101 vlan 330-331 ! vlan-aware-bundle TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.4:31 - route-target both 31:31 + rd 192.168.255.4:66 + route-target both 66:66 + redistribute igmp redistribute learned - vlan 130-131 + vlan 130-131,136-137 ! vlan-aware-bundle TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 rd 192.168.255.4:32 @@ -1026,6 +1067,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3022 redistribute connected ! vrf MULTICAST_DISABLED_310_311 @@ -1035,6 +1077,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3012 redistribute connected ! vrf MULTICAST_ENABLED_1_2 @@ -1044,6 +1087,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3020 redistribute connected ! vrf MULTICAST_ENABLED_3_DISABLED_4 @@ -1053,6 +1097,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3021 redistribute connected ! vrf MULTICAST_ENABLED_110_111 @@ -1062,6 +1107,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3010 redistribute connected ! vrf MULTICAST_ENABLED_210_DISABLED_211 @@ -1071,6 +1117,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3011 redistribute connected ! vrf TEN_C_L3_MULTICAST_DISABLED_330_331 @@ -1080,16 +1127,18 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3032 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.4:31 + rd 192.168.255.4:66 evpn multicast - route-target import evpn 31:31 - route-target export evpn 31:31 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3065 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 @@ -1100,6 +1149,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3031 redistribute connected ! vrf TEN_D_L3_MULTICAST_DISABLED_240_241 @@ -1109,6 +1159,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3041 redistribute connected ! vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 @@ -1119,6 +1170,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3040 redistribute connected ! vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE @@ -1129,6 +1181,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3054 redistribute connected ! vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES @@ -1141,6 +1194,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3059 redistribute connected ! vrf TEN_E_L3_MULTICAST_TRANSIT @@ -1153,6 +1207,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3051 redistribute connected ! vrf TEN_E_PEG_L3_MULTICAST_ENABLED @@ -1163,6 +1218,7 @@ router bgp 65101 router-id 192.168.255.4 update wait-install neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.0 description EVPN-MULTICAST-L3LEAF1A_Vlan3050 redistribute connected ! router multicast @@ -1223,11 +1279,4 @@ router pim sparse-mode rp address 10.1.52.130 rp address 10.1.52.140 access-list RPS_ACL_VRF_Tenant_E_1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF2A.cfg index a491bdd18fc..0fac4ba5767 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF2A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -24,6 +33,10 @@ ip igmp snooping vlan 110 fast-leave ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 192.168.255.5 ip igmp snooping vlan 111 fast-leave +ip igmp snooping vlan 136 querier +ip igmp snooping vlan 136 querier address 192.168.255.5 +ip igmp snooping vlan 137 querier +ip igmp snooping vlan 137 querier address 192.168.255.5 ip igmp snooping vlan 210 querier ip igmp snooping vlan 210 querier address 192.168.255.5 ip igmp snooping vlan 210 fast-leave @@ -47,9 +60,6 @@ hostname EVPN-MULTICAST-L3LEAF2A ! platform trident forwarding-table partition flexible exact-match 16384 l2-shared 98304 l3-shared 131072 ! -no enable password -no aaa root -! vlan 1 name MULTICAST_ENABLED_1 ! @@ -89,6 +99,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -208,12 +224,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! @@ -272,7 +288,7 @@ interface Loopback60 ip address 10.255.60.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -341,6 +357,20 @@ interface Vlan131 ip igmp ip virtual-router address 10.1.14.1 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -466,6 +496,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -509,13 +541,15 @@ interface Vxlan1 vxlan vlan 9 multicast group 232.0.16.9 vxlan vlan 110 multicast group 232.0.0.109 vxlan vlan 111 multicast group 232.0.0.110 + vxlan vlan 136 multicast group 236.0.0.135 + vxlan vlan 137 multicast group 236.0.0.136 vxlan vlan 210 multicast group 232.0.0.209 vxlan vlan 252 multicast group 232.0.0.251 vxlan vlan 257 multicast group 232.0.1.0 vxlan vlan 4092 multicast group 232.0.15.251 - vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.31 + vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.66 vxlan vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 multicast group 232.0.32.32 - vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.40 + vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.2 vxlan vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE multicast group 232.0.96.54 vxlan vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES multicast group 232.0.96.59 vxlan vrf TEN_E_L3_MULTICAST_TRANSIT multicast group 232.0.96.51 @@ -585,7 +619,7 @@ router bgp 65103 neighbor 172.31.255.4 description EVPN-MULTICAST-SPINE1_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 1 @@ -616,6 +650,17 @@ router bgp 65103 route-target both 10131:10131 redistribute learned ! + vlan 136 + rd 192.168.255.5:10136 + route-target both 10136:10136 + redistribute igmp + redistribute learned + ! + vlan 137 + rd 192.168.255.5:10137 + route-target both 10137:10137 + redistribute learned + ! vlan 140 rd 192.168.255.5:10140 route-target both 10140:10140 @@ -826,10 +871,10 @@ router bgp 65103 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.5:31 + rd 192.168.255.5:66 evpn multicast - route-target import evpn 31:31 - route-target export evpn 31:31 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.5 redistribute connected ! @@ -933,11 +978,4 @@ router pim sparse-mode rp address 10.1.50.100 232.0.112.0/21 rp address 10.1.50.150 access-list RPS_ACL_VRF_Tenant_E_2 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3A.cfg index 4e5477ce952..7c69449f713 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -24,6 +33,10 @@ ip igmp snooping vlan 110 fast-leave ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 192.168.255.6 ip igmp snooping vlan 111 fast-leave +ip igmp snooping vlan 136 querier +ip igmp snooping vlan 136 querier address 192.168.255.6 +ip igmp snooping vlan 137 querier +ip igmp snooping vlan 137 querier address 192.168.255.6 ip igmp snooping vlan 210 querier ip igmp snooping vlan 210 querier address 192.168.255.6 ip igmp snooping vlan 210 fast-leave @@ -45,8 +58,8 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-L3LEAF3A ! -no enable password -no aaa root +sflow vrf sflow_vrf destination 10.10.10.12 1234 +sflow run ! vlan 1 name MULTICAST_ENABLED_1 @@ -87,6 +100,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -214,6 +233,7 @@ interface Ethernet7.10 encapsulation dot1q vlan 10 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.4/31 + sflow enable ! interface Ethernet8 no shutdown @@ -221,6 +241,7 @@ interface Ethernet8 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.4/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet9 no shutdown @@ -228,14 +249,15 @@ interface Ethernet9 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.2.52.0/31 pim ipv4 sparse-mode + sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -294,7 +316,7 @@ interface Loopback60 ip address 10.255.60.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -363,6 +385,20 @@ interface Vlan131 ip igmp ip virtual-router address 10.1.14.1 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -488,6 +524,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -531,13 +569,15 @@ interface Vxlan1 vxlan vlan 9 multicast group 232.0.16.9 vxlan vlan 110 multicast group 232.0.0.109 vxlan vlan 111 multicast group 232.0.0.110 + vxlan vlan 136 multicast group 236.0.0.135 + vxlan vlan 137 multicast group 236.0.0.136 vxlan vlan 210 multicast group 232.0.0.209 vxlan vlan 252 multicast group 232.0.0.251 vxlan vlan 257 multicast group 232.0.1.0 vxlan vlan 4092 multicast group 232.0.15.251 - vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.31 + vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.66 vxlan vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 multicast group 232.0.32.32 - vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.40 + vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.2 vxlan vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE multicast group 232.0.96.54 vxlan vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES multicast group 232.0.96.59 vxlan vrf TEN_E_L3_MULTICAST_TRANSIT multicast group 232.0.96.51 @@ -607,7 +647,7 @@ router bgp 65104 neighbor 172.31.255.6 description EVPN-MULTICAST-SPINE1_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 1 @@ -638,6 +678,17 @@ router bgp 65104 route-target both 10131:10131 redistribute learned ! + vlan 136 + rd 192.168.255.6:10136 + route-target both 10136:10136 + redistribute igmp + redistribute learned + ! + vlan 137 + rd 192.168.255.6:10137 + route-target both 10137:10137 + redistribute learned + ! vlan 140 rd 192.168.255.6:10140 route-target both 10140:10140 @@ -848,10 +899,10 @@ router bgp 65104 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.6:31 + rd 192.168.255.6:66 evpn multicast - route-target import evpn 31:31 - route-target export evpn 31:31 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.6 redistribute connected ! @@ -971,11 +1022,4 @@ router pim sparse-mode rp address 10.1.52.129 232.0.96.0/21 rp address 10.1.52.129 232.0.104.0/21 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3B.cfg index 13c5ba5e2e6..4d971a1d6cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-L3LEAF3B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -24,6 +33,10 @@ ip igmp snooping vlan 110 fast-leave ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 192.168.255.7 ip igmp snooping vlan 111 fast-leave +ip igmp snooping vlan 136 querier +ip igmp snooping vlan 136 querier address 192.168.255.7 +ip igmp snooping vlan 137 querier +ip igmp snooping vlan 137 querier address 192.168.255.7 ip igmp snooping vlan 210 querier ip igmp snooping vlan 210 querier address 192.168.255.7 ip igmp snooping vlan 210 fast-leave @@ -45,8 +58,8 @@ service routing protocols model multi-agent ! hostname EVPN-MULTICAST-L3LEAF3B ! -no enable password -no aaa root +sflow vrf sflow_vrf destination 10.10.10.12 1234 +sflow run ! vlan 1 name MULTICAST_ENABLED_1 @@ -87,6 +100,12 @@ vlan 130 vlan 131 name L3_MULTICAST_ENABLED_131 ! +vlan 136 + name L3_L2_MULTICAST_ENABLED_136 +! +vlan 137 + name L3_L2_MULTICAST_ENABLED_137 +! vlan 140 name L3_MULTICAST_ENABLED_140 ! @@ -214,6 +233,7 @@ interface Ethernet7.10 encapsulation dot1q vlan 10 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.6/31 + sflow enable ! interface Ethernet8 no shutdown @@ -221,6 +241,7 @@ interface Ethernet8 vrf TEN_E_PEG_L3_MULTICAST_ENABLED ip address 10.1.51.6/31 pim ipv4 sparse-mode + sflow enable ! interface Ethernet9 no shutdown @@ -228,14 +249,15 @@ interface Ethernet9 vrf TEN_E_L3_MULTICAST_TRANSIT ip address 10.2.52.2/31 pim ipv4 sparse-mode + sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.7/32 ! @@ -294,7 +316,7 @@ interface Loopback60 ip address 10.255.60.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -363,6 +385,20 @@ interface Vlan131 ip igmp ip virtual-router address 10.1.14.1 ! +interface Vlan136 + description L3_L2_MULTICAST_ENABLED_136 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! +interface Vlan137 + description L3_L2_MULTICAST_ENABLED_137 + no shutdown + vrf TEN_C_L3_MULTICAST_ENABLED_130_131 + ip igmp + pim ipv4 local-interface Loopback31 +! interface Vlan140 description L3_MULTICAST_ENABLED_140 no shutdown @@ -488,6 +524,8 @@ interface Vxlan1 vxlan vlan 111 vni 10111 vxlan vlan 130 vni 10130 vxlan vlan 131 vni 10131 + vxlan vlan 136 vni 10136 + vxlan vlan 137 vni 10137 vxlan vlan 140 vni 10140 vxlan vlan 141 vni 10141 vxlan vlan 150 vni 10150 @@ -531,13 +569,15 @@ interface Vxlan1 vxlan vlan 9 multicast group 232.0.16.9 vxlan vlan 110 multicast group 232.0.0.109 vxlan vlan 111 multicast group 232.0.0.110 + vxlan vlan 136 multicast group 236.0.0.135 + vxlan vlan 137 multicast group 236.0.0.136 vxlan vlan 210 multicast group 232.0.0.209 vxlan vlan 252 multicast group 232.0.0.251 vxlan vlan 257 multicast group 232.0.1.0 vxlan vlan 4092 multicast group 232.0.15.251 - vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.31 + vxlan vrf TEN_C_L3_MULTICAST_ENABLED_130_131 multicast group 232.0.32.66 vxlan vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 multicast group 232.0.32.32 - vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.40 + vxlan vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 multicast group 232.0.64.2 vxlan vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE multicast group 232.0.96.54 vxlan vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES multicast group 232.0.96.59 vxlan vrf TEN_E_L3_MULTICAST_TRANSIT multicast group 232.0.96.51 @@ -607,7 +647,7 @@ router bgp 65105 neighbor 172.31.255.8 description EVPN-MULTICAST-SPINE1_Ethernet5 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1 + neighbor 192.168.255.1 description EVPN-MULTICAST-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 1 @@ -638,6 +678,17 @@ router bgp 65105 route-target both 10131:10131 redistribute learned ! + vlan 136 + rd 192.168.255.7:10136 + route-target both 10136:10136 + redistribute igmp + redistribute learned + ! + vlan 137 + rd 192.168.255.7:10137 + route-target both 10137:10137 + redistribute learned + ! vlan 140 rd 192.168.255.7:10140 route-target both 10140:10140 @@ -848,10 +899,10 @@ router bgp 65105 redistribute connected ! vrf TEN_C_L3_MULTICAST_ENABLED_130_131 - rd 192.168.255.7:31 + rd 192.168.255.7:66 evpn multicast - route-target import evpn 31:31 - route-target export evpn 31:31 + route-target import evpn 66:66 + route-target export evpn 66:66 router-id 192.168.255.7 redistribute connected ! @@ -971,11 +1022,4 @@ router pim sparse-mode rp address 10.1.52.129 232.0.96.0/21 rp address 10.1.52.129 232.0.104.0/21 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-SPINE1.cfg index cc9a00764f0..47598f88a8f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/EVPN-MULTICAST-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname EVPN-MULTICAST-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -64,12 +70,12 @@ interface Ethernet6 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -123,22 +129,22 @@ router bgp 65001 neighbor 172.31.255.11 description EVPN-MULTICAST-DISABLED_Ethernet1 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description EVPN-MULTICAST-L3LEAF1A + neighbor 192.168.255.3 description EVPN-MULTICAST-L3LEAF1A_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description EVPN-MULTICAST-L3LEAF1B + neighbor 192.168.255.4 description EVPN-MULTICAST-L3LEAF1B_Loopback0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65103 - neighbor 192.168.255.5 description EVPN-MULTICAST-L3LEAF2A + neighbor 192.168.255.5 description EVPN-MULTICAST-L3LEAF2A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65104 - neighbor 192.168.255.6 description EVPN-MULTICAST-L3LEAF3A + neighbor 192.168.255.6 description EVPN-MULTICAST-L3LEAF3A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65105 - neighbor 192.168.255.7 description EVPN-MULTICAST-L3LEAF3B + neighbor 192.168.255.7 description EVPN-MULTICAST-L3LEAF3B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65106 - neighbor 192.168.255.8 description EVPN-MULTICAST-DISABLED + neighbor 192.168.255.8 description EVPN-MULTICAST-DISABLED_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -152,11 +158,4 @@ router multicast ipv4 routing ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L2LEAF1A.cfg index 9420acf3db6..92500af7e08 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L2LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname IGMP-QUERIER-L2LEAF1A ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -67,9 +73,9 @@ vrf instance MGMT interface Port-Channel1 description IGMP-QUERIER-L3LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 1-3,11-12,21-23,101-103,111-113,121-123 switchport mode trunk + switchport ! interface Ethernet1 description IGMP-QUERIER-L3LEAF1A_Ethernet1 @@ -77,7 +83,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -85,11 +91,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L3LEAF1A.cfg index ef935d8e105..45da2ec68c6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/IGMP-QUERIER-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,7 +17,6 @@ ip igmp snooping vlan 2 querier ip igmp snooping vlan 2 querier address 192.168.255.1 ip igmp snooping vlan 2 querier version 3 no ip igmp snooping vlan 3 querier -ip igmp snooping vlan 3 querier address 192.168.255.1 ip igmp snooping vlan 11 querier ip igmp snooping vlan 11 querier address 1.1.1.1 ip igmp snooping vlan 11 querier version 3 @@ -29,7 +37,6 @@ ip igmp snooping vlan 102 querier ip igmp snooping vlan 102 querier address 192.168.255.1 ip igmp snooping vlan 102 querier version 3 no ip igmp snooping vlan 103 querier -ip igmp snooping vlan 103 querier address 192.168.255.1 ip igmp snooping vlan 111 querier ip igmp snooping vlan 111 querier address 1.1.1.1 ip igmp snooping vlan 111 querier version 3 @@ -37,15 +44,12 @@ ip igmp snooping vlan 112 querier ip igmp snooping vlan 112 querier address 1.1.1.1 ip igmp snooping vlan 112 querier version 2 no ip igmp snooping vlan 113 querier -ip igmp snooping vlan 113 querier address 1.1.1.1 -ip igmp snooping vlan 113 querier version 3 ip igmp snooping vlan 121 querier ip igmp snooping vlan 121 querier address 2.2.2.2 ip igmp snooping vlan 121 querier version 1 ip igmp snooping vlan 122 querier ip igmp snooping vlan 122 querier address 192.168.255.1 no ip igmp snooping vlan 123 querier -ip igmp snooping vlan 123 querier address 192.168.255.1 ! transceiver qsfp default-mode 4x10G ! @@ -53,9 +57,6 @@ service routing protocols model multi-agent ! hostname IGMP-QUERIER-L3LEAF1A ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -121,9 +122,9 @@ vrf instance MGMT interface Port-Channel1 description IGMP-QUERIER-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 1-3,11-12,21-23,101-103,111-113,121-123 switchport mode trunk + switchport ! interface Ethernet1 description IGMP-QUERIER-L2LEAF1A_Ethernet1 @@ -131,17 +132,17 @@ interface Ethernet1 channel-group 1 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -368,11 +369,4 @@ router bgp 65101 router-id 192.168.255.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-L2LEAF1A.cfg index c02a429b8d7..be17d698132 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-L2LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -12,44 +27,32 @@ transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! +link tracking group l2leaf-server02 + recovery delay 300 +! hostname MH-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MH-L2LEAF1A ! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 310 name Tenant_X_OP_Zone_1 ! vrf instance MGMT ! -link tracking group l2leaf-server02 - recovery delay 300 -! interface Port-Channel1 description MH-LEAF2A_Po2 no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport link tracking group l2leaf-server02 upstream ! interface Ethernet1 @@ -64,7 +67,7 @@ interface Ethernet10 link tracking group l2leaf-server02 downstream ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.201/24 @@ -72,12 +75,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1A.cfg index 02ed421126e..7c37d36700f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -14,27 +29,18 @@ service routing protocols model multi-agent ! lacp port-id range 1 128 ! +link tracking group LT_GROUP1 + recovery delay 300 +! hostname MH-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MH-LEAF1A ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 310 name Tenant_X_OP_Zone_1 ! @@ -42,14 +48,12 @@ vrf instance MGMT ! vrf instance Tenant_X_OP_Zone ! -link tracking group LT_GROUP1 - recovery delay 300 -! interface Port-Channel10 description server01_ES1_PortChanne1 no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:0001:1010:1010 route-target import 00:01:10:10:10:10 @@ -96,8 +100,9 @@ interface Port-Channel11.104 interface Port-Channel12 description server03_AUTO_ESI_Auto-ESI PortChannel no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:fc87:ae24:2cb3 route-target import fc:87:ae:24:2c:b3 @@ -107,8 +112,9 @@ interface Port-Channel12 interface Port-Channel13 description server04_AUTO_ESI_Profile_Auto-ESI PortChannel from profile no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:29cc:4043:0a29 route-target import 29:cc:40:43:0a:29 @@ -118,8 +124,9 @@ interface Port-Channel13 interface Port-Channel14 description server05_AUTO_ESI_Profile_Override_Auto-ESI PortChannel overridden on server no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:010a:010a:010a route-target import 01:0a:01:0a:01:0a @@ -129,9 +136,9 @@ interface Port-Channel14 interface Port-Channel15 description server06_Single_Active_Port_Channel_Single-Active ESI no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:2873:c14b:64ec redundancy single-active @@ -142,9 +149,9 @@ interface Port-Channel15 interface Port-Channel16 description server07_Single_Active_Port_Channel_Manual_DF_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:ec11:73f8:7361 redundancy single-active @@ -155,9 +162,9 @@ interface Port-Channel16 interface Port-Channel20 description server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:47cb:834e:c0c7 redundancy single-active @@ -168,9 +175,9 @@ interface Port-Channel20 interface Port-Channel22 description server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:d716:1795:361e redundancy single-active @@ -292,12 +299,12 @@ interface Ethernet23 route-target import 26:2b:7d:f9:c9:8b ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.33/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.33/32 ! @@ -308,7 +315,7 @@ interface Loopback100 ip address 10.255.1.33/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.104/24 @@ -340,6 +347,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -391,12 +402,4 @@ router bgp 65151 router-id 192.168.255.33 redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1B.cfg index 3d9a1b8c13a..b6e1b0f4658 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF1B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -14,27 +29,18 @@ service routing protocols model multi-agent ! lacp port-id range 129 256 ! +link tracking group LT_GROUP1 + recovery delay 300 +! hostname MH-LEAF1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MH-LEAF1B ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 310 name Tenant_X_OP_Zone_1 ! @@ -42,14 +48,12 @@ vrf instance MGMT ! vrf instance Tenant_X_OP_Zone ! -link tracking group LT_GROUP1 - recovery delay 300 -! interface Port-Channel10 description server01_ES1_PortChanne1 no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:0001:1010:1010 route-target import 00:01:10:10:10:10 @@ -96,8 +100,9 @@ interface Port-Channel11.104 interface Port-Channel12 description server03_AUTO_ESI_Auto-ESI PortChannel no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:fc87:ae24:2cb3 route-target import fc:87:ae:24:2c:b3 @@ -107,8 +112,9 @@ interface Port-Channel12 interface Port-Channel13 description server04_AUTO_ESI_Profile_Auto-ESI PortChannel from profile no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:29cc:4043:0a29 route-target import 29:cc:40:43:0a:29 @@ -118,8 +124,9 @@ interface Port-Channel13 interface Port-Channel14 description server05_AUTO_ESI_Profile_Override_Auto-ESI PortChannel overridden on server no shutdown - switchport switchport access vlan 310 + switchport mode access + switchport evpn ethernet-segment identifier 0000:0000:010a:010a:010a route-target import 01:0a:01:0a:01:0a @@ -129,9 +136,9 @@ interface Port-Channel14 interface Port-Channel15 description server06_Single_Active_Port_Channel_Single-Active ESI no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:2873:c14b:64ec redundancy single-active @@ -142,9 +149,9 @@ interface Port-Channel15 interface Port-Channel16 description server07_Single_Active_Port_Channel_Manual_DF_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:ec11:73f8:7361 redundancy single-active @@ -155,9 +162,9 @@ interface Port-Channel16 interface Port-Channel20 description server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:47cb:834e:c0c7 redundancy single-active @@ -168,9 +175,9 @@ interface Port-Channel20 interface Port-Channel22 description server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Single-Active ESI with Manual DF no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:d716:1795:361e redundancy single-active @@ -292,12 +299,12 @@ interface Ethernet23 route-target import 26:2b:7d:f9:c9:8b ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.34/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.34/32 ! @@ -308,7 +315,7 @@ interface Loopback100 ip address 10.255.1.34/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.105/24 @@ -340,6 +347,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -391,12 +402,4 @@ router bgp 65152 router-id 192.168.255.34 redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF2A.cfg index feaa7089e7e..44e745aa1f6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MH-LEAF2A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -14,27 +29,18 @@ service routing protocols model multi-agent ! lacp port-id range 257 768 ! +link tracking group Eth-conn-to-router + recovery delay 520 +! hostname MH-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MH-LEAF2A ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 310 name Tenant_X_OP_Zone_1 ! @@ -45,15 +51,12 @@ vrf instance MGMT ! vrf instance Tenant_X_OP_Zone ! -link tracking group Eth-conn-to-router - recovery delay 520 -! interface Port-Channel2 description MH-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 310 switchport mode trunk + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet21 @@ -77,12 +80,12 @@ interface Ethernet10 link tracking group Eth-conn-to-router downstream ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! @@ -93,7 +96,7 @@ interface Loopback100 ip address 10.255.1.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.106/24 @@ -139,6 +142,10 @@ ip prefix-list PL-SVI-VRF-DEFAULT ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route 10.0.0.0/8 10.2.10.100 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-BGP-UNDERLAY-PEERS-OUT deny 10 match ip address prefix-list PL-SVI-VRF-DEFAULT ! @@ -221,12 +228,4 @@ router bgp 65153 router-id 192.168.255.35 redistribute connected ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg index e671d22a5bb..44c5dd1b9ca 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,23 +33,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MLAG-OSPF-L3LEAF1A ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 4094 name MLAG_PEER trunk group MLAG @@ -44,10 +47,10 @@ vrf instance MGMT interface Port-Channel5 description MLAG_PEER_MLAG-OSPF-L3LEAF1B_Po5 no shutdown - switchport switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet18 @@ -72,19 +75,19 @@ interface Ethernet6 channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.36/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.36/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.114/24 @@ -117,6 +120,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -150,12 +157,4 @@ router ospf 100 no passive-interface Vlan4094 max-lsa 12000 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg index 6f17e1b0809..b217a3df0eb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -18,23 +33,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS MLAG-OSPF-L3LEAF1B ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 4094 name MLAG_PEER trunk group MLAG @@ -44,10 +47,10 @@ vrf instance MGMT interface Port-Channel5 description MLAG_PEER_MLAG-OSPF-L3LEAF1A_Po5 no shutdown - switchport switchport mode trunk switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet220 @@ -72,19 +75,19 @@ interface Ethernet6 channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.37/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.36/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.115/24 @@ -117,6 +120,10 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -150,12 +157,4 @@ router ospf 100 no passive-interface Vlan4094 max-lsa 12000 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1A.cfg index 2b4872e4c48..788d90f9191 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,61 +19,57 @@ hostname MLAG_IPV6_L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_MLAG_IPV6_L3LEAF1B_Po5 + description MLAG_MLAG_IPV6_L3LEAF1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_IPV6_L3LEAF1B_Ethernet5 + description MLAG_MLAG_IPV6_L3LEAF1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_IPV6_L3LEAF1B_Ethernet6 + description MLAG_MLAG_IPV6_L3LEAF1B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.116/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -123,7 +128,7 @@ router bgp 65001 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.5 description MLAG_IPV6_L3LEAF1B + neighbor 10.10.224.5 description MLAG_IPV6_L3LEAF1B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -134,11 +139,4 @@ router bgp 65001 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1B.cfg index 813bca47156..7c5e45c9c0e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_IPV6_L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,61 +19,57 @@ hostname MLAG_IPV6_L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_MLAG_IPV6_L3LEAF1A_Po5 + description MLAG_MLAG_IPV6_L3LEAF1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_IPV6_L3LEAF1A_Ethernet5 + description MLAG_MLAG_IPV6_L3LEAF1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_IPV6_L3LEAF1A_Ethernet6 + description MLAG_MLAG_IPV6_L3LEAF1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.36/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.117/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -123,7 +128,7 @@ router bgp 65001 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.4 description MLAG_IPV6_L3LEAF1A + neighbor 10.10.224.4 description MLAG_IPV6_L3LEAF1A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -134,11 +139,4 @@ router bgp 65001 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1A.cfg index bc1a14d3f3b..38534d1faac 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,34 +19,30 @@ hostname MLAG_ODD_ID_L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Po5 + description MLAG_MLAG_ODD_ID_L3LEAF1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Ethernet5 + description MLAG_MLAG_ODD_ID_L3LEAF1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Ethernet6 + description MLAG_MLAG_ODD_ID_L3LEAF1B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -49,29 +54,29 @@ interface Ethernet10 ip address 10.254.255.249/30 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.116/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.2/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -130,7 +135,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.3 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.3 description MLAG_ODD_ID_L3LEAF1B + neighbor 10.10.224.3 description MLAG_ODD_ID_L3LEAF1B_Vlan4093 neighbor 10.254.255.250 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.255.250 remote-as 65123 neighbor 10.254.255.250 description P2P-UPLINKS-IPV4-PREFIX-LENGTH_Ethernet1 @@ -144,11 +149,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1B.cfg index 9537deea011..4a300077bad 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_ODD_ID_L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,34 +19,30 @@ hostname MLAG_ODD_ID_L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Po5 + description MLAG_MLAG_ODD_ID_L3LEAF1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Ethernet5 + description MLAG_MLAG_ODD_ID_L3LEAF1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Ethernet6 + description MLAG_MLAG_ODD_ID_L3LEAF1A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -49,29 +54,29 @@ interface Ethernet10 ip address 10.254.255.253/30 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.36/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.117/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.3/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -128,7 +133,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.2 description MLAG_ODD_ID_L3LEAF1A + neighbor 10.10.224.2 description MLAG_ODD_ID_L3LEAF1A_Vlan4093 neighbor 10.254.255.254 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.255.254 remote-as 65123 neighbor 10.254.255.254 description P2P-UPLINKS-IPV4-PREFIX-LENGTH_Ethernet2 @@ -142,11 +147,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1A.cfg index 701fee7905d..3b4cc75fc8a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname MLAG_SAME_SUBNET_L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 10 name VLAN10 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,35 +39,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Po5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet6 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.32/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.32/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.116/24 @@ -73,20 +78,20 @@ interface Vlan10 ip address virtual 10.10.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST ip address 10.10.224.1/30 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.1/30 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -150,7 +155,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF1B + neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF1B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 10 @@ -173,13 +178,7 @@ router bgp 923 router-id 192.168.255.32 update wait-install neighbor 10.10.224.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF1B_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1B.cfg index edc29ef19b8..c8d19975211 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname MLAG_SAME_SUBNET_L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 10 name VLAN10 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,35 +39,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Po5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet6 + description MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.33/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.32/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.117/24 @@ -73,20 +78,20 @@ interface Vlan10 ip address virtual 10.10.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST ip address 10.10.224.2/30 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.2/30 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -150,7 +155,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF1A + neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF1A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 10 @@ -173,13 +178,7 @@ router bgp 923 router-id 192.168.255.33 update wait-install neighbor 10.10.224.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF1A_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2A.cfg index e25ed8aa862..67bed659e13 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname MLAG_SAME_SUBNET_L3LEAF2A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 10 name VLAN10 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,35 +39,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Po5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet6 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.34/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.34/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.118/24 @@ -73,20 +78,20 @@ interface Vlan10 ip address virtual 10.10.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST ip address 10.10.224.1/30 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.1/30 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -150,7 +155,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.2 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF2B + neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF2B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 10 @@ -173,13 +178,7 @@ router bgp 923 router-id 192.168.255.34 update wait-install neighbor 10.10.224.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.10.224.2 description MLAG_SAME_SUBNET_L3LEAF2B_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2B.cfg index c8fbd83bd43..da55b6769bb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG_SAME_SUBNET_L3LEAF2B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,19 @@ hostname MLAG_SAME_SUBNET_L3LEAF2B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 10 name VLAN10 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -33,35 +39,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Po5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet5 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet6 + description MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.34/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.119/24 @@ -73,20 +78,20 @@ interface Vlan10 ip address virtual 10.10.10.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST ip address 10.10.224.2/30 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.2/30 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -150,7 +155,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF2A + neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF2A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 10 @@ -173,13 +178,7 @@ router bgp 923 router-id 192.168.255.35 update wait-install neighbor 10.10.224.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.10.224.1 description MLAG_SAME_SUBNET_L3LEAF2A_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.cfg index 44cbdfd6b03..ee651c5bc82 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1 ! -no enable password -no aaa root -! vlan 2910 name L2VLAN_2910 ! @@ -24,13 +30,19 @@ vrf instance MGMT ! vrf instance TEST ! +management cvx + no shutdown + server host 192.168.254.254 + server host 192.168.254.255 + source-interface Loopback0 +! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.1/32 ! @@ -72,17 +84,4 @@ router bgp 65001 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management cvx - no shutdown - server host 192.168.254.254 - server host 192.168.254.255 - source-interface Loopback0 -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.cfg index f72f20f756d..da9fa0e71bb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2 ! -no enable password -no aaa root -! vlan 2910 name L2VLAN_2910 ! @@ -24,13 +30,19 @@ vrf instance MGMT ! vrf instance TEST ! +management cvx + no shutdown + server host 192.168.254.254 + server host 192.168.254.255 + source-interface Loopback0 +! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.2/32 ! @@ -72,17 +84,4 @@ router bgp 65002 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management cvx - no shutdown - server host 192.168.254.254 - server host 192.168.254.255 - source-interface Loopback0 -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.cfg index c558cfc70c3..f1c11a1a2c3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,29 +19,20 @@ hostname OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! cvx no shutdown peer host 192.168.254.255 + ! service vxlan no shutdown ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.254.254/23 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.cfg index b8c91eabd86..2a95211a219 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,29 +19,20 @@ hostname OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! cvx no shutdown peer host 192.168.254.254 + ! service vxlan no shutdown ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.254.255/23 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.cfg index fbaa9ce24ed..f1560daaf2d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1 ! -no enable password -no aaa root -! vlan 2900 name L2VLAN_ON_ALL_LEAFS ! @@ -34,12 +40,12 @@ vrf instance MGMT vrf instance TEST ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.1/32 ! @@ -63,16 +69,16 @@ interface Vxlan1 vxlan source-interface Loopback1 vxlan udp-port 4789 vxlan vlan 2900 vni 12900 - vxlan vlan 2900 flood vtep 192.168.253.2 192.168.253.3 vxlan vlan 2901 vni 12901 - vxlan vlan 2901 flood vtep vxlan vlan 2902 vni 12902 - vxlan vlan 2902 flood vtep 192.168.253.2 vxlan vlan 3900 vni 13900 - vxlan vlan 3900 flood vtep 192.168.253.2 192.168.253.3 vxlan vlan 3901 vni 13901 - vxlan vlan 3901 flood vtep vxlan vlan 3902 vni 13902 + vxlan vlan 2900 flood vtep 192.168.253.2 192.168.253.3 + vxlan vlan 2901 flood vtep + vxlan vlan 2902 flood vtep 192.168.253.2 + vxlan vlan 3900 flood vtep 192.168.253.2 192.168.253.3 + vxlan vlan 3901 flood vtep vxlan vlan 3902 flood vtep 192.168.253.2 ! ip routing @@ -99,11 +105,4 @@ router bgp 65001 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.cfg index 4ab77857972..881e90f9069 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2 ! -no enable password -no aaa root -! vlan 2900 name L2VLAN_ON_ALL_LEAFS ! @@ -34,12 +40,12 @@ vrf instance MGMT vrf instance TEST ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.2/32 ! @@ -63,16 +69,16 @@ interface Vxlan1 vxlan source-interface Loopback1 vxlan udp-port 4789 vxlan vlan 2900 vni 12900 - vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.3 vxlan vlan 2902 vni 12902 - vxlan vlan 2902 flood vtep 192.168.253.1 vxlan vlan 2903 vni 12903 - vxlan vlan 2903 flood vtep 192.168.253.3 vxlan vlan 3900 vni 13900 - vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.3 vxlan vlan 3902 vni 13902 - vxlan vlan 3902 flood vtep 192.168.253.1 vxlan vlan 3903 vni 13903 + vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.3 + vxlan vlan 2902 flood vtep 192.168.253.1 + vxlan vlan 2903 flood vtep 192.168.253.3 + vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.3 + vxlan vlan 3902 flood vtep 192.168.253.1 vxlan vlan 3903 flood vtep 192.168.253.3 ! ip routing @@ -99,11 +105,4 @@ router bgp 65002 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.cfg index 89e7d7bff6b..7aa2f032eb6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 2900 name L2VLAN_ON_ALL_LEAFS ! @@ -20,8 +26,8 @@ vlan 2903 name L2VLAN_ON_LEAF2-3 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 3900 name SVI_ON_ALL_LEAFS @@ -30,11 +36,11 @@ vlan 3903 name SVI_ON_LEAF2-3 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -42,35 +48,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel1 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Po1 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Port-Channel1 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Eth1 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth1 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth1 no shutdown channel-group 1 mode active ! interface Eth2 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth2 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth2 no shutdown channel-group 1 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.3/32 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST @@ -87,13 +92,13 @@ interface Vlan3903 vrf TEST ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 192.168.253.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -104,12 +109,12 @@ interface Vxlan1 vxlan source-interface Loopback1 vxlan udp-port 4789 vxlan vlan 2900 vni 12900 - vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 2903 vni 12903 - vxlan vlan 2903 flood vtep 192.168.253.2 192.168.253.3 vxlan vlan 3900 vni 13900 - vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 3903 vni 13903 + vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 + vxlan vlan 2903 flood vtep 192.168.253.2 192.168.253.3 + vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 3903 flood vtep 192.168.253.2 192.168.253.3 ! ip routing @@ -151,18 +156,11 @@ router bgp 65003 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.253.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.253.5 description OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B + neighbor 192.168.253.5 description OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.cfg index 21360aec6ee..30726e54f0d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 2900 name L2VLAN_ON_ALL_LEAFS ! @@ -20,8 +26,8 @@ vlan 2903 name L2VLAN_ON_LEAF2-3 ! vlan 3000 - name MLAG_iBGP_TEST - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TEST + trunk group MLAG ! vlan 3900 name SVI_ON_ALL_LEAFS @@ -30,11 +36,11 @@ vlan 3903 name SVI_ON_LEAF2-3 ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -42,35 +48,34 @@ vrf instance MGMT vrf instance TEST ! interface Port-Channel1 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Po1 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Port-Channel1 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Eth1 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth1 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth1 no shutdown channel-group 1 mode active ! interface Eth2 - description MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth2 + description MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth2 no shutdown channel-group 1 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.254.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.253.3/32 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf TEST + description MLAG_L3_VRF_TEST no shutdown mtu 9214 vrf TEST @@ -87,13 +92,13 @@ interface Vlan3903 vrf TEST ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 192.168.253.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -104,12 +109,12 @@ interface Vxlan1 vxlan source-interface Loopback1 vxlan udp-port 4789 vxlan vlan 2900 vni 12900 - vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 2903 vni 12903 - vxlan vlan 2903 flood vtep 192.168.253.2 192.168.253.3 vxlan vlan 3900 vni 13900 - vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 3903 vni 13903 + vxlan vlan 2900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 + vxlan vlan 2903 flood vtep 192.168.253.2 192.168.253.3 + vxlan vlan 3900 flood vtep 192.168.253.1 192.168.253.2 192.168.253.3 vxlan vlan 3903 flood vtep 192.168.253.2 192.168.253.3 ! ip routing @@ -151,18 +156,11 @@ router bgp 65003 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.253.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.253.4 description OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A + neighbor 192.168.253.4 description OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1A.cfg index 39212b05785..b37d6d00cd1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,61 +19,57 @@ hostname OVERRIDE_VTEP_L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Po5 + description MLAG_OVERRIDE_VTEP_L3LEAF1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Ethernet5 + description MLAG_OVERRIDE_VTEP_L3LEAF1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Ethernet6 + description MLAG_OVERRIDE_VTEP_L3LEAF1B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.35/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.35/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.116/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -123,7 +128,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.5 description OVERRIDE_VTEP_L3LEAF1B + neighbor 10.10.224.5 description OVERRIDE_VTEP_L3LEAF1B_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -134,11 +139,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1B.cfg index 2fb3482b267..9a6bd2db344 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/OVERRIDE_VTEP_L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,56 +19,52 @@ hostname OVERRIDE_VTEP_L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Po5 + description MLAG_OVERRIDE_VTEP_L3LEAF1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet5 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Ethernet5 + description MLAG_OVERRIDE_VTEP_L3LEAF1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Ethernet6 + description MLAG_OVERRIDE_VTEP_L3LEAF1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.36/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.117/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.10.224.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -111,7 +116,7 @@ router bgp 923 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.10.224.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.10.224.4 description OVERRIDE_VTEP_L3LEAF1A + neighbor 10.10.224.4 description OVERRIDE_VTEP_L3LEAF1A_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -122,11 +127,4 @@ router bgp 923 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.cfg index 2b5a54f52bd..811e042b5c4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname P2P-UPLINKS-IPV4-PREFIX-LENGTH ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -30,7 +36,7 @@ interface Ethernet2 ip address 10.254.255.254/30 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.254.32/32 ! @@ -76,11 +82,4 @@ router bgp 65123 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.cfg index 92745adee36..770cf43c1f8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF1 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -146,11 +152,4 @@ router bgp 65001 router-id 192.168.255.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.cfg index 62039962149..d322076fb74 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF2 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -146,11 +152,4 @@ router bgp 65002 router-id 192.168.255.2 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.cfg index 23a89949fea..a1b4b50c7f2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF3 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -146,11 +152,4 @@ router bgp 65003 router-id 192.168.255.3 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.cfg index 9664a91e915..1d1dbe1872f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF4 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -146,11 +152,4 @@ router bgp 65004 router-id 192.168.255.4 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.cfg index c621fee8b08..268e5718bf1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF5 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -146,11 +152,4 @@ router bgp 65005 router-id 192.168.255.5 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.cfg index 8d65dc008ce..0c61a5c7c0b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF6 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -146,11 +152,4 @@ router bgp 65006 router-id 192.168.255.6 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.cfg index 25a51e4475f..897c8ec97ec 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname RD-RT-ADMIN-SUBFIELD-L3LEAF7 ! -no enable password -no aaa root -! vlan 1 name VLAN_1 ! @@ -29,17 +35,17 @@ vrf instance TEST1 description TEST1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -146,11 +152,4 @@ router bgp 65007 router-id 192.168.255.7 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0A.cfg index db8c0dad4b6..3a61a989613 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,34 +19,31 @@ hostname SL-LEAF0A ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF0B_Po25 + description MLAG_SL-LEAF0B_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet25 - description MLAG_PEER_SL-LEAF0B_Ethernet25 + description MLAG_SL-LEAF0B_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF0B_Ethernet26 + description MLAG_SL-LEAF0B_Ethernet26 no shutdown channel-group 25 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -52,11 +58,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0B.cfg index 4201c2c2360..d154a351c1a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF0B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,43 +19,42 @@ hostname SL-LEAF0B ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF0A_Po25 + description MLAG_SL-LEAF0A_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel27 description SL-LEAF1_Po27 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport + mlag 27 ! interface Port-Channel41 description SL-LEAF2_Po41 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport + mlag 41 ! interface Ethernet25 - description MLAG_PEER_SL-LEAF0A_Ethernet25 + description MLAG_SL-LEAF0A_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF0A_Ethernet26 + description MLAG_SL-LEAF0A_Ethernet26 no shutdown channel-group 25 mode active ! @@ -81,7 +89,7 @@ interface Ethernet44 channel-group 41 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -96,11 +104,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1A.cfg index add306fd871..dc77193b4c9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,44 +19,42 @@ hostname SL-LEAF1A ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF1B_Po25 + description MLAG_SL-LEAF1B_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel27 description SL-LEAF0_Po27 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 27 ! interface Port-Channel28 description SL-MLEAF1_Po16 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport + mlag 28 ! interface Ethernet25 - description MLAG_PEER_SL-LEAF1B_Ethernet25 + description MLAG_SL-LEAF1B_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF1B_Ethernet26 + description MLAG_SL-LEAF1B_Ethernet26 no shutdown channel-group 25 mode active ! @@ -62,7 +69,7 @@ interface Ethernet28 channel-group 28 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -77,11 +84,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1B.cfg index 8013e2aa089..d125a4c0b21 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,37 +19,34 @@ hostname SL-LEAF1B ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF1A_Po25 + description MLAG_SL-LEAF1A_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel27 description SL-LEAF0_Po27 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 27 ! interface Ethernet25 - description MLAG_PEER_SL-LEAF1A_Ethernet25 + description MLAG_SL-LEAF1A_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF1A_Ethernet26 + description MLAG_SL-LEAF1A_Ethernet26 no shutdown channel-group 25 mode active ! @@ -50,7 +56,7 @@ interface Ethernet27 channel-group 27 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -65,11 +71,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2A.cfg index 958ad1a120f..f603f5e2a2e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,37 +19,34 @@ hostname SL-LEAF2A ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF2B_Po25 + description MLAG_SL-LEAF2B_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel41 description SL-LEAF0_Po41 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 41 ! interface Ethernet25 - description MLAG_PEER_SL-LEAF2B_Ethernet25 + description MLAG_SL-LEAF2B_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF2B_Ethernet26 + description MLAG_SL-LEAF2B_Ethernet26 no shutdown channel-group 25 mode active ! @@ -55,7 +61,7 @@ interface Ethernet42 channel-group 41 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -70,11 +76,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2B.cfg index 2124a7d0458..065d790c0ba 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-LEAF2B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,37 +19,34 @@ hostname SL-LEAF2B ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel25 - description MLAG_PEER_SL-LEAF2A_Po25 + description MLAG_SL-LEAF2A_Port-Channel25 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel41 description SL-LEAF0_Po41 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 41 ! interface Ethernet25 - description MLAG_PEER_SL-LEAF2A_Ethernet25 + description MLAG_SL-LEAF2A_Ethernet25 no shutdown channel-group 25 mode active ! interface Ethernet26 - description MLAG_PEER_SL-LEAF2A_Ethernet26 + description MLAG_SL-LEAF2A_Ethernet26 no shutdown channel-group 25 mode active ! @@ -55,7 +61,7 @@ interface Ethernet42 channel-group 41 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -70,11 +76,4 @@ mlag configuration reload-delay mlag 300 reload-delay non-mlag 330 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-MLEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-MLEAF1.cfg index a30f6bb8282..2795c24e581 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-MLEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SL-MLEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,17 +17,14 @@ service routing protocols model multi-agent ! hostname SL-MLEAF1 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel16 description SL-LEAF1_Po28 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport ! interface Ethernet16 description SL-LEAF1A_Ethernet28 @@ -26,11 +32,4 @@ interface Ethernet16 channel-group 16 mode active no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_AUTOGEN_ENGINEID.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_AUTOGEN_ENGINEID.cfg index 87dc7f23a00..77f8ff92223 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_AUTOGEN_ENGINEID.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_AUTOGEN_ENGINEID.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,24 +20,14 @@ hostname SNMP_AUTOGEN_ENGINEID snmp-server engineID local b15232eaf6bc559592706126b70a23d1b83689f0 snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS SNMP_AUTOGEN_ENGINEID -snmp-server user usertest-auth-priv usergroup v3 localized b15232eaf6bc559592706126b70a23d1b83689f0 auth sha 60f32944b903a3ce852d06af305ff2ebc2060661 priv aes192 b5a97cab6f9ab410a3d10474fe18f9ee421aa501889bc448 snmp-server user usertest-auth-no-priv usergroup v3 localized b15232eaf6bc559592706126b70a23d1b83689f0 auth sha512 e7eb2e3801626626f7473f38a365b1b4e2973132cab96e1fb1263b56a9d7a597498e9cdc73da6b62bdd850998cfbd609bdf1c1f4bb85af909dba6cea13abd165 +snmp-server user usertest-auth-priv usergroup v3 localized b15232eaf6bc559592706126b70a23d1b83689f0 auth sha 60f32944b903a3ce852d06af305ff2ebc2060661 priv aes192 b5a97cab6f9ab410a3d10474fe18f9ee421aa501889bc448 snmp-server user usertest-no-auth-no-priv usergroup v3 snmp-server user usertest-v2c usergroup v2c ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_1.cfg index ebcb1a4b0da..ddac535d821 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,22 +20,12 @@ hostname SNMP_SYSTEM_MAC_ENGINEID_1 snmp-server engineID local f5717f42424242424200 snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS SNMP_SYSTEM_MAC_ENGINEID_1 -snmp-server user usertest-auth-priv usergroup v3 localized f5717f42424242424200 auth sha 6c3164e279e6606e37028356bfbe9f1d0ad65ec1 priv aes192 cf2421b898bda979625eb46b766dce3e13044c78633b2762 snmp-server user usertest-auth-no-priv usergroup v3 localized f5717f42424242424200 auth sha512 004b542796d9c64301dfba392a9484ef6c5c46e5091ede1551756c71c507cf36e970dda92b250fbbc693162a3c8759e181432ea0d5a08d7492588a16b51c66ee +snmp-server user usertest-auth-priv usergroup v3 localized f5717f42424242424200 auth sha 6c3164e279e6606e37028356bfbe9f1d0ad65ec1 priv aes192 cf2421b898bda979625eb46b766dce3e13044c78633b2762 snmp-server user usertest-no-auth-no-priv usergroup v3 snmp-server user usertest-v2c usergroup v2c ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_2.cfg index bc06395b3ff..12ad45f981e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SNMP_SYSTEM_MAC_ENGINEID_2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,22 +20,12 @@ hostname SNMP_SYSTEM_MAC_ENGINEID_2 snmp-server engineID local f5717f1234567890ab00 snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS SNMP_SYSTEM_MAC_ENGINEID_2 -snmp-server user usertest-auth-priv usergroup v3 localized f5717f1234567890ab00 auth sha 70aa970bd9af7f0974d6dc42217b8dc1b92926e5 priv aes192 95943c2756fdbb26473d26269ce768c8bef9878ae11ecac6 snmp-server user usertest-auth-no-priv usergroup v3 localized f5717f1234567890ab00 auth sha512 c92079ed25e87b19bb1ad66d0898847dc5801974143e32442e727ba9220db8199d9d5cf099d8b00e202c36b56802c9a592b8d9a83fbc83775a746ef0108bddef +snmp-server user usertest-auth-priv usergroup v3 localized f5717f1234567890ab00 auth sha 70aa970bd9af7f0974d6dc42217b8dc1b92926e5 priv aes192 95943c2756fdbb26473d26269ce768c8bef9878ae11ecac6 snmp-server user usertest-no-auth-no-priv usergroup v3 snmp-server user usertest-v2c usergroup v2c ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_1.cfg index 26a047219a6..792e89f8498 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,9 +21,6 @@ service routing protocols model multi-agent ! hostname SVI_PROFILE_NODE_1 ! -no enable password -no aaa root -! vlan 110 name svi_profile_tests_110_description ! @@ -80,30 +86,36 @@ vrf instance MGMT vrf instance svi_profile_tests_vrf ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.1/32 ! interface Vlan110 description set from structured_config on svi.nodes[inventory_hostname].structured_config no shutdown + mtu 1000 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.10.1/24 ! interface Vlan111 description set from structured_config on svi_profile.nodes[inventory_hostname].structured_config no shutdown + mtu 1000 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.11.1/24 ! interface Vlan112 description set from structured_config on svi_parent_profile.nodes[inventory_hostname].structured_config no shutdown + mtu 1200 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.12.1/24 ! @@ -382,11 +394,4 @@ router ospf 1 vrf svi_profile_tests_vrf max-lsa 15000 redistribute bgp ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_2.cfg index 7de910b985b..95e55c5d4d5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/SVI_PROFILE_NODE_2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,9 +21,6 @@ service routing protocols model multi-agent ! hostname SVI_PROFILE_NODE_2 ! -no enable password -no aaa root -! vlan 110 name svi_profile_tests_110_description ! @@ -80,30 +86,36 @@ vrf instance MGMT vrf instance svi_profile_tests_vrf ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.1/32 ! interface Vlan110 description set from structured_config on svi.nodes[inventory_hostname].structured_config no shutdown + mtu 1000 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.10.1/24 ! interface Vlan111 description set from structured_config on svi_profile.nodes[inventory_hostname].structured_config no shutdown + mtu 1000 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.11.1/24 ! interface Vlan112 description set from structured_config on svi_parent_profile.nodes[inventory_hostname].structured_config no shutdown + mtu 1200 + no autostate vrf svi_profile_tests_vrf ip address virtual 10.1.12.1/24 ! @@ -303,11 +315,4 @@ router ospf 1 vrf svi_profile_tests_vrf max-lsa 15000 redistribute bgp ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.cfg index 774dbdb553d..37778fc7af8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,13 +17,10 @@ service routing protocols model multi-agent ! hostname TEST-MGMT-GATEWAY-IN-NODE-GROUP ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.202/24 @@ -26,11 +32,4 @@ ip route vrf MGMT 0.0.0.0/0 192.168.201.254 ! ipv6 route vrf MGMT ::/0 2001:db8::2 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L2LEAF1A.cfg index b2400702829..fc41eefe866 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L2LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,17 +17,14 @@ service routing protocols model multi-agent ! hostname UNDERLAY-MULTICAST-L2LEAF1A ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel1 description DC1_LEAF1_Po6 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport ! interface Ethernet1 description UNDERLAY-MULTICAST-L3LEAF1A_Ethernet6 @@ -26,7 +32,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -34,11 +40,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1A.cfg index 0a6e070a866..42f31ed8f77 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,34 +19,29 @@ hostname UNDERLAY-MULTICAST-L3LEAF1A ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Po3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel6 description UNDERLAY-MULTICAST-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk - mlag 6 + switchport ! interface Ethernet1 description P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet1 @@ -55,12 +59,12 @@ interface Ethernet2 ip address 172.31.255.3/31 ! interface Ethernet3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet4 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ! @@ -70,12 +74,12 @@ interface Ethernet6 channel-group 6 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -88,20 +92,20 @@ interface Loopback4 ip address 192.168.200.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.0/31 pim ipv4 sparse-mode ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -181,7 +185,7 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.1 description UNDERLAY-MULTICAST-L3LEAF1B + neighbor 10.255.251.1 description UNDERLAY-MULTICAST-L3LEAF1B_Vlan4093 neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.0 remote-as 65001 neighbor 172.31.255.0 description UNDERLAY-MULTICAST-SPINE1_Ethernet1 @@ -190,10 +194,10 @@ router bgp 65101 neighbor 172.31.255.2 description UNDERLAY-MULTICAST-SPINE2_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1 + neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2 + neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -218,11 +222,4 @@ router pim sparse-mode anycast-rp 192.168.200.4 192.168.255.3 anycast-rp 192.168.200.4 192.168.255.4 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1B.cfg index 0642c08b73c..a5a000ea865 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,26 +19,22 @@ hostname UNDERLAY-MULTICAST-L3LEAF1B ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Po3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet2 @@ -47,22 +52,22 @@ interface Ethernet2 ip address 172.31.255.7/31 ! interface Ethernet3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet4 + description MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -71,20 +76,20 @@ interface Loopback4 ip address 192.168.200.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.1/31 pim ipv4 sparse-mode ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -163,7 +168,7 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.0 description UNDERLAY-MULTICAST-L3LEAF1A + neighbor 10.255.251.0 description UNDERLAY-MULTICAST-L3LEAF1A_Vlan4093 neighbor 172.31.255.4 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.4 remote-as 65001 neighbor 172.31.255.4 description UNDERLAY-MULTICAST-SPINE1_Ethernet2 @@ -172,10 +177,10 @@ router bgp 65101 neighbor 172.31.255.6 description UNDERLAY-MULTICAST-SPINE2_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1 + neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2 + neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -200,11 +205,4 @@ router pim sparse-mode anycast-rp 192.168.200.4 192.168.255.3 anycast-rp 192.168.200.4 192.168.255.4 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2A.cfg index aee4751ed6f..71e5c0afe6c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,18 @@ hostname UNDERLAY-MULTICAST-L3LEAF2A ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Po3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet3 @@ -43,22 +48,22 @@ interface Ethernet2 ip address 172.31.255.11/31 ! interface Ethernet3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet4 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! @@ -67,13 +72,13 @@ interface Loopback5 ip address 192.168.200.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -153,7 +158,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.252.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.252.5 description UNDERLAY-MULTICAST-L3LEAF2B + neighbor 10.255.252.5 description UNDERLAY-MULTICAST-L3LEAF2B_Vlan4094 neighbor 172.31.255.8 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.8 remote-as 65001 neighbor 172.31.255.8 description UNDERLAY-MULTICAST-SPINE1_Ethernet3 @@ -162,10 +167,10 @@ router bgp 65102 neighbor 172.31.255.10 description UNDERLAY-MULTICAST-SPINE2_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1 + neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2 + neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -196,11 +201,4 @@ router msdp local-interface Loopback0 description UNDERLAY-MULTICAST-L3LEAF2B ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2B.cfg index c7cacc2596b..b29f7f0b784 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-L3LEAF2B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,22 +19,18 @@ hostname UNDERLAY-MULTICAST-L3LEAF2B ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Po3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet4 @@ -43,22 +48,22 @@ interface Ethernet2 ip address 172.31.255.15/31 ! interface Ethernet3 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet3 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet4 + description MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! @@ -67,13 +72,13 @@ interface Loopback5 ip address 192.168.200.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -153,7 +158,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.252.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.252.4 description UNDERLAY-MULTICAST-L3LEAF2A + neighbor 10.255.252.4 description UNDERLAY-MULTICAST-L3LEAF2A_Vlan4094 neighbor 172.31.255.12 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.12 remote-as 65001 neighbor 172.31.255.12 description UNDERLAY-MULTICAST-SPINE1_Ethernet4 @@ -162,10 +167,10 @@ router bgp 65102 neighbor 172.31.255.14 description UNDERLAY-MULTICAST-SPINE2_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1 + neighbor 192.168.255.1 description UNDERLAY-MULTICAST-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2 + neighbor 192.168.255.2 description UNDERLAY-MULTICAST-SPINE2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -196,11 +201,4 @@ router msdp local-interface Loopback0 description UNDERLAY-MULTICAST-L3LEAF2A ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE1.cfg index c35a2acd7d6..782a2fed95f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UNDERLAY-MULTICAST-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -48,12 +54,12 @@ interface Ethernet4 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -113,16 +119,16 @@ router bgp 65001 neighbor 172.31.255.13 description UNDERLAY-MULTICAST-L3LEAF2B_Ethernet1 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description UNDERLAY-MULTICAST-L3LEAF1A + neighbor 192.168.255.3 description UNDERLAY-MULTICAST-L3LEAF1A_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description UNDERLAY-MULTICAST-L3LEAF1B + neighbor 192.168.255.4 description UNDERLAY-MULTICAST-L3LEAF1B_Loopback0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65102 - neighbor 192.168.255.5 description UNDERLAY-MULTICAST-L3LEAF2A + neighbor 192.168.255.5 description UNDERLAY-MULTICAST-L3LEAF2A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description UNDERLAY-MULTICAST-L3LEAF2B + neighbor 192.168.255.6 description UNDERLAY-MULTICAST-L3LEAF2B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -144,11 +150,4 @@ router pim sparse-mode rp address 192.168.200.4 access-list RP_ACL_4 rp address 192.168.200.5 access-list RP_ACL_5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE2.cfg index e873bc395dc..96fcbc87108 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY-MULTICAST-SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UNDERLAY-MULTICAST-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -44,12 +50,12 @@ interface Ethernet4 ip address 172.31.255.14/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -97,16 +103,16 @@ router bgp 65001 neighbor 172.31.255.15 description UNDERLAY-MULTICAST-L3LEAF2B_Ethernet2 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description UNDERLAY-MULTICAST-L3LEAF1A + neighbor 192.168.255.3 description UNDERLAY-MULTICAST-L3LEAF1A_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description UNDERLAY-MULTICAST-L3LEAF1B + neighbor 192.168.255.4 description UNDERLAY-MULTICAST-L3LEAF1B_Loopback0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65102 - neighbor 192.168.255.5 description UNDERLAY-MULTICAST-L3LEAF2A + neighbor 192.168.255.5 description UNDERLAY-MULTICAST-L3LEAF2A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description UNDERLAY-MULTICAST-L3LEAF2B + neighbor 192.168.255.6 description UNDERLAY-MULTICAST-L3LEAF2B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -116,11 +122,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.cfg index c51b787871d..7b6d51c9734 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname UNDERLAY_FILTER_PEER_AS_L3LEAF1 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -28,12 +34,12 @@ interface Ethernet2 ip address 192.168.0.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -73,11 +79,4 @@ router bgp 65001 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE1.cfg index 655ab6ac517..a8c513a66ad 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UNDERLAY_FILTER_PEER_AS_SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -23,7 +29,7 @@ interface Ethernet1 ip address 192.168.0.0/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! @@ -58,11 +64,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE2.cfg index e291ab933d5..c0b5b097e79 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UNDERLAY_FILTER_PEER_AS_SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UNDERLAY_FILTER_PEER_AS_SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -23,7 +29,7 @@ interface Ethernet1 ip address 192.168.0.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! @@ -58,11 +64,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.cfg index dc0a7d3f52f..625e7197953 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +21,8 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -24,21 +30,21 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF1_Po5 no shutdown - switchport - switchport trunk allowed vlan none switchport trunk native vlan tag + switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 storm-control broadcast level 25 storm-control unknown-unicast level 25 ! interface Port-Channel3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Po3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Port-Channel3 no shutdown - switchport switchport trunk native vlan tag switchport mode trunk switchport trunk group MLAG + switchport storm-control broadcast level 25 storm-control unknown-unicast level 25 ! @@ -53,23 +59,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet4 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.201/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -86,11 +92,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.cfg index 797b24825e8..3c584f9e343 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,11 +21,8 @@ spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -24,21 +30,21 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF1_Po5 no shutdown - switchport - switchport trunk allowed vlan none switchport trunk native vlan tag + switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 storm-control broadcast level 25 storm-control unknown-unicast level 25 ! interface Port-Channel3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Po3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Port-Channel3 no shutdown - switchport switchport trunk native vlan tag switchport mode trunk switchport trunk group MLAG + switchport storm-control broadcast level 25 storm-control unknown-unicast level 25 ! @@ -53,23 +59,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet4 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.201.201/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -86,11 +92,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.cfg index 881e651027b..350ac15788f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,34 +21,30 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Po3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 description UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1_Po1 no shutdown - switchport - switchport trunk allowed vlan none switchport trunk native vlan tag + switchport trunk allowed vlan none switchport mode trunk + switchport mlag 5 storm-control broadcast level 25 storm-control unknown-unicast level 25 @@ -53,12 +58,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Ethernet3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet4 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ! @@ -73,23 +78,23 @@ interface Ethernet6 channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.0/31 @@ -157,13 +162,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.1 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B + neighbor 10.255.251.1 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Vlan4093 neighbor 172.31.255.0 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.0 remote-as 65001 neighbor 172.31.255.0 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 + neighbor 192.168.255.1 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -174,11 +179,4 @@ router bgp 65101 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.cfg index 701d1607505..061f669ef2a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -12,34 +21,30 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Po3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 description UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1_Po1 no shutdown - switchport - switchport trunk allowed vlan none switchport trunk native vlan tag + switchport trunk allowed vlan none switchport mode trunk + switchport mlag 5 storm-control broadcast level 25 storm-control unknown-unicast level 25 @@ -53,12 +58,12 @@ interface Ethernet1 pim ipv4 sparse-mode ! interface Ethernet3 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet3 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet4 + description MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ! @@ -73,23 +78,23 @@ interface Ethernet6 channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.251.1/31 @@ -157,13 +162,13 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.251.0 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A + neighbor 10.255.251.0 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Vlan4093 neighbor 172.31.255.2 peer group IPv4-UNDERLAY-PEERS neighbor 172.31.255.2 remote-as 65001 neighbor 172.31.255.2 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 + neighbor 192.168.255.1 description UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -174,11 +179,4 @@ router bgp 65101 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.cfg index eaf1360d339..9502572d6f0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -32,12 +38,12 @@ interface Ethernet2 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -79,10 +85,10 @@ router bgp 65001 neighbor 172.31.255.3 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet1 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65101 - neighbor 192.168.255.3 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A + neighbor 192.168.255.3 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65101 - neighbor 192.168.255.4 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B + neighbor 192.168.255.4 description UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -92,11 +98,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.cfg index b47f6939d9b..aff506e10b6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname UPLINK_P2P_VRFS_TESTS_L2LEAF1 ! -no enable password -no aaa root -! vlan 66 name TEST-L2VLAN-ATTRACTION ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description UPLINK_P2P_VRFS_TESTS_LEAF1_Po51 no shutdown - switchport switchport trunk allowed vlan 66 switchport mode trunk + switchport ! interface Ethernet1 description UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet51 @@ -38,11 +44,4 @@ interface Ethernet10 switchport no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_LEAF1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_LEAF1.cfg index 56bda971445..a799543e10d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_LEAF1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_LEAF1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname UPLINK_P2P_VRFS_TESTS_LEAF1 ! -no enable password -no aaa root -! vlan 66 name TEST-L2VLAN-ATTRACTION ! @@ -25,9 +31,9 @@ vrf instance PROD interface Port-Channel51 description UPLINK_P2P_VRFS_TESTS_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 66 switchport mode trunk + switchport ! interface Ethernet1 description P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_SPINE1_Ethernet1 @@ -88,7 +94,7 @@ interface Ethernet52 channel-group 51 mode active ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.3/32 ! @@ -149,11 +155,4 @@ router bgp 65000 neighbor 10.42.42.10 description UPLINK_P2P_VRFS_TESTS_SPINE2_Ethernet2.42_vrf_PROD redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE1.cfg index 8864701a7c2..7be97e113a7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UPLINK_P2P_VRFS_TESTS_SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! vrf instance ONLY-ON-L2LEAF @@ -44,7 +50,7 @@ interface Ethernet1.66 ip address 10.42.42.8/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -81,11 +87,4 @@ router bgp 65000 neighbor 10.42.42.9 peer group IPv4-UNDERLAY-PEERS neighbor 10.42.42.9 description UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet1.42_vrf_PROD ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE2.cfg index 11b916de813..68b22b0952b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/UPLINK_P2P_VRFS_TESTS_SPINE2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname UPLINK_P2P_VRFS_TESTS_SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT @@ -44,7 +50,7 @@ interface Ethernet2.100 ip address 10.42.42.10/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.2/32 ! @@ -81,11 +87,4 @@ router bgp 65000 neighbor 10.42.42.11 peer group IPv4-UNDERLAY-PEERS neighbor 10.42.42.11 description UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet2.42_vrf_PROD ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/always-configure-ip-routing.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/always-configure-ip-routing.cfg index 998be9f1508..d9918607764 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/always-configure-ip-routing.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/always-configure-ip-routing.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname always-configure-ip-routing ! -no enable password -no aaa root -! vrf instance MGMT ! ip routing ipv6 interfaces @@ -18,11 +24,4 @@ no ip routing vrf MGMT ! ipv6 unicast-routing ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-1.cfg new file mode 100644 index 00000000000..db66de6884d --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-1.cfg @@ -0,0 +1,117 @@ +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +vlan internal order ascending range 1006 1199 +! +transceiver qsfp default-mode 4x10G +! +service routing protocols model multi-agent +! +hostname bgp-from-network-services-1 +! +spanning-tree mode none +no spanning-tree vlan-id 4093-4094 +! +vlan 3099 + name MLAG_L3_VRF_default + trunk group MLAG +! +vlan 4094 + name MLAG + trunk group MLAG +! +vrf instance MGMT +! +interface Port-Channel10 + description MLAG_bgp-from-network-services-2_Port-Channel10 + no shutdown + switchport mode trunk + switchport trunk group MLAG + switchport +! +interface Ethernet10 + description MLAG_bgp-from-network-services-2_Ethernet10 + no shutdown + channel-group 10 mode active +! +interface Ethernet47 + no shutdown + no switchport + ip address 10.10.1.1/30 +! +interface Loopback0 + description ROUTER_ID + no shutdown + ip address 192.0.255.1/32 +! +interface Management1 + description OOB_MANAGEMENT + no shutdown + vrf MGMT + ip address 10.1.1.1/24 +! +interface Vlan3099 + description MLAG_L3_VRF_default + no shutdown + mtu 9214 + vrf default + ip address 10.10.20.0/31 +! +interface Vlan4094 + description MLAG + no shutdown + mtu 9214 + no autostate + ip address 10.10.10.0/31 +! +ip routing +no ip routing vrf MGMT +! +mlag configuration + domain-id GROUP1 + local-interface Vlan4094 + peer-address 10.10.10.1 + peer-link Port-Channel10 + reload-delay mlag 300 + reload-delay non-mlag 330 +! +ip route 0.0.0.0 10.10.1.1 +! +route-map RM-MLAG-PEER-IN permit 10 + description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing + set origin incomplete +! +router bgp 65001 + router-id 192.0.255.1 + maximum-paths 4 ecmp 4 + update wait-install + no bgp default ipv4-unicast + neighbor MLAG-IPv4-UNDERLAY-PEER peer group + neighbor MLAG-IPv4-UNDERLAY-PEER remote-as 65001 + neighbor MLAG-IPv4-UNDERLAY-PEER next-hop-self + neighbor MLAG-IPv4-UNDERLAY-PEER description bgp-from-network-services-2 + neighbor MLAG-IPv4-UNDERLAY-PEER send-community + neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 + neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in + neighbor MYPEERGROUP peer group + neighbor MYPEERGROUP remote-as 65991 + neighbor MYPEERGROUP next-hop-self + neighbor MYPEERGROUP bfd + neighbor 10.10.1.2 peer group MYPEERGROUP + neighbor 10.10.20.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.10.20.1 description bgp-from-network-services-2_Vlan3099 + redistribute connected + ! + address-family ipv4 + neighbor MLAG-IPv4-UNDERLAY-PEER activate + neighbor 10.10.1.2 activate +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-2.cfg new file mode 100644 index 00000000000..48111197c37 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-from-network-services-2.cfg @@ -0,0 +1,70 @@ +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +vlan internal order ascending range 1006 1199 +! +transceiver qsfp default-mode 4x10G +! +service routing protocols model multi-agent +! +hostname bgp-from-network-services-2 +! +spanning-tree mode none +no spanning-tree vlan-id 4093-4094 +! +vlan 4094 + name MLAG + trunk group MLAG +! +vrf instance MGMT +! +interface Port-Channel10 + description MLAG_bgp-from-network-services-1_Port-Channel10 + no shutdown + switchport mode trunk + switchport trunk group MLAG + switchport +! +interface Ethernet10 + description MLAG_bgp-from-network-services-1_Ethernet10 + no shutdown + channel-group 10 mode active +! +interface Loopback0 + description ROUTER_ID + no shutdown + ip address 192.0.255.2/32 +! +interface Management1 + description OOB_MANAGEMENT + no shutdown + vrf MGMT + ip address 10.1.1.2/24 +! +interface Vlan4094 + description MLAG + no shutdown + mtu 9214 + no autostate + ip address 10.10.10.1/31 +! +ip routing +no ip routing vrf MGMT +! +mlag configuration + domain-id GROUP1 + local-interface Vlan4094 + peer-address 10.10.10.0 + peer-link Port-Channel10 + reload-delay mlag 300 + reload-delay non-mlag 330 +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-options.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-options.cfg index b0774c53022..9a90e7dbd5e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-options.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-options.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,13 +19,10 @@ hostname bgp-options ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.10.1/32 ! @@ -57,11 +63,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-1.cfg index f2048750042..e076b475af4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,40 +19,36 @@ hostname bgp-peer-groups-1 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_bgp-peer-groups-2_Po3 + description MLAG_bgp-peer-groups-2_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_bgp-peer-groups-2_Ethernet3 + description MLAG_bgp-peer-groups-2_Ethernet3 no shutdown channel-group 3 mode active ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 192.168.255.111/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.111/32 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -117,9 +122,9 @@ router bgp 65001 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.253.205 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.253.205 description bgp-peer-groups-2 + neighbor 192.168.253.205 description bgp-peer-groups-2_Vlan4094 neighbor 192.168.255.112 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.112 description bgp-peer-groups-2 + neighbor 192.168.255.112 description bgp-peer-groups-2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -134,11 +139,4 @@ router bgp 65001 ! address-family vpn-ipv4 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-2.cfg index a7f683fee3a..bdc82b4845b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,40 +19,36 @@ hostname bgp-peer-groups-2 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel3 - description MLAG_PEER_bgp-peer-groups-1_Po3 + description MLAG_bgp-peer-groups-1_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet3 - description MLAG_PEER_bgp-peer-groups-1_Ethernet3 + description MLAG_bgp-peer-groups-1_Ethernet3 no shutdown channel-group 3 mode active ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 192.168.255.112/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.111/32 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -115,14 +120,13 @@ router bgp 65001 neighbor RR-OVERLAY-PEERS send-community neighbor RR-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.253.204 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 192.168.253.204 description bgp-peer-groups-1 + neighbor 192.168.253.204 description bgp-peer-groups-1_Vlan4094 neighbor 192.168.255.111 peer group EVPN-OVERLAY-PEERS - neighbor 192.168.255.111 description bgp-peer-groups-1 + neighbor 192.168.255.111 description bgp-peer-groups-1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate - neighbor RR-OVERLAY-PEERS activate ! address-family ipv4 no neighbor EVPN-OVERLAY-PEERS activate @@ -133,11 +137,4 @@ router bgp 65001 address-family vpn-ipv4 neighbor RR-OVERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-3.cfg index 3eb745de814..f070ff38e68 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/bgp-peer-groups-3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,24 +17,23 @@ service routing protocols model multi-agent ! hostname bgp-peer-groups-3 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 192.168.255.114/32 + node-segment ipv4 index 206 isis enable CORE isis passive - node-segment ipv4 index 206 ! ip routing no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! +mpls ip +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -63,7 +71,7 @@ router bgp 65001 neighbor default encapsulation mpls next-hop-self source-interface Loopback0 ! router isis CORE - net 49.0001.0000.0002.0106.00 + net 49.0001.1921.6825.5114.00 is-type level-1-2 router-id ipv4 192.168.255.114 log-adjacency-changes @@ -74,13 +82,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/connected_endpoints.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/connected_endpoints.cfg index e5d4cdc50e9..a72af450744 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/connected_endpoints.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/connected_endpoints.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -6,57 +15,79 @@ transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! -hostname connected_endpoints +link tracking group LT_GROUP1 + recovery delay 300 ! -no enable password -no aaa root +hostname connected_endpoints ! vrf instance MGMT ! -link tracking group LT_GROUP1 - recovery delay 300 +interface Port-Channel1 + description Port channel description server_OLD_SW-1/2_Po1_ENDPOINT_PORT_CHANNEL_INTERFACE DESCRIPTION SERVER_OLD_SW-1/2_ENDPOINT_PORT_CHANNEL + no shutdown + switchport +! +interface Port-Channel3 + description SERVER_OLD_SW-1/3_ENDPOINT_PORT_CHANNEL + no shutdown + switchport ! interface Port-Channel5 - description OLD_SW-1/5_PORT_CHANNEL_DESCRIPTION + description PORT_CHANNEL_DESCRIPTION no shutdown switchport ! interface Port-Channel7 - description PHYSICAL_PORT_DESCRIPTION_PORT_CHANNEL_DESCRIPTION + description PORT_CHANNEL_DESCRIPTION no shutdown switchport ! interface Port-Channel10 - description OLD_SW-1/7_PORT_CHANNEL_DESCRIPTION + description PORT_CHANNEL_DESCRIPTION no shutdown switchport ! interface Port-Channel12 - description INDIVIDUAL_1_INDIVIDUAL_1 + description SERVER_INDIVIDUAL_1_INDIVIDUAL_1 no shutdown switchport port-channel lacp fallback timeout 90 port-channel lacp fallback individual ! interface Port-Channel15 - description INDIVIDUAL_2_TRUNK_PHONE + description SERVER_INDIVIDUAL_2_TRUNK_PHONE no shutdown switchport port-channel lacp fallback timeout 90 port-channel lacp fallback individual ! +interface Ethernet1 + description Interface description server_OLD_SW-1/2_ENDPOINT_PORT1 + no shutdown + channel-group 1 mode active +! +interface Ethernet2 + description Interface description server_OLD_SW-1/2_ENDPOINT_PORT2 + no shutdown + channel-group 1 mode active +! +interface Ethernet3 + description SERVER_OLD_SW-1/3_ENDPOINT_PORT + no shutdown + channel-group 3 mode active +! interface Ethernet4 description PHYSICAL_PORT_DESCRIPTION no shutdown switchport ! interface Ethernet5 - description OLD_SW-1/5 + description SERVER_OLD_SW-1/5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description OLD_SW-1/5 + description SERVER_OLD_SW-1/5 no shutdown channel-group 5 mode active ! @@ -86,7 +117,7 @@ interface Ethernet11 channel-group 10 mode active ! interface Ethernet12 - description INDIVIDUAL_1 + description SERVER_INDIVIDUAL_1 no shutdown switchport trunk native vlan 123 switchport trunk allowed vlan 1,2,3,4,5,6,7,123,234 @@ -109,7 +140,7 @@ interface Ethernet12 no sflow enable ! interface Ethernet13 - description INDIVIDUAL_1 + description SERVER_INDIVIDUAL_1 no shutdown switchport trunk native vlan 123 switchport trunk allowed vlan 1,2,3,4,5,6,7,123,234 @@ -132,7 +163,7 @@ interface Ethernet13 no sflow enable ! interface Ethernet14 - description DOT1X_UNAUTHORIZED + description SERVER_DOT1X_UNAUTHORIZED no shutdown switchport trunk native vlan 123 switchport trunk allowed vlan 1,2,3,4,5,6,7,123,234 @@ -154,7 +185,7 @@ interface Ethernet14 no sflow enable ! interface Ethernet15 - description INDIVIDUAL_2_TRUNK_PHONE + description SERVER_INDIVIDUAL_2_TRUNK_PHONE no shutdown switchport trunk native vlan 123 switchport phone vlan 321 @@ -164,7 +195,7 @@ interface Ethernet15 link tracking group LT_GROUP1 downstream ! interface Ethernet16 - description INDIVIDUAL_2_TRUNK_PHONE + description SERVER_INDIVIDUAL_2_TRUNK_PHONE no shutdown switchport trunk native vlan 123 switchport phone vlan 321 @@ -174,11 +205,4 @@ interface Ethernet16 link tracking group LT_GROUP1 downstream no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-1-isis-sr-ldp.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-1-isis-sr-ldp.cfg index 9b8b186bd2f..6650787560b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-1-isis-sr-ldp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-1-isis-sr-ldp.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname core-1-isis-sr-ldp ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel12 @@ -214,15 +220,15 @@ interface ethernet25 mpls ip ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.0.0.1/32 ipv6 address 2000:1234:ffff:ffff::1/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 201 node-segment ipv6 index 201 + isis enable CORE + isis passive ! ip routing no ip routing vrf MGMT @@ -231,8 +237,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! +mpls ip +! +mpls ldp + router-id 10.0.0.1 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0001.0001.00 + net 49.0001.0100.0000.0001.00 is-type level-2 router-id ipv4 10.0.0.1 log-adjacency-changes @@ -251,19 +265,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.0.0.1 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-2-ospf-ldp.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-2-ospf-ldp.cfg index 1f8b820cb15..cf03385fd53 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-2-ospf-ldp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-2-ospf-ldp.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname core-2-ospf-ldp ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel12 @@ -134,12 +140,12 @@ interface Ethernet13 channel-group 12 mode active ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.0.0.2/32 ipv6 address 2000:1234:ffff:ffff::2/128 - ip ospf area 0.0.0.0 mpls ldp interface + ip ospf area 0.0.0.0 ! ip routing no ip routing vrf MGMT @@ -148,6 +154,14 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! +mpls ip +! +mpls ldp + router-id 10.0.0.2 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router ospf 101 router-id 10.0.0.2 passive-interface default @@ -162,19 +176,4 @@ router ospf 101 bfd default max-lsa 12000 ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.0.0.2 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-3-isis-sr-ldp.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-3-isis-sr-ldp.cfg index 81105b78606..4260ac58b44 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-3-isis-sr-ldp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-3-isis-sr-ldp.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,21 +19,18 @@ hostname core-3-isis-sr-ldp ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.0.0.3/32 ipv6 address 2000:1234:ffff:ffff::3/128 - isis enable CORE - isis passive mpls ldp interface node-segment ipv4 index 203 node-segment ipv6 index 203 + isis enable CORE + isis passive ! ip routing no ip routing vrf MGMT @@ -33,8 +39,16 @@ ipv6 unicast-routing ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! +mpls ip +! +mpls ldp + router-id 10.0.0.3 + transport-address interface Loopback0 + interface disabled default + no shutdown +! router isis CORE - net 49.0001.0000.0001.0003.00 + net 49.0001.0100.0000.0003.00 is-type level-2 router-id ipv4 10.0.0.3 log-adjacency-changes @@ -53,19 +67,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -mpls ldp - interface disabled default - router-id 10.0.0.3 - no shutdown - transport-address interface Loopback0 -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-4-multicast.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-4-multicast.cfg index 408306ae9fe..f910fae2bfa 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-4-multicast.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/core-4-multicast.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname core-4-multicast ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -41,7 +47,7 @@ interface Ethernet3 mpls ip ! interface Loopback0 - description LSR_Router_ID + description ROUTER_ID no shutdown ip address 10.0.0.4/32 ipv6 address 2000:1234:ffff:ffff::4/128 @@ -49,14 +55,14 @@ interface Loopback0 ip routing no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 10.0.0.0/24 eq 32 ! ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 seq 10 permit 2000:1234:ffff:ffff::/64 eq 128 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! route-map RM-CONN-2-BGP permit 10 @@ -97,11 +103,4 @@ router multicast ipv4 routing ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-1.cfg index 6aa3fd3a6ec..160b17172d0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -83,8 +92,8 @@ router path-selection ipv4 address 10.9.9.9 ! load-balance policy LB-CUSTOM-CP-POLICY - hop count lowest jitter 5 + hop count lowest path-group INET ! load-balance policy LB-DEFAULT-POLICY-DEFAULT @@ -95,35 +104,31 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.1 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -132,12 +137,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.1/32 ! @@ -149,7 +161,7 @@ interface Ethernet1 dhcp client accept default-route ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -257,13 +269,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate @@ -303,19 +316,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-2.cfg index 77120d4f325..8c62ff5a847 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-2.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -83,8 +92,8 @@ router path-selection ipv4 address 10.9.9.9 ! load-balance policy LB-CUSTOM-CP-POLICY - hop count lowest jitter 5 + hop count lowest path-group INET ! load-balance policy LB-DEFAULT-POLICY-DEFAULT @@ -95,35 +104,31 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.2 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -132,12 +137,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.2/32 ! @@ -149,7 +161,7 @@ interface Ethernet1 dhcp client accept default-route ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.2/32 ! @@ -257,13 +269,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate @@ -303,19 +316,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-3.cfg index d5f629c5028..6d8ce2ae484 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-edge-3.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -83,8 +92,8 @@ router path-selection ipv4 address 10.9.9.9 ! load-balance policy LB-CUSTOM-CP-POLICY - hop count lowest jitter 5 + hop count lowest path-group INET ! load-balance policy LB-DEFAULT-POLICY-DEFAULT @@ -95,35 +104,31 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.3 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -132,12 +137,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.3/32 ! @@ -149,7 +161,7 @@ interface Ethernet1 dhcp client accept default-route ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.3/32 ! @@ -221,13 +233,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate @@ -267,19 +280,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.cfg index 6fdb0f6dcc4..1d6aab4a375 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -100,8 +109,8 @@ router path-selection path-group Satellite id 104 ! load-balance policy LB-CUSTOM-CP-POLICY - hop count lowest jitter 5 + hop count lowest path-group INET path-group LAN_HA path-group MPLS priority 2 @@ -116,17 +125,20 @@ router path-selection path-group LAN_HA path-group MPLS ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 1 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.144.1 ! @@ -144,7 +156,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.144.1/32 ! @@ -167,7 +179,7 @@ interface Ethernet3 ip address 10.9.9.9/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.44.1/32 ! @@ -276,12 +288,14 @@ router bgp 65000 neighbor WAN-RR-OVERLAY-PEERS send-community neighbor WAN-RR-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-RR-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor WAN-RR-OVERLAY-PEERS activate + neighbor WAN-RR-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -313,19 +327,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-custom-default-policy.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-custom-default-policy.cfg index 620767bd7c3..667f486c5d4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-custom-default-policy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-custom-default-policy.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker custom_flow_track_name record export on inactive timeout 50000 @@ -109,33 +118,29 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile STUN-DTLS + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate STUN-DTLS.crt key STUN-DTLS.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.255.1 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -144,12 +149,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware custom_flow_track_name ip address 192.168.255.1/32 ! @@ -173,7 +185,7 @@ interface Ethernet3 ip address 172.20.20.20/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -241,13 +253,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -279,19 +292,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile STUN-DTLS - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate STUN-DTLS.crt key STUN-DTLS.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-no-default-policy.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-no-default-policy.cfg index 58df86958d6..9118cdf8b99 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-no-default-policy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge-no-default-policy.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -101,35 +110,31 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile STUN-DTLS + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate STUN-DTLS.crt key STUN-DTLS.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.255.1 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -138,12 +143,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.255.1/32 ! @@ -167,7 +179,7 @@ interface Ethernet3 ip address 172.20.20.20/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -233,13 +245,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -278,19 +291,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile STUN-DTLS - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate STUN-DTLS.crt key STUN-DTLS.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge.cfg index 43acf816ad2..6d277e9241f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -116,28 +125,27 @@ router adaptive-virtual-topology avt profile PROD-AVT-POLICY-MPLS-ONLY id 5 ! router internet-exit - ! - exit-group DIRECT-EXIT-POLICY-1 - local connection IE-Ethernet2 - local connection IE-Ethernet2_1 - ! - exit-group ZSCALER-EXIT-POLICY-1_PRI - local connection IE-Tunnel100 - ! - exit-group ZSCALER-EXIT-POLICY-1_SEC - local connection IE-Tunnel101 - ! - exit-group ZSCALER-EXIT-POLICY-1_TER - local connection IE-Tunnel102 - ! - policy DIRECT-EXIT-POLICY-1 - exit-group DIRECT-EXIT-POLICY-1 - ! - policy ZSCALER-EXIT-POLICY-1 - exit-group ZSCALER-EXIT-POLICY-1_PRI - exit-group ZSCALER-EXIT-POLICY-1_SEC - exit-group ZSCALER-EXIT-POLICY-1_TER - exit-group system-default-exit-group + exit-group DIRECT-EXIT-POLICY-1 + local connection IE-Ethernet2 + local connection IE-Ethernet2_1 + ! + exit-group ZSCALER-EXIT-POLICY-1_PRI + local connection IE-Tunnel100 + ! + exit-group ZSCALER-EXIT-POLICY-1_SEC + local connection IE-Tunnel101 + ! + exit-group ZSCALER-EXIT-POLICY-1_TER + local connection IE-Tunnel102 + ! + policy DIRECT-EXIT-POLICY-1 + exit-group DIRECT-EXIT-POLICY-1 + ! + policy ZSCALER-EXIT-POLICY-1 + exit-group ZSCALER-EXIT-POLICY-1_PRI + exit-group ZSCALER-EXIT-POLICY-1_SEC + exit-group ZSCALER-EXIT-POLICY-1_TER + exit-group system-default-exit-group ! router path-selection tcp mss ceiling ipv4 ingress @@ -209,8 +217,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group MPLS path-group INET priority 2 ! @@ -233,9 +241,6 @@ router service-insertion ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -244,38 +249,37 @@ vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.1 ! ike policy IE-ZSCALER-EXIT-POLICY-1-IKE-POLICY - local-id fqdn cv-pathfinder-edge_ZSCALER-EXIT-POLICY-1@test.local ike-lifetime 24 encryption aes256 dh-group 24 + local-id fqdn cv-pathfinder-edge_ZSCALER-EXIT-POLICY-1@test.local ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! sa policy IE-ZSCALER-EXIT-POLICY-1-SA-POLICY - esp integrity sha256 esp encryption aes256 + esp integrity sha256 sa lifetime 8 hours pfs dh-group 24 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -284,6 +288,13 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! profile IE-ZSCALER-EXIT-POLICY-1-PROFILE ike-policy IE-ZSCALER-EXIT-POLICY-1-IKE-POLICY sa-policy IE-ZSCALER-EXIT-POLICY-1-SA-POLICY @@ -296,7 +307,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.1/32 ! @@ -360,7 +371,7 @@ interface Ethernet52.1000 ip address 172.17.0.1/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -601,7 +612,7 @@ router bgp 65000 neighbor 172.17.0.0 remote-as 65199 neighbor 172.17.0.0 description site-ha-disabled-leaf_Ethernet1 neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP redistribute static route-map RM-STATIC-2-BGP ! @@ -609,6 +620,7 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate @@ -664,19 +676,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge1.cfg index d178f87a486..05185f5713a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -110,41 +119,40 @@ router adaptive-virtual-topology avt profile PROD-AVT-POLICY-VIDEO id 4 ! router internet-exit - ! - exit-group DIRECT-EXIT-POLICY-1 - local connection IE-Ethernet3 - ! - exit-group ZSCALER-EXIT-POLICY-1_PRI - local connection IE-Tunnel100 - ! - exit-group ZSCALER-EXIT-POLICY-1_SEC - local connection IE-Tunnel101 - ! - exit-group ZSCALER-EXIT-POLICY-1_TER - local connection IE-Tunnel102 - ! - exit-group ZSCALER-EXIT-POLICY-2_PRI - local connection IE-Tunnel110 - ! - exit-group ZSCALER-EXIT-POLICY-2_SEC - local connection IE-Tunnel111 - ! - exit-group ZSCALER-EXIT-POLICY-2_TER - local connection IE-Tunnel112 - ! - policy DIRECT-EXIT-POLICY-1 - exit-group DIRECT-EXIT-POLICY-1 - ! - policy ZSCALER-EXIT-POLICY-1 - exit-group ZSCALER-EXIT-POLICY-1_PRI - exit-group ZSCALER-EXIT-POLICY-1_SEC - exit-group ZSCALER-EXIT-POLICY-1_TER - exit-group system-default-exit-group - ! - policy ZSCALER-EXIT-POLICY-2 - exit-group ZSCALER-EXIT-POLICY-2_PRI - exit-group ZSCALER-EXIT-POLICY-2_SEC - exit-group ZSCALER-EXIT-POLICY-2_TER + exit-group DIRECT-EXIT-POLICY-1 + local connection IE-Ethernet3 + ! + exit-group ZSCALER-EXIT-POLICY-1_PRI + local connection IE-Tunnel100 + ! + exit-group ZSCALER-EXIT-POLICY-1_SEC + local connection IE-Tunnel101 + ! + exit-group ZSCALER-EXIT-POLICY-1_TER + local connection IE-Tunnel102 + ! + exit-group ZSCALER-EXIT-POLICY-2_PRI + local connection IE-Tunnel110 + ! + exit-group ZSCALER-EXIT-POLICY-2_SEC + local connection IE-Tunnel111 + ! + exit-group ZSCALER-EXIT-POLICY-2_TER + local connection IE-Tunnel112 + ! + policy DIRECT-EXIT-POLICY-1 + exit-group DIRECT-EXIT-POLICY-1 + ! + policy ZSCALER-EXIT-POLICY-1 + exit-group ZSCALER-EXIT-POLICY-1_PRI + exit-group ZSCALER-EXIT-POLICY-1_SEC + exit-group ZSCALER-EXIT-POLICY-1_TER + exit-group system-default-exit-group + ! + policy ZSCALER-EXIT-POLICY-2 + exit-group ZSCALER-EXIT-POLICY-2_PRI + exit-group ZSCALER-EXIT-POLICY-2_SEC + exit-group ZSCALER-EXIT-POLICY-2_TER ! router path-selection tcp mss ceiling ipv4 ingress @@ -203,8 +211,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group INET priority 2 ! router service-insertion @@ -232,9 +240,6 @@ router service-insertion ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -243,50 +248,49 @@ vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.2 ! ike policy IE-ZSCALER-EXIT-POLICY-1-IKE-POLICY - local-id fqdn cv-pathfinder-edge1_ZSCALER-EXIT-POLICY-1@test.local ike-lifetime 24 encryption aes256 dh-group 24 + local-id fqdn cv-pathfinder-edge1_ZSCALER-EXIT-POLICY-1@test.local ! ike policy IE-ZSCALER-EXIT-POLICY-2-IKE-POLICY - local-id fqdn cv-pathfinder-edge1_ZSCALER-EXIT-POLICY-2@test.local ike-lifetime 24 encryption aes256 dh-group 24 + local-id fqdn cv-pathfinder-edge1_ZSCALER-EXIT-POLICY-2@test.local ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! sa policy IE-ZSCALER-EXIT-POLICY-1-SA-POLICY - esp integrity sha256 esp encryption aes256 + esp integrity sha256 sa lifetime 8 hours pfs dh-group 24 ! sa policy IE-ZSCALER-EXIT-POLICY-2-SA-POLICY - esp integrity sha256 esp encryption aes256 + esp integrity sha256 sa lifetime 8 hours pfs dh-group 24 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -295,6 +299,13 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! profile IE-ZSCALER-EXIT-POLICY-1-PROFILE ike-policy IE-ZSCALER-EXIT-POLICY-1-IKE-POLICY sa-policy IE-ZSCALER-EXIT-POLICY-1-SA-POLICY @@ -314,7 +325,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.2/32 ! @@ -388,7 +399,7 @@ interface Ethernet52.1000 ip address 172.17.0.3/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.2/32 ! @@ -666,15 +677,16 @@ router bgp 65000 neighbor 172.29.0.13 route-map RM-BGP-172.29.0.13-IN in neighbor 172.29.0.13 route-map RM-BGP-172.29.0.13-OUT out neighbor 192.168.144.2 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.2 description cv-pathfinder-pathfinder1 + neighbor 192.168.144.2 description cv-pathfinder-pathfinder1_Dps1 neighbor 192.168.144.3 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.3 description cv-pathfinder-pathfinder2 + neighbor 192.168.144.3 description cv-pathfinder-pathfinder2_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate @@ -730,19 +742,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder1-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2A.cfg index f0a88294ea8..d384e816693 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2A.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,8 +23,6 @@ flow tracking hardware ! service routing protocols model multi-agent ! -ip as-path access-list ASPATH-WAN permit 65000 any -! hostname cv-pathfinder-edge2A ! router adaptive-virtual-topology @@ -56,6 +63,9 @@ router adaptive-virtual-topology match application-profile VIDEO avt profile PROD-AVT-POLICY-VIDEO ! + match application-profile MPLS-ONLY + avt profile PROD-AVT-POLICY-MPLS-ONLY + ! match application-profile default avt profile PROD-AVT-POLICY-DEFAULT ! @@ -74,6 +84,9 @@ router adaptive-virtual-topology profile PROD-AVT-POLICY-DEFAULT path-selection load-balance LB-PROD-AVT-POLICY-DEFAULT ! + profile PROD-AVT-POLICY-MPLS-ONLY + path-selection load-balance LB-PROD-AVT-POLICY-MPLS-ONLY + ! profile PROD-AVT-POLICY-VIDEO path-selection load-balance LB-PROD-AVT-POLICY-VIDEO ! @@ -100,6 +113,7 @@ router adaptive-virtual-topology avt profile PROD-AVT-POLICY-DEFAULT id 1 avt profile PROD-AVT-POLICY-VOICE id 2 avt profile PROD-AVT-POLICY-VIDEO id 4 + avt profile PROD-AVT-POLICY-MPLS-ONLY id 5 ! router path-selection tcp mss ceiling ipv4 ingress @@ -150,22 +164,22 @@ router path-selection path-group INET path-group LAN_HA ! + load-balance policy LB-PROD-AVT-POLICY-MPLS-ONLY + path-group LAN_HA + ! load-balance policy LB-PROD-AVT-POLICY-VIDEO loss-rate 42.0 path-group LAN_HA path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group INET priority 2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -174,30 +188,28 @@ vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! - ike policy DP-IKE-POLICY + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security + ike policy CP-IKE-POLICY local-id 192.168.142.2 ! - ike policy CP-IKE-POLICY + ike policy DP-IKE-POLICY local-id 192.168.142.2 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - ike-policy DP-IKE-POLICY - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -206,12 +218,20 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + ike-policy DP-IKE-POLICY + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.2/32 ! @@ -285,7 +305,7 @@ interface Ethernet53.1000 ip address 172.17.0.7/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.2/32 ! @@ -322,6 +342,8 @@ application traffic recognition application-profile APP-PROFILE-CONTROL-PLANE application APP-CONTROL-PLANE ! + application-profile MPLS-ONLY + ! application-profile VIDEO application CUSTOM-APPLICATION-1 application skype @@ -352,6 +374,8 @@ ip routing vrf IT no ip routing vrf MGMT ip routing vrf PROD ! +ip as-path access-list ASPATH-WAN permit 65000 any +! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.2:423 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -453,14 +477,16 @@ router bgp 65000 neighbor 192.168.142.3 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.142.3 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor 192.168.142.3 activate + neighbor 192.168.142.3 encapsulation path-selection neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -526,19 +552,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2B.cfg index 6d934dac35c..9f38426b5e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge2B.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,8 +23,6 @@ flow tracking hardware ! service routing protocols model multi-agent ! -ip as-path access-list ASPATH-WAN permit 65000 any -! hostname cv-pathfinder-edge2B ! router adaptive-virtual-topology @@ -112,7 +119,7 @@ router path-selection tcp mss ceiling ipv4 ingress ! path-group CUSTOM_LAN_HA id 65535 - ipsec profile DP-PROFILE + ipsec profile ONE-PROFILE-TO-CONTROL-THEM-ALL flow assignment lan ! local interface Ethernet52 @@ -167,16 +174,13 @@ router path-selection path-group MPLS ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group CUSTOM_LAN_HA path-group MPLS ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -185,31 +189,22 @@ vrf instance MGMT ! vrf instance PROD ! -ip security - ! - ike policy DP-IKE-POLICY - local-id 192.168.142.3 +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.142.3 ! - sa policy DP-SA-POLICY - esp encryption aes256gcm128 - pfs dh-group 14 - ! sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - ike-policy DP-IKE-POLICY - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! - profile CP-PROFILE + profile ONE-PROFILE-TO-CONTROL-THEM-ALL ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY connection start @@ -218,11 +213,11 @@ ip security mode transport ! key controller - profile DP-PROFILE + profile ONE-PROFILE-TO-CONTROL-THEM-ALL ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.3/32 ! @@ -295,7 +290,7 @@ interface Ethernet53.1000 ip address 172.17.0.11/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.3/32 ! @@ -364,6 +359,8 @@ ip routing vrf IT no ip routing vrf MGMT ip routing vrf PROD ! +ip as-path access-list ASPATH-WAN permit 65000 any +! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.2:423 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -465,14 +462,16 @@ router bgp 65000 neighbor 192.168.142.2 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.142.2 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation vxlan neighbor 192.168.142.2 activate + neighbor 192.168.142.2 encapsulation vxlan neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -538,19 +537,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile MPLS-cv-pathfinder-pathfinder-Ethernet2_2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3A.cfg index f0e117907da..23fc3ec5752 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3A.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -49,6 +58,9 @@ router adaptive-virtual-topology match application-profile VIDEO avt profile PROD-AVT-POLICY-VIDEO ! + match application-profile MPLS-ONLY + avt profile PROD-AVT-POLICY-MPLS-ONLY + ! match application-profile default avt profile PROD-AVT-POLICY-DEFAULT ! @@ -64,6 +76,9 @@ router adaptive-virtual-topology profile PROD-AVT-POLICY-DEFAULT path-selection load-balance LB-PROD-AVT-POLICY-DEFAULT ! + profile PROD-AVT-POLICY-MPLS-ONLY + path-selection load-balance LB-PROD-AVT-POLICY-MPLS-ONLY + ! profile PROD-AVT-POLICY-VIDEO path-selection load-balance LB-PROD-AVT-POLICY-VIDEO ! @@ -86,6 +101,7 @@ router adaptive-virtual-topology avt profile PROD-AVT-POLICY-DEFAULT id 1 avt profile PROD-AVT-POLICY-VOICE id 2 avt profile PROD-AVT-POLICY-VIDEO id 4 + avt profile PROD-AVT-POLICY-MPLS-ONLY id 5 ! router path-selection tcp mss ceiling ipv4 ingress @@ -111,7 +127,7 @@ router path-selection ! peer static router-ip 192.168.142.7 name cv-pathfinder-edge3B - ipv4 address 10.10.10.1 + ipv4 address 10.10.10.2 ! load-balance policy LB-DEFAULT-AVT-POLICY-CONTROL-PLANE path-group INET @@ -129,52 +145,50 @@ router path-selection path-group INET path-group LAN_HA ! + load-balance policy LB-PROD-AVT-POLICY-MPLS-ONLY + path-group LAN_HA + ! load-balance policy LB-PROD-AVT-POLICY-VIDEO loss-rate 42.0 path-group LAN_HA path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group INET priority 2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! - ike policy DP-IKE-POLICY + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security + ike policy CP-IKE-POLICY local-id 192.168.142.6 ! - ike policy CP-IKE-POLICY + ike policy DP-IKE-POLICY local-id 192.168.142.6 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - ike-policy DP-IKE-POLICY - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -183,12 +197,20 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + ike-policy DP-IKE-POLICY + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.6/32 ! @@ -200,13 +222,15 @@ interface Ethernet1 dhcp client accept default-route ! interface Ethernet52 - description DIRECT LAN HA LINK + description WAN_HA_cv-pathfinder-edge3B_Ethernet52 no shutdown + mtu 9100 no switchport - ip address 10.10.10.0/31 + flow tracker hardware FLOW-TRACKER + ip address 10.10.10.1/24 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.6/32 ! @@ -242,6 +266,8 @@ application traffic recognition application-profile APP-PROFILE-CONTROL-PLANE application APP-CONTROL-PLANE ! + application-profile MPLS-ONLY + ! application-profile VIDEO application CUSTOM-APPLICATION-1 application skype @@ -346,14 +372,16 @@ router bgp 65000 neighbor 192.168.142.7 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.142.7 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor 192.168.142.7 activate + neighbor 192.168.142.7 encapsulation path-selection neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -394,19 +422,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3B.cfg index 64d6fbf764a..d41fcd8b64b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge3B.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -105,7 +114,7 @@ router path-selection ! peer static router-ip 192.168.142.6 name cv-pathfinder-edge3A - ipv4 address 10.10.10.0 + ipv4 address 10.10.10.1 ! path-group MPLS id 100 keepalive interval 300 milliseconds failure-threshold 5 intervals @@ -146,46 +155,41 @@ router path-selection path-group MPLS ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! - ike policy DP-IKE-POLICY + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security + ike policy CP-IKE-POLICY local-id 192.168.142.7 ! - ike policy CP-IKE-POLICY + ike policy DP-IKE-POLICY local-id 192.168.142.7 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - ike-policy DP-IKE-POLICY - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -194,12 +198,20 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + ike-policy DP-IKE-POLICY + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.142.7/32 ! @@ -210,13 +222,15 @@ interface Ethernet2 ip address 172.15.6.6/31 ! interface Ethernet52 - description DIRECT LAN HA LINK + description WAN_HA_cv-pathfinder-edge3A_Ethernet52 no shutdown + mtu 9100 no switchport - ip address 10.10.10.1/31 + flow tracker hardware FLOW-TRACKER + ip address 10.10.10.2/24 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.42.7/32 ! @@ -358,14 +372,16 @@ router bgp 65000 neighbor 192.168.142.6 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.142.6 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor 192.168.142.6 activate + neighbor 192.168.142.6 encapsulation path-selection neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -406,19 +422,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile MPLS-cv-pathfinder-pathfinder-Ethernet2_2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4A.cfg new file mode 100644 index 00000000000..0cfb90d6f40 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4A.cfg @@ -0,0 +1,445 @@ +! +no enable password +no aaa root +! +agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +flow tracking hardware + tracker FLOW-TRACKER + record export on inactive timeout 70000 + record export on interval 300000 + exporter CV-TELEMETRY + collector 127.0.0.1 + local interface Loopback0 + template interval 3600000 + no shutdown +! +service routing protocols model multi-agent +! +hostname cv-pathfinder-edge4A +! +router adaptive-virtual-topology + topology role transit region + region AVD_Land_West id 42 + zone AVD_Land_West-ZONE id 1 + site Site405 id 405 + ! + policy DEFAULT-AVT-POLICY + ! + match application-profile VIDEO + avt profile DEFAULT-AVT-POLICY-VIDEO + ! + match application-profile default + avt profile DEFAULT-AVT-POLICY-DEFAULT + ! + policy DEFAULT-AVT-POLICY-WITH-CP + ! + match application-profile APP-PROFILE-CONTROL-PLANE + avt profile DEFAULT-AVT-POLICY-CONTROL-PLANE + ! + match application-profile VIDEO + avt profile DEFAULT-AVT-POLICY-VIDEO + ! + match application-profile default + avt profile DEFAULT-AVT-POLICY-DEFAULT + ! + policy PROD-AVT-POLICY + ! + match application-profile VOICE + avt profile PROD-AVT-POLICY-VOICE + ! + match application-profile VIDEO + avt profile PROD-AVT-POLICY-VIDEO + ! + match application-profile MPLS-ONLY + avt profile PROD-AVT-POLICY-MPLS-ONLY + ! + match application-profile default + avt profile PROD-AVT-POLICY-DEFAULT + ! + profile DEFAULT-AVT-POLICY-CONTROL-PLANE + path-selection load-balance LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + ! + profile DEFAULT-AVT-POLICY-DEFAULT + path-selection load-balance LB-DEFAULT-AVT-POLICY-DEFAULT + ! + profile DEFAULT-AVT-POLICY-VIDEO + path-selection load-balance LB-DEFAULT-AVT-POLICY-VIDEO + ! + profile PROD-AVT-POLICY-DEFAULT + path-selection load-balance LB-PROD-AVT-POLICY-DEFAULT + ! + profile PROD-AVT-POLICY-MPLS-ONLY + path-selection load-balance LB-PROD-AVT-POLICY-MPLS-ONLY + ! + profile PROD-AVT-POLICY-VIDEO + path-selection load-balance LB-PROD-AVT-POLICY-VIDEO + ! + profile PROD-AVT-POLICY-VOICE + path-selection load-balance LB-PROD-AVT-POLICY-VOICE + ! + vrf default + avt policy DEFAULT-AVT-POLICY-WITH-CP + avt profile DEFAULT-AVT-POLICY-DEFAULT id 1 + avt profile DEFAULT-AVT-POLICY-VIDEO id 3 + avt profile DEFAULT-AVT-POLICY-CONTROL-PLANE id 254 + ! + vrf IT + avt policy DEFAULT-AVT-POLICY + avt profile DEFAULT-AVT-POLICY-DEFAULT id 1 + avt profile DEFAULT-AVT-POLICY-VIDEO id 3 + ! + vrf PROD + avt policy PROD-AVT-POLICY + avt profile PROD-AVT-POLICY-DEFAULT id 1 + avt profile PROD-AVT-POLICY-VOICE id 2 + avt profile PROD-AVT-POLICY-VIDEO id 4 + avt profile PROD-AVT-POLICY-MPLS-ONLY id 5 +! +router path-selection + tcp mss ceiling ipv4 ingress + ! + path-group INET id 101 + ipsec profile CP-PROFILE + ! + local interface Ethernet1.42 + stun server-profile INET-cv-pathfinder-pathfinder-Ethernet1 INET-cv-pathfinder-pathfinder-Ethernet3 + ! + peer dynamic + ! + peer static router-ip 192.168.144.1 + name cv-pathfinder-pathfinder + ipv4 address 172.17.7.7 + ipv4 address 10.9.9.9 + ! + path-group LAN_HA id 65535 + flow assignment lan + ! + local interface Port-Channel666 + ! + peer static router-ip 192.168.142.9 + name cv-pathfinder-edge4B + ipv4 address 10.10.10.2 + ! + load-balance policy LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + path-group INET + path-group LAN_HA + ! + load-balance policy LB-DEFAULT-AVT-POLICY-DEFAULT + path-group INET + path-group LAN_HA + ! + load-balance policy LB-DEFAULT-AVT-POLICY-VIDEO + path-group INET + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-DEFAULT + path-group INET + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-MPLS-ONLY + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-VIDEO + loss-rate 42.0 + path-group LAN_HA + path-group INET priority 2 + ! + load-balance policy LB-PROD-AVT-POLICY-VOICE + jitter 42 + hop count lowest + path-group LAN_HA + path-group INET priority 2 +! +spanning-tree mode none +! +vrf instance IT +! +vrf instance MGMT +! +vrf instance PROD +! +management security + ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security + ike policy CP-IKE-POLICY + local-id 192.168.142.8 + ! + sa policy CP-SA-POLICY + esp encryption aes256gcm128 + pfs dh-group 14 + ! + sa policy DP-SA-POLICY + esp encryption aes256gcm128 + pfs dh-group 14 + ! + profile CP-PROFILE + ike-policy CP-IKE-POLICY + sa-policy CP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890 + dpd 10 50 clear + mode transport + ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! + key controller + profile DP-PROFILE +! +interface Port-Channel666 + description WAN_HA_cv-pathfinder-edge4B_Port-Channel666 + no shutdown + mtu 9194 + no switchport + flow tracker hardware FLOW-TRACKER + ip address 10.10.10.1/24 +! +interface Dps1 + description DPS Interface + mtu 9194 + flow tracker hardware FLOW-TRACKER + ip address 192.168.142.8/32 +! +interface Ethernet1 + no shutdown + no switchport +! +interface Ethernet1.42 + description Comcast + no shutdown + encapsulation dot1q vlan 42 + ip address dhcp + dhcp client accept default-route +! +interface Ethernet42 + description WAN_HA_cv-pathfinder-edge4B_Ethernet42 + no shutdown + mtu 9194 + channel-group 666 mode active +! +interface Ethernet43 + description WAN_HA_cv-pathfinder-edge4B_Ethernet43 + no shutdown + mtu 9194 + channel-group 666 mode active +! +interface Loopback0 + description ROUTER_ID + no shutdown + ip address 192.168.42.8/32 +! +interface Vxlan1 + description cv-pathfinder-edge4A_VTEP + vxlan source-interface Dps1 + vxlan udp-port 4789 + vxlan vrf default vni 1 + vxlan vrf IT vni 100 + vxlan vrf PROD vni 42 +! +application traffic recognition + ! + application ipv4 APP-CONTROL-PLANE + destination prefix field-set PFX-PATHFINDERS + ! + application ipv4 CUSTOM-APPLICATION-1 + source prefix field-set CUSTOM-SRC-PREFIX-1 + destination prefix field-set CUSTOM-DEST-PREFIX-1 + protocol tcp + ! + application ipv4 CUSTOM-APPLICATION-2 + protocol tcp source port field-set TCP-SRC-2 destination port field-set TCP-DEST-2 + ! + application ipv4 CUSTOM-DSCP-APPLICATION + dscp ef 12-14 cs6 42 + ! + category VIDEO1 + application CUSTOM-APPLICATION-2 + application CUSTOM-DSCP-APPLICATION + application microsoft-teams + ! + application-profile APP-PROFILE-CONTROL-PLANE + application APP-CONTROL-PLANE + ! + application-profile MPLS-ONLY + ! + application-profile VIDEO + application CUSTOM-APPLICATION-1 + application skype + application rtp transport + category VIDEO1 + ! + application-profile VOICE + application CUSTOM-VOICE-APPLICATION + ! + field-set ipv4 prefix CUSTOM-DEST-PREFIX-1 + 6.6.6.0/24 + ! + field-set ipv4 prefix CUSTOM-SRC-PREFIX-1 + 42.42.42.0/24 + ! + field-set ipv4 prefix PFX-PATHFINDERS + 192.168.144.1/32 + ! + field-set l4-port TCP-DEST-2 + 666, 777 + ! + field-set l4-port TCP-SRC-2 + 42 +! +ip routing +ip routing vrf IT +no ip routing vrf MGMT +ip routing vrf PROD +! +ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.8:405 +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.42.0/24 eq 32 +! +route-map RM-BGP-UNDERLAY-PEERS-IN permit 40 + description Mark prefixes originated from the LAN + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-BGP-UNDERLAY-PEERS-OUT permit 10 + description Make routes learned from WAN HA peer less preferred on LAN routers + match route-type internal + match tag 50 + set metric 50 +! +route-map RM-BGP-UNDERLAY-PEERS-OUT permit 20 +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-EVPN-EXPORT-VRF-DEFAULT permit 10 + match extcommunity ECL-EVPN-SOO +! +route-map RM-EVPN-SOO-IN deny 10 + match extcommunity ECL-EVPN-SOO +! +route-map RM-EVPN-SOO-IN permit 20 +! +route-map RM-EVPN-SOO-OUT permit 10 + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-WAN-HA-PEER-IN permit 10 + description Set tag 50 on routes received from HA peer over EVPN + set tag 50 +! +route-map RM-WAN-HA-PEER-OUT permit 10 + description Make EVPN routes learned from WAN less preferred on HA peer + match route-type internal + set local-preference 50 +! +route-map RM-WAN-HA-PEER-OUT permit 20 + description Make locally injected routes less preferred on HA peer + set local-preference 75 +! +router bfd + multihop interval 300 min-rx 300 multiplier 3 +! +router bgp 65000 + router-id 192.168.42.8 + maximum-paths 16 + update wait-install + no bgp default ipv4-unicast + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor IPv4-UNDERLAY-PEERS route-map RM-BGP-UNDERLAY-PEERS-IN in + neighbor IPv4-UNDERLAY-PEERS route-map RM-BGP-UNDERLAY-PEERS-OUT out + neighbor WAN-OVERLAY-PEERS peer group + neighbor WAN-OVERLAY-PEERS remote-as 65000 + neighbor WAN-OVERLAY-PEERS update-source Dps1 + neighbor WAN-OVERLAY-PEERS bfd + neighbor WAN-OVERLAY-PEERS bfd interval 1000 min-rx 1000 multiplier 10 + neighbor WAN-OVERLAY-PEERS ttl maximum-hops 1 + neighbor WAN-OVERLAY-PEERS password 7 htm4AZe9mIQOO1uiMuGgYQ== + neighbor WAN-OVERLAY-PEERS send-community + neighbor WAN-OVERLAY-PEERS maximum-routes 0 + neighbor 192.168.142.9 remote-as 65000 + neighbor 192.168.142.9 description cv-pathfinder-edge4B + neighbor 192.168.142.9 route-reflector-client + neighbor 192.168.142.9 update-source Dps1 + neighbor 192.168.142.9 route-map RM-WAN-HA-PEER-IN in + neighbor 192.168.142.9 route-map RM-WAN-HA-PEER-OUT out + neighbor 192.168.142.9 send-community + neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in + neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out + neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection + neighbor 192.168.142.9 activate + neighbor 192.168.142.9 encapsulation path-selection + neighbor default next-hop-self received-evpn-routes route-type ip-prefix + ! + address-family ipv4 + neighbor IPv4-UNDERLAY-PEERS activate + no neighbor WAN-OVERLAY-PEERS activate + ! + address-family ipv4 sr-te + neighbor WAN-OVERLAY-PEERS activate + ! + address-family link-state + neighbor WAN-OVERLAY-PEERS activate + path-selection + ! + address-family path-selection + bgp additional-paths receive + bgp additional-paths send any + neighbor WAN-OVERLAY-PEERS activate + ! + vrf default + rd 192.168.42.8:1 + route-target import evpn 1:1 + route-target export evpn 1:1 + route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT + ! + vrf IT + rd 192.168.42.8:1000 + route-target import evpn 1000:1000 + route-target export evpn 1000:1000 + router-id 192.168.42.8 + redistribute connected + ! + vrf PROD + rd 192.168.42.8:142 + route-target import evpn 142:142 + route-target export evpn 142:142 + router-id 192.168.42.8 + redistribute connected +! +router traffic-engineering +! +stun + client + server-profile INET-cv-pathfinder-pathfinder-Ethernet1 + ip address 172.17.7.7 + ssl profile profileA + server-profile INET-cv-pathfinder-pathfinder-Ethernet3 + ip address 10.9.9.9 + ssl profile profileA +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4B.cfg new file mode 100644 index 00000000000..9c916ea5e4d --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-edge4B.cfg @@ -0,0 +1,445 @@ +! +no enable password +no aaa root +! +agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! +flow tracking hardware + tracker FLOW-TRACKER + record export on inactive timeout 70000 + record export on interval 300000 + exporter CV-TELEMETRY + collector 127.0.0.1 + local interface Loopback0 + template interval 3600000 + no shutdown +! +service routing protocols model multi-agent +! +hostname cv-pathfinder-edge4B +! +router adaptive-virtual-topology + topology role transit region + region AVD_Land_West id 42 + zone AVD_Land_West-ZONE id 1 + site Site405 id 405 + ! + policy DEFAULT-AVT-POLICY + ! + match application-profile VIDEO + avt profile DEFAULT-AVT-POLICY-VIDEO + ! + match application-profile default + avt profile DEFAULT-AVT-POLICY-DEFAULT + ! + policy DEFAULT-AVT-POLICY-WITH-CP + ! + match application-profile APP-PROFILE-CONTROL-PLANE + avt profile DEFAULT-AVT-POLICY-CONTROL-PLANE + ! + match application-profile VIDEO + avt profile DEFAULT-AVT-POLICY-VIDEO + ! + match application-profile default + avt profile DEFAULT-AVT-POLICY-DEFAULT + ! + policy PROD-AVT-POLICY + ! + match application-profile VOICE + avt profile PROD-AVT-POLICY-VOICE + ! + match application-profile VIDEO + avt profile PROD-AVT-POLICY-VIDEO + ! + match application-profile MPLS-ONLY + avt profile PROD-AVT-POLICY-MPLS-ONLY + ! + match application-profile default + avt profile PROD-AVT-POLICY-DEFAULT + ! + profile DEFAULT-AVT-POLICY-CONTROL-PLANE + path-selection load-balance LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + ! + profile DEFAULT-AVT-POLICY-DEFAULT + path-selection load-balance LB-DEFAULT-AVT-POLICY-DEFAULT + ! + profile DEFAULT-AVT-POLICY-VIDEO + path-selection load-balance LB-DEFAULT-AVT-POLICY-VIDEO + ! + profile PROD-AVT-POLICY-DEFAULT + path-selection load-balance LB-PROD-AVT-POLICY-DEFAULT + ! + profile PROD-AVT-POLICY-MPLS-ONLY + path-selection load-balance LB-PROD-AVT-POLICY-MPLS-ONLY + ! + profile PROD-AVT-POLICY-VIDEO + path-selection load-balance LB-PROD-AVT-POLICY-VIDEO + ! + profile PROD-AVT-POLICY-VOICE + path-selection load-balance LB-PROD-AVT-POLICY-VOICE + ! + vrf default + avt policy DEFAULT-AVT-POLICY-WITH-CP + avt profile DEFAULT-AVT-POLICY-DEFAULT id 1 + avt profile DEFAULT-AVT-POLICY-VIDEO id 3 + avt profile DEFAULT-AVT-POLICY-CONTROL-PLANE id 254 + ! + vrf IT + avt policy DEFAULT-AVT-POLICY + avt profile DEFAULT-AVT-POLICY-DEFAULT id 1 + avt profile DEFAULT-AVT-POLICY-VIDEO id 3 + ! + vrf PROD + avt policy PROD-AVT-POLICY + avt profile PROD-AVT-POLICY-DEFAULT id 1 + avt profile PROD-AVT-POLICY-VOICE id 2 + avt profile PROD-AVT-POLICY-VIDEO id 4 + avt profile PROD-AVT-POLICY-MPLS-ONLY id 5 +! +router path-selection + tcp mss ceiling ipv4 ingress + ! + path-group INET id 101 + ipsec profile CP-PROFILE + ! + local interface Ethernet1.42 + stun server-profile INET-cv-pathfinder-pathfinder-Ethernet1 INET-cv-pathfinder-pathfinder-Ethernet3 + ! + peer dynamic + ! + peer static router-ip 192.168.144.1 + name cv-pathfinder-pathfinder + ipv4 address 172.17.7.7 + ipv4 address 10.9.9.9 + ! + path-group LAN_HA id 65535 + flow assignment lan + ! + local interface Port-Channel666 + ! + peer static router-ip 192.168.142.8 + name cv-pathfinder-edge4A + ipv4 address 10.10.10.1 + ! + load-balance policy LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + path-group INET + path-group LAN_HA + ! + load-balance policy LB-DEFAULT-AVT-POLICY-DEFAULT + path-group INET + path-group LAN_HA + ! + load-balance policy LB-DEFAULT-AVT-POLICY-VIDEO + path-group INET + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-DEFAULT + path-group INET + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-MPLS-ONLY + path-group LAN_HA + ! + load-balance policy LB-PROD-AVT-POLICY-VIDEO + loss-rate 42.0 + path-group LAN_HA + path-group INET priority 2 + ! + load-balance policy LB-PROD-AVT-POLICY-VOICE + jitter 42 + hop count lowest + path-group LAN_HA + path-group INET priority 2 +! +spanning-tree mode none +! +vrf instance IT +! +vrf instance MGMT +! +vrf instance PROD +! +management security + ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security + ike policy CP-IKE-POLICY + local-id 192.168.142.9 + ! + sa policy CP-SA-POLICY + esp encryption aes256gcm128 + pfs dh-group 14 + ! + sa policy DP-SA-POLICY + esp encryption aes256gcm128 + pfs dh-group 14 + ! + profile CP-PROFILE + ike-policy CP-IKE-POLICY + sa-policy CP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890 + dpd 10 50 clear + mode transport + ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! + key controller + profile DP-PROFILE +! +interface Port-Channel666 + description WAN_HA_cv-pathfinder-edge4A_Port-Channel666 + no shutdown + mtu 9194 + no switchport + flow tracker hardware FLOW-TRACKER + ip address 10.10.10.2/24 +! +interface Dps1 + description DPS Interface + mtu 9194 + flow tracker hardware FLOW-TRACKER + ip address 192.168.142.9/32 +! +interface Ethernet1 + no shutdown + no switchport +! +interface Ethernet1.42 + description Comcast + no shutdown + encapsulation dot1q vlan 42 + ip address dhcp + dhcp client accept default-route +! +interface Ethernet42 + description WAN_HA_cv-pathfinder-edge4A_Ethernet42 + no shutdown + mtu 9194 + channel-group 666 mode active +! +interface Ethernet43 + description WAN_HA_cv-pathfinder-edge4A_Ethernet43 + no shutdown + mtu 9194 + channel-group 666 mode active +! +interface Loopback0 + description ROUTER_ID + no shutdown + ip address 192.168.42.9/32 +! +interface Vxlan1 + description cv-pathfinder-edge4B_VTEP + vxlan source-interface Dps1 + vxlan udp-port 4789 + vxlan vrf default vni 1 + vxlan vrf IT vni 100 + vxlan vrf PROD vni 42 +! +application traffic recognition + ! + application ipv4 APP-CONTROL-PLANE + destination prefix field-set PFX-PATHFINDERS + ! + application ipv4 CUSTOM-APPLICATION-1 + source prefix field-set CUSTOM-SRC-PREFIX-1 + destination prefix field-set CUSTOM-DEST-PREFIX-1 + protocol tcp + ! + application ipv4 CUSTOM-APPLICATION-2 + protocol tcp source port field-set TCP-SRC-2 destination port field-set TCP-DEST-2 + ! + application ipv4 CUSTOM-DSCP-APPLICATION + dscp ef 12-14 cs6 42 + ! + category VIDEO1 + application CUSTOM-APPLICATION-2 + application CUSTOM-DSCP-APPLICATION + application microsoft-teams + ! + application-profile APP-PROFILE-CONTROL-PLANE + application APP-CONTROL-PLANE + ! + application-profile MPLS-ONLY + ! + application-profile VIDEO + application CUSTOM-APPLICATION-1 + application skype + application rtp transport + category VIDEO1 + ! + application-profile VOICE + application CUSTOM-VOICE-APPLICATION + ! + field-set ipv4 prefix CUSTOM-DEST-PREFIX-1 + 6.6.6.0/24 + ! + field-set ipv4 prefix CUSTOM-SRC-PREFIX-1 + 42.42.42.0/24 + ! + field-set ipv4 prefix PFX-PATHFINDERS + 192.168.144.1/32 + ! + field-set l4-port TCP-DEST-2 + 666, 777 + ! + field-set l4-port TCP-SRC-2 + 42 +! +ip routing +ip routing vrf IT +no ip routing vrf MGMT +ip routing vrf PROD +! +ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.42.8:405 +! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.42.0/24 eq 32 +! +route-map RM-BGP-UNDERLAY-PEERS-IN permit 40 + description Mark prefixes originated from the LAN + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-BGP-UNDERLAY-PEERS-OUT permit 10 + description Make routes learned from WAN HA peer less preferred on LAN routers + match route-type internal + match tag 50 + set metric 50 +! +route-map RM-BGP-UNDERLAY-PEERS-OUT permit 20 +! +route-map RM-CONN-2-BGP permit 10 + match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-EVPN-EXPORT-VRF-DEFAULT permit 10 + match extcommunity ECL-EVPN-SOO +! +route-map RM-EVPN-SOO-IN deny 10 + match extcommunity ECL-EVPN-SOO +! +route-map RM-EVPN-SOO-IN permit 20 +! +route-map RM-EVPN-SOO-OUT permit 10 + set extcommunity soo 192.168.42.8:405 additive +! +route-map RM-WAN-HA-PEER-IN permit 10 + description Set tag 50 on routes received from HA peer over EVPN + set tag 50 +! +route-map RM-WAN-HA-PEER-OUT permit 10 + description Make EVPN routes learned from WAN less preferred on HA peer + match route-type internal + set local-preference 50 +! +route-map RM-WAN-HA-PEER-OUT permit 20 + description Make locally injected routes less preferred on HA peer + set local-preference 75 +! +router bfd + multihop interval 300 min-rx 300 multiplier 3 +! +router bgp 65000 + router-id 192.168.42.9 + maximum-paths 16 + update wait-install + no bgp default ipv4-unicast + neighbor IPv4-UNDERLAY-PEERS peer group + neighbor IPv4-UNDERLAY-PEERS send-community + neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 + neighbor IPv4-UNDERLAY-PEERS route-map RM-BGP-UNDERLAY-PEERS-IN in + neighbor IPv4-UNDERLAY-PEERS route-map RM-BGP-UNDERLAY-PEERS-OUT out + neighbor WAN-OVERLAY-PEERS peer group + neighbor WAN-OVERLAY-PEERS remote-as 65000 + neighbor WAN-OVERLAY-PEERS update-source Dps1 + neighbor WAN-OVERLAY-PEERS bfd + neighbor WAN-OVERLAY-PEERS bfd interval 1000 min-rx 1000 multiplier 10 + neighbor WAN-OVERLAY-PEERS ttl maximum-hops 1 + neighbor WAN-OVERLAY-PEERS password 7 htm4AZe9mIQOO1uiMuGgYQ== + neighbor WAN-OVERLAY-PEERS send-community + neighbor WAN-OVERLAY-PEERS maximum-routes 0 + neighbor 192.168.142.8 remote-as 65000 + neighbor 192.168.142.8 description cv-pathfinder-edge4A + neighbor 192.168.142.8 route-reflector-client + neighbor 192.168.142.8 update-source Dps1 + neighbor 192.168.142.8 route-map RM-WAN-HA-PEER-IN in + neighbor 192.168.142.8 route-map RM-WAN-HA-PEER-OUT out + neighbor 192.168.142.8 send-community + neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 + redistribute connected route-map RM-CONN-2-BGP + ! + address-family evpn + neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in + neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out + neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection + neighbor 192.168.142.8 activate + neighbor 192.168.142.8 encapsulation path-selection + neighbor default next-hop-self received-evpn-routes route-type ip-prefix + ! + address-family ipv4 + neighbor IPv4-UNDERLAY-PEERS activate + no neighbor WAN-OVERLAY-PEERS activate + ! + address-family ipv4 sr-te + neighbor WAN-OVERLAY-PEERS activate + ! + address-family link-state + neighbor WAN-OVERLAY-PEERS activate + path-selection + ! + address-family path-selection + bgp additional-paths receive + bgp additional-paths send any + neighbor WAN-OVERLAY-PEERS activate + ! + vrf default + rd 192.168.42.9:1 + route-target import evpn 1:1 + route-target export evpn 1:1 + route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT + ! + vrf IT + rd 192.168.42.9:1000 + route-target import evpn 1000:1000 + route-target export evpn 1000:1000 + router-id 192.168.42.9 + redistribute connected + ! + vrf PROD + rd 192.168.42.9:142 + route-target import evpn 142:142 + route-target export evpn 142:142 + router-id 192.168.42.9 + redistribute connected +! +router traffic-engineering +! +stun + client + server-profile INET-cv-pathfinder-pathfinder-Ethernet1 + ip address 172.17.7.7 + ssl profile profileA + server-profile INET-cv-pathfinder-pathfinder-Ethernet3 + ip address 10.9.9.9 + ssl profile profileA +! +end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder.cfg index 50e0cc8922b..b87482a5b07 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -199,8 +208,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS path-group INET priority 2 @@ -210,17 +219,20 @@ router path-selection path-group LAN_HA path-group MPLS priority 2 ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 1 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.144.1 ! @@ -238,7 +250,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.144.1/32 ! @@ -261,7 +273,7 @@ interface Ethernet3 ip address 10.9.9.9/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.44.1/32 ! @@ -371,6 +383,7 @@ router bgp 65000 ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -398,19 +411,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder1.cfg index 8eb4e9da68c..7ebf66d9e34 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -202,8 +211,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS path-group INET priority 2 @@ -213,17 +222,20 @@ router path-selection path-group LAN_HA path-group MPLS priority 2 ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 3 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! -ip security +management security ! + ssl profile profileB + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileB.crt key profileB.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.144.2 ! @@ -241,7 +253,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.144.2/32 ! @@ -252,7 +264,7 @@ interface Ethernet1 ip address 10.8.8.8/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.44.2/32 ! @@ -366,14 +378,16 @@ router bgp 65000 neighbor WAN-RR-OVERLAY-PEERS send-community neighbor WAN-RR-OVERLAY-PEERS maximum-routes 0 neighbor 6.6.6.6 peer group WAN-RR-OVERLAY-PEERS - neighbor 6.6.6.6 description cv-pathfinder-pathfinder3 + neighbor 6.6.6.6 description cv-pathfinder-pathfinder3_Dps1 neighbor 192.168.144.3 peer group WAN-RR-OVERLAY-PEERS - neighbor 192.168.144.3 description cv-pathfinder-pathfinder2 + neighbor 192.168.144.3 description cv-pathfinder-pathfinder2_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor WAN-RR-OVERLAY-PEERS activate + neighbor WAN-RR-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -405,19 +419,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileB - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileB.crt key profileB.key -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder2.cfg index 36e62858217..0d0cb1e9bb4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-pathfinder2.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -209,8 +218,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS path-group INET priority 2 @@ -220,17 +229,20 @@ router path-selection path-group LAN_HA path-group MPLS priority 2 ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 3 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! -ip security +management security ! + ssl profile profileB + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileB.crt key profileB.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.144.3 ! @@ -248,7 +260,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.144.3/32 ! @@ -265,7 +277,7 @@ interface Ethernet2 ip address 172.19.9.9/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.44.3/32 ! @@ -379,14 +391,16 @@ router bgp 65000 neighbor WAN-RR-OVERLAY-PEERS send-community neighbor WAN-RR-OVERLAY-PEERS maximum-routes 0 neighbor 6.6.6.6 peer group WAN-RR-OVERLAY-PEERS - neighbor 6.6.6.6 description cv-pathfinder-pathfinder3 + neighbor 6.6.6.6 description cv-pathfinder-pathfinder3_Dps1 neighbor 192.168.144.2 peer group WAN-RR-OVERLAY-PEERS - neighbor 192.168.144.2 description cv-pathfinder-pathfinder1 + neighbor 192.168.144.2 description cv-pathfinder-pathfinder1_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor WAN-RR-OVERLAY-PEERS activate + neighbor WAN-RR-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -418,19 +432,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileB - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileB.crt key profileB.key -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1A.cfg index b0d3ca48c99..58f250382c9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1A.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,8 +23,6 @@ flow tracking hardware ! service routing protocols model multi-agent ! -ip as-path access-list ASPATH-WAN permit 65000 any -! ! ip nat profile NAT-IE-DIRECT ip nat source dynamic access-list ACL-NAT-IE-DIRECT overload @@ -133,13 +140,12 @@ router adaptive-virtual-topology avt profile CUSTOM-VOICE-PROFILE-NAME id 42 ! router internet-exit - ! - exit-group DIRECT-EXIT-POLICY-2 - local connection IE-Ethernet2.42 - ! - policy DIRECT-EXIT-POLICY-2 - exit-group DIRECT-EXIT-POLICY-2 - exit-group system-default-exit-group + exit-group DIRECT-EXIT-POLICY-2 + local connection IE-Ethernet2.42 + ! + policy DIRECT-EXIT-POLICY-2 + exit-group DIRECT-EXIT-POLICY-2 + exit-group system-default-exit-group ! router path-selection tcp mss ceiling ipv4 ingress @@ -220,8 +226,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS path-group INET priority 2 @@ -238,9 +244,6 @@ router service-insertion ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -253,26 +256,25 @@ vrf instance PROD ! vrf instance TRANSIT ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.143.1 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -281,12 +283,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.143.1/32 ! @@ -344,7 +353,7 @@ interface Ethernet52.1000 ip address 172.17.0.1/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.43.1/32 ! @@ -430,6 +439,8 @@ ip routing vrf NOT-WAN-VRF ip routing vrf PROD ip routing vrf TRANSIT ! +ip as-path access-list ASPATH-WAN permit 65000 any +! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.43.1:422 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -527,14 +538,16 @@ router bgp 65000 neighbor 192.168.143.2 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.143.2 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor 192.168.143.2 activate + neighbor 192.168.143.2 encapsulation path-selection neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -602,19 +615,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1B.cfg index 02009273415..1afedfdea3b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cv-pathfinder-transit1B.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,8 +23,6 @@ flow tracking hardware ! service routing protocols model multi-agent ! -ip as-path access-list ASPATH-WAN permit 65000 any -! hostname cv-pathfinder-transit1B ! router adaptive-virtual-topology @@ -206,8 +213,8 @@ router path-selection path-group INET priority 2 ! load-balance policy LB-PROD-AVT-POLICY-VOICE - hop count lowest jitter 42 + hop count lowest path-group LAN_HA path-group MPLS path-group INET priority 2 @@ -219,9 +226,6 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance ATTRACTED-VRF-FROM-UPLINK ! vrf instance IT @@ -234,26 +238,25 @@ vrf instance PROD ! vrf instance TRANSIT ! -ip security +management security ! + ssl profile profileA + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate profileA.crt key profileA.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.143.2 ! - sa policy DP-SA-POLICY + sa policy CP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - sa policy CP-SA-POLICY + sa policy DP-SA-POLICY esp encryption aes256gcm128 pfs dh-group 14 ! - profile DP-PROFILE - sa-policy DP-SA-POLICY - connection start - shared-key 7 ABCDEF1234567890666 - dpd 10 50 clear - mode transport - ! profile CP-PROFILE ike-policy CP-IKE-POLICY sa-policy CP-SA-POLICY @@ -262,12 +265,19 @@ ip security dpd 10 50 clear mode transport ! + profile DP-PROFILE + sa-policy DP-SA-POLICY + connection start + shared-key 7 ABCDEF1234567890666 + dpd 10 50 clear + mode transport + ! key controller profile DP-PROFILE ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.143.2/32 ! @@ -324,7 +334,7 @@ interface Ethernet52.1000 ip address 172.17.0.3/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.43.2/32 ! @@ -396,6 +406,8 @@ ip routing vrf NOT-WAN-VRF ip routing vrf PROD ip routing vrf TRANSIT ! +ip as-path access-list ASPATH-WAN permit 65000 any +! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.43.1:422 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -492,14 +504,16 @@ router bgp 65000 neighbor 192.168.143.1 route-map RM-WAN-HA-PEER-OUT out neighbor 192.168.143.1 send-community neighbor 192.168.144.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.144.1 description cv-pathfinder-pathfinder + neighbor 192.168.144.1 description cv-pathfinder-pathfinder_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor 192.168.143.1 activate + neighbor 192.168.143.1 encapsulation path-selection neighbor default next-hop-self received-evpn-routes route-type ip-prefix ! address-family ipv4 @@ -567,19 +581,6 @@ router bgp 65000 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile profileA - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate profileA.crt key profileA.key -! stun client server-profile INET-cv-pathfinder-pathfinder-Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-cvaas.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-cvaas.cfg index d41eb69481c..a6b6819f8f3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-cvaas.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-cvaas.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=cv-staging.corp.arista.io:443 -cvauth=token-secure,/tmp/cv-onboarding-token -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,13 +23,10 @@ hostname cvp-instance-ips-cvaas ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ! @@ -62,11 +68,4 @@ router bgp 1234 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-onprem-token.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-onprem-token.cfg index e0d29617f96..854ead3b88a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-onprem-token.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/cvp-instance-ips-onprem-token.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=myonpremcvpserver:9910 -cvauth=token,/tmp/token -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -12,17 +21,7 @@ service routing protocols model multi-agent ! hostname cvp-instance-ips-onprem-token ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_hostvars.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_hostvars.cfg index b60ef30b30d..5d2ebb23fcf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_hostvars.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_hostvars.cfg @@ -1,27 +1,26 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! +transceiver qsfp default-mode 4x10G +! interface defaults mtu 1234 ! -transceiver qsfp default-mode 4x10G -! service routing protocols model multi-agent ! hostname default_interface_mtu_hostvars ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_platform.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_platform.cfg index de204642f7f..a84938af652 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_platform.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_interface_mtu_platform.cfg @@ -1,27 +1,26 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! +transceiver qsfp default-mode 4x10G +! interface defaults mtu 1234 ! -transceiver qsfp default-mode 4x10G -! service routing protocols model multi-agent ! hostname default_interface_mtu_platform ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_cvx.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_cvx.cfg index d29c56d5eb5..cf1b98078b8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_cvx.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_cvx.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,13 +19,10 @@ hostname default_overlay_protocol_cvx ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.0.42/32 ! @@ -42,11 +48,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_her.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_her.cfg index 7cffec40b6f..dbbeacbe795 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_her.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/default_overlay_protocol_her.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,13 +19,10 @@ hostname default_overlay_protocol_her ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.0.42/32 ! @@ -42,11 +48,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/device.with.dots.in.hostname.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/device.with.dots.in.hostname.cfg index 4cbe2e6d2a7..e213ef268fe 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/device.with.dots.in.hostname.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/device.with.dots.in.hostname.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,13 +19,10 @@ hostname device.with.dots.in.hostname ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ! @@ -58,11 +64,4 @@ router bgp 1234 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf1.cfg index 111459defba..7085bd6a73a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname downlink-pools-l3leaf1 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -28,12 +34,12 @@ interface Ethernet2 ip address 10.0.1.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.1.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.2.10/32 ! @@ -77,7 +83,7 @@ router bgp 65009 neighbor 10.0.1.2 description downlink-pools-spine1_Ethernet4 neighbor 192.168.0.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.10 remote-as 65000 - neighbor 192.168.0.10 description downlink-pools-spine1 + neighbor 192.168.0.10 description downlink-pools-spine1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -87,11 +93,4 @@ router bgp 65009 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf2.cfg index 9311fd9aef9..480b0dabcc7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname downlink-pools-l3leaf2 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -28,12 +34,12 @@ interface Ethernet2 ip address 10.0.2.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.1.20/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.2.20/32 ! @@ -77,7 +83,7 @@ router bgp 65019 neighbor 10.0.2.2 description downlink-pools-spine2_Ethernet4 neighbor 192.168.0.20 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.20 remote-as 65000 - neighbor 192.168.0.20 description downlink-pools-spine2 + neighbor 192.168.0.20 description downlink-pools-spine2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -87,11 +93,4 @@ router bgp 65019 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf3.cfg index 7091ab7d943..81e6cf07211 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname downlink-pools-l3leaf3 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -42,12 +48,12 @@ interface Ethernet4 ip address 10.0.4.5/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.1.30/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.2.30/32 ! @@ -97,10 +103,10 @@ router bgp 65029 neighbor 10.0.4.4 description downlink-pools-spine2_Ethernet15 neighbor 192.168.0.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.10 remote-as 65000 - neighbor 192.168.0.10 description downlink-pools-spine1 + neighbor 192.168.0.10 description downlink-pools-spine1_Loopback0 neighbor 192.168.0.20 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.20 remote-as 65000 - neighbor 192.168.0.20 description downlink-pools-spine2 + neighbor 192.168.0.20 description downlink-pools-spine2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -110,11 +116,4 @@ router bgp 65029 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf4.cfg index 42227daa16f..158208e3738 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-l3leaf4.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname downlink-pools-l3leaf4 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -42,12 +48,12 @@ interface Ethernet4 ip address 10.0.4.7/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.1.40/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.2.40/32 ! @@ -97,10 +103,10 @@ router bgp 65039 neighbor 10.0.4.6 description downlink-pools-spine2_Ethernet16 neighbor 192.168.0.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.10 remote-as 65000 - neighbor 192.168.0.10 description downlink-pools-spine1 + neighbor 192.168.0.10 description downlink-pools-spine1_Loopback0 neighbor 192.168.0.20 peer group EVPN-OVERLAY-PEERS neighbor 192.168.0.20 remote-as 65000 - neighbor 192.168.0.20 description downlink-pools-spine2 + neighbor 192.168.0.20 description downlink-pools-spine2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -110,11 +116,4 @@ router bgp 65039 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine1.cfg index d9453b9cad2..2c82af7f6fb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname downlink-pools-spine1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet3 @@ -58,7 +64,7 @@ interface Ethernet16 ip address 10.0.3.18/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.0.10/32 ! @@ -109,13 +115,13 @@ router bgp 65000 neighbor 10.0.3.19 description downlink-pools-l3leaf4_Ethernet3 neighbor 192.168.1.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.10 remote-as 65009 - neighbor 192.168.1.10 description downlink-pools-l3leaf1 + neighbor 192.168.1.10 description downlink-pools-l3leaf1_Loopback0 neighbor 192.168.1.30 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.30 remote-as 65029 - neighbor 192.168.1.30 description downlink-pools-l3leaf3 + neighbor 192.168.1.30 description downlink-pools-l3leaf3_Loopback0 neighbor 192.168.1.40 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.40 remote-as 65039 - neighbor 192.168.1.40 description downlink-pools-l3leaf4 + neighbor 192.168.1.40 description downlink-pools-l3leaf4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -125,11 +131,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine2.cfg index 305f56ed25d..159b8951637 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/downlink-pools-spine2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname downlink-pools-spine2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet3 @@ -58,7 +64,7 @@ interface Ethernet16 ip address 10.0.4.6/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.0.20/32 ! @@ -109,13 +115,13 @@ router bgp 65000 neighbor 10.0.4.7 description downlink-pools-l3leaf4_Ethernet4 neighbor 192.168.1.20 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.20 remote-as 65019 - neighbor 192.168.1.20 description downlink-pools-l3leaf2 + neighbor 192.168.1.20 description downlink-pools-l3leaf2_Loopback0 neighbor 192.168.1.30 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.30 remote-as 65029 - neighbor 192.168.1.30 description downlink-pools-l3leaf3 + neighbor 192.168.1.30 description downlink-pools-l3leaf3_Loopback0 neighbor 192.168.1.40 peer group EVPN-OVERLAY-PEERS neighbor 192.168.1.40 remote-as 65039 - neighbor 192.168.1.40 description downlink-pools-l3leaf4 + neighbor 192.168.1.40 description downlink-pools-l3leaf4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -125,11 +131,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/duplicate-vrfs.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/duplicate-vrfs.cfg index 5a94fbdfcd4..dd6f1ba9d11 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/duplicate-vrfs.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/duplicate-vrfs.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname duplicate-vrfs ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -22,12 +28,12 @@ vrf instance MGMT vrf instance VRF1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.101/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.101/32 ! @@ -107,11 +113,4 @@ router bgp 101 router-id 192.168.255.101 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-to-ipvpn-gateway.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-to-ipvpn-gateway.cfg index 2a3b5c1858e..d8845458f25 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-to-ipvpn-gateway.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-to-ipvpn-gateway.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname evpn-to-ipvpn-gateway ! -no enable password -no aaa root -! vlan 10 name TEST_SVI_VLAN_10 ! @@ -19,12 +25,12 @@ vrf instance MGMT vrf instance testvrf ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.0.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.11.0.1/32 ! @@ -113,11 +119,4 @@ router bgp 65100.100 router-id 10.10.0.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-vtep-with-default-vrf-not-evpn.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-vtep-with-default-vrf-not-evpn.cfg index 34a1d0af4ec..de7ab2e7aea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-vtep-with-default-vrf-not-evpn.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn-vtep-with-default-vrf-not-evpn.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,21 +17,18 @@ service routing protocols model multi-agent ! hostname evpn-vtep-with-default-vrf-not-evpn ! -no enable password -no aaa root -! vlan 110 name SVI-110 ! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.109/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.109/32 ! @@ -80,11 +86,4 @@ router bgp 101 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_false.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_false.cfg index 9406128d6fa..b7cc0a55d16 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_false.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_false.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,21 +35,9 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS evpn_services_l2_only_false ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -160,12 +163,12 @@ vrf instance Tenant_C_WAN_Zone vrf instance Tenant_D_OP_Zone ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.109/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.109/32 ! @@ -176,7 +179,7 @@ interface Loopback100 ip address 10.255.1.109/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.101/24 @@ -451,16 +454,20 @@ ip routing vrf Tenant_C_OP_Zone ip routing vrf Tenant_C_WAN_Zone ip routing vrf Tenant_D_OP_Zone ! -ipv6 unicast-routing vrf 12345678 -ipv6 unicast-routing vrf Tenant_D_OP_Zone -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing vrf 12345678 +ipv6 unicast-routing vrf Tenant_D_OP_Zone +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_D_OP_Zone 10.3.11.0/24 Vlan411 name VARP ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -484,6 +491,7 @@ router bgp 101 neighbor UNDERLAY-PEERS send-community neighbor UNDERLAY-PEERS maximum-routes 12000 redistribute connected route-map RM-CONN-2-BGP + redistribute ospf ! vlan-aware-bundle 12345678 rd 192.168.255.109:41 @@ -600,7 +608,6 @@ router bgp 101 rd 192.168.255.109:123 route-target import evpn 123:123 route-target export evpn 123:123 - redistribute ospf ! vrf Tenant_A_APP_Zone rd 192.168.255.109:12 @@ -680,12 +687,4 @@ router ospf 123 no passive-interface Vlan1234 redistribute bgp ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_true.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_true.cfg index a2a0ac7351f..b47f3a2181a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_true.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_services_l2_only_true.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,21 +35,9 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS evpn_services_l2_only_true ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -137,17 +140,17 @@ vlan 1234 vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.109/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.109/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.101/24 @@ -199,6 +202,10 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -327,12 +334,4 @@ router bgp 101 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle.cfg index 795d6c194e7..5734288d654 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname evpn_vlan_bundle ! -no enable password -no aaa root -! vlan 10 name storage_prod ! @@ -82,12 +88,12 @@ vrf instance SIT3 vrf instance SIT_VRF ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.11.0.3/32 ! @@ -295,11 +301,4 @@ router bgp 65101 router-id 10.10.0.3 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle_svi_l2vlan.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle_svi_l2vlan.cfg index 154c48a0beb..3c8d8939e2d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle_svi_l2vlan.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/evpn_vlan_bundle_svi_l2vlan.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname evpn_vlan_bundle_svi_l2vlan ! -no enable password -no aaa root -! vlan 10 name storage_prod ! @@ -37,12 +43,12 @@ vrf instance MGMT vrf instance SIT_VRF ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.0.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.11.0.3/32 ! @@ -139,11 +145,4 @@ router bgp 65101 router-id 10.10.0.3 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.only_vlans_in_use.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.only_vlans_in_use.cfg index 8bd2cd3dff7..89a860c59ec 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.only_vlans_in_use.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.only_vlans_in_use.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname filter.only_vlans_in_use ! -no enable password -no aaa root -! vlan 1 name vlan1 ! @@ -20,7 +26,7 @@ vlan 2 vrf instance MGMT ! interface Ethernet1 - description testserver_Nic1 + description SERVER_testserver_Nic1 no shutdown switchport trunk allowed vlan 1-2 switchport mode trunk @@ -29,11 +35,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 10.0.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.vrfs.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.vrfs.cfg index 51794858b7b..95e74d35d59 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.vrfs.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/filter.vrfs.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname filter.vrfs ! -no enable password -no aaa root -! vrf instance MGMT ! vrf instance VRF2 @@ -20,7 +26,7 @@ vrf instance VRF5 description This VRF will be configured because of always_include_vrfs_in_tenants and it is permitted by filter.allow_vrfs ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.0.1/32 ! @@ -66,11 +72,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf1.cfg index 50a5de9e5ac..1c6d6e60d96 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -19,9 +28,6 @@ service routing protocols model multi-agent ! hostname flow-tracking-tests-l2-leaf1 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -33,9 +39,9 @@ vrf instance MGMT interface Port-Channel1 description FLOW-TRACKING-TESTS-LEAF-MLAG_Po31 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport flow tracker sampled FLOW-TRACKER ! interface Ethernet1 @@ -49,7 +55,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.201/24 @@ -64,11 +70,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ip route 0.0.0.0/0 10.254.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf2.cfg index fd315f8ed8f..00083bc8dfb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-l2-leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -19,9 +28,6 @@ service routing protocols model multi-agent ! hostname flow-tracking-tests-l2-leaf2 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -33,9 +39,9 @@ vrf instance MGMT interface Port-Channel1 description FLOW-TRACKING-TESTS-LEAF-MLAG_Po32 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport flow tracker sampled FLOW-TRACKER ! interface Ethernet1 @@ -49,7 +55,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.202/24 @@ -64,11 +70,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ip route 0.0.0.0/0 10.254.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf1.cfg index 45c93366691..a0fa4126896 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,6 +19,7 @@ flow tracking hardware collector 127.0.0.2 local interface Loopback0 template interval 40002 + ! tracker FLOW-TRACKER-3 record export on inactive timeout 50000 record export on interval 300331 @@ -28,9 +38,6 @@ hostname flow-tracking-tests-leaf1 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -55,7 +62,7 @@ interface Ethernet2 ip address 10.254.2.3/31 ! interface Ethernet10 - description single-interface-true_eth1 + description SERVER_single-interface-true_eth1 no shutdown switchport access vlan 11 switchport mode access @@ -63,14 +70,14 @@ interface Ethernet10 flow tracker hardware FLOW-TRACKER-3 ! interface Ethernet11 - description single-interface-false_eth11 + description SERVER_single-interface-false_eth11 no shutdown switchport access vlan 11 switchport mode access switchport ! interface Ethernet12 - description single-interface-no-definition_eth12 + description SERVER_single-interface-no-definition_eth12 no shutdown switchport access vlan 11 switchport mode access @@ -78,7 +85,7 @@ interface Ethernet12 flow tracker hardware FLOW-TRACKER ! interface Ethernet13 - description single-interface-true4_eth1 + description SERVER_single-interface-true4_eth1 no shutdown switchport access vlan 11 switchport mode access @@ -113,17 +120,17 @@ interface Ethernet84 ip address 10.1.55.0/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.101/24 @@ -180,10 +187,10 @@ router bgp 65101 neighbor 10.254.2.2 description flow-tracking-tests-spine2_Ethernet2 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description flow-tracking-tests-spine1 + neighbor 10.255.0.1 description flow-tracking-tests-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65200 - neighbor 10.255.0.2 description flow-tracking-tests-spine2 + neighbor 10.255.0.2 description flow-tracking-tests-spine2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -205,11 +212,4 @@ router bgp 65101 router-id 10.254.1.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf2.cfg index cf7a0447088..f306ef30c10 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -14,6 +23,7 @@ flow tracking sampled collector 127.0.0.1 local interface Loopback0 template interval 40000 + ! tracker FLOW-TRACKER-4 record export on inactive timeout 50020 record export on interval 300321 @@ -32,9 +42,6 @@ hostname flow-tracking-tests-leaf2 spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -57,21 +64,21 @@ interface Ethernet2 ip address 10.254.2.7/31 ! interface Ethernet10 - description single-interface-true_eth2 + description SERVER_single-interface-true_eth2 no shutdown switchport access vlan 11 switchport mode access switchport ! interface Ethernet11 - description single-interface-false_eth12 + description SERVER_single-interface-false_eth12 no shutdown switchport access vlan 11 switchport mode access switchport ! interface Ethernet12 - description single-interface-no-definition_eth13 + description SERVER_single-interface-no-definition_eth13 no shutdown switchport access vlan 11 switchport mode access @@ -79,7 +86,7 @@ interface Ethernet12 flow tracker sampled FLOW-TRACKER-3 ! interface Ethernet13 - description single-interface-true4_eth1 + description SERVER_single-interface-true4_eth1 no shutdown switchport access vlan 11 switchport mode access @@ -112,17 +119,17 @@ interface Ethernet84 ip address 10.1.55.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.102/24 @@ -179,10 +186,10 @@ router bgp 65102 neighbor 10.254.2.6 description flow-tracking-tests-spine2_Ethernet4 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description flow-tracking-tests-spine1 + neighbor 10.255.0.1 description flow-tracking-tests-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65200 - neighbor 10.255.0.2 description flow-tracking-tests-spine2 + neighbor 10.255.0.2 description flow-tracking-tests-spine2_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -204,11 +211,4 @@ router bgp 65102 router-id 10.254.1.2 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf3.cfg index 515caae12ac..5b0cf1ec52c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,6 +19,7 @@ flow tracking hardware collector 127.0.0.2 local interface Loopback0 template interval 40002 + ! tracker FLOW-TRACKER-3 record export on inactive timeout 50000 record export on interval 300331 @@ -29,25 +39,22 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4092 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -55,53 +62,55 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel14 - description port-channel-interface-true + description SERVER_port-channel-interface-true no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 14 spanning-tree portfast ! interface Port-Channel15 - description port-channel-interface-false + description SERVER_port-channel-interface-false no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport flow tracker hardware FLOW-TRACKER mlag 15 spanning-tree portfast ! interface Port-Channel16 - description port-channel-interface-no-definition + description SERVER_port-channel-interface-no-definition no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 16 spanning-tree portfast ! interface Port-Channel21 - description MLAG_PEER_flow-tracking-tests-leaf4_Po21 + description MLAG_flow-tracking-tests-leaf4_Port-Channel21 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel31 description FLOW-TRACKING-TESTS-L2-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport flow tracker hardware FLOW-TRACKER mlag 31 ! interface Port-Channel32 description FLOW-TRACKING-TESTS-L2-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport flow tracker hardware FLOW-TRACKER mlag 32 ! @@ -122,27 +131,27 @@ interface Ethernet2 ip address 10.254.2.19/31 ! interface Ethernet14 - description port-channel-interface-true_PCI1 + description SERVER_port-channel-interface-true_PCI1 no shutdown channel-group 14 mode on ! interface Ethernet15 - description port-channel-interface-false_PCI11 + description SERVER_port-channel-interface-false_PCI11 no shutdown channel-group 15 mode on ! interface Ethernet16 - description port-channel-interface-no-definition_PCI13 + description SERVER_port-channel-interface-no-definition_PCI13 no shutdown channel-group 16 mode on ! interface Ethernet21 - description MLAG_PEER_flow-tracking-tests-leaf4_Ethernet21 + description MLAG_flow-tracking-tests-leaf4_Ethernet21 no shutdown channel-group 21 mode active ! interface Ethernet22 - description MLAG_PEER_flow-tracking-tests-leaf4_Ethernet22 + description MLAG_flow-tracking-tests-leaf4_Ethernet22 no shutdown channel-group 21 mode active ! @@ -157,17 +166,17 @@ interface Ethernet32 channel-group 32 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.103/24 @@ -178,7 +187,7 @@ interface Vlan11 vrf VRF1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 @@ -193,13 +202,13 @@ interface Vlan4092 ip virtual-router address 10.254.254.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.104/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -270,7 +279,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.105 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.105 description flow-tracking-tests-leaf4 + neighbor 10.254.1.105 description flow-tracking-tests-leaf4_Vlan4093 neighbor 10.254.2.16 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.16 remote-as 65200 neighbor 10.254.2.16 description flow-tracking-tests-spine1_Ethernet5 @@ -279,10 +288,10 @@ router bgp 65105 neighbor 10.254.2.18 description flow-tracking-tests-spine2_Ethernet6 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description flow-tracking-tests-spine1 + neighbor 10.255.0.1 description flow-tracking-tests-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65200 - neighbor 10.255.0.2 description flow-tracking-tests-spine2 + neighbor 10.255.0.2 description flow-tracking-tests-spine2_Loopback0 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -305,13 +314,7 @@ router bgp 65105 route-target export evpn 1:1 router-id 10.254.1.5 neighbor 10.254.1.105 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.105 description flow-tracking-tests-leaf4_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf4.cfg index edcc79c1377..4460281ac10 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-leaf4.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,6 +19,7 @@ flow tracking hardware collector 127.0.0.2 local interface Loopback0 template interval 40002 + ! tracker FLOW-TRACKER-4 record export on inactive timeout 50020 record export on interval 300321 @@ -29,25 +39,22 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4092 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -55,54 +62,56 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel14 - description port-channel-interface-true + description SERVER_port-channel-interface-true no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport flow tracker hardware FLOW-TRACKER-4 mlag 14 spanning-tree portfast ! interface Port-Channel15 - description port-channel-interface-false + description SERVER_port-channel-interface-false no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport flow tracker hardware FLOW-TRACKER mlag 15 spanning-tree portfast ! interface Port-Channel16 - description port-channel-interface-no-definition + description SERVER_port-channel-interface-no-definition no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 16 spanning-tree portfast ! interface Port-Channel21 - description MLAG_PEER_flow-tracking-tests-leaf3_Po21 + description MLAG_flow-tracking-tests-leaf3_Port-Channel21 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport flow tracker hardware FLOW-TRACKER ! interface Port-Channel31 description FLOW-TRACKING-TESTS-L2-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 31 ! interface Port-Channel32 description FLOW-TRACKING-TESTS-L2-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 32 ! interface Ethernet1 @@ -122,27 +131,27 @@ interface Ethernet2 ip address 10.254.2.23/31 ! interface Ethernet14 - description port-channel-interface-true_PCI2 + description SERVER_port-channel-interface-true_PCI2 no shutdown channel-group 14 mode on ! interface Ethernet15 - description port-channel-interface-false_PCI12 + description SERVER_port-channel-interface-false_PCI12 no shutdown channel-group 15 mode on ! interface Ethernet16 - description port-channel-interface-no-definition_PCI14 + description SERVER_port-channel-interface-no-definition_PCI14 no shutdown channel-group 16 mode on ! interface Ethernet21 - description MLAG_PEER_flow-tracking-tests-leaf3_Ethernet21 + description MLAG_flow-tracking-tests-leaf3_Ethernet21 no shutdown channel-group 21 mode active ! interface Ethernet22 - description MLAG_PEER_flow-tracking-tests-leaf3_Ethernet22 + description MLAG_flow-tracking-tests-leaf3_Ethernet22 no shutdown channel-group 21 mode active ! @@ -157,17 +166,17 @@ interface Ethernet32 channel-group 32 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.104/24 @@ -178,7 +187,7 @@ interface Vlan11 vrf VRF1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 @@ -193,13 +202,13 @@ interface Vlan4092 ip virtual-router address 10.254.254.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.105/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -270,7 +279,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.104 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.104 description flow-tracking-tests-leaf3 + neighbor 10.254.1.104 description flow-tracking-tests-leaf3_Vlan4093 neighbor 10.254.2.20 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.20 remote-as 65200 neighbor 10.254.2.20 description flow-tracking-tests-spine1_Ethernet7 @@ -279,10 +288,10 @@ router bgp 65105 neighbor 10.254.2.22 description flow-tracking-tests-spine2_Ethernet8 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description flow-tracking-tests-spine1 + neighbor 10.255.0.1 description flow-tracking-tests-spine1_Loopback0 neighbor 10.255.0.2 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.2 remote-as 65200 - neighbor 10.255.0.2 description flow-tracking-tests-spine2 + neighbor 10.255.0.2 description flow-tracking-tests-spine2_Loopback0 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -305,13 +314,7 @@ router bgp 65105 route-target export evpn 1:1 router-id 10.254.1.6 neighbor 10.254.1.104 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.104 description flow-tracking-tests-leaf3_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine1.cfg index 3854ce2cc32..f23a64b4eea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,7 +20,9 @@ flow tracking sampled collector 127.0.0.2 local interface Loopback0 template interval 40002 + ! tracker FLOW-TRACKER-1 + flow table size 4331 entries record export on inactive timeout 50000 record export on interval 300331 record export mpls @@ -19,7 +30,6 @@ flow tracking sampled collector 127.0.0.1 local interface Loopback0 template interval 40000 - flow table size 4331 entries no shutdown ! transceiver qsfp default-mode 4x10G @@ -30,9 +40,6 @@ hostname flow-tracking-tests-spine1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -122,12 +129,12 @@ interface Ethernet16 flow tracker sampled FLOW-TRACKER ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.11/24 @@ -163,16 +170,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.254.1.1 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.1 remote-as 65101 - neighbor 10.254.1.1 description flow-tracking-tests-leaf1 + neighbor 10.254.1.1 description flow-tracking-tests-leaf1_Loopback0 neighbor 10.254.1.2 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.2 remote-as 65102 - neighbor 10.254.1.2 description flow-tracking-tests-leaf2 + neighbor 10.254.1.2 description flow-tracking-tests-leaf2_Loopback0 neighbor 10.254.1.5 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.5 remote-as 65105 - neighbor 10.254.1.5 description flow-tracking-tests-leaf3 + neighbor 10.254.1.5 description flow-tracking-tests-leaf3_Loopback0 neighbor 10.254.1.6 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.6 remote-as 65105 - neighbor 10.254.1.6 description flow-tracking-tests-leaf4 + neighbor 10.254.1.6 description flow-tracking-tests-leaf4_Loopback0 neighbor 10.254.2.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.1 remote-as 65101 neighbor 10.254.2.1 description flow-tracking-tests-leaf1_Ethernet1 @@ -194,11 +201,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine2.cfg index 8ef2294e772..d259efb6aea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/flow-tracking-tests-spine2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,6 +19,7 @@ flow tracking hardware collector 127.0.0.1 local interface Loopback0 template interval 40000 + ! tracker FLOW-TRACKER-2 record export on inactive timeout 50020 record export on interval 300321 @@ -28,9 +38,6 @@ hostname flow-tracking-tests-spine2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet2 @@ -118,12 +125,12 @@ interface Ethernet16 no switchport ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.21/24 @@ -159,16 +166,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.254.1.1 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.1 remote-as 65101 - neighbor 10.254.1.1 description flow-tracking-tests-leaf1 + neighbor 10.254.1.1 description flow-tracking-tests-leaf1_Loopback0 neighbor 10.254.1.2 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.2 remote-as 65102 - neighbor 10.254.1.2 description flow-tracking-tests-leaf2 + neighbor 10.254.1.2 description flow-tracking-tests-leaf2_Loopback0 neighbor 10.254.1.5 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.5 remote-as 65105 - neighbor 10.254.1.5 description flow-tracking-tests-leaf3 + neighbor 10.254.1.5 description flow-tracking-tests-leaf3_Loopback0 neighbor 10.254.1.6 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.6 remote-as 65105 - neighbor 10.254.1.6 description flow-tracking-tests-leaf4 + neighbor 10.254.1.6 description flow-tracking-tests-leaf4_Loopback0 neighbor 10.254.2.3 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.3 remote-as 65101 neighbor 10.254.2.3 description flow-tracking-tests-leaf1_Ethernet2 @@ -190,11 +197,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-1.cfg index 74de1d7b021..89bbd223463 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname generate-cv-tags-1 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -22,7 +28,7 @@ interface Ethernet1 ip address 10.20.30.40/24 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.255.1/32 ! @@ -62,11 +68,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-2.cfg index 683e7212f87..b4803c8c2ae 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/generate-cv-tags-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,13 +19,10 @@ hostname generate-cv-tags-2 ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.255.1/32 ! @@ -56,11 +62,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/hardware_counters.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/hardware_counters.cfg index 28bba6c8d3e..1246f805d6b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/hardware_counters.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/hardware_counters.cfg @@ -1,4 +1,6 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! hardware counter feature acl out mac hardware counter feature flow-spec in @@ -11,6 +13,13 @@ hardware counter feature route ipv6 2001:db8:cafe::/64 hardware counter feature vlan-interface in hardware counter feature vlan-interface out ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! vlan internal order ascending range 1006 1199 ! transceiver qsfp default-mode 4x10G @@ -19,17 +28,7 @@ service routing protocols model multi-agent ! hostname hardware_counters ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ignore-custom-keys-in-data-models.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ignore-custom-keys-in-data-models.cfg index 81ce4687b85..caf3f764dac 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ignore-custom-keys-in-data-models.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ignore-custom-keys-in-data-models.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,20 +17,10 @@ service routing protocols model multi-agent ! hostname ignore-custom-keys-in-data-models ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 switchport no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-ips.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-ips.cfg index 0617694a421..1825b258a89 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-ips.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-ips.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-dualstack-ips ! -no enable password -no aaa root -! vlan 105 name INBAND_MGMT ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENTS-DUALSTACK_Po25 no shutdown - switchport switchport trunk allowed vlan 105 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT-DUALSTACK1_Ethernet25 @@ -46,11 +52,4 @@ ip route 0.0.0.0/0 192.168.105.1 ! ipv6 route ::/0 2a00:105::1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-subnets.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-subnets.cfg index 36fbee00f96..d95d7d786f6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-subnets.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-dualstack-subnets.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-dualstack-subnets ! -no enable password -no aaa root -! vlan 104 name INBAND_MGMT ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENTS-DUALSTACK_Po24 no shutdown - switchport switchport trunk allowed vlan 104 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT-DUALSTACK1_Ethernet24 @@ -46,11 +52,4 @@ ip route 0.0.0.0/0 192.168.104.1 ! ipv6 route ::/0 2a00:104::1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ip.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ip.cfg index ccc726eb220..ae3713db6a9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ip.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ip.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-ip ! -no enable password -no aaa root -! vlan 103 name MYVLANNAME ! @@ -21,9 +27,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENT_Po23 no shutdown - switchport switchport trunk allowed vlan 103 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT_Ethernet23 @@ -43,11 +49,4 @@ interface Vlan103 ip address 192.168.103.22/24 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only-vrf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only-vrf.cfg index 5a651ffb900..f0efc890e46 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only-vrf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only-vrf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-ipv6-only-vrf ! -no enable password -no aaa root -! vlan 107 name INBAND_MGMT ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENTS-IPV6_Po27 no shutdown - switchport switchport trunk allowed vlan 107 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT-IPV6-1_Ethernet27 @@ -44,11 +50,4 @@ no ip routing vrf MGMT ! ipv6 route vrf INBANDMGMT ::/0 2a00:107::1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only.cfg index 546179631e0..ded3f5a5166 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-ipv6-only.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-ipv6-only ! -no enable password -no aaa root -! vlan 106 name INBAND_MGMT ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENTS-IPV6_Po26 no shutdown - switchport switchport trunk allowed vlan 106 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT-IPV6-1_Ethernet26 @@ -43,11 +49,4 @@ no ip routing vrf MGMT ! ipv6 route ::/0 2a00:106::1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-a.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-a.cfg index 14471965e2a..b8a2f7d8adc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-a.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-a.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +19,11 @@ hostname inband-mgmt-mlag-a ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 101 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -25,17 +31,17 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENT_Po101 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport mlag 1 ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-mlag-b_Po11 + description MLAG_inband-mgmt-mlag-b_Port-Channel11 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! @@ -50,73 +56,83 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet11 + description MLAG_inband-mgmt-mlag-b_Ethernet11 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet12 + description MLAG_inband-mgmt-mlag-b_Ethernet12 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet13 + description MLAG_inband-mgmt-mlag-b_Ethernet13 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet14 + description MLAG_inband-mgmt-mlag-b_Ethernet14 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet15 + description MLAG_inband-mgmt-mlag-b_Ethernet15 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet16 + description MLAG_inband-mgmt-mlag-b_Ethernet16 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet17 + description MLAG_inband-mgmt-mlag-b_Ethernet17 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet18 + description MLAG_inband-mgmt-mlag-b_Ethernet18 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet19 + description MLAG_inband-mgmt-mlag-b_Ethernet19 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-mlag-b_Ethernet20 + description MLAG_inband-mgmt-mlag-b_Ethernet20 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Vlan101 @@ -126,7 +142,7 @@ interface Vlan101 ip address 192.168.101.22/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -143,11 +159,4 @@ mlag configuration ! ip route 0.0.0.0/0 192.168.101.21 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-b.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-b.cfg index 1261564eed8..032cb9afb8c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-b.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-mlag-b.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,14 +19,11 @@ hostname inband-mgmt-mlag-b ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 101 name INBAND_MGMT ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -25,17 +31,17 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENT_Po101 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport mlag 1 ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-mlag-a_Po11 + description MLAG_inband-mgmt-mlag-a_Port-Channel11 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! @@ -50,73 +56,83 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet11 + description MLAG_inband-mgmt-mlag-a_Ethernet11 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet12 + description MLAG_inband-mgmt-mlag-a_Ethernet12 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet13 + description MLAG_inband-mgmt-mlag-a_Ethernet13 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet14 + description MLAG_inband-mgmt-mlag-a_Ethernet14 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet15 + description MLAG_inband-mgmt-mlag-a_Ethernet15 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet16 + description MLAG_inband-mgmt-mlag-a_Ethernet16 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet17 + description MLAG_inband-mgmt-mlag-a_Ethernet17 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet18 + description MLAG_inband-mgmt-mlag-a_Ethernet18 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet19 + description MLAG_inband-mgmt-mlag-a_Ethernet19 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-mlag-a_Ethernet20 + description MLAG_inband-mgmt-mlag-a_Ethernet20 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 11 mode active ! interface Vlan101 @@ -126,7 +142,7 @@ interface Vlan101 ip address 192.168.101.23/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -143,11 +159,4 @@ mlag configuration ! ip route 0.0.0.0/0 192.168.101.21 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack1.cfg index 04c7be18a4f..1fd751a9271 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname inband-mgmt-parent-dualstack1 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 104 name INBAND_MGMT ! @@ -20,15 +26,15 @@ vlan 105 name Inband_management_vlan_ipv6 ! vlan 3000 - name MLAG_iBGP_INBANDMGMT - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_INBANDMGMT + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance INBANDMGMT @@ -36,19 +42,18 @@ vrf instance INBANDMGMT vrf instance MGMT ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Po11 + description MLAG_inband-mgmt-parent-dualstack2_Port-Channel11 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel24 description INBAND-MGMT-DUALSTACK-SUBNETS_Po1 no shutdown - switchport switchport trunk allowed vlan 104 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 24 @@ -56,60 +61,60 @@ interface Port-Channel24 interface Port-Channel25 description INBAND-MGMT-DUALSTACK-IPS_Po1 no shutdown - switchport switchport trunk allowed vlan 105 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 25 ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet11 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet11 no shutdown channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet12 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet13 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet13 no shutdown channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet14 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet14 no shutdown channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet15 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet15 no shutdown channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet16 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet16 no shutdown channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet17 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet17 no shutdown channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet18 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet18 no shutdown channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet19 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet19 no shutdown channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet20 + description MLAG_inband-mgmt-parent-dualstack2_Ethernet20 no shutdown channel-group 11 mode active ! @@ -118,6 +123,7 @@ interface Ethernet24 no shutdown switchport access vlan 104 switchport mode access + switchport channel-group 24 mode active ! interface Ethernet25 @@ -125,15 +131,16 @@ interface Ethernet25 no shutdown switchport access vlan 105 switchport mode access + switchport channel-group 25 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.3/32 ! @@ -160,20 +167,20 @@ interface Vlan105 ip virtual-router address 192.168.105.1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf INBANDMGMT + description MLAG_L3_VRF_INBANDMGMT no shutdown mtu 9214 vrf INBANDMGMT ip address 100.64.1.4/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 100.64.1.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -192,8 +199,6 @@ ip routing ip routing vrf INBANDMGMT no ip routing vrf MGMT ! -ipv6 unicast-routing vrf INBANDMGMT -! ip prefix-list PL-L2LEAF-INBAND-MGMT seq 10 permit 192.168.104.0/24 ! @@ -204,6 +209,8 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ipv6 prefix-list IPv6-PL-L2LEAF-INBAND-MGMT seq 10 permit 2a00:104::/64 ! +ipv6 unicast-routing vrf INBANDMGMT +! mlag configuration domain-id inband-mgmt-parents-dualstack local-interface Vlan4094 @@ -250,7 +257,7 @@ router bgp 65002 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 100.64.1.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 100.64.1.5 description inband-mgmt-parent-dualstack2 + neighbor 100.64.1.5 description inband-mgmt-parent-dualstack2_Vlan4093 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -269,13 +276,7 @@ router bgp 65002 router-id 10.0.255.3 update wait-install neighbor 100.64.1.5 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 100.64.1.5 description inband-mgmt-parent-dualstack2_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack2.cfg index 85065649726..aec0d515b88 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-dualstack2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname inband-mgmt-parent-dualstack2 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 104 name INBAND_MGMT ! @@ -20,15 +26,15 @@ vlan 105 name Inband_management_vlan_ipv6 ! vlan 3000 - name MLAG_iBGP_INBANDMGMT - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_INBANDMGMT + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance INBANDMGMT @@ -36,19 +42,18 @@ vrf instance INBANDMGMT vrf instance MGMT ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Po11 + description MLAG_inband-mgmt-parent-dualstack1_Port-Channel11 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel24 description INBAND-MGMT-DUALSTACK-SUBNETS_Po1 no shutdown - switchport switchport trunk allowed vlan 104 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 24 @@ -56,60 +61,60 @@ interface Port-Channel24 interface Port-Channel25 description INBAND-MGMT-DUALSTACK-IPS_Po1 no shutdown - switchport switchport trunk allowed vlan 105 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 25 ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet11 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet11 no shutdown channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet12 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet13 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet13 no shutdown channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet14 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet14 no shutdown channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet15 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet15 no shutdown channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet16 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet16 no shutdown channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet17 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet17 no shutdown channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet18 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet18 no shutdown channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet19 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet19 no shutdown channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet20 + description MLAG_inband-mgmt-parent-dualstack1_Ethernet20 no shutdown channel-group 11 mode active ! @@ -118,6 +123,7 @@ interface Ethernet24 no shutdown switchport access vlan 104 switchport mode access + switchport channel-group 24 mode active ! interface Ethernet25 @@ -125,15 +131,16 @@ interface Ethernet25 no shutdown switchport access vlan 105 switchport mode access + switchport channel-group 25 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.3/32 ! @@ -160,20 +167,20 @@ interface Vlan105 ip virtual-router address 192.168.105.1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf INBANDMGMT + description MLAG_L3_VRF_INBANDMGMT no shutdown mtu 9214 vrf INBANDMGMT ip address 100.64.1.5/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 100.64.1.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -192,8 +199,6 @@ ip routing ip routing vrf INBANDMGMT no ip routing vrf MGMT ! -ipv6 unicast-routing vrf INBANDMGMT -! ip prefix-list PL-L2LEAF-INBAND-MGMT seq 10 permit 192.168.104.0/24 ! @@ -204,6 +209,8 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ipv6 prefix-list IPv6-PL-L2LEAF-INBAND-MGMT seq 10 permit 2a00:104::/64 ! +ipv6 unicast-routing vrf INBANDMGMT +! mlag configuration domain-id inband-mgmt-parents-dualstack local-interface Vlan4094 @@ -250,7 +257,7 @@ router bgp 65002 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 100.64.1.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 100.64.1.4 description inband-mgmt-parent-dualstack1 + neighbor 100.64.1.4 description inband-mgmt-parent-dualstack1_Vlan4093 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -269,13 +276,7 @@ router bgp 65002 router-id 10.0.255.4 update wait-install neighbor 100.64.1.4 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 100.64.1.4 description inband-mgmt-parent-dualstack1_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-1.cfg index 728be5b9145..4ddbadb1dad 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname inband-mgmt-parent-ipv6-1 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 106 name INBAND_MGMT ! @@ -20,29 +26,28 @@ vlan 107 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Po11 + description MLAG_inband-mgmt-parent-ipv6-2_Port-Channel11 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel26 description INBAND-MGMT-IPV6-ONLY_Po1 no shutdown - switchport switchport trunk allowed vlan 106 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 26 @@ -50,60 +55,60 @@ interface Port-Channel26 interface Port-Channel27 description INBAND-MGMT-IPV6-ONLY-VRF_Po1 no shutdown - switchport switchport trunk allowed vlan 107 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 27 ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet11 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet11 no shutdown channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet12 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet13 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet13 no shutdown channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet14 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet14 no shutdown channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet15 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet15 no shutdown channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet16 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet16 no shutdown channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet17 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet17 no shutdown channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet18 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet18 no shutdown channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet19 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet19 no shutdown channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet20 + description MLAG_inband-mgmt-parent-ipv6-2_Ethernet20 no shutdown channel-group 11 mode active ! @@ -112,6 +117,7 @@ interface Ethernet26 no shutdown switchport access vlan 106 switchport mode access + switchport channel-group 26 mode active ! interface Ethernet27 @@ -119,15 +125,16 @@ interface Ethernet27 no shutdown switchport access vlan 107 switchport mode access + switchport channel-group 27 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.5/32 ! @@ -150,13 +157,13 @@ interface Vlan107 ipv6 virtual-router address 2a00:107::1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 100.64.1.8/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -224,7 +231,7 @@ router bgp 65004 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 100.64.1.9 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 100.64.1.9 description inband-mgmt-parent-ipv6-2 + neighbor 100.64.1.9 description inband-mgmt-parent-ipv6-2_Vlan4093 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -236,11 +243,4 @@ router bgp 65004 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-2.cfg index acde282d7e5..f25dcbd62d8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-ipv6-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname inband-mgmt-parent-ipv6-2 ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 106 name INBAND_MGMT ! @@ -20,11 +26,11 @@ vlan 107 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance INBANDMGMT @@ -32,19 +38,18 @@ vrf instance INBANDMGMT vrf instance MGMT ! interface Port-Channel11 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Po11 + description MLAG_inband-mgmt-parent-ipv6-1_Port-Channel11 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel26 description INBAND-MGMT-IPV6-ONLY_Po1 no shutdown - switchport switchport trunk allowed vlan 106 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 26 @@ -52,60 +57,60 @@ interface Port-Channel26 interface Port-Channel27 description INBAND-MGMT-IPV6-ONLY-VRF_Po1 no shutdown - switchport switchport trunk allowed vlan 107 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual mlag 27 ! interface Ethernet11 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet11 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet11 no shutdown channel-group 11 mode active ! interface Ethernet12 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet12 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet13 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet13 no shutdown channel-group 11 mode active ! interface Ethernet14 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet14 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet14 no shutdown channel-group 11 mode active ! interface Ethernet15 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet15 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet15 no shutdown channel-group 11 mode active ! interface Ethernet16 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet16 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet16 no shutdown channel-group 11 mode active ! interface Ethernet17 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet17 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet17 no shutdown channel-group 11 mode active ! interface Ethernet18 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet18 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet18 no shutdown channel-group 11 mode active ! interface Ethernet19 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet19 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet19 no shutdown channel-group 11 mode active ! interface Ethernet20 - description MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet20 + description MLAG_inband-mgmt-parent-ipv6-1_Ethernet20 no shutdown channel-group 11 mode active ! @@ -114,6 +119,7 @@ interface Ethernet26 no shutdown switchport access vlan 106 switchport mode access + switchport channel-group 26 mode active ! interface Ethernet27 @@ -121,15 +127,16 @@ interface Ethernet27 no shutdown switchport access vlan 107 switchport mode access + switchport channel-group 27 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.5/32 ! @@ -154,13 +161,13 @@ interface Vlan107 ipv6 virtual-router address 2a00:107::1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 100.64.1.9/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -221,7 +228,7 @@ router bgp 65004 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 100.64.1.8 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 100.64.1.8 description inband-mgmt-parent-ipv6-1 + neighbor 100.64.1.8 description inband-mgmt-parent-ipv6-1_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -232,11 +239,4 @@ router bgp 65004 neighbor IPv4-UNDERLAY-PEERS activate neighbor MLAG-IPv4-UNDERLAY-PEER activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-vrf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-vrf.cfg index 34ef2663723..e2ad689031f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-vrf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent-vrf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-parent-vrf ! -no enable password -no aaa root -! vlan 101 name INBAND_MGMT ! @@ -27,34 +33,34 @@ vrf instance MGMT interface Port-Channel21 description INBAND-MGMT-SUBNET_Po1 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! interface Port-Channel22 description INBAND-MGMT-SUBNET-VRF_Po1 no shutdown - switchport switchport trunk allowed vlan 102 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback individual ! interface Port-Channel23 description INBAND-MGMT-IP_Po1 no shutdown - switchport switchport trunk allowed vlan 103 switchport mode trunk + switchport ! interface Port-Channel101 description INBAND-MGMT-MLAG-TEST_Po1 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! @@ -63,6 +69,7 @@ interface Ethernet21 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 21 mode active ! interface Ethernet22 @@ -70,6 +77,7 @@ interface Ethernet22 no shutdown switchport access vlan 102 switchport mode access + switchport channel-group 22 mode active ! interface Ethernet23 @@ -82,6 +90,7 @@ interface Ethernet101 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 101 mode active ! interface Ethernet102 @@ -89,15 +98,16 @@ interface Ethernet102 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 101 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.2/32 ! @@ -177,11 +187,4 @@ router bgp 65001 router-id 10.0.255.2 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent.cfg index 3ac6270d075..951af6e581f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-parent.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-parent ! -no enable password -no aaa root -! vlan 101 name INBAND_MGMT ! @@ -27,34 +33,34 @@ vrf instance MGMT interface Port-Channel21 description INBAND-MGMT-SUBNET_Po1 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! interface Port-Channel22 description INBAND-MGMT-SUBNET-VRF_Po1 no shutdown - switchport switchport trunk allowed vlan 102 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback individual ! interface Port-Channel23 description INBAND-MGMT-IP_Po1 no shutdown - switchport switchport trunk allowed vlan 103 switchport mode trunk + switchport ! interface Port-Channel101 description INBAND-MGMT-MLAG-TEST_Po1 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport port-channel lacp fallback timeout 30 port-channel lacp fallback individual ! @@ -63,6 +69,7 @@ interface Ethernet21 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 21 mode active ! interface Ethernet22 @@ -70,6 +77,7 @@ interface Ethernet22 no shutdown switchport access vlan 102 switchport mode access + switchport channel-group 22 mode active ! interface Ethernet23 @@ -82,6 +90,7 @@ interface Ethernet101 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 101 mode active ! interface Ethernet102 @@ -89,15 +98,16 @@ interface Ethernet102 no shutdown switchport access vlan 101 switchport mode access + switchport channel-group 101 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.0.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.0.254.1/32 ! @@ -183,11 +193,4 @@ router bgp 65000 router-id 10.0.255.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet-vrf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet-vrf.cfg index b528a6895d7..386657983fd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet-vrf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet-vrf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-subnet-vrf ! -no enable password -no aaa root -! vlan 102 name INBAND_MGMT ! @@ -21,9 +27,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENT_Po22 no shutdown - switchport switchport trunk allowed vlan 102 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT_Ethernet22 @@ -45,11 +51,4 @@ no ip routing vrf MGMT ! ip route vrf INBANDMGMT 0.0.0.0/0 192.168.102.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet.cfg index 3e11f8a2618..b26f105ab7e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/inband-mgmt-subnet.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname inband-mgmt-subnet ! -no enable password -no aaa root -! vlan 101 name INBAND_MGMT ! @@ -19,9 +25,9 @@ vrf instance MGMT interface Port-Channel1 description INBAND-MGMT-PARENT_Po21 no shutdown - switchport switchport trunk allowed vlan 101 switchport mode trunk + switchport ! interface Ethernet1 description INBAND-MGMT-PARENT_Ethernet21 @@ -42,11 +48,4 @@ no ip routing vrf MGMT ! ip route 0.0.0.0/0 192.168.101.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ipv4-acls.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ipv4-acls.cfg index 34b36a7bbc5..d48e8839b1c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ipv4-acls.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ipv4-acls.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname ipv4-acls ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -62,7 +68,7 @@ interface Ethernet6/6.6 ip access-group TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet6_6.6 out ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.0.1/32 ! @@ -132,11 +138,4 @@ router bgp 65000 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-node-id.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-node-id.cfg index a2aeac05b87..631e9da9456 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-node-id.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-node-id.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,24 +17,23 @@ service routing protocols model multi-agent ! hostname isis-system-id-format-using-node-id ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 172.28.4.99/32 + node-segment ipv4 index 199 isis enable CORE isis passive - node-segment ipv4 index 199 ! ip virtual-router mac-address 00:c1:00:00:00:11 ! ip routing no ip routing vrf MGMT ! +mpls ip +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -60,13 +68,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-underlay-loopback.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-underlay-loopback.cfg index 3bc1b8cc344..edea080a8e0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-underlay-loopback.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/isis-system-id-format-using-underlay-loopback.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,24 +17,23 @@ service routing protocols model multi-agent ! hostname isis-system-id-format-using-underlay-loopback ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description MPLS_Overlay_peering + description ROUTER_ID no shutdown ip address 172.28.4.99/32 + node-segment ipv4 index 199 isis enable CORE isis passive - node-segment ipv4 index 199 ! ip virtual-router mac-address 00:c1:00:00:00:11 ! ip routing no ip routing vrf MGMT ! +mpls ip +! router bfd multihop interval 300 min-rx 300 multiplier 3 ! @@ -60,13 +68,4 @@ router isis CORE segment-routing mpls no shutdown ! -mpls ip -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_bgp.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_bgp.cfg index 42c94242bcb..5ddbfeafa3f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_bgp.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_bgp.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname l3_edge_bgp ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel5 @@ -86,7 +92,7 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ! @@ -127,11 +133,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_isis.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_isis.cfg index f24be4164f6..45c3553a68c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_isis.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_isis.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname l3_edge_isis ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface ethernet1 @@ -68,7 +74,7 @@ interface ethernet4 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 isis enable EVPN_UNDERLAY @@ -78,7 +84,7 @@ ip routing no ip routing vrf MGMT ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0001.00 + net 49.0001.0010.0200.3001.00 is-type level-2 router-id ipv4 1.2.3.1 log-adjacency-changes @@ -87,11 +93,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_multicast.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_multicast.cfg index adad08c3b00..f50964c9285 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_multicast.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_multicast.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname l3_edge_multicast ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface ethernet1 @@ -35,7 +41,7 @@ interface ethernet2 pim ipv4 sparse-mode ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ip ospf area 0.0.0.0 @@ -54,11 +60,4 @@ router ospf 100 no passive-interface ethernet2 max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_ospf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_ospf.cfg index 196eaaa679c..3a803615df8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_ospf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/l3_edge_ospf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname l3_edge_ospf ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface ethernet1 @@ -54,7 +60,7 @@ interface ethernet4 ip ospf area 0.0.0.0 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ip ospf area 0.0.0.0 @@ -70,11 +76,4 @@ router ospf 100 no passive-interface ethernet4 max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge-no-default-policy.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge-no-default-policy.cfg similarity index 92% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge-no-default-policy.cfg rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge-no-default-policy.cfg index e75f712289f..e260d64385d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge-no-default-policy.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge-no-default-policy.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,7 +23,7 @@ flow tracking hardware ! service routing protocols model multi-agent ! -hostname autovpn-edge-no-default-policy +hostname legacy-autovpn-edge-no-default-policy ! router path-selection tcp mss ceiling ipv4 ingress @@ -23,12 +32,12 @@ router path-selection ipsec profile AUTOVPN ! local interface Ethernet1 - stun server-profile INET-autovpn-rr3-Ethernet1 + stun server-profile INET-legacy-autovpn-rr3-Ethernet1 ! peer dynamic ! peer static router-ip 2.2.2.2 - name autovpn-rr3 + name legacy-autovpn-rr3 ipv4 address 10.7.7.7 ! load-balance policy LB-DEFAULT-POLICY-CONTROL-PLANE @@ -44,6 +53,7 @@ router path-selection policy DEFAULT-POLICY-WITH-CP default-match load-balance LB-DEFAULT-POLICY-DEFAULT + ! 10 application-profile APP-PROFILE-CONTROL-PLANE load-balance LB-DEFAULT-POLICY-CONTROL-PLANE ! @@ -58,17 +68,20 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT ! vrf instance PROD ! -ip security +management security ! + ssl profile STUN-DTLS + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate STUN-DTLS.crt key STUN-DTLS.key +! +ip security ike policy AUTOVPN-IKE local-id 192.168.255.1 ! @@ -87,7 +100,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.255.1/32 ! @@ -99,12 +112,12 @@ interface Ethernet1 dhcp client accept default-route ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.30.1/32 ! interface Vxlan1 - description autovpn-edge-no-default-policy_VTEP + description legacy-autovpn-edge-no-default-policy_VTEP vxlan source-interface Dps1 vxlan udp-port 4789 vxlan vrf default vni 1 @@ -165,13 +178,14 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 2.2.2.2 peer group WAN-OVERLAY-PEERS - neighbor 2.2.2.2 description autovpn-rr3 + neighbor 2.2.2.2 description legacy-autovpn-rr3_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -201,22 +215,9 @@ router bgp 65000 router-id 192.168.30.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile STUN-DTLS - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate STUN-DTLS.crt key STUN-DTLS.key -! stun client - server-profile INET-autovpn-rr3-Ethernet1 + server-profile INET-legacy-autovpn-rr3-Ethernet1 ip address 10.7.7.7 ssl profile STUN-DTLS ! diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge.cfg similarity index 90% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge.cfg rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge.cfg index 809ecbbd019..ef675c79762 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-edge.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-edge.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,7 +23,7 @@ flow tracking hardware ! service routing protocols model multi-agent ! -hostname autovpn-edge +hostname legacy-autovpn-edge ! router path-selection tcp mss ceiling ipv4 ingress @@ -23,16 +32,16 @@ router path-selection ipsec profile AUTOVPN ! local interface Ethernet1 - stun server-profile INET-autovpn-rr1-Ethernet1 INET-autovpn-rr2-Ethernet1 + stun server-profile INET-legacy-autovpn-rr1-Ethernet1 INET-legacy-autovpn-rr2-Ethernet1 ! peer dynamic ! peer static router-ip 192.168.131.1 - name autovpn-rr1 + name legacy-autovpn-rr1 ipv4 address 10.7.7.7 ! peer static router-ip 192.168.131.2 - name autovpn-rr2 + name legacy-autovpn-rr2 ipv4 address 10.8.8.8 ! path-group MPLS id 100 @@ -62,14 +71,17 @@ router path-selection policy DEFAULT-AUTOVPN-POLICY-WITH-CP 10 application-profile APP-PROFILE-CONTROL-PLANE load-balance LB-DEFAULT-AUTOVPN-POLICY-CONTROL-PLANE + ! 20 application-profile IT load-balance LB-DEFAULT-AUTOVPN-POLICY-IT ! policy PROD-AUTOVPN-POLICY default-match load-balance LB-PROD-AUTOVPN-POLICY-DEFAULT + ! 10 application-profile VOICE load-balance LB-PROD-AUTOVPN-POLICY-VOICE + ! 20 application-profile VIDEO load-balance LB-PROD-AUTOVPN-POLICY-VIDEO ! @@ -81,9 +93,6 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance IT ! vrf instance MGMT @@ -91,7 +100,6 @@ vrf instance MGMT vrf instance PROD ! ip security - ! ike policy AUTOVPN-IKE local-id 192.168.130.1 ! @@ -110,7 +118,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.130.1/32 ! @@ -128,12 +136,12 @@ interface Ethernet2 ip address 10.14.14.14/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.30.1/32 ! interface Vxlan1 - description autovpn-edge_VTEP + description legacy-autovpn-edge_VTEP vxlan source-interface Dps1 vxlan udp-port 4789 vxlan vrf default vni 1 @@ -199,15 +207,16 @@ router bgp 65000 neighbor WAN-OVERLAY-PEERS send-community neighbor WAN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.131.1 peer group WAN-OVERLAY-PEERS - neighbor 192.168.131.1 description autovpn-rr1 + neighbor 192.168.131.1 description legacy-autovpn-rr1_Dps1 neighbor 192.168.131.2 peer group WAN-OVERLAY-PEERS - neighbor 192.168.131.2 description autovpn-rr2 + neighbor 192.168.131.2 description legacy-autovpn-rr2_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -230,18 +239,11 @@ router bgp 65000 router-id 192.168.30.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! stun client - server-profile INET-autovpn-rr1-Ethernet1 + server-profile INET-legacy-autovpn-rr1-Ethernet1 ip address 10.7.7.7 - server-profile INET-autovpn-rr2-Ethernet1 + server-profile INET-legacy-autovpn-rr2-Ethernet1 ip address 10.8.8.8 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr1.cfg similarity index 94% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr1.cfg rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr1.cfg index 32c31da91b7..c4c31744a6c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,7 +23,7 @@ flow tracking hardware ! service routing protocols model multi-agent ! -hostname autovpn-rr1 +hostname legacy-autovpn-rr1 ! router path-selection peer dynamic source stun @@ -26,7 +35,7 @@ router path-selection local interface Ethernet1 ! peer static router-ip 192.168.131.2 - name autovpn-rr2 + name legacy-autovpn-rr2 ipv4 address 10.8.8.8 ! path-group LTE id 102 @@ -53,14 +62,17 @@ router path-selection policy DEFAULT-AUTOVPN-POLICY-WITH-CP 10 application-profile APP-PROFILE-CONTROL-PLANE load-balance LB-DEFAULT-AUTOVPN-POLICY-CONTROL-PLANE + ! 20 application-profile IT load-balance LB-DEFAULT-AUTOVPN-POLICY-IT ! policy PROD-AUTOVPN-POLICY default-match load-balance LB-PROD-AUTOVPN-POLICY-DEFAULT + ! 10 application-profile VOICE load-balance LB-PROD-AUTOVPN-POLICY-VOICE + ! 20 application-profile VIDEO load-balance LB-PROD-AUTOVPN-POLICY-VIDEO ! @@ -70,17 +82,13 @@ router path-selection vrf PROD path-selection-policy PROD-AUTOVPN-POLICY ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 2 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! ip security - ! ike policy AUTOVPN-IKE local-id 192.168.131.1 ! @@ -96,7 +104,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.131.1/32 ! @@ -108,12 +116,12 @@ interface Ethernet1 dhcp client accept default-route ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.31.1/32 ! interface Vxlan1 - description autovpn-rr1_VTEP + description legacy-autovpn-rr1_VTEP vxlan source-interface Dps1 vxlan udp-port 4789 vxlan vrf default vni 1 @@ -181,12 +189,14 @@ router bgp 65000 neighbor WAN-RR-OVERLAY-PEERS send-community neighbor WAN-RR-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.131.2 peer group WAN-RR-OVERLAY-PEERS - neighbor 192.168.131.2 description autovpn-rr2 + neighbor 192.168.131.2 description legacy-autovpn-rr2_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor WAN-RR-OVERLAY-PEERS activate + neighbor WAN-RR-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -205,13 +215,6 @@ router bgp 65000 route-target export evpn 1:1 route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr2.cfg similarity index 94% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr2.cfg rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr2.cfg index 9634970e9aa..2ee3ada17ea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/autovpn-rr2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/legacy-autovpn-rr2.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -14,7 +23,7 @@ flow tracking hardware ! service routing protocols model multi-agent ! -hostname autovpn-rr2 +hostname legacy-autovpn-rr2 ! router path-selection peer dynamic source stun @@ -26,7 +35,7 @@ router path-selection local interface Ethernet1 ! peer static router-ip 192.168.131.1 - name autovpn-rr1 + name legacy-autovpn-rr1 ipv4 address 10.7.7.7 ! path-group LTE id 102 @@ -53,14 +62,17 @@ router path-selection policy DEFAULT-AUTOVPN-POLICY-WITH-CP 10 application-profile APP-PROFILE-CONTROL-PLANE load-balance LB-DEFAULT-AUTOVPN-POLICY-CONTROL-PLANE + ! 20 application-profile IT load-balance LB-DEFAULT-AUTOVPN-POLICY-IT ! policy PROD-AUTOVPN-POLICY default-match load-balance LB-PROD-AUTOVPN-POLICY-DEFAULT + ! 10 application-profile VOICE load-balance LB-PROD-AUTOVPN-POLICY-VOICE + ! 20 application-profile VIDEO load-balance LB-PROD-AUTOVPN-POLICY-VIDEO ! @@ -70,17 +82,13 @@ router path-selection vrf PROD path-selection-policy PROD-AUTOVPN-POLICY ! -spanning-tree mode none -! platform sfe data-plane cpu allocation maximum 2 ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! ip security - ! ike policy AUTOVPN-IKE local-id 192.168.131.2 ! @@ -96,7 +104,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.131.2/32 ! @@ -107,12 +115,12 @@ interface Ethernet1 ip address 10.8.8.8/31 ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.31.2/32 ! interface Vxlan1 - description autovpn-rr2_VTEP + description legacy-autovpn-rr2_VTEP vxlan source-interface Dps1 vxlan udp-port 4789 vxlan vrf default vni 1 @@ -182,12 +190,14 @@ router bgp 65000 neighbor WAN-RR-OVERLAY-PEERS send-community neighbor WAN-RR-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.131.1 peer group WAN-RR-OVERLAY-PEERS - neighbor 192.168.131.1 description autovpn-rr1 + neighbor 192.168.131.1 description legacy-autovpn-rr1_Dps1 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection neighbor WAN-RR-OVERLAY-PEERS activate + neighbor WAN-RR-OVERLAY-PEERS encapsulation path-selection next-hop resolution disabled ! address-family ipv4 @@ -206,13 +216,6 @@ router bgp 65000 route-target export evpn 1:1 route-target export evpn route-map RM-EVPN-EXPORT-VRF-DEFAULT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! stun server local-interface Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_default.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_default.cfg index 4aa234f7854..6d20ecc6d76 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_default.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_default.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,21 +35,9 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS mgmt_interface_default ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -137,7 +140,7 @@ vlan 1234 vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 1.1.1.2 @@ -145,12 +148,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_description.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_description.cfg index 004d9b247af..248ecfa40e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_description.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_description.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname mgmt_interface_description ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 @@ -22,11 +28,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.254 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_dualstack.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_dualstack.cfg index 92b89f1e257..1fe644c7259 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_dualstack.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_dualstack.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,13 +17,10 @@ service routing protocols model multi-agent ! hostname mgmt_interface_dualstack ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105 @@ -28,11 +34,4 @@ ip route vrf MGMT 172.16.254.0/23 192.168.200.5 ipv6 route vrf MGMT 0200:1::/64 0200::1 ipv6 route vrf MGMT 0200:2::/64 0200::1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_fabric.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_fabric.cfg index b25bdce8a79..ed23550bb88 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_fabric.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_fabric.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,21 +35,9 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT MY_INTERFACE_FABRIC -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 -! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS mgmt_interface_fabric ! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -137,7 +140,7 @@ vlan 1234 vrf instance MGMT ! interface MY_INTERFACE_FABRIC - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 1.1.1.2 @@ -145,12 +148,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT MY_INTERFACE_FABRIC +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_host.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_host.cfg index 9d6d030da1a..f443abb76bc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_host.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_host.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,23 +35,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT MY_INTERFACE_HOST -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS mgmt_interface_host ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -139,7 +142,7 @@ vlan 1234 vrf instance MGMT ! interface MY_INTERFACE_HOST - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 1.1.1.2 @@ -150,12 +153,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT MY_INTERFACE_HOST +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_ipv6.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_ipv6.cfg index ad7f88e154e..fba17885676 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_ipv6.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_ipv6.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,13 +17,10 @@ service routing protocols model multi-agent ! hostname mgmt_interface_ipv6 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ipv6 enable @@ -23,11 +29,4 @@ no ip routing vrf MGMT ! ipv6 route vrf MGMT ::/0 0200::2 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_platform.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_platform.cfg index 76bc0644f09..47864a05744 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_platform.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/mgmt_interface_platform.cfg @@ -1,7 +1,22 @@ -!RANCID-CONTENT-TYPE: arista ! boot secret sha512 a153de6290ff1409257ade45f ! +no enable password +no aaa root +! +no username admin +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local +username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local +! +management api http-commands + protocol https + no default-services + no shutdown + ! + vrf MGMT + no shutdown +! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs no shutdown @@ -20,23 +35,11 @@ ip name-server vrf MGMT 192.168.200.5 ip name-server vrf MGMT 2001:db8::1 ip name-server vrf MGMT 2001:db8::2 ! -ntp local-interface vrf MGMT Management0 -ntp server vrf MGMT 192.168.200.5 prefer -ntp server vrf MGMT 2001:db8::3 +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location EOS_DESIGNS_UNIT_TESTS mgmt_interface_platform ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -no username admin -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -username cvpadmin ssh-key ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkU= cvpadmin@hostmachine.local -username cvpadmin ssh-key secondary ssh-rsa AAAAB3NzaC1yc2EAA82spi2mkxp4FgaLi4CjWkpnL1A/MD7WhrSNgqXToF7QCb9Lidagy9IHafQxfu7LwkFdyQIMu8XNwDZIycuf29wHbDdz1N+YNVK8zwyNAbMOeKMqblsEm2YIorgjzQX1m9+/rJeFBKz77PSgeMp/Rc3txFVuSmFmeTy3aMkz= cvpadmin@hostmachine.local -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -139,7 +142,7 @@ vlan 1234 vrf instance MGMT ! interface Management0 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 1.1.1.2 @@ -150,12 +153,8 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no default-services - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management0 +ntp server vrf MGMT 192.168.200.5 prefer +ntp server vrf MGMT 2001:db8::3 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests-2.cfg index c5c86e5156a..5bf07b78cbd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname network-ports-tests-2 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name VLAN100_ON_L2LEAF_1_AND_2 ! @@ -20,7 +26,7 @@ vlan 300 name VLAN300_PHONE_ON_L2LEAF1_AND_2 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -28,8 +34,9 @@ vrf instance MGMT interface Port-Channel1 description AP1 with port_channel no shutdown - switchport switchport access vlan 101 + switchport mode access + switchport mlag 1 spanning-tree portfast spanning-tree bpdufilter enable @@ -37,8 +44,9 @@ interface Port-Channel1 interface Port-Channel2 description AP1 with port_channel no shutdown - switchport switchport access vlan 101 + switchport mode access + switchport mlag 2 spanning-tree portfast spanning-tree bpdufilter enable @@ -55,17 +63,16 @@ interface Port-Channel43 mlag 43 ! interface Port-Channel44 - description Checking monitor sessions on port-channels no shutdown switchport mlag 44 ! interface Port-Channel101 - description MLAG_PEER_network-ports-tests.1_Po101 + description MLAG_network-ports-tests.1_Port-Channel101 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description AP1 with port_channel @@ -548,7 +555,7 @@ interface Ethernet10 channel-group 42 mode active ! interface Ethernet10/1 - description MLAG_PEER_network-ports-tests.1_Ethernet10/1 + description MLAG_network-ports-tests.1_Ethernet10/1 no shutdown channel-group 101 mode active ! @@ -599,7 +606,7 @@ interface Ethernet52 channel-group 43 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -621,11 +628,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests.1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests.1.cfg index 3207eb3114b..5d6d84ca698 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests.1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/network-ports-tests.1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname network-ports-tests.1 ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name VLAN100_ON_L2LEAF_1_AND_2 ! @@ -23,17 +29,17 @@ vlan 300 name VLAN300_PHONE_ON_L2LEAF1_AND_2 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel101 - description MLAG_PEER_network-ports-tests-2_Po101 + description MLAG_network-ports-tests-2_Port-Channel101 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description PCs @@ -514,7 +520,7 @@ interface Ethernet6 switchport ! interface Ethernet10/1 - description MLAG_PEER_network-ports-tests-2_Ethernet10/1 + description MLAG_network-ports-tests-2_Ethernet10/1 no shutdown channel-group 101 mode active ! @@ -534,7 +540,7 @@ interface Ethernet13 switchport ! interface Ethernet14 - description CONNECTED_ENDPOINT_OVERWRITING_NETWORK_PORT_Eth42 + description SERVER_CONNECTED_ENDPOINT_OVERWRITING_NETWORK_PORT_Eth42 no shutdown switchport ! @@ -555,7 +561,7 @@ interface Ethernet54 switchport ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -572,11 +578,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_false.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_false.cfg deleted file mode 100644 index 3bdcb2ec6dc..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_false.cfg +++ /dev/null @@ -1,63 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname new_network_services_bgp_vrf_config_false -! -no enable password -no aaa root -! -vrf instance MGMT -! -vrf instance PROD -! -interface Ethernet7 - description test - no shutdown - mtu 9000 - no switchport - vrf PROD - ip address 11.11.11.11/24 -! -interface Loopback0 - description Router_ID - no shutdown - ip address 192.168.42.2/32 -! -ip virtual-router mac-address cafe:cafe:cafe -! -ip routing -no ip routing vrf MGMT -ip routing vrf PROD -! -route-map RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT permit 10 - set ip next-hop 123.1.1.1 -! -route-map RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT permit 10 - set ipv6 next-hop fd5a:fe45:8831:06c5::1 -! -router bgp 65000 - router-id 192.168.42.2 - maximum-paths 4 ecmp 4 - update wait-install - no bgp default ipv4-unicast - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - redistribute connected - ! - address-family ipv4 - neighbor IPv4-UNDERLAY-PEERS activate -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_true.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_true.cfg deleted file mode 100644 index 0532dc42518..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/new_network_services_bgp_vrf_config_true.cfg +++ /dev/null @@ -1,108 +0,0 @@ -!RANCID-CONTENT-TYPE: arista -! -vlan internal order ascending range 1006 1199 -! -transceiver qsfp default-mode 4x10G -! -service routing protocols model multi-agent -! -hostname new_network_services_bgp_vrf_config_true -! -no enable password -no aaa root -! -vrf instance MGMT -! -vrf instance PROD -! -interface Ethernet7 - description test - no shutdown - mtu 9000 - no switchport - vrf PROD - ip address 10.10.10.10/24 -! -interface Loopback0 - description Router_ID - no shutdown - ip address 192.168.42.1/32 -! -ip virtual-router mac-address cafe:cafe:cafe -! -ip routing -no ip routing vrf MGMT -ip routing vrf PROD -! -route-map RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT permit 10 - set ip next-hop 123.1.1.1 -! -route-map RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT permit 10 - set ipv6 next-hop fd5a:fe45:8831:06c5::1 -! -router bgp 65000 - router-id 192.168.42.1 - maximum-paths 4 ecmp 4 - update wait-install - no bgp default ipv4-unicast - neighbor IPv4-UNDERLAY-PEERS peer group - neighbor IPv4-UNDERLAY-PEERS send-community - neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 - redistribute connected - ! - address-family ipv4 - neighbor IPv4-UNDERLAY-PEERS activate - ! - vrf PROD - router-id 192.168.42.1 - update wait-install - neighbor 123.1.1.10 remote-as 1234 - neighbor 123.1.1.10 password 7 oBztv71m2uhR7hh58/OCNA== - neighbor 123.1.1.10 local-as 123 no-prepend replace-as - neighbor 123.1.1.10 description External IPv4 BGP peer - neighbor 123.1.1.10 ebgp-multihop 3 - neighbor 123.1.1.10 shutdown - neighbor 123.1.1.10 send-community standard extended - neighbor 123.1.1.10 maximum-routes 0 - neighbor 123.1.1.10 default-originate route-map RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT - neighbor 123.1.1.10 update-source Loopback123 - neighbor 123.1.1.10 route-map RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT out - neighbor 123.1.1.10 route-map RM-123-1-1-10-IN in - neighbor 123.1.1.11 remote-as 65000.100 - neighbor 123.1.1.11 password 7 oBztv71m2uhR7hh58/OCNA== - neighbor 123.1.1.11 local-as 123 no-prepend replace-as - neighbor 123.1.1.11 description External IPv4 BGP peer - neighbor 123.1.1.11 ebgp-multihop 3 - neighbor 123.1.1.11 bfd - neighbor 123.1.1.11 send-community standard extended - neighbor 123.1.1.11 maximum-routes 0 - neighbor 123.1.1.11 default-originate - neighbor 123.1.1.11 update-source Loopback123 - neighbor 123.1.1.11 route-map RM-123-1-1-11-OUT out - neighbor 123.1.1.11 route-map RM-123-1-1-11-IN in - neighbor fd5a:fe45:8831:06c5::a remote-as 12345 - neighbor fd5a:fe45:8831:06c5::a send-community - neighbor fd5a:fe45:8831:06c5::a route-map RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT out - neighbor fd5a:fe45:8831:06c5::b remote-as 12345 - redistribute connected - ! - address-family ipv4 - neighbor 123.1.1.10 activate - neighbor 123.1.1.11 activate - neighbor 123.1.1.11 prefix-list PL-TEST-IN-AF4 in - neighbor 123.1.1.11 prefix-list PL-TEST-OUT-AF4 out - ! - address-family ipv6 - neighbor fd5a:fe45:8831:06c5::a activate - neighbor fd5a:fe45:8831:06c5::a prefix-list PL-TEST-IN-AF6 in - neighbor fd5a:fe45:8831:06c5::a prefix-list PL-TEST-OUT-AF6 out - neighbor fd5a:fe45:8831:06c5::b activate -! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_gateway.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_gateway.cfg index 80509d4e86e..534448263a1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_gateway.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_gateway.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,23 +17,13 @@ service routing protocols model multi-agent ! hostname no_mgmt_gateway ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_interface.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_interface.cfg index 6e060a68466..8c52f7349c1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_interface.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/no_mgmt_interface.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,17 +17,7 @@ service routing protocols model multi-agent ! hostname no_mgmt_interface ! -no enable password -no aaa root -! vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/node-type-l3-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/node-type-l3-interfaces.cfg index c37c0a06ba4..421b77f811e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/node-type-l3-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/node-type-l3-interfaces.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,10 +17,10 @@ service routing protocols model multi-agent ! hostname node-type-l3-interfaces ! -spanning-tree mode none +sflow vrf sflow_vrf destination 10.10.10.12 1234 +sflow run ! -no enable password -no aaa root +spanning-tree mode none ! vrf instance MGMT ! @@ -23,6 +32,7 @@ interface Ethernet1 ip address 192.168.1.2/31 service-policy type qos input TEST_POLICY service-profile TEST-QOS-PROFILE + sflow enable ! TEST RAW_EOS_CLI ! @@ -32,6 +42,7 @@ interface Ethernet2/2 no switchport ip address dhcp dhcp client accept default-route + sflow enable ! interface Ethernet42 description This is a custom description @@ -39,14 +50,16 @@ interface Ethernet42 no switchport ip address dhcp dhcp client accept default-route + sflow enable ! interface Ethernet43 shutdown no switchport ip address 192.168.42.42/24 + sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 1.2.3.1/32 ! @@ -74,11 +87,4 @@ router bgp 65000 address-family ipv4 neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-1.cfg index 86a83c162d6..e261d3c3d5f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,29 +17,19 @@ service routing protocols model multi-agent ! hostname ntp-settings-1 ! -ntp authentication-key 1 sha1 7 someobfuscatedkey -ntp trusted-key 1 -ntp authenticate servers -ntp server 10.10.10.1 prefer -ntp server 10.10.10.2 burst iburst version 4 minpoll 3 maxpoll 5 key 1 -! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.2/24 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp authentication-key 1 sha1 7 someobfuscatedkey +ntp trusted-key 1 +ntp authenticate servers +ntp server 10.10.10.1 prefer +ntp server 10.10.10.2 burst iburst version 4 minpoll 3 maxpoll 5 key 1 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-2.cfg index 6019c672134..1b879f96986 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ntp-settings-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,13 +17,6 @@ service routing protocols model multi-agent ! hostname ntp-settings-2 ! -ntp local-interface vrf INBAND_MGMT Vlan4092 -ntp server vrf INBAND_MGMT 10.10.10.1 prefer -ntp server vrf INBAND_MGMT 10.10.10.2 -! -no enable password -no aaa root -! vlan 4092 name INBAND_MGMT ! @@ -30,11 +32,8 @@ interface Vlan4092 ip address 192.168.1.2/24 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf INBAND_MGMT Vlan4092 +ntp server vrf INBAND_MGMT 10.10.10.1 prefer +ntp server vrf INBAND_MGMT 10.10.10.2 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/only-connected-endpoints.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/only-connected-endpoints.cfg new file mode 100644 index 00000000000..ad1a58920ca --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/only-connected-endpoints.cfg @@ -0,0 +1,108 @@ +! +hostname only-connected-endpoints +! +interface Port-Channel1 + description SERVER_TEST_SERVER_01 + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet1 + description SERVER_TEST_SERVER_01_Nic1 + no shutdown + channel-group 1 mode active +! +interface Ethernet2 + description SERVER_TEST_SERVER_01_Nic2 + no shutdown + channel-group 1 mode active +! +interface Ethernet12 + description SERVER_TEST_SERVER_01_Nic1 + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet20 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet21 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet22 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet23 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet24 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet25 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet26 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet27 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet28 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport +! +interface Ethernet29 + description Network Port + no shutdown + switchport trunk native vlan 1000 + switchport trunk allowed vlan 1-100 + switchport mode trunk + switchport diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-d.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-d.cfg index a8735bf72e7..bbca513493f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-d.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-d.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,17 +19,14 @@ hostname override_uplink_type-d ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel1 description OVERRIDE_UPLINK_TYPE-U_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport ! interface Ethernet1 description OVERRIDE_UPLINK_TYPE-U_Ethernet1 @@ -28,18 +34,11 @@ interface Ethernet1 channel-group 1 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.42.2/32 ! ip routing no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-u.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-u.cfg index f5b6a686298..aa1fbb6d7bc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-u.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/override_uplink_type-u.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,17 +19,14 @@ hostname override_uplink_type-u ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Port-Channel1 description OVERRIDE_UPLINK_TYPE-D_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport spanning-tree portfast ! interface Ethernet1 @@ -29,7 +35,7 @@ interface Ethernet1 channel-group 1 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.42.1/32 ! @@ -69,11 +75,4 @@ router bgp 65002 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/platform_settings.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/platform_settings.cfg index 40f2c224220..dc2d3f4fe51 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/platform_settings.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/platform_settings.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,25 +17,15 @@ service routing protocols model multi-agent ! hostname platform_settings ! -no enable password -no aaa root -! vrf instance MGMT ! +management security + entropy source hardware haveged cpu jitter + entropy source hardware exclusive +! interface Ethernet12 description Interface Created from platform_settings.structured_config switchport no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - entropy source hardware haveged cpu jitter - entropy source hardware exclusive -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf1-ptp-disabled.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf1-ptp-disabled.cfg index 2a06d2ff833..c77f4eaddb2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf1-ptp-disabled.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf1-ptp-disabled.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -11,9 +20,6 @@ hostname ptp-tests-l2leaf1-ptp-disabled spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -22,9 +28,9 @@ vrf instance MGMT interface Port-Channel1 description PTP-TEST-LEAF_Po11 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport ! interface Ethernet1 description PTP-TESTS-LEAF1_Ethernet11 @@ -39,11 +45,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.cfg index 18c0af680fe..4e98ed1c354 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -9,24 +18,21 @@ service routing protocols model multi-agent hostname ptp-tests-l2leaf2-ptp-enabled-uplink-disabled ! ptp clock-identity 00:1C:73:7f:00:03 -ptp priority1 127 -ptp priority2 3 ptp domain 127 ptp mode boundary +ptp priority1 127 +ptp priority2 3 ptp monitor threshold offset-from-master 250 ptp monitor threshold mean-path-delay 1500 ptp monitor sequence-id -ptp monitor threshold missing-message announce 3 sequence-ids -ptp monitor threshold missing-message delay-resp 3 sequence-ids -ptp monitor threshold missing-message follow-up 3 sequence-ids ptp monitor threshold missing-message sync 3 sequence-ids +ptp monitor threshold missing-message follow-up 3 sequence-ids +ptp monitor threshold missing-message delay-resp 3 sequence-ids +ptp monitor threshold missing-message announce 3 sequence-ids ! spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -35,9 +41,9 @@ vrf instance MGMT interface Port-Channel1 description PTP-TEST-LEAF_Po14 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport ! interface Ethernet1 description PTP-TESTS-LEAF1_Ethernet14 @@ -52,11 +58,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled.cfg index cb492ff131c..61902104dec 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-l2leaf2-ptp-enabled.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -9,24 +18,21 @@ service routing protocols model multi-agent hostname ptp-tests-l2leaf2-ptp-enabled ! ptp clock-identity 00:1C:73:7f:00:02 -ptp priority1 127 -ptp priority2 2 ptp domain 127 ptp mode boundary +ptp priority1 127 +ptp priority2 2 ptp monitor threshold offset-from-master 250 ptp monitor threshold mean-path-delay 1500 ptp monitor sequence-id -ptp monitor threshold missing-message announce 3 sequence-ids -ptp monitor threshold missing-message delay-resp 3 sequence-ids -ptp monitor threshold missing-message follow-up 3 sequence-ids ptp monitor threshold missing-message sync 3 sequence-ids +ptp monitor threshold missing-message follow-up 3 sequence-ids +ptp monitor threshold missing-message delay-resp 3 sequence-ids +ptp monitor threshold missing-message announce 3 sequence-ids ! spanning-tree mode mstp spanning-tree mst 0 priority 32768 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -35,9 +41,9 @@ vrf instance MGMT interface Port-Channel1 description PTP-TEST-LEAF_Po12 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport ptp enable ptp announce interval 0 ptp announce timeout 3 @@ -58,11 +64,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf1.cfg index 4a4cb4f1802..9ebfcc937de 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -9,38 +18,35 @@ service routing protocols model multi-agent hostname ptp-tests-leaf1 ! ptp clock-identity 11:11:11:11:11:11 -ptp priority1 30 -ptp priority2 1 ptp domain 127 ptp mode boundary one-step +ptp priority1 30 +ptp priority2 1 ptp monitor threshold offset-from-master 250 ptp monitor threshold mean-path-delay 1500 ptp monitor sequence-id -ptp monitor threshold missing-message announce 3 sequence-ids -ptp monitor threshold missing-message delay-resp 3 sequence-ids -ptp monitor threshold missing-message follow-up 3 sequence-ids ptp monitor threshold missing-message sync 3 sequence-ids +ptp monitor threshold missing-message follow-up 3 sequence-ids +ptp monitor threshold missing-message delay-resp 3 sequence-ids +ptp monitor threshold missing-message announce 3 sequence-ids ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -48,10 +54,11 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel6 - description Endpoint-with-mpass + description SERVER_Endpoint-with-mpass no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 6 ptp enable ptp mpass @@ -63,12 +70,11 @@ interface Port-Channel6 ptp transport ipv4 ! interface Port-Channel9 - description MLAG_PEER_ptp-tests-leaf2_Po9 + description MLAG_ptp-tests-leaf2_Port-Channel9 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ptp enable ptp announce interval 0 ptp announce timeout 3 @@ -79,17 +85,17 @@ interface Port-Channel9 interface Port-Channel11 description PTP-TESTS-L2LEAF1-PTP-DISABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 11 ! interface Port-Channel12 description PTP-TESTS-L2LEAF2-PTP-ENABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 12 ptp enable ptp announce interval 0 @@ -101,9 +107,9 @@ interface Port-Channel12 interface Port-Channel14 description PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 14 ! interface Ethernet1 @@ -133,7 +139,7 @@ interface Ethernet2 ptp delay-req interval -3 ! interface Ethernet3 - description Endpoint-with-specific-PTP-profile_eth3 + description SERVER_Endpoint-with-specific-PTP-profile_eth3 no shutdown switchport access vlan 11 switchport mode access @@ -147,7 +153,7 @@ interface Ethernet3 ptp role master ! interface Ethernet5 - description video-endpoint_PCI1 + description SERVER_video-endpoint_PCI1 no shutdown switchport access vlan 11 switchport mode access @@ -162,17 +168,17 @@ interface Ethernet5 spanning-tree portfast ! interface Ethernet6 - description Endpoint-with-mpass_PCI1 + description SERVER_Endpoint-with-mpass_PCI1 no shutdown channel-group 6 mode active ! interface Ethernet9 - description MLAG_PEER_ptp-tests-leaf2_Ethernet9 + description MLAG_ptp-tests-leaf2_Ethernet9 no shutdown channel-group 9 mode active ! interface Ethernet10 - description MLAG_PEER_ptp-tests-leaf2_Ethernet10 + description MLAG_ptp-tests-leaf2_Ethernet10 no shutdown channel-group 9 mode active ! @@ -187,7 +193,7 @@ interface Ethernet12 channel-group 12 mode active ! interface Ethernet13 - description bmca-endpoint_eth1 + description SERVER_bmca-endpoint_eth1 no shutdown switchport access vlan 11 switchport mode access @@ -205,17 +211,17 @@ interface Ethernet14 channel-group 14 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.101/24 @@ -227,20 +233,20 @@ interface Vlan11 ip address 172.16.11.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 ip address 10.254.1.96/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.96/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -303,7 +309,7 @@ router bgp 65101 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.97 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.97 description ptp-tests-leaf2 + neighbor 10.254.1.97 description ptp-tests-leaf2_Vlan4093 neighbor 10.254.2.0 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.0 remote-as 65200 neighbor 10.254.2.0 description ptp-tests-spine1_Ethernet1 @@ -312,7 +318,7 @@ router bgp 65101 neighbor 10.254.2.2 description ptp-tests-spine1_Ethernet2 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description ptp-tests-spine1 + neighbor 10.255.0.1 description ptp-tests-spine1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -334,13 +340,7 @@ router bgp 65101 route-target export evpn 1:1 router-id 10.254.1.1 neighbor 10.254.1.97 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.97 description ptp-tests-leaf2_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf2.cfg index 0e0510d5219..c0c52de63d8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,46 +17,43 @@ service routing protocols model multi-agent ! hostname ptp-tests-leaf2 ! -ptp source ip 10.254.1.2 -ptp priority1 40 -ptp priority2 1 -ptp ttl 16 ptp domain 127 -ptp message-type general dscp 46 default ptp message-type event dscp 48 default +ptp message-type general dscp 46 default ptp mode boundary +ptp priority1 40 +ptp priority2 1 +ptp source ip 10.254.1.2 +ptp ttl 16 ptp forward-unicast ptp monitor threshold offset-from-master 1234 ptp monitor threshold mean-path-delay 4567 -ptp monitor threshold missing-message announce 10 intervals -ptp monitor threshold missing-message follow-up 9 intervals ptp monitor threshold missing-message sync 8 intervals +ptp monitor threshold missing-message follow-up 9 intervals +ptp monitor threshold missing-message announce 10 intervals ptp monitor sequence-id -ptp monitor threshold missing-message announce 11 sequence-ids -ptp monitor threshold missing-message delay-resp 12 sequence-ids -ptp monitor threshold missing-message follow-up 13 sequence-ids ptp monitor threshold missing-message sync 14 sequence-ids +ptp monitor threshold missing-message follow-up 13 sequence-ids +ptp monitor threshold missing-message delay-resp 12 sequence-ids +ptp monitor threshold missing-message announce 11 sequence-ids ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -55,10 +61,11 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel6 - description Endpoint-with-mpass + description SERVER_Endpoint-with-mpass no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 6 ptp enable ptp mpass @@ -70,12 +77,11 @@ interface Port-Channel6 ptp transport ipv4 ! interface Port-Channel9 - description MLAG_PEER_ptp-tests-leaf1_Po9 + description MLAG_ptp-tests-leaf1_Port-Channel9 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ptp enable ptp announce interval 0 ptp announce timeout 3 @@ -86,17 +92,17 @@ interface Port-Channel9 interface Port-Channel11 description PTP-TESTS-L2LEAF1-PTP-DISABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 11 ! interface Port-Channel12 description PTP-TESTS-L2LEAF2-PTP-ENABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 12 ptp enable ptp announce interval 0 @@ -108,9 +114,9 @@ interface Port-Channel12 interface Port-Channel14 description PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Po1 no shutdown - switchport switchport trunk allowed vlan 11 switchport mode trunk + switchport mlag 14 ! interface Ethernet1 @@ -140,7 +146,7 @@ interface Ethernet2 ptp delay-req interval -3 ! interface Ethernet5 - description video-endpoint_PCI2 + description SERVER_video-endpoint_PCI2 no shutdown switchport access vlan 11 switchport mode access @@ -155,17 +161,17 @@ interface Ethernet5 spanning-tree portfast ! interface Ethernet6 - description Endpoint-with-mpass_PCI2 + description SERVER_Endpoint-with-mpass_PCI2 no shutdown channel-group 6 mode active ! interface Ethernet9 - description MLAG_PEER_ptp-tests-leaf1_Ethernet9 + description MLAG_ptp-tests-leaf1_Ethernet9 no shutdown channel-group 9 mode active ! interface Ethernet10 - description MLAG_PEER_ptp-tests-leaf1_Ethernet10 + description MLAG_ptp-tests-leaf1_Ethernet10 no shutdown channel-group 9 mode active ! @@ -185,17 +191,17 @@ interface Ethernet14 channel-group 14 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.102/24 @@ -207,20 +213,20 @@ interface Vlan11 ip address 172.17.11.1/24 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 ip address 10.254.1.97/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.97/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -283,7 +289,7 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.96 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.96 description ptp-tests-leaf1 + neighbor 10.254.1.96 description ptp-tests-leaf1_Vlan4093 neighbor 10.254.2.4 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.4 remote-as 65200 neighbor 10.254.2.4 description ptp-tests-spine1_Ethernet3 @@ -292,7 +298,7 @@ router bgp 65102 neighbor 10.254.2.6 description ptp-tests-spine1_Ethernet4 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description ptp-tests-spine1 + neighbor 10.255.0.1 description ptp-tests-spine1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -314,13 +320,7 @@ router bgp 65102 route-target export evpn 1:1 router-id 10.254.1.2 neighbor 10.254.1.96 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.96 description ptp-tests-leaf1_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine1.cfg index d80a2f3e32a..a25964452d0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -9,23 +18,20 @@ service routing protocols model multi-agent hostname ptp-tests-spine1 ! ptp clock-identity 00:00:00:00:00:00 -ptp priority1 20 -ptp priority2 1 ptp domain 127 ptp mode boundary one-step +ptp priority1 20 +ptp priority2 1 ptp monitor threshold offset-from-master 250 ptp monitor threshold mean-path-delay 1500 ptp monitor sequence-id -ptp monitor threshold missing-message announce 3 sequence-ids -ptp monitor threshold missing-message delay-resp 3 sequence-ids -ptp monitor threshold missing-message follow-up 3 sequence-ids ptp monitor threshold missing-message sync 3 sequence-ids +ptp monitor threshold missing-message follow-up 3 sequence-ids +ptp monitor threshold missing-message delay-resp 3 sequence-ids +ptp monitor threshold missing-message announce 3 sequence-ids ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -129,12 +135,12 @@ interface Ethernet9 ptp delay-req interval -3 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.11/24 @@ -170,10 +176,10 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.254.1.1 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.1 remote-as 65101 - neighbor 10.254.1.1 description ptp-tests-leaf1 + neighbor 10.254.1.1 description ptp-tests-leaf1_Loopback0 neighbor 10.254.1.2 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.2 remote-as 65102 - neighbor 10.254.1.2 description ptp-tests-leaf2 + neighbor 10.254.1.2 description ptp-tests-leaf2_Loopback0 neighbor 10.254.2.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.1 remote-as 65101 neighbor 10.254.2.1 description ptp-tests-leaf1_Ethernet1 @@ -195,11 +201,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine2.cfg index 1f0c23d7e17..2aa21ad1f36 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -9,31 +18,28 @@ service routing protocols model multi-agent hostname ptp-tests-spine2 ! ptp clock-identity 01:02:03:14:00:0a -ptp source ip 10.255.0.1 -ptp priority1 20 -ptp priority2 10 -ptp ttl 128 ptp domain 127 -ptp message-type general dscp 46 default ptp message-type event dscp 48 default +ptp message-type general dscp 46 default ptp mode boundary one-step +ptp priority1 20 +ptp priority2 10 +ptp source ip 10.255.0.1 +ptp ttl 128 ptp forward-unicast ptp monitor threshold offset-from-master 1234 ptp monitor threshold mean-path-delay 4567 -ptp monitor threshold missing-message announce 10 intervals -ptp monitor threshold missing-message follow-up 9 intervals ptp monitor threshold missing-message sync 8 intervals +ptp monitor threshold missing-message follow-up 9 intervals +ptp monitor threshold missing-message announce 10 intervals ptp monitor sequence-id -ptp monitor threshold missing-message announce 11 sequence-ids -ptp monitor threshold missing-message delay-resp 12 sequence-ids -ptp monitor threshold missing-message follow-up 13 sequence-ids ptp monitor threshold missing-message sync 14 sequence-ids +ptp monitor threshold missing-message follow-up 13 sequence-ids +ptp monitor threshold missing-message delay-resp 12 sequence-ids +ptp monitor threshold missing-message announce 11 sequence-ids ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet6 @@ -85,12 +91,12 @@ interface Ethernet9 ptp delay-req interval -3 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.21/24 @@ -133,11 +139,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine3.cfg index b7a88f599b5..0ca103fa971 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/ptp-tests-spine3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,32 +17,29 @@ service routing protocols model multi-agent ! hostname ptp-tests-spine3 ! -ptp priority1 20 -ptp priority2 3 ptp domain 127 ptp mode boundary one-step +ptp priority1 20 +ptp priority2 3 ptp monitor threshold offset-from-master 250 ptp monitor threshold mean-path-delay 1500 ptp monitor sequence-id -ptp monitor threshold missing-message announce 3 sequence-ids -ptp monitor threshold missing-message delay-resp 3 sequence-ids -ptp monitor threshold missing-message follow-up 3 sequence-ids ptp monitor threshold missing-message sync 3 sequence-ids +ptp monitor threshold missing-message follow-up 3 sequence-ids +ptp monitor threshold missing-message delay-resp 3 sequence-ids +ptp monitor threshold missing-message announce 3 sequence-ids ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.31/24 @@ -76,11 +82,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf1.cfg index 6e55ebc1f06..65316638ffe 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -16,9 +25,6 @@ sflow destination 10.10.10.11 sflow source-interface Vlan4092 sflow run ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -30,9 +36,9 @@ vrf instance MGMT interface Port-Channel1 description SFLOW-TESTS-LEAF-MLAG_Po16 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport sflow enable ! interface Ethernet1 @@ -46,7 +52,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.201/24 @@ -61,11 +67,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ip route 0.0.0.0/0 10.254.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf2.cfg index c7e2d4844df..761c8a3bd90 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-l2-leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -16,9 +25,6 @@ sflow destination 10.10.10.11 sflow source-interface Vlan4092 sflow run ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -30,9 +36,9 @@ vrf instance MGMT interface Port-Channel1 description SFLOW-TESTS-LEAF-MLAG_Po17 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport sflow enable ! interface Ethernet1 @@ -46,7 +52,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.202/24 @@ -61,11 +67,4 @@ no ip routing vrf MGMT ip route vrf MGMT 0.0.0.0/0 192.168.0.1 ip route 0.0.0.0/0 10.254.254.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf1.cfg index 1cccb62da71..4ea81fffcdb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -18,9 +27,6 @@ sflow run spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -45,7 +51,7 @@ interface Ethernet2 sflow enable ! interface Ethernet10 - description single-interface-true_eth1 + description SERVER_single-interface-true_eth1 no shutdown switchport access vlan 11 switchport mode access @@ -53,7 +59,7 @@ interface Ethernet10 sflow enable ! interface Ethernet12 - description single-interface-false_eth11 + description SERVER_single-interface-false_eth11 no shutdown switchport access vlan 11 switchport mode access @@ -61,7 +67,7 @@ interface Ethernet12 no sflow enable ! interface Ethernet14 - description single-interface-no-definition_eth12 + description SERVER_single-interface-no-definition_eth12 no shutdown switchport access vlan 11 switchport mode access @@ -69,17 +75,17 @@ interface Ethernet14 sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.101/24 @@ -136,7 +142,7 @@ router bgp 65101 neighbor 10.254.2.2 description sflow-tests-spine1_Ethernet2 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description sflow-tests-spine1 + neighbor 10.255.0.1 description sflow-tests-spine1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -158,11 +164,4 @@ router bgp 65101 router-id 10.254.1.1 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf2.cfg index 1fe949bc757..330be53df50 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -18,9 +27,6 @@ sflow run spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! @@ -45,17 +51,17 @@ interface Ethernet2 sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.102/24 @@ -112,7 +118,7 @@ router bgp 65102 neighbor 10.254.2.6 description sflow-tests-spine1_Ethernet4 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description sflow-tests-spine1 + neighbor 10.255.0.1 description sflow-tests-spine1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan 11 @@ -134,11 +140,4 @@ router bgp 65102 router-id 10.254.1.2 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf3.cfg index b4501780568..2d1f8dae426 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -19,25 +28,22 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4092 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -45,30 +51,32 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel11 - description port-channel-interface-true + description SERVER_port-channel-interface-true no shutdown - switchport switchport access vlan 11 - switchport trunk group LEAF_PEER_L3 + switchport mode access switchport trunk group MLAG + switchport mlag 11 spanning-tree portfast sflow enable ! interface Port-Channel13 - description port-channel-interface-false + description SERVER_port-channel-interface-false no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 13 spanning-tree portfast no sflow enable ! interface Port-Channel15 - description port-channel-interface-no-definition + description SERVER_port-channel-interface-no-definition no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 15 spanning-tree portfast sflow enable @@ -76,18 +84,18 @@ interface Port-Channel15 interface Port-Channel16 description SFLOW-TESTS-L2-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 16 sflow enable ! interface Port-Channel17 description SFLOW-TESTS-L2-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 17 sflow enable ! @@ -108,22 +116,22 @@ interface Ethernet2 sflow enable ! interface Ethernet11 - description port-channel-interface-true_PCI1 + description SERVER_port-channel-interface-true_PCI1 no shutdown channel-group 11 mode on ! interface Ethernet12 - description MLAG_PEER_sflow-tests-leaf4_Ethernet12 + description MLAG_sflow-tests-leaf4_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description port-channel-interface-false_PCI11 + description SERVER_port-channel-interface-false_PCI11 no shutdown channel-group 13 mode on ! interface Ethernet15 - description port-channel-interface-no-definition_PCI13 + description SERVER_port-channel-interface-no-definition_PCI13 no shutdown channel-group 15 mode on ! @@ -138,17 +146,17 @@ interface Ethernet17 channel-group 17 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.103/24 @@ -159,7 +167,7 @@ interface Vlan11 vrf VRF1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 @@ -174,13 +182,13 @@ interface Vlan4092 ip virtual-router address 10.254.254.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.104/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -251,7 +259,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.105 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.105 description sflow-tests-leaf4 + neighbor 10.254.1.105 description sflow-tests-leaf4_Vlan4093 neighbor 10.254.2.16 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.16 remote-as 65200 neighbor 10.254.2.16 description sflow-tests-spine1_Ethernet5 @@ -260,7 +268,7 @@ router bgp 65105 neighbor 10.254.2.18 description sflow-tests-spine1_Ethernet6 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description sflow-tests-spine1 + neighbor 10.255.0.1 description sflow-tests-spine1_Loopback0 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -283,13 +291,7 @@ router bgp 65105 route-target export evpn 1:1 router-id 10.254.1.5 neighbor 10.254.1.105 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.105 description sflow-tests-leaf4_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf4.cfg index e0b90f85d99..ced677d11cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-leaf4.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -19,25 +28,22 @@ spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! vlan 11 name VLAN11 ! vlan 3000 - name MLAG_iBGP_VRF1 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_VRF1 + trunk group MLAG ! vlan 4092 name INBAND_MGMT ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -45,30 +51,32 @@ vrf instance MGMT vrf instance VRF1 ! interface Port-Channel11 - description port-channel-interface-true + description SERVER_port-channel-interface-true no shutdown - switchport switchport access vlan 11 - switchport trunk group LEAF_PEER_L3 + switchport mode access switchport trunk group MLAG + switchport mlag 11 spanning-tree portfast sflow enable ! interface Port-Channel13 - description port-channel-interface-false + description SERVER_port-channel-interface-false no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 13 spanning-tree portfast no sflow enable ! interface Port-Channel15 - description port-channel-interface-no-definition + description SERVER_port-channel-interface-no-definition no shutdown - switchport switchport access vlan 11 + switchport mode access + switchport mlag 15 spanning-tree portfast sflow enable @@ -76,18 +84,18 @@ interface Port-Channel15 interface Port-Channel16 description SFLOW-TESTS-L2-LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 16 sflow enable ! interface Port-Channel17 description SFLOW-TESTS-L2-LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 11,4092 switchport mode trunk + switchport mlag 17 sflow enable ! @@ -108,22 +116,22 @@ interface Ethernet2 sflow enable ! interface Ethernet11 - description port-channel-interface-true_PCI2 + description SERVER_port-channel-interface-true_PCI2 no shutdown channel-group 11 mode on ! interface Ethernet12 - description MLAG_PEER_sflow-tests-leaf3_Ethernet12 + description MLAG_sflow-tests-leaf3_Ethernet12 no shutdown channel-group 11 mode active ! interface Ethernet13 - description port-channel-interface-false_PCI12 + description SERVER_port-channel-interface-false_PCI12 no shutdown channel-group 13 mode on ! interface Ethernet15 - description port-channel-interface-no-definition_PCI14 + description SERVER_port-channel-interface-no-definition_PCI14 no shutdown channel-group 15 mode on ! @@ -138,17 +146,17 @@ interface Ethernet17 channel-group 17 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.254.1.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 10.254.11.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.104/24 @@ -159,7 +167,7 @@ interface Vlan11 vrf VRF1 ! interface Vlan3000 - description MLAG_PEER_L3_iBGP: vrf VRF1 + description MLAG_L3_VRF_VRF1 no shutdown mtu 9214 vrf VRF1 @@ -174,13 +182,13 @@ interface Vlan4092 ip virtual-router address 10.254.254.1 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.254.1.105/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -251,7 +259,7 @@ router bgp 65105 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.254.1.104 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.254.1.104 description sflow-tests-leaf3 + neighbor 10.254.1.104 description sflow-tests-leaf3_Vlan4093 neighbor 10.254.2.20 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.20 remote-as 65200 neighbor 10.254.2.20 description sflow-tests-spine1_Ethernet7 @@ -260,7 +268,7 @@ router bgp 65105 neighbor 10.254.2.22 description sflow-tests-spine1_Ethernet8 neighbor 10.255.0.1 peer group EVPN-OVERLAY-PEERS neighbor 10.255.0.1 remote-as 65200 - neighbor 10.255.0.1 description sflow-tests-spine1 + neighbor 10.255.0.1 description sflow-tests-spine1_Loopback0 redistribute attached-host redistribute connected route-map RM-CONN-2-BGP ! @@ -283,13 +291,7 @@ router bgp 65105 route-target export evpn 1:1 router-id 10.254.1.6 neighbor 10.254.1.104 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.254.1.104 description sflow-tests-leaf3_Vlan3000 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine1.cfg index 848571b9a5a..8fd85548202 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -17,9 +26,6 @@ sflow run ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -129,12 +135,12 @@ interface Ethernet14 sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.11/24 @@ -170,16 +176,16 @@ router bgp 65200 neighbor IPv4-UNDERLAY-PEERS maximum-routes 12000 neighbor 10.254.1.1 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.1 remote-as 65101 - neighbor 10.254.1.1 description sflow-tests-leaf1 + neighbor 10.254.1.1 description sflow-tests-leaf1_Loopback0 neighbor 10.254.1.2 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.2 remote-as 65102 - neighbor 10.254.1.2 description sflow-tests-leaf2 + neighbor 10.254.1.2 description sflow-tests-leaf2_Loopback0 neighbor 10.254.1.5 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.5 remote-as 65105 - neighbor 10.254.1.5 description sflow-tests-leaf3 + neighbor 10.254.1.5 description sflow-tests-leaf3_Loopback0 neighbor 10.254.1.6 peer group EVPN-OVERLAY-PEERS neighbor 10.254.1.6 remote-as 65105 - neighbor 10.254.1.6 description sflow-tests-leaf4 + neighbor 10.254.1.6 description sflow-tests-leaf4_Loopback0 neighbor 10.254.2.1 peer group IPv4-UNDERLAY-PEERS neighbor 10.254.2.1 remote-as 65101 neighbor 10.254.2.1 description sflow-tests-leaf1_Ethernet1 @@ -213,11 +219,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine2.cfg index dc79d3d1caa..40336e9a9c2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/sflow-tests-spine2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -17,9 +26,6 @@ sflow run ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet9 @@ -65,12 +71,12 @@ interface Ethernet14 sflow enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.255.0.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.0.21/24 @@ -113,11 +119,4 @@ router bgp 65200 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-disabled-leaf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-disabled-leaf.cfg index fadeedc4d6e..4a0c6cfba01 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-disabled-leaf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-disabled-leaf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname site-ha-disabled-leaf ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -91,12 +97,12 @@ interface Ethernet2.1000 ip address 172.17.0.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.45.4/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.255.4/32 ! @@ -231,11 +237,4 @@ router bgp 65199 neighbor 172.17.0.3 description cv-pathfinder-edge1_Ethernet52.142_vrf_PROD redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf1.cfg index 684625f0f62..8722ccbcc58 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname site-ha-enabled-leaf1 ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -91,12 +97,12 @@ interface Ethernet2.1000 ip address 172.17.0.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.45.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.255.1/32 ! @@ -230,11 +236,4 @@ router bgp 65199 neighbor 172.17.0.3 description cv-pathfinder-transit1B_Ethernet52.142_vrf_PROD redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2A.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2A.cfg index 882ee166fb1..58c8068ef33 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2A.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2A.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname site-ha-enabled-leaf2A ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -91,12 +97,12 @@ interface Ethernet2.1000 ip address 172.17.0.8/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.45.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.255.2/32 ! @@ -230,11 +236,4 @@ router bgp 65199 neighbor 172.17.0.9 description cv-pathfinder-edge2B_Ethernet52.142_vrf_PROD redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2B.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2B.cfg index 4ca165e4543..8306ca67754 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2B.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/site-ha-enabled-leaf2B.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname site-ha-enabled-leaf2B ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -91,12 +97,12 @@ interface Ethernet2.1000 ip address 172.17.0.10/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.45.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.255.3/32 ! @@ -230,11 +236,4 @@ router bgp 65199 neighbor 172.17.0.11 description cv-pathfinder-edge2B_Ethernet53.142_vrf_PROD redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-1.cfg index fd83933fb3f..97560aee4ff 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,13 +17,13 @@ service routing protocols model multi-agent ! hostname snmp-settings-1 ! -snmp-server contact example@example.com snmp-server ipv4 access-list SNMP-MGMT vrf MGMT snmp-server ipv4 access-list onur snmp-server ipv6 access-list SNMP-MGMT vrf MGMT snmp-server ipv6 access-list onur_v6 -snmp-server view VW-WRITE iso included +snmp-server contact example@example.com snmp-server view VW-READ iso included +snmp-server view VW-WRITE iso included snmp-server community SNMP-COMMUNITY-1 ro onur snmp-server community SNMP-COMMUNITY-2 view VW-READ rw ipv6 SNMP-MGMT SNMP-MGMT snmp-server community SNMP-COMMUNITY-3 ro @@ -33,13 +42,10 @@ snmp-server enable traps no snmp-server vrf default snmp-server vrf MGMT ! -no enable password -no aaa root -! vrf instance MGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.10.10.43/26 @@ -47,11 +53,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 10.10.10.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-2.cfg index 25fb4804b35..b062c4cc3ff 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/snmp-settings-2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -17,9 +26,6 @@ snmp-server host 10.6.75.128 version 3 auth USER-WRITE snmp-server vrf default snmp-server vrf SNMPVRF ! -no enable password -no aaa root -! vlan 4092 name INBAND_MGMT ! @@ -32,11 +38,4 @@ interface Vlan123 ip address 192.168.0.1/24 no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/source-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/source-interfaces.cfg index 729b590f9b8..959add34e0e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/source-interfaces.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/source-interfaces.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf default + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,16 +22,13 @@ ip domain lookup vrf INBANDMGMT source-interface Vlan4092 snmp-server local-interface Management1 snmp-server vrf INBANDMGMT local-interface Vlan4092 ! -no enable password -no aaa root -! vlan 4092 name INBAND_MGMT ! vrf instance INBANDMGMT ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown ip address 192.168.0.2/24 ! @@ -35,24 +41,17 @@ interface Vlan4092 ! ip route vrf INBANDMGMT 0.0.0.0/0 10.20.30.1 ! -ip tacacs source-interface Management1 -! -ip tacacs vrf INBANDMGMT source-interface Vlan4092 +ip http client local-interface Management1 +ip http client local-interface Vlan4092 vrf INBANDMGMT +ip ssh client source-interface Management1 +ip ssh client source-interface Vlan4092 vrf INBANDMGMT ! ip radius source-interface Management1 ! ip radius vrf INBANDMGMT source-interface Vlan4092 ! -ip http client local-interface Management1 -ip http client local-interface Vlan4092 vrf INBANDMGMT -ip ssh client source-interface Management1 -ip ssh client source-interface Vlan4092 vrf INBANDMGMT +ip tacacs source-interface Management1 ! -management api http-commands - protocol https - no shutdown - ! - vrf default - no shutdown +ip tacacs vrf INBANDMGMT source-interface Vlan4092 ! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/spanning-tree-mode-rapid-pvst.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/spanning-tree-mode-rapid-pvst.cfg index 43cd78a7e92..e21da07a21d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/spanning-tree-mode-rapid-pvst.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/spanning-tree-mode-rapid-pvst.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -13,9 +22,6 @@ spanning-tree vlan-id 1-10,13-20,23-4093 priority 8192 spanning-tree vlan-id 11,21 priority 16384 spanning-tree vlan-id 12,22 priority 32768 ! -no enable password -no aaa root -! vlan 10 name DEFAULTPRIORITY ! @@ -43,11 +49,4 @@ vlan 23 vrf instance MGMT no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1a.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1a.cfg index 28b55d9538d..067c7262f77 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1a.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1a.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l2leaf1a ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name svi100_with_trunk_groups trunk group MLAG @@ -66,7 +72,7 @@ vlan 399 trunk group UPLINK ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -74,25 +80,25 @@ vrf instance MGMT interface Port-Channel1 description TRUNK_GROUP_TESTS_L3LEAF1_Po1 no shutdown - switchport switchport mode trunk switchport trunk group UPLINK + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l2leaf1b_Po3 + description MLAG_trunk-group-tests-l2leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Port-Channel13 - description server_with_tg_300_portchannel + description portchannel no shutdown - switchport switchport mode trunk switchport trunk group TG_300 switchport trunk group TG_NOT_MATCHING_ANY_VLANS + switchport mlag 13 ! interface Ethernet1 @@ -106,22 +112,22 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l2leaf1b_Ethernet3 + description MLAG_trunk-group-tests-l2leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l2leaf1b_Ethernet4 + description MLAG_trunk-group-tests-l2leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet13 - description server_with_tg_300_Nic3 + description SERVER_server_with_tg_300_Nic3 no shutdown channel-group 13 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -138,11 +144,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1b.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1b.cfg index a18e9d11038..6f3cd14f8e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1b.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf1b.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l2leaf1b ! no spanning-tree vlan-id 4094 ! -no enable password -no aaa root -! vlan 100 name svi100_with_trunk_groups trunk group CUSTOM_MLAG_TG_NAME @@ -58,7 +64,7 @@ vlan 399 trunk group CUSTOM_UPLINK_TG_NAME ! vlan 4094 - name MLAG_PEER + name MLAG trunk group CUSTOM_MLAG_TG_NAME ! vrf instance MGMT @@ -66,25 +72,25 @@ vrf instance MGMT interface Port-Channel1 description TRUNK_GROUP_TESTS_L3LEAF1_Po1 no shutdown - switchport switchport mode trunk switchport trunk group UPLINK + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l2leaf1a_Po3 + description MLAG_trunk-group-tests-l2leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group CUSTOM_MLAG_TG_NAME + switchport ! interface Port-Channel13 - description server_with_tg_300_portchannel + description portchannel no shutdown - switchport switchport mode trunk switchport trunk group TG_300 switchport trunk group TG_NOT_MATCHING_ANY_VLANS + switchport mlag 13 ! interface Ethernet1 @@ -98,17 +104,17 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l2leaf1a_Ethernet3 + description MLAG_trunk-group-tests-l2leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l2leaf1a_Ethernet4 + description MLAG_trunk-group-tests-l2leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! interface Ethernet12 - description server_with_tg_200_Nic1 + description SERVER_server_with_tg_200_Nic1 no shutdown switchport mode trunk switchport trunk group TG_200 @@ -116,12 +122,12 @@ interface Ethernet12 switchport ! interface Ethernet13 - description server_with_tg_300_Nic4 + description SERVER_server_with_tg_300_Nic4 no shutdown channel-group 13 mode active ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -138,11 +144,4 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf3.cfg index 1faff205e81..0de5ad16399 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname trunk-group-tests-l2leaf3 ! -no enable password -no aaa root -! vlan 200 name svi200_with_trunk_groups trunk group TG_200 @@ -26,9 +32,9 @@ vrf instance MGMT interface Port-Channel1 description TRUNK_GROUP_TESTS_L3LEAF1_Po5 no shutdown - switchport switchport mode trunk switchport trunk group UPLINK + switchport ! interface Ethernet1 description TRUNK-GROUP-TESTS-L3LEAF1A_Ethernet5 @@ -41,7 +47,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet12 - description server_with_tg_200_Nic2 + description SERVER_server_with_tg_200_Nic2 no shutdown switchport mode trunk switchport trunk group TG_200 @@ -51,11 +57,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf4.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf4.cfg index dda88db1758..2be97d4259c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf4.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l2leaf4.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname trunk-group-tests-l2leaf4 ! -no enable password -no aaa root -! vlan 200 name svi200_with_trunk_groups trunk group TG_200 @@ -28,9 +34,9 @@ vrf instance MGMT interface Port-Channel1 description TRUNK_GROUP_TESTS_L3LEAF2_Po1 no shutdown - switchport switchport mode trunk switchport trunk group UPLINK + switchport ! interface Ethernet1 description TRUNK-GROUP-TESTS-L3LEAF2A_Ethernet1 @@ -43,7 +49,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet12 - description server_with_tg_200_Nic3 + description SERVER_server_with_tg_200_Nic3 no shutdown switchport mode trunk switchport trunk group TG_200 @@ -53,11 +59,4 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 1.1.1.1 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1a.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1a.cfg index 72f9542f2c8..2e0dc05dea4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1a.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1a.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l3leaf1a ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 100 name svi100_with_trunk_groups trunk group MLAG @@ -80,23 +86,23 @@ vlan 399 trunk group TRUNK_GROUP_TESTS_L2LEAF1 ! vlan 3099 - name MLAG_iBGP_TG_100 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TG_100 + trunk group MLAG ! vlan 3199 - name MLAG_iBGP_TG_200 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TG_200 + trunk group MLAG ! vlan 3299 - name MLAG_iBGP_TG_300 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TG_300 + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -110,34 +116,33 @@ vrf instance TG_300 interface Port-Channel1 description TRUNK_GROUP_TESTS_L2LEAF1_Po1 no shutdown - switchport switchport mode trunk switchport trunk group TRUNK_GROUP_TESTS_L2LEAF1 + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l3leaf1b_Po3 + description MLAG_trunk-group-tests-l3leaf1b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel5 description TRUNK-GROUP-TESTS-L2LEAF3_Po1 no shutdown - switchport switchport mode trunk switchport trunk group trunk-group-tests-l2leaf3 + switchport mlag 5 ! interface Port-Channel13 - description server_with_tg_300_portchannel + description portchannel no shutdown - switchport switchport mode trunk switchport trunk group TG_300 switchport trunk group TG_NOT_MATCHING_ANY_VLANS + switchport mlag 13 ! interface Ethernet1 @@ -151,12 +156,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l3leaf1b_Ethernet3 + description MLAG_trunk-group-tests-l3leaf1b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l3leaf1b_Ethernet4 + description MLAG_trunk-group-tests-l3leaf1b_Ethernet4 no shutdown channel-group 3 mode active ! @@ -166,7 +171,7 @@ interface Ethernet5 channel-group 5 mode active ! interface Ethernet11 - description server_with_tg_100_Nic1 + description SERVER_server_with_tg_100_Nic1 no shutdown switchport mode trunk switchport trunk group TG_100 @@ -174,17 +179,17 @@ interface Ethernet11 switchport ! interface Ethernet13 - description server_with_tg_300_Nic1 + description SERVER_server_with_tg_300_Nic1 no shutdown channel-group 13 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.250.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.249.9/32 ! @@ -219,34 +224,34 @@ interface Vlan398 ip address virtual 10.3.1.1/24 ! interface Vlan3099 - description MLAG_PEER_L3_iBGP: vrf TG_100 + description MLAG_L3_VRF_TG_100 no shutdown mtu 9214 vrf TG_100 ip address 10.255.247.0/31 ! interface Vlan3199 - description MLAG_PEER_L3_iBGP: vrf TG_200 + description MLAG_L3_VRF_TG_200 no shutdown mtu 9214 vrf TG_200 ip address 10.255.247.0/31 ! interface Vlan3299 - description MLAG_PEER_L3_iBGP: vrf TG_300 + description MLAG_L3_VRF_TG_300 no shutdown mtu 9214 vrf TG_300 ip address 10.255.247.0/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.247.0/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -325,7 +330,7 @@ router bgp 65001 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.247.1 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.247.1 description trunk-group-tests-l3leaf1b + neighbor 10.255.247.1 description trunk-group-tests-l3leaf1b_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 100 @@ -393,6 +398,7 @@ router bgp 65001 router-id 192.168.250.9 update wait-install neighbor 10.255.247.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.1 description trunk-group-tests-l3leaf1b_Vlan3099 redistribute connected ! vrf TG_200 @@ -402,6 +408,7 @@ router bgp 65001 router-id 192.168.250.9 update wait-install neighbor 10.255.247.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.1 description trunk-group-tests-l3leaf1b_Vlan3199 redistribute connected ! vrf TG_300 @@ -411,13 +418,7 @@ router bgp 65001 router-id 192.168.250.9 update wait-install neighbor 10.255.247.1 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.1 description trunk-group-tests-l3leaf1b_Vlan3299 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1b.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1b.cfg index 4d349dba8a8..3961f1731a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1b.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf1b.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l3leaf1b ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 100 name svi100_with_trunk_groups trunk group CUSTOM_MLAG_TG_NAME @@ -68,23 +74,23 @@ vlan 399 trunk group TRUNK_GROUP_TESTS_L2LEAF1 ! vlan 3099 - name MLAG_iBGP_TG_100 + name MLAG_L3_VRF_TG_100 trunk group CUSTOM_LEAF_PEER_L3_TG_NAME ! vlan 3199 - name MLAG_iBGP_TG_200 + name MLAG_L3_VRF_TG_200 trunk group CUSTOM_LEAF_PEER_L3_TG_NAME ! vlan 3299 - name MLAG_iBGP_TG_300 + name MLAG_L3_VRF_TG_300 trunk group CUSTOM_LEAF_PEER_L3_TG_NAME ! vlan 4093 - name LEAF_PEER_L3 + name MLAG_L3 trunk group CUSTOM_LEAF_PEER_L3_TG_NAME ! vlan 4094 - name MLAG_PEER + name MLAG trunk group CUSTOM_MLAG_TG_NAME ! vrf instance MGMT @@ -98,34 +104,34 @@ vrf instance TG_300 interface Port-Channel1 description TRUNK_GROUP_TESTS_L2LEAF1_Po1 no shutdown - switchport switchport mode trunk switchport trunk group TRUNK_GROUP_TESTS_L2LEAF1 + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l3leaf1a_Po3 + description MLAG_trunk-group-tests-l3leaf1a_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group CUSTOM_LEAF_PEER_L3_TG_NAME switchport trunk group CUSTOM_MLAG_TG_NAME + switchport ! interface Port-Channel5 description TRUNK-GROUP-TESTS-L2LEAF3_Po1 no shutdown - switchport switchport mode trunk switchport trunk group trunk-group-tests-l2leaf3 + switchport mlag 5 ! interface Port-Channel13 - description server_with_tg_300_portchannel + description portchannel no shutdown - switchport switchport mode trunk switchport trunk group TG_300 switchport trunk group TG_NOT_MATCHING_ANY_VLANS + switchport mlag 13 ! interface Ethernet1 @@ -139,12 +145,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l3leaf1a_Ethernet3 + description MLAG_trunk-group-tests-l3leaf1a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l3leaf1a_Ethernet4 + description MLAG_trunk-group-tests-l3leaf1a_Ethernet4 no shutdown channel-group 3 mode active ! @@ -154,17 +160,17 @@ interface Ethernet5 channel-group 5 mode active ! interface Ethernet13 - description server_with_tg_300_Nic2 + description SERVER_server_with_tg_300_Nic2 no shutdown channel-group 13 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.250.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.249.9/32 ! @@ -199,34 +205,34 @@ interface Vlan398 ip address virtual 10.3.1.1/24 ! interface Vlan3099 - description MLAG_PEER_L3_iBGP: vrf TG_100 + description MLAG_L3_VRF_TG_100 no shutdown mtu 9214 vrf TG_100 ip address 10.255.247.1/31 ! interface Vlan3199 - description MLAG_PEER_L3_iBGP: vrf TG_200 + description MLAG_L3_VRF_TG_200 no shutdown mtu 9214 vrf TG_200 ip address 10.255.247.1/31 ! interface Vlan3299 - description MLAG_PEER_L3_iBGP: vrf TG_300 + description MLAG_L3_VRF_TG_300 no shutdown mtu 9214 vrf TG_300 ip address 10.255.247.1/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.247.1/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -305,7 +311,7 @@ router bgp 65001 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.247.0 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.247.0 description trunk-group-tests-l3leaf1a + neighbor 10.255.247.0 description trunk-group-tests-l3leaf1a_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 100 @@ -373,6 +379,7 @@ router bgp 65001 router-id 192.168.250.10 update wait-install neighbor 10.255.247.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.0 description trunk-group-tests-l3leaf1a_Vlan3099 redistribute connected ! vrf TG_200 @@ -382,6 +389,7 @@ router bgp 65001 router-id 192.168.250.10 update wait-install neighbor 10.255.247.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.0 description trunk-group-tests-l3leaf1a_Vlan3199 redistribute connected ! vrf TG_300 @@ -391,13 +399,7 @@ router bgp 65001 router-id 192.168.250.10 update wait-install neighbor 10.255.247.0 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.0 description trunk-group-tests-l3leaf1a_Vlan3299 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2a.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2a.cfg index 1131622f81b..be6f670099e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2a.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2a.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l3leaf2a ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 200 name svi200_with_trunk_groups trunk group MLAG @@ -28,15 +34,15 @@ vlan 210 trunk group trunk-group-tests-l2leaf4 ! vlan 3199 - name MLAG_iBGP_TG_200 - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_TG_200 + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -46,18 +52,17 @@ vrf instance TG_200 interface Port-Channel1 description TRUNK-GROUP-TESTS-L2LEAF4_Po1 no shutdown - switchport switchport mode trunk switchport trunk group trunk-group-tests-l2leaf4 + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l3leaf2b_Po3 + description MLAG_trunk-group-tests-l3leaf2b_Port-Channel3 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description TRUNK-GROUP-TESTS-L2LEAF4_Ethernet1 @@ -65,22 +70,22 @@ interface Ethernet1 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l3leaf2b_Ethernet3 + description MLAG_trunk-group-tests-l3leaf2b_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l3leaf2b_Ethernet4 + description MLAG_trunk-group-tests-l3leaf2b_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.250.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.249.11/32 ! @@ -91,20 +96,20 @@ interface Vlan200 ip address virtual 10.2.0.1/24 ! interface Vlan3199 - description MLAG_PEER_L3_iBGP: vrf TG_200 + description MLAG_L3_VRF_TG_200 no shutdown mtu 9214 vrf TG_200 ip address 10.255.247.4/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.247.4/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -171,7 +176,7 @@ router bgp 65002 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.247.5 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.247.5 description trunk-group-tests-l3leaf2b + neighbor 10.255.247.5 description trunk-group-tests-l3leaf2b_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 200 @@ -199,13 +204,7 @@ router bgp 65002 router-id 192.168.250.11 update wait-install neighbor 10.255.247.5 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.5 description trunk-group-tests-l3leaf2b_Vlan3199 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2b.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2b.cfg index c4b7b87f956..f3bb376cf8b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2b.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/trunk-group-tests-l3leaf2b.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -10,9 +19,6 @@ hostname trunk-group-tests-l3leaf2b ! no spanning-tree vlan-id 4093-4094 ! -no enable password -no aaa root -! vlan 200 name svi200_with_trunk_groups trunk group CUSTOM_MLAG_TG_NAME @@ -24,15 +30,15 @@ vlan 210 trunk group trunk-group-tests-l2leaf4 ! vlan 3199 - name MLAG_iBGP_TG_200 + name MLAG_L3_VRF_TG_200 trunk group CUSTOM_MLAG_TG_NAME ! vlan 4093 - name LEAF_PEER_L3 + name MLAG_L3 trunk group CUSTOM_MLAG_TG_NAME ! vlan 4094 - name MLAG_PEER + name MLAG trunk group CUSTOM_MLAG_TG_NAME ! vrf instance MGMT @@ -42,17 +48,17 @@ vrf instance TG_200 interface Port-Channel1 description TRUNK-GROUP-TESTS-L2LEAF4_Po1 no shutdown - switchport switchport mode trunk switchport trunk group trunk-group-tests-l2leaf4 + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_trunk-group-tests-l3leaf2a_Po3 + description MLAG_trunk-group-tests-l3leaf2a_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group CUSTOM_MLAG_TG_NAME + switchport ! interface Ethernet1 description TRUNK-GROUP-TESTS-L2LEAF4_Ethernet2 @@ -60,22 +66,22 @@ interface Ethernet1 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_trunk-group-tests-l3leaf2a_Ethernet3 + description MLAG_trunk-group-tests-l3leaf2a_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_trunk-group-tests-l3leaf2a_Ethernet4 + description MLAG_trunk-group-tests-l3leaf2a_Ethernet4 no shutdown channel-group 3 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.250.12/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.249.11/32 ! @@ -86,20 +92,20 @@ interface Vlan200 ip address virtual 10.2.0.1/24 ! interface Vlan3199 - description MLAG_PEER_L3_iBGP: vrf TG_200 + description MLAG_L3_VRF_TG_200 no shutdown mtu 9214 vrf TG_200 ip address 10.255.247.5/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 9214 ip address 10.255.247.5/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 9214 no autostate @@ -166,7 +172,7 @@ router bgp 65002 neighbor MLAG-IPv4-UNDERLAY-PEER maximum-routes 12000 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 10.255.247.4 peer group MLAG-IPv4-UNDERLAY-PEER - neighbor 10.255.247.4 description trunk-group-tests-l3leaf2a + neighbor 10.255.247.4 description trunk-group-tests-l3leaf2a_Vlan4093 redistribute connected route-map RM-CONN-2-BGP ! vlan 200 @@ -194,13 +200,7 @@ router bgp 65002 router-id 192.168.250.12 update wait-install neighbor 10.255.247.4 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.247.4 description trunk-group-tests-l3leaf2a_Vlan3199 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_1.cfg index 85b7de09a6d..6130784c666 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_1.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname underlay_filter_peer_as_evpn_1 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -28,12 +34,12 @@ interface Ethernet2 ip address 192.168.153.3/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.1/32 ! @@ -86,10 +92,10 @@ router bgp 64512 neighbor 192.168.153.2 route-map RM-BGP-AS64513-OUT out neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 64513 - neighbor 192.168.255.2 description underlay_filter_peer_as_evpn_2 + neighbor 192.168.255.2 description underlay_filter_peer_as_evpn_2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 64513 - neighbor 192.168.255.3 description underlay_filter_peer_as_evpn_3 + neighbor 192.168.255.3 description underlay_filter_peer_as_evpn_3_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -99,11 +105,4 @@ router bgp 64512 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_2.cfg index 662812a12b0..5590a0a8715 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_2.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname underlay_filter_peer_as_evpn_2 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -21,12 +27,12 @@ interface Ethernet1 ip address 192.168.153.0/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.2/32 ! @@ -76,7 +82,7 @@ router bgp 64513 neighbor 192.168.153.1 route-map RM-BGP-AS64512-OUT out neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 64512 - neighbor 192.168.255.1 description underlay_filter_peer_as_evpn_1 + neighbor 192.168.255.1 description underlay_filter_peer_as_evpn_1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -86,11 +92,4 @@ router bgp 64513 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_3.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_3.cfg index 42634f314ba..51746228f7c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_3.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/underlay_filter_peer_as_evpn_3.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname underlay_filter_peer_as_evpn_3 ! -no enable password -no aaa root -! vrf instance MGMT ! interface Ethernet1 @@ -21,12 +27,12 @@ interface Ethernet1 ip address 192.168.153.2/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.3/32 ! @@ -76,7 +82,7 @@ router bgp 64513 neighbor 192.168.153.3 route-map RM-BGP-AS64512-OUT out neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 64512 - neighbor 192.168.255.1 description underlay_filter_peer_as_evpn_1 + neighbor 192.168.255.1 description underlay_filter_peer_as_evpn_1_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -86,11 +92,4 @@ router bgp 64513 no neighbor EVPN-OVERLAY-PEERS activate neighbor IPv4-UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-child.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-child.cfg index 29822877d35..087e4f9db37 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-child.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-child.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname uplink-native-vlan-child ! -no enable password -no aaa root -! vlan 100 name NETWORK_SERVICES_VLAN ! @@ -23,10 +29,10 @@ vrf instance MGMT interface Port-Channel2 description UPLINK-NATIVE-VLAN-PARENT_Po2 no shutdown - switchport - switchport trunk allowed vlan 100 switchport trunk native vlan 200 + switchport trunk allowed vlan 100 switchport mode trunk + switchport ! interface Ethernet2 description UPLINK-NATIVE-VLAN-PARENT_Ethernet2 @@ -34,11 +40,4 @@ interface Ethernet2 channel-group 2 mode active no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-grandparent.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-grandparent.cfg index 4d8ba9a4e92..f76f2e1d740 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-grandparent.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-grandparent.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname uplink-native-vlan-grandparent ! -no enable password -no aaa root -! vlan 100 name NETWORK_SERVICES_VLAN ! @@ -19,10 +25,10 @@ vrf instance MGMT interface Port-Channel1 description UPLINK-NATIVE-VLAN-PARENT_Po1 no shutdown - switchport - switchport trunk allowed vlan 100 switchport trunk native vlan 100 + switchport trunk allowed vlan 100 switchport mode trunk + switchport ! interface Ethernet1 description UPLINK-NATIVE-VLAN-PARENT_Ethernet1 @@ -30,11 +36,4 @@ interface Ethernet1 channel-group 1 mode active no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-parent.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-parent.cfg index 986eedd4c76..5d8e04b73e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-parent.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink-native-vlan-parent.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname uplink-native-vlan-parent ! -no enable password -no aaa root -! vlan 100 name NETWORK_SERVICES_VLAN ! @@ -23,18 +29,18 @@ vrf instance MGMT interface Port-Channel1 description UPLINK-NATIVE-VLAN-GRANDPARENT_Po1 no shutdown - switchport - switchport trunk allowed vlan 100 switchport trunk native vlan 100 + switchport trunk allowed vlan 100 switchport mode trunk + switchport ! interface Port-Channel2 description UPLINK-NATIVE-VLAN-CHILD_Po2 no shutdown - switchport - switchport trunk allowed vlan 100 switchport trunk native vlan 200 + switchport trunk allowed vlan 100 switchport mode trunk + switchport ! interface Ethernet1 description UPLINK-NATIVE-VLAN-GRANDPARENT_Ethernet1 @@ -47,11 +53,4 @@ interface Ethernet2 channel-group 2 mode active no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_l2leaf.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_l2leaf.cfg index 47536f9aebd..eefc279ec91 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_l2leaf.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_l2leaf.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -19,9 +28,6 @@ service routing protocols model multi-agent ! hostname uplink_lan_l2leaf ! -no enable password -no aaa root -! vlan 10 name VLAN10_NATIVE ! @@ -53,11 +59,4 @@ interface Ethernet2 spanning-tree portfast no ip routing vrf MGMT ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router1.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router1.cfg index 2565469d1db..c88ff4027e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router1.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -67,15 +76,18 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! vrf instance VRF1 ! -ip security +management security ! + ssl profile STUN-DTLS + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate STUN-DTLS.crt key STUN-DTLS.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.2.1 ! @@ -96,7 +108,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.2.1/32 ! @@ -109,7 +121,7 @@ interface Ethernet1 interface Ethernet2 description UPLINK_LAN_L2LEAF_Ethernet1 no shutdown - mtu 9214 + mtu 9218 no switchport flow tracker hardware FLOW-TRACKER vrf VRF1 @@ -127,7 +139,7 @@ interface Ethernet2.100 comment yo ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.1.1/32 ! @@ -151,12 +163,12 @@ application traffic recognition ip routing no ip routing vrf MGMT ip routing vrf VRF1 -ipv6 unicast-routing vrf VRF1 ! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.1.1:1 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.1.0/24 eq 32 +ipv6 unicast-routing vrf VRF1 ! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -195,6 +207,7 @@ router bgp 65100 neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -226,17 +239,4 @@ router bgp 65100 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile STUN-DTLS - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate STUN-DTLS.crt key STUN-DTLS.key -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router2.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router2.cfg index b90d09917b6..db0f72f2ae9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/uplink_lan_wan_router2.cfg @@ -1,7 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root ! agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=1 ! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown +! flow tracking hardware tracker FLOW-TRACKER record export on inactive timeout 70000 @@ -67,15 +76,18 @@ router path-selection ! spanning-tree mode none ! -no enable password -no aaa root -! vrf instance MGMT ! vrf instance VRF1 ! -ip security +management security ! + ssl profile STUN-DTLS + tls versions 1.2 + trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt + certificate STUN-DTLS.crt key STUN-DTLS.key +! +ip security ike policy CP-IKE-POLICY local-id 192.168.2.2 ! @@ -96,7 +108,7 @@ ip security ! interface Dps1 description DPS Interface - mtu 9214 + mtu 9194 flow tracker hardware FLOW-TRACKER ip address 192.168.2.2/32 ! @@ -109,13 +121,13 @@ interface Ethernet1 interface Ethernet2 description UPLINK_LAN_L2LEAF_Ethernet2 no shutdown - mtu 9214 + mtu 9218 no switchport ! interface Ethernet2.10 description VLAN10_NATIVE no shutdown - mtu 9214 + mtu 9218 encapsulation dot1q vlan 10 flow tracker hardware FLOW-TRACKER vrf VRF1 @@ -133,7 +145,7 @@ interface Ethernet2.100 comment yo ! interface Loopback0 - description Router_ID + description ROUTER_ID no shutdown ip address 192.168.1.2/32 ! @@ -157,12 +169,12 @@ application traffic recognition ip routing no ip routing vrf MGMT ip routing vrf VRF1 -ipv6 unicast-routing vrf VRF1 ! ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.1.2:2 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.1.0/24 eq 32 +ipv6 unicast-routing vrf VRF1 ! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -201,6 +213,7 @@ router bgp 65100 neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-IN in neighbor WAN-OVERLAY-PEERS route-map RM-EVPN-SOO-OUT out neighbor WAN-OVERLAY-PEERS activate + neighbor WAN-OVERLAY-PEERS encapsulation path-selection ! address-family ipv4 no neighbor WAN-OVERLAY-PEERS activate @@ -232,17 +245,4 @@ router bgp 65100 ! router traffic-engineering ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! -management security - ssl profile STUN-DTLS - tls versions 1.2 - trust certificate aristaDeviceCertProvisionerDefaultRootCA.crt - certificate STUN-DTLS.crt key STUN-DTLS.key -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/varpv6.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/varpv6.cfg index bcfd67cfbbf..d03a27bdda4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/varpv6.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/varpv6.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname varpv6 ! -no enable password -no aaa root -! vlan 100 name VARPv6_configured_1 ! @@ -31,12 +37,12 @@ vrf instance MGMT vrf instance VRF1 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.101/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.101/32 ! @@ -86,11 +92,11 @@ ip virtual-router mac-address 00:dc:00:00:00:0a ip routing no ip routing vrf MGMT ip routing vrf VRF1 -ipv6 unicast-routing vrf VRF1 ! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 +ipv6 unicast-routing vrf VRF1 ! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY @@ -153,11 +159,4 @@ router bgp 101 router-id 192.168.255.101 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/vrfs_rd_rt_override.cfg b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/vrfs_rd_rt_override.cfg index 2207b8c87a2..8500c21fc91 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/vrfs_rd_rt_override.cfg +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/configs/vrfs_rd_rt_override.cfg @@ -1,4 +1,13 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! vlan internal order ascending range 1006 1199 ! @@ -8,9 +17,6 @@ service routing protocols model multi-agent ! hostname vrfs_rd_rt_override ! -no enable password -no aaa root -! vlan 100 name VLAN100 ! @@ -24,12 +30,12 @@ vrf instance VRF1 vrf instance VRF2 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 10.10.0.20/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description MY_VTEP_LOOPBACK no shutdown ip address 10.11.0.20/32 ! @@ -118,11 +124,4 @@ router bgp 65101 router-id 10.10.0.20 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF1.yml index 1b55924bb9f..f79ff5bc02b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF1.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: 7010TX-LEAF2 - description: 7010TX-LEAF2 + description: 7010TX-LEAF2_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.116/24 @@ -78,40 +84,40 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false ip_address: 10.10.224.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 10.10.255.4/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_7010TX-LEAF2_Po5 - type: switched + description: MLAG_7010TX-LEAF2_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: 7010TX-LEAF2 peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_7010TX-LEAF2_Ethernet5 - type: port-channel-member + description: MLAG_7010TX-LEAF2_Ethernet5 shutdown: false channel_group: id: 5 @@ -120,8 +126,7 @@ ethernet_interfaces: peer: 7010TX-LEAF2 peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_7010TX-LEAF2_Ethernet6 - type: port-channel-member + description: MLAG_7010TX-LEAF2_Ethernet6 shutdown: false channel_group: id: 5 @@ -149,11 +154,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF2.yml index 1804b53a5bd..1303be2fb73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/7010TX-LEAF2.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: 7010TX-LEAF1 - description: 7010TX-LEAF1 + description: 7010TX-LEAF1_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.117/24 @@ -78,40 +84,40 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false ip_address: 10.10.224.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true ip_address: 10.10.255.5/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_7010TX-LEAF1_Po5 - type: switched + description: MLAG_7010TX-LEAF1_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: 7010TX-LEAF1 peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_7010TX-LEAF1_Ethernet5 - type: port-channel-member + description: MLAG_7010TX-LEAF1_Ethernet5 shutdown: false channel_group: id: 5 @@ -120,8 +126,7 @@ ethernet_interfaces: peer: 7010TX-LEAF1 peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_7010TX-LEAF1_Ethernet6 - type: port-channel-member + description: MLAG_7010TX-LEAF1_Ethernet6 shutdown: false channel_group: id: 5 @@ -149,7 +154,7 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.36/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1A.yml index 328d93fee4a..36c9747766b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1A.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.105/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1B.yml index 10778a930ef..8ab00af19f2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF1B.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.106/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF2.yml index e7450c5e560..a31953ee87a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF2.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.107/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3A.yml index e5f02b27911..f6fb62003ba 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3A.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.9 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF3B - description: AUTO_BGP_ASN_LEAF3B + description: AUTO_BGP_ASN_LEAF3B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.109/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.8/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.8/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF3B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF3B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF3B_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF3B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3B_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF3B_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.7/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3B.yml index 99d9550f0f6..05064e5eba6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF3B.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.8 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF3A - description: AUTO_BGP_ASN_LEAF3A + description: AUTO_BGP_ASN_LEAF3A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.110/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.9/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.9/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF3A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF3A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF3A_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF3A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF3A_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF3A_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.7/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4A.yml index 92a610bfa47..0dad615854c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4A.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.13 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF4B - description: AUTO_BGP_ASN_LEAF4B + description: AUTO_BGP_ASN_LEAF4B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.111/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.12/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.12/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF4B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF4B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF4B_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF4B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4B_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF4B_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.9/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.9/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4B.yml index 5bca75ca90c..59822032e7d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF4B.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.12 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF4A - description: AUTO_BGP_ASN_LEAF4A + description: AUTO_BGP_ASN_LEAF4A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.112/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.13/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.13/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF4A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF4A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF4A_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF4A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF4A_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF4A_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.9/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF5A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF5A.yml index 381566f8d4f..728896a5526 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF5A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF5A.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.113/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7A.yml index fa397d9833a..54fe2be6833 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7A.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.21 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF7B - description: AUTO_BGP_ASN_LEAF7B + description: AUTO_BGP_ASN_LEAF7B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.115/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.20/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.20/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF7B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF7B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF7B_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF7B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7B_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF7B_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.13/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.13/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7B.yml index 7287fadba8e..e66a790862f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF7B.yml @@ -45,7 +45,7 @@ router_bgp: - ip_address: 10.255.251.20 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: AUTO_BGP_ASN_LEAF7A - description: AUTO_BGP_ASN_LEAF7A + description: AUTO_BGP_ASN_LEAF7A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -64,6 +64,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -75,7 +81,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.116/24 @@ -88,42 +94,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.21/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.21/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Po3 - type: switched + description: MLAG_AUTO_BGP_ASN_LEAF7A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: AUTO_BGP_ASN_LEAF7A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Ethernet3 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF7A_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +138,7 @@ ethernet_interfaces: peer: AUTO_BGP_ASN_LEAF7A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_AUTO_BGP_ASN_LEAF7A_Ethernet4 - type: port-channel-member + description: MLAG_AUTO_BGP_ASN_LEAF7A_Ethernet4 shutdown: false channel_group: id: 3 @@ -161,11 +166,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.14/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.13/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8A.yml index bcb7e71af62..bf4a75d476e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8A.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.117/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.15/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.15/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8B.yml index cdadd212f6d..446b56eddae 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_ASN_LEAF8B.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.118/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.16/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.16/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_UNGROUPED_LEAF6.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_UNGROUPED_LEAF6.yml index 1e746f9a7ce..ae99c38cc24 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_UNGROUPED_LEAF6.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_BGP_UNGROUPED_LEAF6.yml @@ -49,6 +49,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -59,7 +65,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.202.114/24 @@ -71,11 +77,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.12/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.12/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_LEAF01.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_LEAF01.yml index 9f49f214086..77b18a42b1a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_LEAF01.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_LEAF01.yml @@ -48,12 +48,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_SPINE01 - description: AUTO_NODE_TYPE_SPINE01 + description: AUTO_NODE_TYPE_SPINE01_Loopback0 remote_as: '65100' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_SPINE02 - description: AUTO_NODE_TYPE_SPINE02 + description: AUTO_NODE_TYPE_SPINE02_Loopback0 remote_as: '65100' address_family_evpn: peer_groups: @@ -70,6 +70,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -80,7 +86,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.203.12/24 @@ -98,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_SPINE01_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 - name: Ethernet2 peer: AUTO_NODE_TYPE_SPINE02 @@ -107,15 +114,16 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_SPINE02_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE01.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE01.yml index 5de49ab710d..ba0a1f195db 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE01.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE01.yml @@ -49,12 +49,12 @@ router_bgp: - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_LEAF01 - description: AUTO_NODE_TYPE_LEAF01 + description: AUTO_NODE_TYPE_LEAF01_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_UNGROUPED_LEAF02 - description: AUTO_NODE_TYPE_UNGROUPED_LEAF02 + description: AUTO_NODE_TYPE_UNGROUPED_LEAF02_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -71,6 +71,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -78,7 +84,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.203.10 @@ -96,7 +102,8 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_LEAF01_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 - name: Ethernet2 peer: AUTO_NODE_TYPE_UNGROUPED_LEAF02 @@ -105,11 +112,12 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_UNGROUPED_LEAF02_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE02.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE02.yml index 590972fce95..4b43f590f3e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE02.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_SPINE02.yml @@ -49,12 +49,12 @@ router_bgp: - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_LEAF01 - description: AUTO_NODE_TYPE_LEAF01 + description: AUTO_NODE_TYPE_LEAF01_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_UNGROUPED_LEAF02 - description: AUTO_NODE_TYPE_UNGROUPED_LEAF02 + description: AUTO_NODE_TYPE_UNGROUPED_LEAF02_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -71,6 +71,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -78,7 +84,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.203.11 @@ -96,7 +102,8 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_LEAF01_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 - name: Ethernet2 peer: AUTO_NODE_TYPE_UNGROUPED_LEAF02 @@ -105,11 +112,12 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_UNGROUPED_LEAF02_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.yml index 89645183ea9..76238248259 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/AUTO_NODE_TYPE_UNGROUPED_LEAF02.yml @@ -48,12 +48,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_SPINE01 - description: AUTO_NODE_TYPE_SPINE01 + description: AUTO_NODE_TYPE_SPINE01_Loopback0 remote_as: '65100' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: AUTO_NODE_TYPE_SPINE02 - description: AUTO_NODE_TYPE_SPINE02 + description: AUTO_NODE_TYPE_SPINE02_Loopback0 remote_as: '65100' address_family_evpn: peer_groups: @@ -70,6 +70,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -80,7 +86,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.203.13/24 @@ -98,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_SPINE01_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 - name: Ethernet2 peer: AUTO_NODE_TYPE_SPINE02 @@ -107,15 +114,16 @@ ethernet_interfaces: description: P2P_LINK_TO_AUTO_NODE_TYPE_SPINE02_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.yml index d1642dcb7a6..4c7638b29e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: CUSTOM-PYTHON_MODULES-L3LEAF1B - description: CUSTOM-PYTHON_MODULES-L3LEAF1B + description: CUSTOM-PYTHON_MODULES-L3LEAF1B_Vlan4093 - ip_address: 172.31.255.20 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -57,7 +57,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-PYTHON_MODULES-SPINE1 - description: CUSTOM-PYTHON_MODULES-SPINE1 + description: CUSTOM-PYTHON_MODULES-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -72,6 +72,7 @@ router_bgp: description: CUSTOM-PYTHON_MODULES-L3LEAF2_Ethernet1.1_vrf_TEST_VRF - ip_address: 10.255.240.11 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: CUSTOM-PYTHON_MODULES-L3LEAF1B_Vlan3000 rd: 192.168.255.21:1 route_targets: import: @@ -110,6 +111,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -118,7 +125,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -133,21 +140,21 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 name: Tenant_A_OP_Zone_1 tenant: CUSTOM_PYTHON_MODULES_TENANT - id: 3000 - name: MLAG_iBGP_TEST_VRF + name: MLAG_L3_VRF_TEST_VRF trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: CUSTOM_PYTHON_MODULES_TENANT vlan_interfaces: - name: Vlan4093 @@ -180,31 +187,32 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1B_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: CUSTOM-PYTHON_MODULES-L3LEAF2 peer_interface: Ethernet1 peer_type: l3leaf description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF2_Ethernet1 - type: routed shutdown: false channel_group: id: 3 mode: active mtu: 9214 + switchport: + enabled: false ip_address: 172.31.255.24/31 - name: Ethernet4 peer: CUSTOM-PYTHON_MODULES-L3LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -216,7 +224,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 - name: Ethernet3.1 peer: CUSTOM-PYTHON_MODULES-L3LEAF2 @@ -225,8 +234,8 @@ ethernet_interfaces: vrf: TEST_VRF description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF2_Ethernet1.1 VRF TEST_VRF shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1 + encapsulation_dot1q: + vlan: 1 mtu: 9214 ip_address: 172.16.0.24/31 mlag_configuration: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.yml index ced89de0690..185b05d8f95 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: CUSTOM-PYTHON_MODULES-L3LEAF1A - description: CUSTOM-PYTHON_MODULES-L3LEAF1A + description: CUSTOM-PYTHON_MODULES-L3LEAF1A_Vlan4093 - ip_address: 172.31.255.22 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-PYTHON_MODULES-SPINE1 - description: CUSTOM-PYTHON_MODULES-SPINE1 + description: CUSTOM-PYTHON_MODULES-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -63,7 +63,6 @@ router_bgp: activate: true vrfs: - name: TEST_VRF - router_id: 192.168.255.22 rd: 192.168.255.22:1 route_targets: import: @@ -74,11 +73,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.240.10 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: CUSTOM-PYTHON_MODULES-L3LEAF1A_Vlan3000 updates: wait_install: true vlans: @@ -101,6 +102,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -109,7 +116,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -124,21 +131,21 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 name: Tenant_A_OP_Zone_1 tenant: CUSTOM_PYTHON_MODULES_TENANT - id: 3000 - name: MLAG_iBGP_TEST_VRF + name: MLAG_L3_VRF_TEST_VRF trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: CUSTOM_PYTHON_MODULES_TENANT vlan_interfaces: - name: Vlan4093 @@ -171,19 +178,19 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: CUSTOM-PYTHON_MODULES-L3LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -193,7 +200,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -205,7 +211,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 mlag_configuration: domain_id: CUSTOM_PYTHON_MODULES_L3LEAF1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF2.yml index 904ce7b2523..450d91e7acb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-L3LEAF2.yml @@ -82,6 +82,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -100,7 +106,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.25/31 - name: Ethernet1.1 peer: CUSTOM-PYTHON_MODULES-L3LEAF1A @@ -109,8 +116,8 @@ ethernet_interfaces: vrf: TEST_VRF description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet3.1 VRF TEST_VRF shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1 + encapsulation_dot1q: + vlan: 1 mtu: 9214 ip_address: 172.16.0.25/31 loopback_interfaces: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-SPINE1.yml index dcaca9529aa..322a25142e8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-PYTHON_MODULES-SPINE1.yml @@ -47,12 +47,12 @@ router_bgp: - ip_address: 192.168.255.21 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-PYTHON_MODULES-L3LEAF1A - description: CUSTOM-PYTHON_MODULES-L3LEAF1A + description: CUSTOM-PYTHON_MODULES-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.22 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-PYTHON_MODULES-L3LEAF1B - description: CUSTOM-PYTHON_MODULES-L3LEAF1B + description: CUSTOM-PYTHON_MODULES-L3LEAF1B_Loopback0 remote_as: '65101' address_family_evpn: peer_groups: @@ -69,6 +69,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -76,7 +82,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -94,7 +100,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF1A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 - name: Ethernet2 peer: CUSTOM-PYTHON_MODULES-L3LEAF1B @@ -103,7 +110,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-PYTHON_MODULES-L3LEAF1B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 loopback_interfaces: - name: Loopback0 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1A.yml new file mode 100644 index 00000000000..32a841c25a4 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1A.yml @@ -0,0 +1,115 @@ +hostname: CUSTOM-TEMPLATES-L2LEAF1A +is_deployed: true +static_routes: +- vrf: MGMT + destination_address_prefix: 0.0.0.0/0 + gateway: 192.168.200.1 +service_routing_protocols_model: multi-agent +vlan_internal_order: + allocation: ascending + range: + beginning: 1006 + ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true +vrfs: +- name: MGMT + ip_routing: false +management_interfaces: +- name: Management1 + description: OOB_MANAGEMENT + shutdown: false + vrf: MGMT + ip_address: 192.168.200.103/24 + gateway: 192.168.200.1 + type: oob +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +spanning_tree: + no_spanning_tree_vlan: '4094' +vlans: +- id: 4094 + tenant: system + name: MLAG + trunk_groups: + - MLAG +vlan_interfaces: +- name: Vlan4094 + description: MLAG + shutdown: false + no_autostate: true + mtu: 9214 + ip_address: 10.255.252.0/31 +port_channel_interfaces: +- name: Port-Channel3 + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + shutdown: false +- name: Port-Channel1 + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Po1_To_Po5_CUSTOM_TEMPLATES_L3LEAF1 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + shutdown: false + mlag: 1 +ethernet_interfaces: +- name: Ethernet3 + peer: CUSTOM-TEMPLATES-L2LEAF1B + peer_interface: Ethernet3 + peer_type: mlag_peer + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet3 + shutdown: false + channel_group: + id: 3 + mode: active +- name: Ethernet4 + peer: CUSTOM-TEMPLATES-L2LEAF1B + peer_interface: Ethernet4 + peer_type: mlag_peer + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet4 + shutdown: false + channel_group: + id: 3 + mode: active +- name: Ethernet1 + peer: CUSTOM-TEMPLATES-L3LEAF1A + peer_interface: Ethernet5 + peer_type: l3leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet5 + shutdown: false + channel_group: + id: 1 + mode: active +- name: Ethernet2 + peer: CUSTOM-TEMPLATES-L3LEAF1B + peer_interface: Ethernet5 + peer_type: l3leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet5 + shutdown: false + channel_group: + id: 1 + mode: active +mlag_configuration: + domain_id: CUSTOM_TEMPLATES_L2LEAF1 + local_interface: Vlan4094 + peer_address: 10.255.252.1 + peer_link: Port-Channel3 + reload_delay_mlag: '300' + reload_delay_non_mlag: '330' +ip_igmp_snooping: + globally_enabled: true +metadata: + platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1B.yml new file mode 100644 index 00000000000..06e690afea5 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L2LEAF1B.yml @@ -0,0 +1,115 @@ +hostname: CUSTOM-TEMPLATES-L2LEAF1B +is_deployed: true +static_routes: +- vrf: MGMT + destination_address_prefix: 0.0.0.0/0 + gateway: 192.168.200.1 +service_routing_protocols_model: multi-agent +vlan_internal_order: + allocation: ascending + range: + beginning: 1006 + ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true +vrfs: +- name: MGMT + ip_routing: false +management_interfaces: +- name: Management1 + description: OOB_MANAGEMENT + shutdown: false + vrf: MGMT + ip_address: 192.168.200.103/24 + gateway: 192.168.200.1 + type: oob +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +spanning_tree: + no_spanning_tree_vlan: '4094' +vlans: +- id: 4094 + tenant: system + name: MLAG + trunk_groups: + - MLAG +vlan_interfaces: +- name: Vlan4094 + description: MLAG + shutdown: false + no_autostate: true + mtu: 9214 + ip_address: 10.255.252.1/31 +port_channel_interfaces: +- name: Port-Channel3 + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + shutdown: false +- name: Port-Channel1 + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Po1_To_Po5_CUSTOM_TEMPLATES_L3LEAF1 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + shutdown: false + mlag: 1 +ethernet_interfaces: +- name: Ethernet3 + peer: CUSTOM-TEMPLATES-L2LEAF1A + peer_interface: Ethernet3 + peer_type: mlag_peer + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet3 + shutdown: false + channel_group: + id: 3 + mode: active +- name: Ethernet4 + peer: CUSTOM-TEMPLATES-L2LEAF1A + peer_interface: Ethernet4 + peer_type: mlag_peer + description: MLAG_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet4 + shutdown: false + channel_group: + id: 3 + mode: active +- name: Ethernet1 + peer: CUSTOM-TEMPLATES-L3LEAF1A + peer_interface: Ethernet6 + peer_type: l3leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet6 + shutdown: false + channel_group: + id: 1 + mode: active +- name: Ethernet2 + peer: CUSTOM-TEMPLATES-L3LEAF1B + peer_interface: Ethernet6 + peer_type: l3leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet6 + shutdown: false + channel_group: + id: 1 + mode: active +mlag_configuration: + domain_id: CUSTOM_TEMPLATES_L2LEAF1 + local_interface: Vlan4094 + peer_address: 10.255.252.0 + peer_link: Port-Channel3 + reload_delay_mlag: '300' + reload_delay_non_mlag: '330' +ip_igmp_snooping: + globally_enabled: true +metadata: + platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1A.yml index 9a80bc8302f..647e3777904 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.11 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: CUSTOM-TEMPLATES-L3LEAF1B - description: CUSTOM-TEMPLATES-L3LEAF1B + description: CUSTOM-TEMPLATES-L3LEAF1B_Vlan4093 - ip_address: 172.31.255.20 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-TEMPLATES-SPINE1 - description: CUSTOM-TEMPLATES-SPINE1 + description: CUSTOM-TEMPLATES-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -63,7 +63,6 @@ router_bgp: activate: true vrfs: - name: TEST_VRF - router_id: 192.168.255.21 rd: 192.168.255.21:1 route_targets: import: @@ -74,11 +73,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.240.11 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: CUSTOM-TEMPLATES-L3LEAF1B_Vlan3000 updates: wait_install: true vlans: @@ -101,6 +102,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -109,7 +116,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -124,30 +131,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 name: Tenant_A_OP_Zone_1 tenant: CUSTOM_TEMPLATES_TENANT - id: 3000 - name: MLAG_iBGP_TEST_VRF + name: MLAG_L3_VRF_TEST_VRF trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: CUSTOM_TEMPLATES_TENANT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.10/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -164,26 +171,35 @@ vlan_interfaces: tenant: CUSTOM_TEMPLATES_TENANT type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST_VRF' + description: MLAG_L3_VRF_TEST_VRF vrf: TEST_VRF mtu: 9214 ip_address: 10.255.240.10/31 port_channel_interfaces: - name: Port-Channel3 - description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Po3 - type: switched + description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Eth3_Eth4_Po3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG +- name: Port-Channel5 + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Po5_To_Po1_CUSTOM_TEMPLATES_L2LEAF1 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + shutdown: false + mlag: 5 ethernet_interfaces: - name: Ethernet3 peer: CUSTOM-TEMPLATES-L3LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -193,7 +209,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -205,16 +220,36 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 +- name: Ethernet5 + peer: CUSTOM-TEMPLATES-L2LEAF1A + peer_interface: Ethernet1 + peer_type: l2leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet1 + shutdown: false + channel_group: + id: 5 + mode: active +- name: Ethernet6 + peer: CUSTOM-TEMPLATES-L2LEAF1B + peer_interface: Ethernet1 + peer_type: l2leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet1 + shutdown: false + channel_group: + id: 5 + mode: active - name: Ethernet11 peer: SERVER-1 peer_interface: Nic1 peer_type: server - description: TEST_CUSTOM_PREFIX_SERVER-1_Nic1 + description: TEST_CUSTOM_PREFIX_SERVER-1_Nic1_management shutdown: false - type: switched - mode: trunk + switchport: + enabled: true + mode: trunk mlag_configuration: domain_id: CUSTOM_TEMPLATES_L3LEAF1 local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1B.yml index 6684e2c0c8d..39188b1f0e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.10 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: CUSTOM-TEMPLATES-L3LEAF1A - description: CUSTOM-TEMPLATES-L3LEAF1A + description: CUSTOM-TEMPLATES-L3LEAF1A_Vlan4093 - ip_address: 172.31.255.22 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-TEMPLATES-SPINE1 - description: CUSTOM-TEMPLATES-SPINE1 + description: CUSTOM-TEMPLATES-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -63,7 +63,6 @@ router_bgp: activate: true vrfs: - name: TEST_VRF - router_id: 192.168.255.22 rd: 192.168.255.22:1 route_targets: import: @@ -74,11 +73,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.240.10 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: CUSTOM-TEMPLATES-L3LEAF1A_Vlan3000 updates: wait_install: true vlans: @@ -101,6 +102,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -109,7 +116,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -124,30 +131,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 110 name: Tenant_A_OP_Zone_1 tenant: CUSTOM_TEMPLATES_TENANT - id: 3000 - name: MLAG_iBGP_TEST_VRF + name: MLAG_L3_VRF_TEST_VRF trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: CUSTOM_TEMPLATES_TENANT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.11/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -164,31 +171,41 @@ vlan_interfaces: tenant: CUSTOM_TEMPLATES_TENANT type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST_VRF' + description: MLAG_L3_VRF_TEST_VRF vrf: TEST_VRF mtu: 9214 ip_address: 10.255.240.11/31 port_channel_interfaces: - name: Port-Channel3 - description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Po3 - type: switched + description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Eth3_Eth4_Po3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG +- name: Port-Channel5 + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Po5_To_Po1_CUSTOM_TEMPLATES_L2LEAF1 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + shutdown: false + mlag: 5 - name: Port-Channel12 - description: TEST_CUSTOM_PREFIX_SERVER-2_portchannel - type: switched + description: TEST_CUSTOM_PREFIX_SERVER-2_data_portchannel_12 shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk ethernet_interfaces: - name: Ethernet3 peer: CUSTOM-TEMPLATES-L3LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -198,7 +215,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: TEST_CUSTOM_PREFIX_MLAG_PEER_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -210,15 +226,33 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 +- name: Ethernet5 + peer: CUSTOM-TEMPLATES-L2LEAF1A + peer_interface: Ethernet2 + peer_type: l2leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1A_Ethernet2 + shutdown: false + channel_group: + id: 5 + mode: active +- name: Ethernet6 + peer: CUSTOM-TEMPLATES-L2LEAF1B + peer_interface: Ethernet2 + peer_type: l2leaf + description: TEST_CUSTOM_PREFIX_CUSTOM-TEMPLATES-L2LEAF1B_Ethernet2 + shutdown: false + channel_group: + id: 5 + mode: active - name: Ethernet12 peer: SERVER-2 peer_interface: Nic1 peer_type: server - description: TEST_CUSTOM_PREFIX_SERVER-2_Nic1 + description: TEST_CUSTOM_PREFIX_SERVER-2_Nic1_data shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -226,9 +260,8 @@ ethernet_interfaces: peer: SERVER-2 peer_interface: Nic2 peer_type: server - description: TEST_CUSTOM_PREFIX_SERVER-2_Nic2 + description: TEST_CUSTOM_PREFIX_SERVER-2_Nic2_data shutdown: false - type: port-channel-member channel_group: id: 12 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-SPINE1.yml index 911281184b9..7786aa815e3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/CUSTOM-TEMPLATES-SPINE1.yml @@ -47,12 +47,12 @@ router_bgp: - ip_address: 192.168.255.21 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-TEMPLATES-L3LEAF1A - description: CUSTOM-TEMPLATES-L3LEAF1A + description: CUSTOM-TEMPLATES-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.22 peer_group: EVPN-OVERLAY-PEERS peer: CUSTOM-TEMPLATES-L3LEAF1B - description: CUSTOM-TEMPLATES-L3LEAF1B + description: CUSTOM-TEMPLATES-L3LEAF1B_Loopback0 remote_as: '65101' address_family_evpn: peer_groups: @@ -69,6 +69,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -76,7 +82,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -94,7 +100,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-L3LEAF1A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 - name: Ethernet2 peer: CUSTOM-TEMPLATES-L3LEAF1B @@ -103,7 +110,8 @@ ethernet_interfaces: description: TEST_CUSTOM_PREFIX_P2P_LINK_TO_CUSTOM-TEMPLATES-L3LEAF1B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 loopback_interfaces: - name: Loopback0 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1A.yml index 463bc306ee2..9b0aa153b57 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1A.yml @@ -91,17 +91,22 @@ router_bgp: peer: DC1-BL2A description: DC1-BL2A remote_as: '65106' + - ip_address: 192.168.42.42 + peer_group: EVPN-OVERLAY-CORE + peer: DC1-BL2B + description: DC1-BL2B + remote_as: '65042' address_family_evpn: neighbor_default: next_hop_self_received_evpn_routes: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true evpn_hostflap_detection: window: 180 threshold: 5 @@ -115,7 +120,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_L3_VRF_Zone - router_id: 192.168.255.14 rd: 192.168.254.14:15 route_targets: import: @@ -126,10 +130,10 @@ router_bgp: - address_family: evpn route_targets: - '65104:15' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_A_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.254.14:14 route_targets: import: @@ -148,6 +152,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -208,7 +213,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.14 rd: 192.168.254.14:20 route_targets: import: @@ -219,10 +223,10 @@ router_bgp: - address_family: evpn route_targets: - '65104:20' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.254.14:21 route_targets: import: @@ -233,10 +237,10 @@ router_bgp: - address_family: evpn route_targets: - '65104:21' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.254.14:31 route_targets: import: @@ -247,6 +251,7 @@ router_bgp: - address_family: evpn route_targets: - '65104:31' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -316,6 +321,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true event_handlers: - name: evpn-blacklist-recovery actions: @@ -378,7 +389,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management99 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -412,7 +423,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.161/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -422,7 +434,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.163/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -432,7 +445,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.165/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -442,7 +456,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.167/31 - name: Ethernet8 peer_type: l3_interface @@ -450,7 +465,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet9 peer_type: l3_interface @@ -458,7 +474,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet10 peer_type: l3_interface @@ -466,7 +483,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test-DC1-BL1A - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet11 peer_type: l3_interface @@ -474,7 +492,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: DC1-BL1A descriptions preferred over single description - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet12 peer_type: l3_interface @@ -484,7 +503,8 @@ ethernet_interfaces: description: test l3 interfaces acls access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet12 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet12 - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet13.10 peer_type: l3_interface @@ -494,8 +514,8 @@ ethernet_interfaces: description: test l3 interfaces acls access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet13.10 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet13.10 - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: Tenant_A_L3_VRF_Zone - name: Ethernet7 peer_type: l3_interface @@ -503,7 +523,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_WAN_Zone ospf_area: '0' ospf_network_point_to_point: true @@ -517,25 +538,27 @@ ethernet_interfaces: hash_algorithm: sha512 key: AQQvKeimxJu+uGQ/yYvv9w== - name: Ethernet13 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet4000 description: My test ip_address: 10.3.2.1/21 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 peer_type: my_precious loopback_interfaces: - name: Loopback0 - description: MY_OVERLAY_LOOPBACK + description: MY_ROUTER_ID_LOOPBACK shutdown: false ip_address: 192.168.255.14/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.14/32 ip_address_secondaries: @@ -656,8 +679,10 @@ router_ospf: - Vlan150 max_lsa: 15000 redistribute: - bgp: {} + bgp: + enabled: true connected: + enabled: true route_map: RM_TEST vxlan_interface: vxlan1: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1B.yml index b515767878a..8e820450245 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL1B.yml @@ -102,11 +102,11 @@ router_bgp: enable: true inter_domain: false peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true evpn_hostflap_detection: window: 180 threshold: 5 @@ -120,7 +120,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_L3_VRF_Zone - router_id: 192.168.255.15 rd: 192.168.254.15:15 route_targets: import: @@ -131,10 +130,10 @@ router_bgp: - address_family: evpn route_targets: - '65105:15' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_A_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.254.15:14 route_targets: import: @@ -153,6 +152,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -213,7 +213,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.15 rd: 192.168.254.15:20 route_targets: import: @@ -224,10 +223,10 @@ router_bgp: - address_family: evpn route_targets: - '65105:20' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.254.15:21 route_targets: import: @@ -238,10 +237,10 @@ router_bgp: - address_family: evpn route_targets: - '65105:21' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.254.15:31 route_targets: import: @@ -252,6 +251,7 @@ router_bgp: - address_family: evpn route_targets: - '65105:31' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -321,6 +321,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -370,7 +376,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management99 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -400,7 +406,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.193/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -410,7 +417,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.195/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -420,7 +428,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.197/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -430,7 +439,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.199/31 - name: Ethernet8 peer_type: l3_interface @@ -438,7 +448,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet9 peer_type: l3_interface @@ -446,7 +457,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet10 peer_type: l3_interface @@ -454,7 +466,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test-DC1-BL1B - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet11 peer_type: l3_interface @@ -462,7 +475,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: DC1-BL1B descriptions preferred over single description - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet12 peer_type: l3_interface @@ -472,7 +486,8 @@ ethernet_interfaces: description: test l3 interfaces acls access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet12 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet12 - type: routed + switchport: + enabled: false vrf: Tenant_A_L3_VRF_Zone - name: Ethernet13.10 peer_type: l3_interface @@ -482,8 +497,8 @@ ethernet_interfaces: description: test l3 interfaces acls access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet13.10 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet13.10 - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: Tenant_A_L3_VRF_Zone - name: Ethernet7 peer_type: l3_interface @@ -491,28 +506,31 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_WAN_Zone - name: Ethernet13 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet4000 description: My second test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 peer_type: my_precious loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.15/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.15/32 prefix_lists: @@ -628,8 +646,10 @@ router_ospf: - Vlan150 max_lsa: 15000 redistribute: - bgp: {} + bgp: + enabled: true connected: + enabled: true route_map: RM_TEST vxlan_interface: vxlan1: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2A.yml index c29d0b32577..889e1e7eca0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2A.yml @@ -158,7 +158,6 @@ router_bgp: activate: false vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.16 rd: 192.168.255.16:14 route_targets: import: @@ -177,10 +176,10 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.16 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.16 rd: 192.168.255.16:20 route_targets: import: @@ -191,10 +190,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.16 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.16 rd: 192.168.255.16:21 route_targets: import: @@ -205,10 +204,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.16 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.16 rd: 192.168.255.16:31 route_targets: import: @@ -219,6 +218,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.16 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -282,6 +282,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -328,7 +334,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.117/24 @@ -367,7 +373,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.225/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -377,7 +384,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.227/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -387,7 +395,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.229/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -397,15 +406,16 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.231/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.16/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.16/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2B.yml index 0dc26940d58..343c07eab61 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-BL2B.yml @@ -148,7 +148,6 @@ router_bgp: activate: true vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.17 rd: 192.168.255.17:14 route_targets: import: @@ -167,10 +166,10 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.17 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.17 rd: 192.168.255.17:20 route_targets: import: @@ -181,10 +180,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.17 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.17 rd: 192.168.255.17:21 route_targets: import: @@ -195,10 +194,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.17 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.17 rd: 192.168.255.17:31 route_targets: import: @@ -209,6 +208,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.17 redistribute_routes: - source_protocol: connected address_family_ipv4: @@ -280,6 +280,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -326,12 +332,14 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.118/24 gateway: 192.168.200.5 type: oob +tcam_profile: + system: vxlan-routing management_api_http: enable_vrfs: - name: MGMT @@ -359,7 +367,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -369,7 +378,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -379,7 +389,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -389,15 +400,16 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.17/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.17/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1A.yml index cdae6b998eb..8d89e624a91 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1A.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65108' next_hop_self: true - description: DC1-CL1B + description: MLAG_PEER_DC1-CL1B password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -212,6 +212,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -247,7 +253,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.119/24 @@ -351,20 +357,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel1151 description: MLAG_PEER_DC1-CL1B_Po1151 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet1/15/1 peer: DC1-CL1B peer_interface: Ethernet1/15/1 peer_type: mlag_peer description: MLAG_PEER_DC1-CL1B_Ethernet1/15/1 - type: port-channel-member shutdown: false channel_group: id: 1151 @@ -375,7 +382,6 @@ ethernet_interfaces: peer_interface: Ethernet1/16/1 peer_type: mlag_peer description: MLAG_PEER_DC1-CL1B_Ethernet1/16/1 - type: port-channel-member shutdown: false channel_group: id: 1151 @@ -389,7 +395,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.33/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -399,7 +406,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.35/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -409,7 +417,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.37/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -419,7 +428,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.39/31 mlag_configuration: domain_id: DC1_CL1 @@ -430,11 +440,11 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.18/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.18/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1B.yml index 0901e434c93..7af940d9b7a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-CL1B.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65109' next_hop_self: true - description: DC1-CL1A + description: MLAG_PEER_DC1-CL1A password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -213,6 +213,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -248,7 +254,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.120/24 @@ -352,20 +358,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel1311 description: MLAG_PEER_DC1-CL1A_Po1311 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet1/31/1 peer: DC1-CL1A peer_interface: Ethernet1/31/1 peer_type: mlag_peer description: MLAG_PEER_DC1-CL1A_Ethernet1/31/1 - type: port-channel-member shutdown: false channel_group: id: 1311 @@ -376,7 +383,6 @@ ethernet_interfaces: peer_interface: Ethernet1/32/1 peer_type: mlag_peer description: MLAG_PEER_DC1-CL1A_Ethernet1/32/1 - type: port-channel-member shutdown: false channel_group: id: 1311 @@ -390,7 +396,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.65/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -400,7 +407,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.67/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -410,7 +418,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.69/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -420,7 +429,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.71/31 mlag_configuration: domain_id: DC1_CL1 @@ -445,11 +455,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.19/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.18/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1A.yml index b579d71d29a..3ebc5d8cbef 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -121,24 +127,30 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1-L2LEAF1B_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 mlag: 1 - name: Port-Channel5 description: server03_ESI_L2LEAF_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 mlag: 5 ethernet_interfaces: - name: Ethernet3 @@ -146,7 +158,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF1B_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -157,7 +168,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF1B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -170,7 +180,6 @@ ethernet_interfaces: description: DC1-LEAF2A_Ethernet7 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -181,7 +190,6 @@ ethernet_interfaces: description: DC1-LEAF2B_Ethernet7 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -192,7 +200,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: server03_ESI_L2LEAF_Eth1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1B.yml index d821787eaf7..29074ea3134 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF1B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.115/24 @@ -121,24 +127,30 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1-L2LEAF1A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 mlag: 1 - name: Port-Channel5 description: server03_ESI_L2LEAF_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 mlag: 5 ethernet_interfaces: - name: Ethernet3 @@ -146,7 +158,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF1A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -157,7 +168,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF1A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -170,7 +180,6 @@ ethernet_interfaces: description: DC1-LEAF2A_Ethernet8 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -181,7 +190,6 @@ ethernet_interfaces: description: DC1-LEAF2B_Ethernet8 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -192,7 +200,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: server03_ESI_L2LEAF_Eth2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2A.yml index 1adaa588e15..0cdaabf1d8c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -148,17 +154,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1001 description: DC1_SVC3_Po1007 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1001 ethernet_interfaces: - name: Ethernet3 @@ -166,7 +176,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -176,7 +185,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -188,7 +196,6 @@ ethernet_interfaces: description: DC1-SVC3A_Ethernet7 speed: forced 100gfull shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active @@ -199,7 +206,6 @@ ethernet_interfaces: description: DC1-SVC3B_Ethernet7 speed: forced 100gfull shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2B.yml index eaeca579254..d01affb852b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -148,17 +154,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1001 description: DC1_SVC3_Po1007 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1001 ethernet_interfaces: - name: Ethernet3 @@ -166,7 +176,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -176,7 +185,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -188,7 +196,6 @@ ethernet_interfaces: description: DC1-SVC3A_Ethernet8 speed: forced 100gfull shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active @@ -199,7 +206,6 @@ ethernet_interfaces: description: DC1-SVC3B_Ethernet8 speed: forced 100gfull shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF3A.yml index 0f90ef94bdb..d527b86f8f9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF3A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -53,7 +59,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.116/24 @@ -84,7 +90,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet9 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -94,17 +99,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet9 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF2_Po9 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 vlans: - id: 130 name: Tenant_A_APP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF4A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF4A.yml index 487b7a8d701..95014ccffc8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF4A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-L2LEAF4A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -53,7 +59,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.119/24 @@ -84,7 +90,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet13 shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active @@ -94,17 +99,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet13 shutdown: false - type: port-channel-member channel_group: id: 1001 mode: active port_channel_interfaces: - name: Port-Channel1001 description: DC1_LEAF2_Po1013 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 vlans: - id: 130 name: Tenant_A_APP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF1A.yml index fcae1e5e87c..e30c845efb7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF1A.yml @@ -89,7 +89,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.42.42 rd: 1.1.1.1:12 route_targets: import: @@ -100,10 +99,10 @@ router_bgp: - address_family: evpn route_targets: - '1234:12' + router_id: 192.168.42.42 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.42.42 rd: 1.1.1.1:9 route_targets: import: @@ -114,11 +113,11 @@ router_bgp: - address_family: evpn route_targets: - '1234:9' + router_id: 192.168.42.42 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: Tenant_A_WEB_Zone - router_id: 192.168.42.42 rd: 1.1.1.1:11 route_targets: import: @@ -129,10 +128,10 @@ router_bgp: - address_family: evpn route_targets: - '1234:11' + router_id: 192.168.42.42 redistribute_routes: - source_protocol: connected - name: '12345678' - router_id: 192.168.42.42 rd: 1.1.1.1:41 route_targets: import: @@ -143,6 +142,7 @@ router_bgp: - address_family: evpn route_targets: - '1234:41' + router_id: 192.168.42.42 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -207,6 +207,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -255,7 +261,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -288,7 +294,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.1/31 - name: Ethernet28 peer: DC1-SPINE2 @@ -298,7 +305,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.3/31 - name: Ethernet29 peer: DC1-SPINE3 @@ -308,7 +316,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.5/31 - name: Ethernet30 peer: DC1-SPINE4 @@ -318,7 +327,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.7/31 - name: Ethernet6 peer: server02_SINGLE_NODE_TRUNK @@ -327,11 +337,13 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: server02_SINGLE_NODE_TRUNK_Eth1 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'False' @@ -342,40 +354,45 @@ ethernet_interfaces: port_profile: TENANT_A description: server02_SINGLE_NODE_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet8 peer: PHONE01_untagged peer_interface: Eth0 peer_type: phone description: PHONE01_untagged_Eth0 shutdown: false - type: switched - mode: trunk phone - native_vlan: 120 - phone: - vlan: 113 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 120 + phone: + vlan: 113 + trunk: untagged - name: Ethernet9 peer: PHONE02_tagged peer_interface: Eth0 peer_type: phone description: PHONE02_tagged_Eth0 shutdown: false - type: switched - mode: trunk phone - native_vlan: 120 - phone: - vlan: 113 - trunk: tagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 120 + phone: + vlan: 113 + trunk: tagged loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.42.42/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.43.43/32 - name: Loopback100 @@ -550,7 +567,8 @@ router_ospf: no_passive_interfaces: - Vlan113 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: DC1-LEAF1A_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2A.yml index 5a9256bfc0b..65f6ccf5d40 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2A.yml @@ -109,7 +109,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.10 rd: '65001:12' route_targets: import: @@ -120,10 +119,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:12' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_DB_Zone - router_id: 192.168.255.10 rd: '65001:13' route_targets: import: @@ -134,10 +133,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:13' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.255.10 rd: '65001:9' route_targets: import: @@ -148,10 +147,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:9' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_OSPF - router_id: 192.168.255.10 rd: '65001:16' route_targets: import: @@ -162,11 +161,11 @@ router_bgp: - address_family: evpn route_targets: - '100000:16' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: Tenant_A_WEB_Zone - router_id: 192.168.255.10 rd: '65001:11' route_targets: import: @@ -177,10 +176,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:11' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.10 rd: '65001:20' route_targets: import: @@ -191,10 +190,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:20' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_C_OP_Zone - router_id: 192.168.255.10 rd: '65001:30' route_targets: import: @@ -205,10 +204,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:30' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: '12345678' - router_id: 192.168.255.10 rd: '65001:41' route_targets: import: @@ -219,10 +218,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:41' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_D_OP_Zone - router_id: 192.168.255.10 rd: '65001:40' route_targets: import: @@ -233,6 +232,7 @@ router_bgp: - address_family: evpn route_targets: - '100000:40' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -364,6 +364,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -428,7 +434,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management99 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -466,7 +472,6 @@ ethernet_interfaces: description: DC1-L2LEAF1A_Ethernet1 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -477,7 +482,6 @@ ethernet_interfaces: description: DC1-L2LEAF1B_Ethernet1 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -487,7 +491,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF3A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 9 mode: active @@ -497,7 +500,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF4A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1013 mode: active @@ -507,7 +509,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF5A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 141 mode: active @@ -517,7 +518,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF5B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 141 mode: active @@ -527,7 +527,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF6A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 30 mode: active @@ -539,7 +538,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.33/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -549,7 +549,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.35/31 - name: Ethernet51/1 peer: DC1-SPINE2 @@ -559,7 +560,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.37/31 - name: Ethernet52/1 peer: DC1-SPINE1 @@ -569,7 +571,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.39/31 - name: Ethernet53/1 peer: DC1-SPINE3 @@ -579,7 +582,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.41/31 - name: Ethernet54/1 peer: DC1-SPINE4 @@ -589,7 +593,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.43/31 - name: Ethernet55/1 peer: DC1-SPINE4 @@ -599,7 +604,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.45/31 - name: Ethernet56/1 peer: DC1-SPINE3 @@ -609,13 +615,15 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.47/31 - name: Ethernet22 peer_type: l3_interface ip_address: 10.0.0.1/30 shutdown: false - type: routed + switchport: + enabled: false vrf: Tenant_A_OSPF ospf_area: '0' ospf_network_point_to_point: true @@ -623,17 +631,18 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.0.0.13/30 shutdown: false - type: routed + switchport: + enabled: false vrf: Tenant_A_OSPF ospf_area: '0' ospf_network_point_to_point: true - name: Ethernet24 - peer: PC peer_type: network_port port_profile: DOT1X_PORT_PROFILE description: PC shutdown: false - type: switched + switchport: + enabled: true dot1x: port_control: auto reauthentication: true @@ -652,12 +661,12 @@ ethernet_interfaces: tx_period: 3 reauthorization_request_limit: 3 - name: Ethernet25 - peer: PC peer_type: network_port port_profile: DOT1X_PORT_PROFILE description: PC shutdown: false - type: switched + switchport: + enabled: true dot1x: port_control: auto reauthentication: true @@ -682,7 +691,6 @@ ethernet_interfaces: port_profile: TENANT_B description: server01_MLAG_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -693,7 +701,6 @@ ethernet_interfaces: port_profile: TENANT_A_MTU description: server01_MTU_PROFILE_MLAG_Eth4 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -703,7 +710,6 @@ ethernet_interfaces: peer_type: server description: server01_MTU_ADAPTOR_MLAG_Eth6 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -714,7 +720,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: FIREWALL01_E0 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -725,9 +730,10 @@ ethernet_interfaces: port_profile: TENANT_A description: ROUTER01_Eth0 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet26 peer: PHONE03_port_channel peer_interface: Eth0 @@ -735,107 +741,124 @@ ethernet_interfaces: port_profile: PHONE_WITH_PC description: PHONE03_port_channel_Eth0 shutdown: false - type: port-channel-member channel_group: id: 26 mode: active port_channel_interfaces: - name: Port-Channel7 description: DC1_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:0808:0707:0606 route_target: 08:08:07:07:06:06 lacp_id: 0808.0707.0606 - name: Port-Channel9 description: DC1-L2LEAF3A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:0606:0707:0808 route_target: 06:06:07:07:08:08 lacp_id: 0606.0707.0808 - name: Port-Channel1013 description: DC1-L2LEAF4A_Po1001 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:a36b:7013:457b route_target: a3:6b:70:13:45:7b lacp_id: a36b.7013.457b - name: Port-Channel141 description: DC1_L2LEAF5_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:fa91:ce62:ce95 route_target: fa:91:ce:62:ce:95 lacp_id: fa91.ce62.ce95 - name: Port-Channel30 description: DC1_L2LEAF6_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 evpn_ethernet_segment: identifier: 0000:0000:a8be:743c:0a1a route_target: a8:be:74:3c:0a:1a lacp_id: a8be.743c.0a1a - name: Port-Channel10 description: server01_MLAG_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: disabled - name: Port-Channel11 description: server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' spanning_tree_bpdufilter: enabled spanning_tree_bpduguard: enabled - name: Port-Channel12 description: server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1601 + switchport: + enabled: true spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' - name: Port-Channel20 description: FIREWALL01_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 - name: Port-Channel26 - description: PHONE03_port_channel_Port-Channel to Phone - type: switched + description: PHONE03_port_channel Port-Channel to phone shutdown: false - mode: trunk phone - native_vlan: 210 - phone: - vlan: 211 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + vlan: 211 + trunk: untagged loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 - name: Loopback100 @@ -1196,7 +1219,8 @@ router_ospf: - Ethernet22 - Ethernet23 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: DC1-LEAF2A_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2B.yml index 2c961305679..a3463f7492d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-LEAF2B.yml @@ -109,7 +109,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.11 rd: '65001:12' route_targets: import: @@ -120,10 +119,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:12' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_DB_Zone - router_id: 192.168.255.11 rd: '65001:13' route_targets: import: @@ -134,10 +133,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:13' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.255.11 rd: '65001:9' route_targets: import: @@ -148,10 +147,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:9' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_OSPF - router_id: 192.168.255.11 rd: '65001:16' route_targets: import: @@ -162,11 +161,11 @@ router_bgp: - address_family: evpn route_targets: - '100000:16' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - source_protocol: ospf - name: Tenant_A_WEB_Zone - router_id: 192.168.255.11 rd: '65001:11' route_targets: import: @@ -177,10 +176,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:11' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.11 rd: '65001:20' route_targets: import: @@ -191,10 +190,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:20' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_C_OP_Zone - router_id: 192.168.255.11 rd: '65001:30' route_targets: import: @@ -205,10 +204,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:30' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: '12345678' - router_id: 192.168.255.11 rd: '65001:41' route_targets: import: @@ -219,10 +218,10 @@ router_bgp: - address_family: evpn route_targets: - '100000:41' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_D_OP_Zone - router_id: 192.168.255.11 rd: '65001:40' route_targets: import: @@ -233,6 +232,7 @@ router_bgp: - address_family: evpn route_targets: - '100000:40' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -364,6 +364,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -428,7 +434,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management99 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -466,7 +472,6 @@ ethernet_interfaces: description: DC1-L2LEAF1A_Ethernet2 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -477,7 +482,6 @@ ethernet_interfaces: description: DC1-L2LEAF1B_Ethernet2 speed: forced 10000 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -487,7 +491,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF3A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 9 mode: active @@ -497,7 +500,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF4A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1013 mode: active @@ -507,7 +509,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF5A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 141 mode: active @@ -517,7 +518,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF5B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 141 mode: active @@ -527,7 +527,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1.L2LEAF6B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 30 mode: active @@ -539,7 +538,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.65/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -549,7 +549,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.67/31 - name: Ethernet51/1 peer: DC1-SPINE2 @@ -559,7 +560,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.69/31 - name: Ethernet52/1 peer: DC1-SPINE1 @@ -569,7 +571,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.71/31 - name: Ethernet53/1 peer: DC1-SPINE3 @@ -579,7 +582,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.73/31 - name: Ethernet54/1 peer: DC1-SPINE4 @@ -589,7 +593,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.75/31 - name: Ethernet55/1 peer: DC1-SPINE4 @@ -599,7 +604,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.77/31 - name: Ethernet56/1 peer: DC1-SPINE3 @@ -609,13 +615,15 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.79/31 - name: Ethernet24 peer_type: l3_interface ip_address: 10.0.0.5/30 shutdown: false - type: routed + switchport: + enabled: false vrf: Tenant_A_OSPF ospf_area: '0' ospf_network_point_to_point: true @@ -626,7 +634,6 @@ ethernet_interfaces: port_profile: TENANT_B description: server01_MLAG_Eth3 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -637,7 +644,6 @@ ethernet_interfaces: port_profile: TENANT_A_MTU description: server01_MTU_PROFILE_MLAG_Eth5 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -647,7 +653,6 @@ ethernet_interfaces: peer_type: server description: server01_MTU_ADAPTOR_MLAG_Eth7 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -658,7 +663,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: FIREWALL01_E1 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -669,9 +673,10 @@ ethernet_interfaces: port_profile: TENANT_A description: ROUTER01_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet26 peer: PHONE03_port_channel peer_interface: Eth1 @@ -679,107 +684,124 @@ ethernet_interfaces: port_profile: PHONE_WITH_PC description: PHONE03_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 26 mode: active port_channel_interfaces: - name: Port-Channel7 description: DC1_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:0808:0707:0606 route_target: 08:08:07:07:06:06 lacp_id: 0808.0707.0606 - name: Port-Channel9 description: DC1-L2LEAF3A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:0606:0707:0808 route_target: 06:06:07:07:08:08 lacp_id: 0606.0707.0808 - name: Port-Channel1013 description: DC1-L2LEAF4A_Po1001 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:a36b:7013:457b route_target: a3:6b:70:13:45:7b lacp_id: a36b.7013.457b - name: Port-Channel141 description: DC1_L2LEAF5_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 evpn_ethernet_segment: identifier: 0000:0000:fa91:ce62:ce95 route_target: fa:91:ce:62:ce:95 lacp_id: fa91.ce62.ce95 - name: Port-Channel30 description: DC1_L2LEAF6_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 evpn_ethernet_segment: identifier: 0000:0000:a8be:743c:0a1a route_target: a8:be:74:3c:0a:1a lacp_id: a8be.743c.0a1a - name: Port-Channel10 description: server01_MLAG_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: disabled - name: Port-Channel11 description: server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' spanning_tree_bpdufilter: enabled spanning_tree_bpduguard: enabled - name: Port-Channel12 description: server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1601 + switchport: + enabled: true spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' - name: Port-Channel20 description: FIREWALL01_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 - name: Port-Channel26 - description: PHONE03_port_channel_Port-Channel to Phone - type: switched + description: PHONE03_port_channel Port-Channel to phone shutdown: false - mode: trunk phone - native_vlan: 210 - phone: - vlan: 211 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 210 + phone: + vlan: 211 + trunk: untagged loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.11/32 - name: Loopback100 @@ -1136,7 +1158,8 @@ router_ospf: no_passive_interfaces: - Ethernet24 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: DC1-LEAF2B_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE1.yml index 257d2e91823..219d006e025 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE1.yml @@ -257,6 +257,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -287,7 +293,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -320,7 +326,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.0/31 - name: Ethernet3/1 peer: DC1-LEAF2A @@ -330,7 +337,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.32/31 - name: Ethernet4/1 peer: DC1-LEAF2A @@ -340,7 +348,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.38/31 - name: Ethernet5/1 peer: DC1-LEAF2B @@ -350,7 +359,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.64/31 - name: Ethernet6/1 peer: DC1-LEAF2B @@ -360,7 +370,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.70/31 - name: Ethernet7/1 peer: DC1-SVC3A @@ -370,7 +381,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.96/31 - name: Ethernet9/1 peer: DC1-SVC3B @@ -380,7 +392,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.128/31 - name: Ethernet18 peer: MLAG-OSPF-L3LEAF1A @@ -389,7 +402,8 @@ ethernet_interfaces: description: P2P_LINK_TO_MLAG-OSPF-L3LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.6/31 - name: Ethernet19 peer: MH-LEAF1A @@ -398,7 +412,8 @@ ethernet_interfaces: description: P2P_LINK_TO_MH-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.0/31 - name: Ethernet20 peer: MH-LEAF1B @@ -407,7 +422,8 @@ ethernet_interfaces: description: P2P_LINK_TO_MH-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.2/31 - name: Ethernet21 peer: MH-LEAF2A @@ -416,7 +432,8 @@ ethernet_interfaces: description: P2P_LINK_TO_MH-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.4/31 - name: Ethernet22 peer: DC1-BL1A @@ -426,7 +443,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.160/31 - name: Ethernet23 peer: DC1-BL1B @@ -436,7 +454,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.192/31 - name: Ethernet24 peer: DC1-BL2A @@ -446,7 +465,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.224/31 - name: Ethernet25 peer: DC1-BL2B @@ -456,7 +476,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 - name: Ethernet26 peer: DC1-CL1A @@ -466,7 +487,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.32/31 - name: Ethernet27 peer: DC1-CL1B @@ -476,7 +498,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.64/31 - name: Ethernet28 peer: DC1_UNDEPLOYED_LEAF1A @@ -486,7 +509,8 @@ ethernet_interfaces: speed: 100g-2 shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.128/31 - name: Ethernet29 peer: DC1_UNDEPLOYED_LEAF1B @@ -496,7 +520,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.160/31 - name: Ethernet220 peer: MLAG-OSPF-L3LEAF1B @@ -505,11 +530,12 @@ ethernet_interfaces: description: P2P_LINK_TO_MLAG-OSPF-L3LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.8/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE2.yml index 380ee8edc43..02df4d4d178 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE2.yml @@ -207,6 +207,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -237,7 +243,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -276,7 +282,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.2/31 - name: Ethernet1/3/1 peer: DC1-LEAF2A @@ -286,7 +293,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.34/31 - name: Ethernet1/4/1 peer: DC1-LEAF2A @@ -296,7 +304,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.36/31 - name: Ethernet1/5/1 peer: DC1-LEAF2B @@ -306,7 +315,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.66/31 - name: Ethernet1/6/1 peer: DC1-LEAF2B @@ -316,7 +326,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.68/31 - name: Ethernet1/7/1 peer: DC1-SVC3A @@ -326,7 +337,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.98/31 - name: Ethernet1/9/1 peer: DC1-SVC3B @@ -336,7 +348,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.130/31 - name: Ethernet22 peer: DC1-BL1A @@ -346,7 +359,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.162/31 - name: Ethernet23 peer: DC1-BL1B @@ -356,7 +370,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.194/31 - name: Ethernet24 peer: DC1-BL2A @@ -366,7 +381,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.226/31 - name: Ethernet25 peer: DC1-BL2B @@ -376,7 +392,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 - name: Ethernet26 peer: DC1-CL1A @@ -386,7 +403,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.34/31 - name: Ethernet27 peer: DC1-CL1B @@ -396,7 +414,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.66/31 - name: Ethernet28 peer: DC1_UNDEPLOYED_LEAF1A @@ -406,7 +425,8 @@ ethernet_interfaces: speed: 100g-2 shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.130/31 - name: Ethernet29 peer: DC1_UNDEPLOYED_LEAF1B @@ -416,11 +436,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.162/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE3.yml index d33ee1ee10d..8a54893a7dd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE3.yml @@ -207,6 +207,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -237,12 +243,14 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 gateway: 192.168.200.5 type: oob +tcam_profile: + system: vxlan-routing management_api_http: enable_vrfs: - name: MGMT @@ -270,7 +278,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.4/31 - name: Ethernet1/3/1 peer: DC1-LEAF2A @@ -280,7 +289,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.40/31 - name: Ethernet1/4/1 peer: DC1-LEAF2A @@ -290,7 +300,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.46/31 - name: Ethernet1/5/1 peer: DC1-LEAF2B @@ -300,7 +311,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.72/31 - name: Ethernet1/6/1 peer: DC1-LEAF2B @@ -310,7 +322,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.78/31 - name: Ethernet1/7/1 peer: DC1-SVC3A @@ -320,7 +333,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.100/31 - name: Ethernet1/9/1 peer: DC1-SVC3B @@ -330,7 +344,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.132/31 - name: Ethernet22 peer: DC1-BL1A @@ -340,7 +355,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.164/31 - name: Ethernet23 peer: DC1-BL1B @@ -350,7 +366,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.196/31 - name: Ethernet24 peer: DC1-BL2A @@ -360,7 +377,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.228/31 - name: Ethernet25 peer: DC1-BL2B @@ -370,7 +388,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 - name: Ethernet26 peer: DC1-CL1A @@ -380,7 +399,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.36/31 - name: Ethernet27 peer: DC1-CL1B @@ -390,7 +410,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.68/31 - name: Ethernet28 peer: DC1_UNDEPLOYED_LEAF1A @@ -400,7 +421,8 @@ ethernet_interfaces: speed: 100g-2 shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.132/31 - name: Ethernet29 peer: DC1_UNDEPLOYED_LEAF1B @@ -410,11 +432,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.164/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE4.yml index e492b23a7b8..30c529b465d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SPINE4.yml @@ -108,13 +108,11 @@ router_bgp: remote_as: '65110' peer: DC1_UNDEPLOYED_LEAF1A description: DC1_UNDEPLOYED_LEAF1A_Ethernet52/1 - shutdown: true - ip_address: 172.31.255.167 peer_group: UNDERLAY-PEERS remote_as: '65111' peer: DC1_UNDEPLOYED_LEAF1B description: DC1_UNDEPLOYED_LEAF1B_Ethernet52/1 - shutdown: true - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A @@ -175,13 +173,11 @@ router_bgp: peer: DC1_UNDEPLOYED_LEAF1A description: DC1_UNDEPLOYED_LEAF1A remote_as: '65110' - shutdown: true - ip_address: 192.168.255.22 peer_group: EVPN-OVERLAY-PEERS peer: DC1_UNDEPLOYED_LEAF1B description: DC1_UNDEPLOYED_LEAF1B remote_as: '65111' - shutdown: true address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -207,6 +203,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -237,7 +239,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -270,7 +272,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.6/31 - name: Ethernet3/1 peer: DC1-LEAF2A @@ -280,7 +283,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.42/31 - name: Ethernet4/1 peer: DC1-LEAF2A @@ -290,7 +294,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.44/31 - name: Ethernet5/1 peer: DC1-LEAF2B @@ -300,7 +305,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.74/31 - name: Ethernet6/1 peer: DC1-LEAF2B @@ -310,7 +316,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.76/31 - name: Ethernet7/1 peer: DC1-SVC3A @@ -320,7 +327,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.102/31 - name: Ethernet9/1 peer: DC1-SVC3B @@ -330,7 +338,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.134/31 - name: Ethernet22 peer: DC1-BL1A @@ -340,7 +349,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.166/31 - name: Ethernet23 peer: DC1-BL1B @@ -350,7 +360,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.198/31 - name: Ethernet24 peer: DC1-BL2A @@ -360,7 +371,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.230/31 - name: Ethernet25 peer: DC1-BL2B @@ -370,7 +382,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 - name: Ethernet26 peer: DC1-CL1A @@ -380,7 +393,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.38/31 - name: Ethernet27 peer: DC1-CL1B @@ -390,7 +404,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.70/31 - name: Ethernet28 peer: DC1_UNDEPLOYED_LEAF1A @@ -398,9 +413,10 @@ ethernet_interfaces: peer_type: l3leaf description: P2P_LINK_TO_DC1_UNDEPLOYED_LEAF1A_Ethernet52/1 speed: 100g-2 - shutdown: true + shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.134/31 - name: Ethernet29 peer: DC1_UNDEPLOYED_LEAF1B @@ -408,13 +424,14 @@ ethernet_interfaces: peer_type: l3leaf description: P2P_LINK_TO_DC1_UNDEPLOYED_LEAF1B_Ethernet52/1 speed: forced 100gfull - shutdown: true + shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.166/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3A.yml index 93f27a18c06..52c14cfafae 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3A.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65103' next_hop_self: true - description: DC1-SVC3B + description: MLAG_PEER_DC1-SVC3B password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -103,7 +103,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.12 rd: '65103:12' route_targets: import: @@ -114,16 +113,17 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.12 rd: '65103:13' route_targets: import: @@ -134,16 +134,17 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.12 rd: '65103:9' route_targets: import: @@ -154,15 +155,16 @@ router_bgp: - address_family: evpn route_targets: - '9:9' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.12 rd: '65103:14' route_targets: import: @@ -175,16 +177,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.12 rd: '65103:11' route_targets: import: @@ -195,16 +198,17 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 172.31.11.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.12 rd: '65103:20' route_targets: import: @@ -215,15 +219,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.12 rd: '65103:21' route_targets: import: @@ -234,15 +239,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.12 rd: '65103:30' route_targets: import: @@ -253,15 +259,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.12 rd: '65103:31' route_targets: import: @@ -272,11 +279,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.7 peer_group: MLAG-PEERS + description: DC1-SVC3B updates: wait_install: true vlan_aware_bundles: @@ -391,6 +400,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -454,7 +469,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -829,38 +844,46 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel2000 description: MLAG_PEER_DC1-SVC3B_Po2000 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1007 description: DC1_L2LEAF2_Po1001 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1007 - name: Port-Channel10 description: server03_ESI_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 evpn_ethernet_segment: identifier: 0000:0000:0303:0202:0101 route_target: 03:03:02:02:01:01 lacp_id: 0303.0202.0101 - name: Port-Channel14 description: server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 l2_mru: 9000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled spanning_tree_bpduguard: enabled @@ -880,10 +903,12 @@ port_channel_interfaces: mlag: 14 - name: Port-Channel15 description: server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -903,10 +928,12 @@ port_channel_interfaces: mlag: 15 - name: Port-Channel17 description: server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -928,11 +955,13 @@ port_channel_interfaces: lacp_fallback_timeout: 90 - name: Port-Channel18 description: server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' @@ -954,11 +983,13 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel19 description: server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' @@ -980,69 +1011,81 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel22 description: server15_port_channel_with_disabled_phy_interfaces_server15_port_channel_with_disabled_phy_interfaces - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 22 - name: Port-Channel23 description: server16_port_channel_with_disabled_port_channel_server16_port_channel_with_disabled_port_channel - type: switched shutdown: true - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 23 - name: Port-Channel24 description: server17_port_channel_with_disabled_phy_and_po_interfaces_server17_port_channel_with_disabled_phy_and_po_interfaces - type: switched shutdown: true - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 24 - name: Port-Channel27 description: server18_monitoring_session_source_po_server18_monitoring_session_source_po - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 27 - name: Port-Channel42 description: server21_monitoring_session_destination_po_server21_monitoring_session_destination_po - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 42 - name: Port-Channel1291 description: server22_port_channel_with_custom_id_server22_port_channel_with_custom_id - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 1291 - name: Port-Channel31 description: server24_port_channel_lacp_timer_profile_server24_port_channel_with_lacp_timer - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 mlag: 31 - name: Port-Channel32 description: server25_port_channel_lacp_timer_server25_port_channel_with_lacp_timer - type: switched shutdown: false + switchport: + enabled: true mlag: 32 - name: Port-Channel33 description: server26_port_channel_lacp_timer_profile_server26_port_channel_with_lacp_timer - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 mlag: 33 - name: Port-Channel34 description: server27_port_channel_lacp_timer_server27_port_channel_with_lacp_timer - type: switched shutdown: false + switchport: + enabled: true mlag: 34 ethernet_interfaces: - name: Ethernet53/1 @@ -1050,7 +1093,6 @@ ethernet_interfaces: peer_interface: Ethernet53/1 peer_type: mlag_peer description: MLAG_PEER_DC1-SVC3B_Ethernet53/1 - type: port-channel-member shutdown: false channel_group: id: 2000 @@ -1061,7 +1103,6 @@ ethernet_interfaces: peer_interface: Ethernet54/1 peer_type: mlag_peer description: MLAG_PEER_DC1-SVC3B_Ethernet54/1 - type: port-channel-member shutdown: false channel_group: id: 2000 @@ -1074,7 +1115,6 @@ ethernet_interfaces: description: DC1-L2LEAF2A_Ethernet1 speed: 100g-2 shutdown: false - type: port-channel-member channel_group: id: 1007 mode: active @@ -1085,7 +1125,6 @@ ethernet_interfaces: description: DC1-L2LEAF2B_Ethernet1 speed: 100g-2 shutdown: false - type: port-channel-member channel_group: id: 1007 mode: active @@ -1097,7 +1136,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.97/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -1107,7 +1147,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.99/31 - name: Ethernet51/1 peer: DC1-SPINE3 @@ -1117,7 +1158,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.101/31 - name: Ethernet52/1 peer: DC1-SPINE4 @@ -1127,7 +1169,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.103/31 - name: Ethernet10 peer: server03_ESI @@ -1136,7 +1179,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: server03_ESI_Eth1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -1147,11 +1189,13 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: server04_inherit_all_from_profile_Eth1 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: disabled @@ -1174,9 +1218,11 @@ ethernet_interfaces: peer_type: server description: server05_no_profile_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -1200,11 +1246,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: server06_override_profile_Eth1 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: 'True' @@ -1228,7 +1275,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: server07_inherit_all_from_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1238,7 +1284,6 @@ ethernet_interfaces: peer_type: server description: server08_no_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1249,11 +1294,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: server09_override_profile_no_port_channel_Eth1 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: 'True' @@ -1276,7 +1322,6 @@ ethernet_interfaces: peer_type: server description: server10_no_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 17 mode: passive @@ -1288,7 +1333,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK description: server11_inherit_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 18 mode: active @@ -1300,7 +1344,6 @@ ethernet_interfaces: port_profile: NESTED_PORT_PROFILE description: server12_inherit_nested_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 19 mode: active @@ -1312,9 +1355,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server13_disabled_interfaces_Eth1 shutdown: true - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet21 peer: server14_explicitly_enabled_interfaces peer_interface: Eth1 @@ -1322,9 +1366,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server14_explicitly_enabled_interfaces_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet22 peer: server15_port_channel_with_disabled_phy_interfaces peer_interface: Eth1 @@ -1332,7 +1377,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server15_port_channel_with_disabled_phy_interfaces_Eth1 shutdown: true - type: port-channel-member channel_group: id: 22 mode: active @@ -1343,7 +1387,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server16_port_channel_with_disabled_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 23 mode: active @@ -1354,7 +1397,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server17_port_channel_with_disabled_phy_and_po_interfaces_Eth1 shutdown: true - type: port-channel-member channel_group: id: 24 mode: active @@ -1365,9 +1407,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server18_monitoring_session_source_phys_interfaces_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet27 peer: server18_monitoring_session_source_po peer_interface: Eth3 @@ -1375,7 +1418,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server18_monitoring_session_source_po_Eth3 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active @@ -1386,23 +1428,26 @@ ethernet_interfaces: port_profile: TENANT_A description: server18_monitoring_session_source_phys_interface_Eth5 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet26 peer: server19_monitoring_session_destination_phys peer_interface: Eth1 peer_type: server description: server19_monitoring_session_destination_phys_Eth1 shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet40 peer: server20_monitoring_session_destination_phys peer_interface: Eth1 peer_type: server description: server20_monitoring_session_destination_phys_Eth1 shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet42 peer: server21_monitoring_session_destination_po peer_interface: Eth1 @@ -1410,7 +1455,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server21_monitoring_session_destination_po_Eth1 shutdown: false - type: port-channel-member channel_group: id: 42 mode: active @@ -1421,7 +1465,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server22_port_channel_with_custom_id_Eth1 shutdown: false - type: port-channel-member channel_group: id: 1291 mode: active @@ -1432,9 +1475,9 @@ ethernet_interfaces: port_profile: TENANT_A description: server23_phone_int_1 shutdown: false - type: switched - mode: trunk phone - vlans: '110' + switchport: + enabled: true + mode: trunk phone - name: Ethernet31 peer: server24_port_channel_lacp_timer_profile peer_interface: Eth1 @@ -1442,7 +1485,6 @@ ethernet_interfaces: port_profile: PORT_CHANNEL_LACP_TIMER description: server24_port_channel_lacp_timer_profile_Eth1 shutdown: false - type: port-channel-member channel_group: id: 31 mode: active @@ -1455,7 +1497,6 @@ ethernet_interfaces: peer_type: server description: server25_port_channel_lacp_timer_Eth1 shutdown: false - type: port-channel-member channel_group: id: 32 mode: active @@ -1469,7 +1510,6 @@ ethernet_interfaces: port_profile: PORT_CHANNEL_LACP_TIMER_NORMAL description: server26_port_channel_lacp_timer_profile_Eth1 shutdown: false - type: port-channel-member channel_group: id: 33 mode: active @@ -1482,7 +1522,6 @@ ethernet_interfaces: peer_type: server description: server27_port_channel_lacp_timer_Eth1 shutdown: false - type: port-channel-member channel_group: id: 34 mode: active @@ -1520,11 +1559,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.12/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.12/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3B.yml index 2487113b316..8c295031512 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1-SVC3B.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65103' next_hop_self: true - description: DC1-SVC3A + description: MLAG_PEER_DC1-SVC3A password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -103,7 +103,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.13 rd: '65103:12' route_targets: import: @@ -114,16 +113,17 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.13 rd: '65103:13' route_targets: import: @@ -134,16 +134,17 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.13 rd: '65103:9' route_targets: import: @@ -154,15 +155,16 @@ router_bgp: - address_family: evpn route_targets: - '9:9' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.13 rd: '65103:14' route_targets: import: @@ -175,16 +177,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.13 rd: '65103:11' route_targets: import: @@ -195,16 +198,17 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 172.31.11.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.13 rd: '65103:20' route_targets: import: @@ -215,15 +219,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.13 rd: '65103:21' route_targets: import: @@ -234,15 +239,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.13 rd: '65103:30' route_targets: import: @@ -253,15 +259,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.13 rd: '65103:31' route_targets: import: @@ -272,11 +279,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.6 peer_group: MLAG-PEERS + description: DC1-SVC3A updates: wait_install: true vlan_aware_bundles: @@ -391,6 +400,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -454,7 +469,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -829,28 +844,34 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel2000 description: MLAG_PEER_DC1-SVC3A_Po2000 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1007 description: DC1_L2LEAF2_Po1001 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1007 - name: Port-Channel14 description: server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 l2_mru: 9000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled spanning_tree_bpduguard: enabled @@ -870,10 +891,12 @@ port_channel_interfaces: mlag: 14 - name: Port-Channel15 description: server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -893,10 +916,12 @@ port_channel_interfaces: mlag: 15 - name: Port-Channel17 description: server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -918,11 +943,13 @@ port_channel_interfaces: lacp_fallback_timeout: 90 - name: Port-Channel18 description: server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' @@ -944,11 +971,13 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel19 description: server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'True' @@ -970,69 +999,81 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel22 description: server15_port_channel_with_disabled_phy_interfaces_server15_port_channel_with_disabled_phy_interfaces - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 22 - name: Port-Channel23 description: server16_port_channel_with_disabled_port_channel_server16_port_channel_with_disabled_port_channel - type: switched shutdown: true - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 23 - name: Port-Channel24 description: server17_port_channel_with_disabled_phy_and_po_interfaces_server17_port_channel_with_disabled_phy_and_po_interfaces - type: switched shutdown: true - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 24 - name: Port-Channel27 description: server18_monitoring_session_source_po_server18_monitoring_session_source_po - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 27 - name: Port-Channel42 description: server21_monitoring_session_destination_po_server21_monitoring_session_destination_po - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 42 - name: Port-Channel1291 description: server22_port_channel_with_custom_id_server22_port_channel_with_custom_id - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 1291 - name: Port-Channel31 description: server24_port_channel_lacp_timer_profile_server24_port_channel_with_lacp_timer - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 mlag: 31 - name: Port-Channel32 description: server25_port_channel_lacp_timer_server25_port_channel_with_lacp_timer - type: switched shutdown: false + switchport: + enabled: true mlag: 32 - name: Port-Channel33 description: server26_port_channel_lacp_timer_profile_server26_port_channel_with_lacp_timer - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 mlag: 33 - name: Port-Channel34 description: server27_port_channel_lacp_timer_server27_port_channel_with_lacp_timer - type: switched shutdown: false + switchport: + enabled: true mlag: 34 ethernet_interfaces: - name: Ethernet53/1 @@ -1040,7 +1081,6 @@ ethernet_interfaces: peer_interface: Ethernet53/1 peer_type: mlag_peer description: MLAG_PEER_DC1-SVC3A_Ethernet53/1 - type: port-channel-member shutdown: false channel_group: id: 2000 @@ -1051,7 +1091,6 @@ ethernet_interfaces: peer_interface: Ethernet54/1 peer_type: mlag_peer description: MLAG_PEER_DC1-SVC3A_Ethernet54/1 - type: port-channel-member shutdown: false channel_group: id: 2000 @@ -1064,7 +1103,6 @@ ethernet_interfaces: description: DC1-L2LEAF2A_Ethernet2 speed: 100g-2 shutdown: false - type: port-channel-member channel_group: id: 1007 mode: active @@ -1075,7 +1113,6 @@ ethernet_interfaces: description: DC1-L2LEAF2B_Ethernet2 speed: 100g-2 shutdown: false - type: port-channel-member channel_group: id: 1007 mode: active @@ -1087,7 +1124,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.129/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -1097,7 +1135,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.131/31 - name: Ethernet51/1 peer: DC1-SPINE3 @@ -1107,7 +1146,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.133/31 - name: Ethernet52/1 peer: DC1-SPINE4 @@ -1117,7 +1157,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.254.135/31 - name: Ethernet11 peer: server04_inherit_all_from_profile @@ -1126,11 +1167,13 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: server04_inherit_all_from_profile_Eth2 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: disabled @@ -1153,9 +1196,11 @@ ethernet_interfaces: peer_type: server description: server05_no_profile_Eth2 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: disabled @@ -1179,11 +1224,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: server06_override_profile_Eth2 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: 'True' @@ -1207,7 +1253,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: server07_inherit_all_from_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1217,7 +1262,6 @@ ethernet_interfaces: peer_type: server description: server08_no_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1228,11 +1272,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: server09_override_profile_no_port_channel_Eth2 shutdown: false - type: switched l2_mtu: 8000 l2_mru: 9000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: 'True' @@ -1255,7 +1300,6 @@ ethernet_interfaces: peer_type: server description: server10_no_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 17 mode: passive @@ -1267,7 +1311,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK description: server11_inherit_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 18 mode: active @@ -1279,7 +1322,6 @@ ethernet_interfaces: port_profile: NESTED_PORT_PROFILE description: server12_inherit_nested_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 19 mode: active @@ -1291,9 +1333,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server13_disabled_interfaces_Eth2 shutdown: true - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet21 peer: server14_explicitly_enabled_interfaces peer_interface: Eth2 @@ -1301,9 +1344,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server14_explicitly_enabled_interfaces_Eth2 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet22 peer: server15_port_channel_with_disabled_phy_interfaces peer_interface: Eth2 @@ -1311,7 +1355,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server15_port_channel_with_disabled_phy_interfaces_Eth2 shutdown: true - type: port-channel-member channel_group: id: 22 mode: active @@ -1322,7 +1365,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server16_port_channel_with_disabled_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 23 mode: active @@ -1333,7 +1375,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server17_port_channel_with_disabled_phy_and_po_interfaces_Eth2 shutdown: true - type: port-channel-member channel_group: id: 24 mode: active @@ -1344,9 +1385,10 @@ ethernet_interfaces: port_profile: TENANT_A description: server18_monitoring_session_source_phys_interfaces_Eth2 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet27 peer: server18_monitoring_session_source_po peer_interface: Eth4 @@ -1354,7 +1396,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server18_monitoring_session_source_po_Eth4 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active @@ -1364,7 +1405,8 @@ ethernet_interfaces: peer_type: server description: server19_monitoring_session_destination_phys_Eth2 shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet42 peer: server21_monitoring_session_destination_po peer_interface: Eth2 @@ -1372,7 +1414,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server21_monitoring_session_destination_po_Eth2 shutdown: false - type: port-channel-member channel_group: id: 42 mode: active @@ -1383,7 +1424,6 @@ ethernet_interfaces: port_profile: TENANT_A description: server22_port_channel_with_custom_id_Eth2 shutdown: false - type: port-channel-member channel_group: id: 1291 mode: active @@ -1394,7 +1434,6 @@ ethernet_interfaces: port_profile: PORT_CHANNEL_LACP_TIMER description: server24_port_channel_lacp_timer_profile_Eth2 shutdown: false - type: port-channel-member channel_group: id: 31 mode: active @@ -1407,7 +1446,6 @@ ethernet_interfaces: peer_type: server description: server25_port_channel_lacp_timer_Eth2 shutdown: false - type: port-channel-member channel_group: id: 32 mode: active @@ -1421,7 +1459,6 @@ ethernet_interfaces: port_profile: PORT_CHANNEL_LACP_TIMER_NORMAL description: server26_port_channel_lacp_timer_profile_Eth2 shutdown: false - type: port-channel-member channel_group: id: 33 mode: active @@ -1434,7 +1471,6 @@ ethernet_interfaces: peer_type: server description: server27_port_channel_lacp_timer_Eth2 shutdown: false - type: port-channel-member channel_group: id: 34 mode: active @@ -1472,11 +1508,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.13/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.12/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5A.yml index 220d61adbf1..9a7504ca2c8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.120/24 @@ -121,17 +127,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1.L2LEAF5B_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po141 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 mlag: 1 ethernet_interfaces: - name: Ethernet3 @@ -139,7 +149,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF5B_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -149,7 +158,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF5B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -160,7 +168,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet14/1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -170,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet14/1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5B.yml index 92d9d696525..698565f51a5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF5B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.121/24 @@ -121,17 +127,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1.L2LEAF5A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po141 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,160-161 mlag: 1 ethernet_interfaces: - name: Ethernet3 @@ -139,7 +149,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF5A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -149,7 +158,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF5A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -160,7 +168,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet15/1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -170,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet15/1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6A.yml index 4d9b6362524..bd62805950e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.122/24 @@ -160,17 +166,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1.L2LEAF6B_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po30 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 mlag: 1 ethernet_interfaces: - name: Ethernet3 @@ -178,7 +188,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF6B_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -188,7 +197,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF6B_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -199,7 +207,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet30 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6B.yml index 7844422d08e..def35702693 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1.L2LEAF6B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -54,7 +60,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.123/24 @@ -160,17 +166,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel3 description: MLAG_PEER_DC1.L2LEAF6A_Po3 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_LEAF2_Po30 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 shutdown: false - mode: trunk - vlans: 110-112,120-121,130-131,140-141,160-161,210-211,310-311,410-413,450-452 mlag: 1 ethernet_interfaces: - name: Ethernet3 @@ -178,7 +188,6 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF6A_Ethernet3 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -188,7 +197,6 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: mlag_peer description: MLAG_PEER_DC1.L2LEAF6A_Ethernet4 - type: port-channel-member shutdown: false channel_group: id: 3 @@ -199,7 +207,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet31 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1A.yml index 89be65dab60..bb939559fcf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1A.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65110' next_hop_self: true - description: DC1_UNDEPLOYED_LEAF1B + description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1B password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -103,7 +103,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:12 route_targets: import: @@ -114,16 +113,17 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:13 route_targets: import: @@ -134,16 +134,17 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:9 route_targets: import: @@ -154,15 +155,16 @@ router_bgp: - address_family: evpn route_targets: - '9:9' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:14 route_targets: import: @@ -175,16 +177,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:11 route_targets: import: @@ -195,16 +198,17 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 172.31.11.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:20 route_targets: import: @@ -215,15 +219,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:21 route_targets: import: @@ -234,15 +239,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:30 route_targets: import: @@ -253,15 +259,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.21 rd: 192.168.255.21:31 route_targets: import: @@ -272,11 +279,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.21 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.25 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1B updates: wait_install: true vlan_aware_bundles: @@ -403,6 +412,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -466,7 +481,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management42 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.121/24 @@ -847,20 +862,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel571 description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1B_Po571 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet57/1 peer: DC1_UNDEPLOYED_LEAF1B peer_interface: Ethernet57/1 peer_type: mlag_peer description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1B_Ethernet57/1 - type: port-channel-member shutdown: false channel_group: id: 571 @@ -871,7 +887,6 @@ ethernet_interfaces: peer_interface: Ethernet58/1 peer_type: mlag_peer description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1B_Ethernet58/1 - type: port-channel-member shutdown: false channel_group: id: 571 @@ -885,7 +900,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.129/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -895,7 +911,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.131/31 - name: Ethernet51/1 peer: DC1-SPINE3 @@ -905,7 +922,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.133/31 - name: Ethernet52/1 peer: DC1-SPINE4 @@ -915,7 +933,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.135/31 mlag_configuration: domain_id: DC1_UNDEPLOYED_LEAF1 @@ -948,11 +967,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.21/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.21/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1B.yml index 5784664c353..31591aa6859 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DC1_UNDEPLOYED_LEAF1B.yml @@ -18,7 +18,7 @@ router_bgp: type: ipv4 remote_as: '65111' next_hop_self: true - description: DC1_UNDEPLOYED_LEAF1A + description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1A password: 15AwQNBEJ1nyF/kBEtoAGw== maximum_routes: 12000 send_community: all @@ -103,7 +103,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:12 route_targets: import: @@ -114,16 +113,17 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:13 route_targets: import: @@ -134,16 +134,17 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:9 route_targets: import: @@ -154,15 +155,16 @@ router_bgp: - address_family: evpn route_targets: - '9:9' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:14 route_targets: import: @@ -175,16 +177,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:11 route_targets: import: @@ -195,16 +198,17 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP-VRFS neighbors: - ip_address: 172.31.11.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:20 route_targets: import: @@ -215,15 +219,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:21 route_targets: import: @@ -234,15 +239,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:30 route_targets: import: @@ -253,15 +259,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.22 rd: 192.168.255.22:31 route_targets: import: @@ -272,11 +279,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.22 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.24 peer_group: MLAG-PEERS + description: DC1_UNDEPLOYED_LEAF1A updates: wait_install: true vlan_aware_bundles: @@ -403,6 +412,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -466,7 +481,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management42 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.122/24 @@ -847,20 +862,21 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel571 description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1A_Po571 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 + allowed_vlan: 1-4094 shutdown: false - vlans: 1-4094 - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet57/1 peer: DC1_UNDEPLOYED_LEAF1A peer_interface: Ethernet57/1 peer_type: mlag_peer description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1A_Ethernet57/1 - type: port-channel-member shutdown: false channel_group: id: 571 @@ -871,7 +887,6 @@ ethernet_interfaces: peer_interface: Ethernet58/1 peer_type: mlag_peer description: MLAG_PEER_DC1_UNDEPLOYED_LEAF1A_Ethernet58/1 - type: port-channel-member shutdown: false channel_group: id: 571 @@ -885,7 +900,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.161/31 - name: Ethernet50/1 peer: DC1-SPINE2 @@ -895,7 +911,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.163/31 - name: Ethernet51/1 peer: DC1-SPINE3 @@ -905,7 +922,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.165/31 - name: Ethernet52/1 peer: DC1-SPINE4 @@ -915,7 +933,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.167/31 mlag_configuration: domain_id: DC1_UNDEPLOYED_LEAF1 @@ -948,11 +967,11 @@ route_maps: type: permit loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.22/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.21/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF1.yml index 4490c04268c..0c74336517d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF1.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 10.0.0.1 rd: 10.0.0.1:10 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.0.0.1 redistribute_routes: - source_protocol: connected vlans: @@ -75,6 +75,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -84,7 +90,7 @@ vrfs: description: TEST management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -96,11 +102,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.0.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.10.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF2.yml index 5bcf2eeea23..1c34d44bf03 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/DUP-LEAF2.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 10.0.0.2 rd: 10.0.0.2:10 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.0.0.2 redistribute_routes: - source_protocol: connected vlans: @@ -75,6 +75,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -84,7 +90,7 @@ vrfs: description: TEST management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -96,11 +102,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.0.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.10.0.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-DISABLED.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-DISABLED.yml index 2e906495225..d8446f07be9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-DISABLED.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-DISABLED.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -49,7 +49,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.8 rd: 192.168.255.8:13 route_targets: import: @@ -60,10 +59,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.8 rd: 192.168.255.8:11 route_targets: import: @@ -74,10 +73,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.8 rd: 192.168.255.8:12 route_targets: import: @@ -88,10 +87,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.8 rd: 192.168.255.8:23 route_targets: import: @@ -102,10 +101,10 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.8 rd: 192.168.255.8:21 route_targets: import: @@ -116,10 +115,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.8 rd: 192.168.255.8:22 route_targets: import: @@ -130,10 +129,10 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.8 rd: 192.168.255.8:33 route_targets: import: @@ -144,24 +143,24 @@ router_bgp: - address_family: evpn route_targets: - '33:33' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.8 - rd: 192.168.255.8:31 + rd: 192.168.255.8:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.8 rd: 192.168.255.8:32 route_targets: import: @@ -172,10 +171,10 @@ router_bgp: - address_family: evpn route_targets: - '32:32' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.8 rd: 192.168.255.8:42 route_targets: import: @@ -186,10 +185,10 @@ router_bgp: - address_family: evpn route_targets: - '42:42' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.8 rd: 192.168.255.8:41 route_targets: import: @@ -200,10 +199,10 @@ router_bgp: - address_family: evpn route_targets: - '41:41' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.8 rd: 192.168.255.8:55 route_targets: import: @@ -214,10 +213,10 @@ router_bgp: - address_family: evpn route_targets: - '55:55' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.8 rd: 192.168.255.8:60 route_targets: import: @@ -228,10 +227,10 @@ router_bgp: - address_family: evpn route_targets: - 60:60 + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.8 rd: 192.168.255.8:52 route_targets: import: @@ -242,10 +241,10 @@ router_bgp: - address_family: evpn route_targets: - '52:52' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.8 rd: 192.168.255.8:51 route_targets: import: @@ -256,6 +255,7 @@ router_bgp: - address_family: evpn route_targets: - '51:51' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected vlans: @@ -283,7 +283,6 @@ router_bgp: - 10110:10110 redistribute_routes: - learned - - igmp - id: 111 tenant: Tenant_A rd: 192.168.255.8:10111 @@ -292,7 +291,6 @@ router_bgp: - 10111:10111 redistribute_routes: - learned - - igmp - id: 210 tenant: Tenant_A rd: 192.168.255.8:10210 @@ -301,7 +299,6 @@ router_bgp: - 10210:10210 redistribute_routes: - learned - - igmp - id: 211 tenant: Tenant_A rd: 192.168.255.8:10211 @@ -326,7 +323,6 @@ router_bgp: - 10257:10257 redistribute_routes: - learned - - igmp - id: 4092 tenant: Tenant_A rd: 192.168.255.8:14092 @@ -335,7 +331,6 @@ router_bgp: - 14092:14092 redistribute_routes: - learned - - igmp - id: 5 tenant: Tenant_B rd: 192.168.255.8:10005 @@ -360,7 +355,6 @@ router_bgp: - 10001:10001 redistribute_routes: - learned - - igmp - id: 2 tenant: Tenant_B rd: 192.168.255.8:10002 @@ -369,7 +363,6 @@ router_bgp: - 10002:10002 redistribute_routes: - learned - - igmp - id: 3 tenant: Tenant_B rd: 192.168.255.8:10003 @@ -378,7 +371,6 @@ router_bgp: - 10003:10003 redistribute_routes: - learned - - igmp - id: 4 tenant: Tenant_B rd: 192.168.255.8:10004 @@ -403,7 +395,6 @@ router_bgp: - 10008:10008 redistribute_routes: - learned - - igmp - id: 9 tenant: Tenant_B rd: 192.168.255.8:10009 @@ -412,7 +403,6 @@ router_bgp: - 10009:10009 redistribute_routes: - learned - - igmp - id: 330 tenant: Tenant_C rd: 192.168.255.8:10330 @@ -445,6 +435,22 @@ router_bgp: - 10131:10131 redistribute_routes: - learned + - id: 136 + tenant: Tenant_C + rd: 192.168.255.8:10136 + route_targets: + both: + - 10136:10136 + redistribute_routes: + - learned + - id: 137 + tenant: Tenant_C + rd: 192.168.255.8:10137 + route_targets: + both: + - 10137:10137 + redistribute_routes: + - learned - id: 230 tenant: Tenant_C rd: 192.168.255.8:10230 @@ -541,7 +547,6 @@ router_bgp: - 10252:10252 redistribute_routes: - learned - - igmp static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -556,6 +561,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -621,7 +632,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -639,18 +650,19 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet6 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.11/31 pim: ipv4: sparse_mode: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 - name: Loopback33 @@ -784,6 +796,12 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 tenant: Tenant_C @@ -956,6 +974,16 @@ vlan_interfaces: description: L3_MULTICAST_ENABLED_131 shutdown: false vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 - name: Vlan230 tenant: Tenant_C tags: @@ -1087,6 +1115,10 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + - id: 137 + vni: 10137 - id: 230 vni: 10230 - id: 231 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L2LEAF1A.yml index a28cea893d0..4a1b437a8d7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L2LEAF1A.yml @@ -10,12 +10,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -32,7 +38,6 @@ ethernet_interfaces: peer_type: l3leaf description: EVPN-MULTICAST-L3LEAF1A_Ethernet6 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -42,17 +47,18 @@ ethernet_interfaces: peer_type: l3leaf description: EVPN-MULTICAST-L3LEAF1B_Ethernet6 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: EVPN_MULTICAST_L3LEAF1_Po6 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 shutdown: false - mode: trunk - vlans: 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 vlans: - id: 310 name: MULTICAST_DISABLED_310 @@ -120,6 +126,12 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 tenant: Tenant_C diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1A.yml index b628fbcee5b..767bda0451e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: EVPN-MULTICAST-L3LEAF1B - description: EVPN-MULTICAST-L3LEAF1B + description: EVPN-MULTICAST-L3LEAF1B_Vlan4093 - ip_address: 172.31.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -63,7 +63,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.3 rd: 192.168.255.3:13 route_targets: import: @@ -74,15 +73,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3012 updates: wait_install: true - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.3 rd: 192.168.255.3:11 route_targets: import: @@ -93,15 +93,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3010 updates: wait_install: true - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.3 rd: 192.168.255.3:12 route_targets: import: @@ -112,15 +113,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3011 updates: wait_install: true - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.3 rd: 192.168.255.3:23 route_targets: import: @@ -131,15 +133,16 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3022 updates: wait_install: true - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.3 rd: 192.168.255.3:21 route_targets: import: @@ -150,15 +153,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3020 updates: wait_install: true - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.3 rd: 192.168.255.3:22 route_targets: import: @@ -169,15 +173,16 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3021 updates: wait_install: true - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.3 rd: 192.168.255.3:33 route_targets: import: @@ -189,35 +194,37 @@ router_bgp: route_targets: - '33:33' evpn_multicast: false + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3032 updates: wait_install: true - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.3 - rd: 192.168.255.3:31 + rd: 192.168.255.3:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 evpn_multicast: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3065 updates: wait_install: true - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.3 rd: 192.168.255.3:32 route_targets: import: @@ -229,15 +236,16 @@ router_bgp: route_targets: - '32:32' evpn_multicast: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3031 updates: wait_install: true - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.3 rd: 192.168.255.3:42 route_targets: import: @@ -249,15 +257,16 @@ router_bgp: route_targets: - '42:42' evpn_multicast: false + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3041 updates: wait_install: true - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.3 rd: 192.168.255.3:41 route_targets: import: @@ -269,15 +278,16 @@ router_bgp: route_targets: - '41:41' evpn_multicast: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3040 updates: wait_install: true - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.3 rd: 192.168.255.3:55 route_targets: import: @@ -289,15 +299,16 @@ router_bgp: route_targets: - '55:55' evpn_multicast: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3054 updates: wait_install: true - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.3 rd: 192.168.255.3:60 route_targets: import: @@ -312,15 +323,16 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3059 updates: wait_install: true - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.3 rd: 192.168.255.3:52 route_targets: import: @@ -335,15 +347,16 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3051 updates: wait_install: true - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.3 rd: 192.168.255.3:51 route_targets: import: @@ -355,11 +368,13 @@ router_bgp: route_targets: - '51:51' evpn_multicast: true + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1B_Vlan3050 updates: wait_install: true vlan_aware_bundles: @@ -482,13 +497,14 @@ router_bgp: - learned vlan: 330-331 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - rd: 192.168.255.3:31 + rd: 192.168.255.3:66 route_targets: both: - - '31:31' + - 66:66 redistribute_routes: - learned - vlan: 130-131 + - igmp + vlan: 130-131,136-137 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 rd: 192.168.255.3:32 route_targets: @@ -601,6 +617,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -666,7 +688,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -681,12 +703,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 310 @@ -696,9 +718,9 @@ vlans: name: MULTICAST_DISABLED_311 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_MULTICAST_DISABLED_310_311 + name: MLAG_L3_VRF_MULTICAST_DISABLED_310_311 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: MULTICAST_ENABLED_110 @@ -707,9 +729,9 @@ vlans: name: MULTICAST_ENABLED_111 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_MULTICAST_ENABLED_110_111 + name: MLAG_L3_VRF_MULTICAST_ENABLED_110_111 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: MULTICAST_ENABLED_210 @@ -718,9 +740,9 @@ vlans: name: MULTICAST_DISABLED_211 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_MULTICAST_ENABLED_210_DISABLED_211 + name: MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 256 name: MULTICAST_DISABLED_256 @@ -738,9 +760,9 @@ vlans: name: MULTICAST_DISABLED_6 tenant: Tenant_B - id: 3022 - name: MLAG_iBGP_MULTICAST_DISABLED_5_6 + name: MLAG_L3_VRF_MULTICAST_DISABLED_5_6 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 1 name: MULTICAST_ENABLED_1 @@ -749,9 +771,9 @@ vlans: name: MULTICAST_ENABLED_2 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_MULTICAST_ENABLED_1_2 + name: MLAG_L3_VRF_MULTICAST_ENABLED_1_2 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 3 name: MULTICAST_ENABLED_3 @@ -760,9 +782,9 @@ vlans: name: MULTICAST_DISABLED_4 tenant: Tenant_B - id: 3021 - name: MLAG_iBGP_MULTICAST_ENABLED_3_DISABLED_4 + name: MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 7 name: MULTICAST_DISABLED_7 @@ -780,9 +802,9 @@ vlans: name: L3_MULTICAST_DISABLED_331 tenant: Tenant_C - id: 3032 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_DISABLED_330_331 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 130 name: L3_MULTICAST_ENABLED_130 @@ -790,10 +812,16 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C -- id: 3030 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_130_131 +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C +- id: 3065 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 @@ -802,9 +830,9 @@ vlans: name: L3_MULTICAST_DISABLED_231 tenant: Tenant_C - id: 3031 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 240 name: L3_MULTICAST_DISABLED_240 @@ -813,9 +841,9 @@ vlans: name: L3_MULTICAST_DISABLED_241 tenant: Tenant_D - id: 3041 - name: MLAG_iBGP_TEN_D_L3_MULTICAST_DISABLED_240_241 + name: MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_D - id: 140 name: L3_MULTICAST_ENABLED_140 @@ -824,41 +852,41 @@ vlans: name: L3_MULTICAST_DISABLED_141 tenant: Tenant_D - id: 3040 - name: MLAG_iBGP_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + name: MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_D - id: 550 name: L3_MULTICAST_ENABLED_550 tenant: Tenant_E - id: 3054 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 260 name: L3_MULTICAST_ENABLED_260 tenant: Tenant_E - id: 3059 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 250 name: L3_MULTICAST_ENABLED_250 tenant: Tenant_E - id: 3051 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_TRANSIT + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 150 name: L3_MULTICAST_ENABLED_150 tenant: Tenant_E - id: 3050 - name: MLAG_iBGP_TEN_E_PEG_L3_MULTICAST_ENABLED + name: MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 251 name: MULTICAST_DISABLED_251 @@ -868,7 +896,7 @@ vlans: tenant: Tenant_F vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.0/31 @@ -876,7 +904,7 @@ vlan_interfaces: ipv4: sparse_mode: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -901,7 +929,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_310_311' + description: MLAG_L3_VRF_MULTICAST_DISABLED_310_311 vrf: MULTICAST_DISABLED_310_311 mtu: 9214 ip_address: 10.255.251.0/31 @@ -925,7 +953,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_110_111' + description: MLAG_L3_VRF_MULTICAST_ENABLED_110_111 vrf: MULTICAST_ENABLED_110_111 mtu: 9214 ip_address: 10.255.251.0/31 @@ -949,7 +977,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_210_DISABLED_211' + description: MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 vrf: MULTICAST_ENABLED_210_DISABLED_211 mtu: 9214 ip_address: 10.255.251.0/31 @@ -973,7 +1001,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_5_6' + description: MLAG_L3_VRF_MULTICAST_DISABLED_5_6 vrf: MULTICAST_DISABLED_5_6 mtu: 9214 ip_address: 10.255.251.0/31 @@ -997,7 +1025,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_1_2' + description: MLAG_L3_VRF_MULTICAST_ENABLED_1_2 vrf: MULTICAST_ENABLED_1_2 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1021,7 +1049,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_3_DISABLED_4' + description: MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 vrf: MULTICAST_ENABLED_3_DISABLED_4 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1045,7 +1073,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_DISABLED_330_331' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 vrf: TEN_C_L3_MULTICAST_DISABLED_330_331 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1074,11 +1102,29 @@ vlan_interfaces: ipv4: sparse_mode: true vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 -- name: Vlan3030 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + pim: + ipv4: + sparse_mode: true + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + pim: + ipv4: + sparse_mode: true + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan3065 tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_130_131' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1106,7 +1152,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vrf: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1130,7 +1176,7 @@ vlan_interfaces: tenant: Tenant_D type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_DISABLED_240_241' + description: MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 vrf: TEN_D_L3_MULTICAST_DISABLED_240_241 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1158,7 +1204,7 @@ vlan_interfaces: tenant: Tenant_D type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141' + description: MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vrf: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 mtu: 9214 ip_address: 10.255.251.0/31 @@ -1178,7 +1224,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vrf: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE mtu: 9214 ip_address: 10.255.251.0/31 @@ -1198,7 +1244,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES vrf: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES mtu: 9214 ip_address: 10.255.251.0/31 @@ -1218,7 +1264,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_TRANSIT' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT vrf: TEN_E_L3_MULTICAST_TRANSIT mtu: 9214 ip_address: 10.255.251.0/31 @@ -1238,33 +1284,35 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_PEG_L3_MULTICAST_ENABLED' + description: MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED vrf: TEN_E_PEG_L3_MULTICAST_ENABLED mtu: 9214 ip_address: 10.255.251.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Po3 - type: switched + description: MLAG_EVPN-MULTICAST-L3LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel6 description: EVPN-MULTICAST-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 shutdown: false - mode: trunk - vlans: 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 mlag: 6 ethernet_interfaces: - name: Ethernet3 peer: EVPN-MULTICAST-L3LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Ethernet3 - type: port-channel-member + description: MLAG_EVPN-MULTICAST-L3LEAF1B_Ethernet3 shutdown: false channel_group: id: 3 @@ -1273,8 +1321,7 @@ ethernet_interfaces: peer: EVPN-MULTICAST-L3LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1B_Ethernet4 - type: port-channel-member + description: MLAG_EVPN-MULTICAST-L3LEAF1B_Ethernet4 shutdown: false channel_group: id: 3 @@ -1286,7 +1333,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 pim: ipv4: @@ -1297,7 +1345,6 @@ ethernet_interfaces: peer_type: l2leaf description: EVPN-MULTICAST-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 6 mode: active @@ -1305,7 +1352,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.55.0/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE pim: ipv4: @@ -1314,7 +1364,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.60.0/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES pim: ipv4: @@ -1323,7 +1376,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.52.0/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_TRANSIT pim: ipv4: @@ -1332,7 +1388,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.51.0/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_PEG_L3_MULTICAST_ENABLED pim: ipv4: @@ -1360,11 +1419,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 - name: Loopback33 @@ -1478,6 +1537,14 @@ ip_igmp_snooping: enabled: true address: 2.2.2.2 version: 1 + - id: 136 + querier: + enabled: true + address: 192.168.255.3 + - id: 137 + querier: + enabled: true + address: 192.168.255.3 - id: 230 querier: enabled: true @@ -1551,6 +1618,12 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + multicast_group: 236.0.0.135 + - id: 137 + vni: 10137 + multicast_group: 236.0.0.136 - id: 230 vni: 10230 - id: 231 @@ -1593,7 +1666,7 @@ vxlan_interface: vni: 33 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 vni: 31 - multicast_group: 232.0.32.31 + multicast_group: 232.0.32.66 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vni: 32 multicast_group: 232.0.32.32 @@ -1601,7 +1674,7 @@ vxlan_interface: vni: 42 - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vni: 41 - multicast_group: 232.0.64.40 + multicast_group: 232.0.64.2 - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vni: 55 multicast_group: 232.0.96.54 @@ -1685,5 +1758,12 @@ standard_access_lists: sequence_numbers: - sequence: 10 action: permit 232.0.136.0/21 +sflow: + run: true + vrfs: + - name: sflow_vrf + destinations: + - destination: 10.10.10.12 + port: 1234 metadata: platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1B.yml index 1f381da9cd7..9b43c79ff5b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: EVPN-MULTICAST-L3LEAF1A - description: EVPN-MULTICAST-L3LEAF1A + description: EVPN-MULTICAST-L3LEAF1A_Vlan4093 - ip_address: 172.31.255.2 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -63,7 +63,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.4 rd: 192.168.255.4:13 route_targets: import: @@ -74,15 +73,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3012 updates: wait_install: true - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.4 rd: 192.168.255.4:11 route_targets: import: @@ -93,15 +93,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3010 updates: wait_install: true - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.4 rd: 192.168.255.4:12 route_targets: import: @@ -112,15 +113,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3011 updates: wait_install: true - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.4 rd: 192.168.255.4:23 route_targets: import: @@ -131,15 +133,16 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3022 updates: wait_install: true - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.4 rd: 192.168.255.4:21 route_targets: import: @@ -150,15 +153,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3020 updates: wait_install: true - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.4 rd: 192.168.255.4:22 route_targets: import: @@ -169,15 +173,16 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3021 updates: wait_install: true - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.4 rd: 192.168.255.4:33 route_targets: import: @@ -189,35 +194,37 @@ router_bgp: route_targets: - '33:33' evpn_multicast: false + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3032 updates: wait_install: true - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.4 - rd: 192.168.255.4:31 + rd: 192.168.255.4:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 evpn_multicast: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3065 updates: wait_install: true - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.4 rd: 192.168.255.4:32 route_targets: import: @@ -229,15 +236,16 @@ router_bgp: route_targets: - '32:32' evpn_multicast: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3031 updates: wait_install: true - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.4 rd: 192.168.255.4:42 route_targets: import: @@ -249,15 +257,16 @@ router_bgp: route_targets: - '42:42' evpn_multicast: false + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3041 updates: wait_install: true - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.4 rd: 192.168.255.4:41 route_targets: import: @@ -269,15 +278,16 @@ router_bgp: route_targets: - '41:41' evpn_multicast: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3040 updates: wait_install: true - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.4 rd: 192.168.255.4:55 route_targets: import: @@ -289,15 +299,16 @@ router_bgp: route_targets: - '55:55' evpn_multicast: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3054 updates: wait_install: true - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.4 rd: 192.168.255.4:60 route_targets: import: @@ -312,15 +323,16 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3059 updates: wait_install: true - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.4 rd: 192.168.255.4:52 route_targets: import: @@ -335,15 +347,16 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3051 updates: wait_install: true - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.4 rd: 192.168.255.4:51 route_targets: import: @@ -355,11 +368,13 @@ router_bgp: route_targets: - '51:51' evpn_multicast: true + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: EVPN-MULTICAST-L3LEAF1A_Vlan3050 updates: wait_install: true vlan_aware_bundles: @@ -482,13 +497,14 @@ router_bgp: - learned vlan: 330-331 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - rd: 192.168.255.4:31 + rd: 192.168.255.4:66 route_targets: both: - - '31:31' + - 66:66 redistribute_routes: - learned - vlan: 130-131 + - igmp + vlan: 130-131,136-137 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 rd: 192.168.255.4:32 route_targets: @@ -601,6 +617,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -666,7 +688,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -681,12 +703,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 310 @@ -696,9 +718,9 @@ vlans: name: MULTICAST_DISABLED_311 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_MULTICAST_DISABLED_310_311 + name: MLAG_L3_VRF_MULTICAST_DISABLED_310_311 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: MULTICAST_ENABLED_110 @@ -707,9 +729,9 @@ vlans: name: MULTICAST_ENABLED_111 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_MULTICAST_ENABLED_110_111 + name: MLAG_L3_VRF_MULTICAST_ENABLED_110_111 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 210 name: MULTICAST_ENABLED_210 @@ -718,9 +740,9 @@ vlans: name: MULTICAST_DISABLED_211 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_MULTICAST_ENABLED_210_DISABLED_211 + name: MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 256 name: MULTICAST_DISABLED_256 @@ -738,9 +760,9 @@ vlans: name: MULTICAST_DISABLED_6 tenant: Tenant_B - id: 3022 - name: MLAG_iBGP_MULTICAST_DISABLED_5_6 + name: MLAG_L3_VRF_MULTICAST_DISABLED_5_6 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 1 name: MULTICAST_ENABLED_1 @@ -749,9 +771,9 @@ vlans: name: MULTICAST_ENABLED_2 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_MULTICAST_ENABLED_1_2 + name: MLAG_L3_VRF_MULTICAST_ENABLED_1_2 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 3 name: MULTICAST_ENABLED_3 @@ -760,9 +782,9 @@ vlans: name: MULTICAST_DISABLED_4 tenant: Tenant_B - id: 3021 - name: MLAG_iBGP_MULTICAST_ENABLED_3_DISABLED_4 + name: MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 7 name: MULTICAST_DISABLED_7 @@ -780,9 +802,9 @@ vlans: name: L3_MULTICAST_DISABLED_331 tenant: Tenant_C - id: 3032 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_DISABLED_330_331 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 130 name: L3_MULTICAST_ENABLED_130 @@ -790,10 +812,16 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C -- id: 3030 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_130_131 +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C +- id: 3065 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 @@ -802,9 +830,9 @@ vlans: name: L3_MULTICAST_DISABLED_231 tenant: Tenant_C - id: 3031 - name: MLAG_iBGP_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 + name: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 240 name: L3_MULTICAST_DISABLED_240 @@ -813,9 +841,9 @@ vlans: name: L3_MULTICAST_DISABLED_241 tenant: Tenant_D - id: 3041 - name: MLAG_iBGP_TEN_D_L3_MULTICAST_DISABLED_240_241 + name: MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_D - id: 140 name: L3_MULTICAST_ENABLED_140 @@ -824,41 +852,41 @@ vlans: name: L3_MULTICAST_DISABLED_141 tenant: Tenant_D - id: 3040 - name: MLAG_iBGP_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 + name: MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_D - id: 550 name: L3_MULTICAST_ENABLED_550 tenant: Tenant_E - id: 3054 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 260 name: L3_MULTICAST_ENABLED_260 tenant: Tenant_E - id: 3059 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 250 name: L3_MULTICAST_ENABLED_250 tenant: Tenant_E - id: 3051 - name: MLAG_iBGP_TEN_E_L3_MULTICAST_TRANSIT + name: MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 150 name: L3_MULTICAST_ENABLED_150 tenant: Tenant_E - id: 3050 - name: MLAG_iBGP_TEN_E_PEG_L3_MULTICAST_ENABLED + name: MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_E - id: 251 name: MULTICAST_DISABLED_251 @@ -868,7 +896,7 @@ vlans: tenant: Tenant_F vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.1/31 @@ -876,7 +904,7 @@ vlan_interfaces: ipv4: sparse_mode: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -901,7 +929,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_310_311' + description: MLAG_L3_VRF_MULTICAST_DISABLED_310_311 vrf: MULTICAST_DISABLED_310_311 mtu: 9214 ip_address: 10.255.251.1/31 @@ -925,7 +953,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_110_111' + description: MLAG_L3_VRF_MULTICAST_ENABLED_110_111 vrf: MULTICAST_ENABLED_110_111 mtu: 9214 ip_address: 10.255.251.1/31 @@ -949,7 +977,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_210_DISABLED_211' + description: MLAG_L3_VRF_MULTICAST_ENABLED_210_DISABLED_211 vrf: MULTICAST_ENABLED_210_DISABLED_211 mtu: 9214 ip_address: 10.255.251.1/31 @@ -973,7 +1001,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_DISABLED_5_6' + description: MLAG_L3_VRF_MULTICAST_DISABLED_5_6 vrf: MULTICAST_DISABLED_5_6 mtu: 9214 ip_address: 10.255.251.1/31 @@ -997,7 +1025,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_1_2' + description: MLAG_L3_VRF_MULTICAST_ENABLED_1_2 vrf: MULTICAST_ENABLED_1_2 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1021,7 +1049,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf MULTICAST_ENABLED_3_DISABLED_4' + description: MLAG_L3_VRF_MULTICAST_ENABLED_3_DISABLED_4 vrf: MULTICAST_ENABLED_3_DISABLED_4 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1045,7 +1073,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_DISABLED_330_331' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_DISABLED_330_331 vrf: TEN_C_L3_MULTICAST_DISABLED_330_331 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1074,11 +1102,29 @@ vlan_interfaces: ipv4: sparse_mode: true vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 -- name: Vlan3030 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + pim: + ipv4: + sparse_mode: true + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + pim: + ipv4: + sparse_mode: true + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan3065 tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_130_131' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_130_131 vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1106,7 +1152,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231' + description: MLAG_L3_VRF_TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vrf: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1130,7 +1176,7 @@ vlan_interfaces: tenant: Tenant_D type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_DISABLED_240_241' + description: MLAG_L3_VRF_TEN_D_L3_MULTICAST_DISABLED_240_241 vrf: TEN_D_L3_MULTICAST_DISABLED_240_241 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1158,7 +1204,7 @@ vlan_interfaces: tenant: Tenant_D type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141' + description: MLAG_L3_VRF_TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vrf: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 mtu: 9214 ip_address: 10.255.251.1/31 @@ -1178,7 +1224,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vrf: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE mtu: 9214 ip_address: 10.255.251.1/31 @@ -1198,7 +1244,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES vrf: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES mtu: 9214 ip_address: 10.255.251.1/31 @@ -1218,7 +1264,7 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_L3_MULTICAST_TRANSIT' + description: MLAG_L3_VRF_TEN_E_L3_MULTICAST_TRANSIT vrf: TEN_E_L3_MULTICAST_TRANSIT mtu: 9214 ip_address: 10.255.251.1/31 @@ -1238,33 +1284,35 @@ vlan_interfaces: tenant: Tenant_E type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEN_E_PEG_L3_MULTICAST_ENABLED' + description: MLAG_L3_VRF_TEN_E_PEG_L3_MULTICAST_ENABLED vrf: TEN_E_PEG_L3_MULTICAST_ENABLED mtu: 9214 ip_address: 10.255.251.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Po3 - type: switched + description: MLAG_EVPN-MULTICAST-L3LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel6 description: EVPN-MULTICAST-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-9,110-111,130-131,136-137,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 shutdown: false - mode: trunk - vlans: 1-9,110-111,130-131,140-141,150,210-211,230-231,240-241,250-252,256-257,260,310-311,330-331,550,4092 mlag: 6 ethernet_interfaces: - name: Ethernet3 peer: EVPN-MULTICAST-L3LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Ethernet3 - type: port-channel-member + description: MLAG_EVPN-MULTICAST-L3LEAF1A_Ethernet3 shutdown: false channel_group: id: 3 @@ -1273,8 +1321,7 @@ ethernet_interfaces: peer: EVPN-MULTICAST-L3LEAF1A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_EVPN-MULTICAST-L3LEAF1A_Ethernet4 - type: port-channel-member + description: MLAG_EVPN-MULTICAST-L3LEAF1A_Ethernet4 shutdown: false channel_group: id: 3 @@ -1286,7 +1333,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 pim: ipv4: @@ -1297,7 +1345,6 @@ ethernet_interfaces: peer_type: l2leaf description: EVPN-MULTICAST-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 6 mode: active @@ -1305,7 +1352,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.55.2/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE pim: ipv4: @@ -1314,7 +1364,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.60.2/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES pim: ipv4: @@ -1323,7 +1376,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.52.2/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_TRANSIT pim: ipv4: @@ -1332,7 +1388,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.51.2/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_PEG_L3_MULTICAST_ENABLED pim: ipv4: @@ -1360,11 +1419,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 - name: Loopback33 @@ -1478,6 +1537,14 @@ ip_igmp_snooping: enabled: true address: 2.2.2.2 version: 1 + - id: 136 + querier: + enabled: true + address: 192.168.255.4 + - id: 137 + querier: + enabled: true + address: 192.168.255.4 - id: 230 querier: enabled: true @@ -1551,6 +1618,12 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + multicast_group: 236.0.0.135 + - id: 137 + vni: 10137 + multicast_group: 236.0.0.136 - id: 230 vni: 10230 - id: 231 @@ -1593,7 +1666,7 @@ vxlan_interface: vni: 33 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 vni: 31 - multicast_group: 232.0.32.31 + multicast_group: 232.0.32.66 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vni: 32 multicast_group: 232.0.32.32 @@ -1601,7 +1674,7 @@ vxlan_interface: vni: 42 - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vni: 41 - multicast_group: 232.0.64.40 + multicast_group: 232.0.64.2 - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vni: 55 multicast_group: 232.0.96.54 @@ -1685,5 +1758,12 @@ standard_access_lists: sequence_numbers: - sequence: 10 action: permit 232.0.136.0/21 +sflow: + run: true + vrfs: + - name: sflow_vrf + destinations: + - destination: 10.10.10.12 + port: 1234 metadata: platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF2A.yml index 62fb87d63ff..8786a124add 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF2A.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -49,7 +49,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.5 rd: 192.168.255.5:13 route_targets: import: @@ -60,10 +59,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.5 rd: 192.168.255.5:11 route_targets: import: @@ -74,10 +73,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.5 rd: 192.168.255.5:12 route_targets: import: @@ -88,10 +87,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.5 rd: 192.168.255.5:23 route_targets: import: @@ -102,10 +101,10 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.5 rd: 192.168.255.5:21 route_targets: import: @@ -116,10 +115,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.5 rd: 192.168.255.5:22 route_targets: import: @@ -130,10 +129,10 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.5 rd: 192.168.255.5:33 route_targets: import: @@ -145,25 +144,25 @@ router_bgp: route_targets: - '33:33' evpn_multicast: false + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.5 - rd: 192.168.255.5:31 + rd: 192.168.255.5:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.5 rd: 192.168.255.5:32 route_targets: import: @@ -175,10 +174,10 @@ router_bgp: route_targets: - '32:32' evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.5 rd: 192.168.255.5:42 route_targets: import: @@ -190,10 +189,10 @@ router_bgp: route_targets: - '42:42' evpn_multicast: false + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.5 rd: 192.168.255.5:41 route_targets: import: @@ -205,10 +204,10 @@ router_bgp: route_targets: - '41:41' evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.5 rd: 192.168.255.5:55 route_targets: import: @@ -220,10 +219,10 @@ router_bgp: route_targets: - '55:55' evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.5 rd: 192.168.255.5:60 route_targets: import: @@ -235,10 +234,10 @@ router_bgp: route_targets: - 60:60 evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.5 rd: 192.168.255.5:52 route_targets: import: @@ -250,10 +249,10 @@ router_bgp: route_targets: - '52:52' evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.5 rd: 192.168.255.5:51 route_targets: import: @@ -265,6 +264,7 @@ router_bgp: route_targets: - '51:51' evpn_multicast: true + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected vlans: @@ -454,6 +454,23 @@ router_bgp: - 10131:10131 redistribute_routes: - learned + - id: 136 + tenant: Tenant_C + rd: 192.168.255.5:10136 + route_targets: + both: + - 10136:10136 + redistribute_routes: + - learned + - igmp + - id: 137 + tenant: Tenant_C + rd: 192.168.255.5:10137 + route_targets: + both: + - 10137:10137 + redistribute_routes: + - learned - id: 230 tenant: Tenant_C rd: 192.168.255.5:10230 @@ -588,6 +605,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -653,7 +676,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -674,18 +697,19 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 pim: ipv4: sparse_mode: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 - name: Loopback33 @@ -819,6 +843,12 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 tenant: Tenant_C @@ -909,6 +939,14 @@ ip_igmp_snooping: enabled: true address: 2.2.2.2 version: 1 + - id: 136 + querier: + enabled: true + address: 192.168.255.5 + - id: 137 + querier: + enabled: true + address: 192.168.255.5 - id: 230 querier: enabled: true @@ -1055,6 +1093,24 @@ vlan_interfaces: - 10.1.14.1 ip_igmp: true vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 - name: Vlan230 tenant: Tenant_C tags: @@ -1220,6 +1276,12 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + multicast_group: 236.0.0.135 + - id: 137 + vni: 10137 + multicast_group: 236.0.0.136 - id: 230 vni: 10230 - id: 231 @@ -1262,7 +1324,7 @@ vxlan_interface: vni: 33 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 vni: 31 - multicast_group: 232.0.32.31 + multicast_group: 232.0.32.66 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vni: 32 multicast_group: 232.0.32.32 @@ -1270,7 +1332,7 @@ vxlan_interface: vni: 42 - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vni: 41 - multicast_group: 232.0.64.40 + multicast_group: 232.0.64.2 - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vni: 55 multicast_group: 232.0.96.54 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3A.yml index e8a94befd55..54985cc0309 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3A.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -49,7 +49,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.6 rd: 192.168.255.6:13 route_targets: import: @@ -60,10 +59,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.6 rd: 192.168.255.6:11 route_targets: import: @@ -74,10 +73,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.6 rd: 192.168.255.6:12 route_targets: import: @@ -88,10 +87,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.6 rd: 192.168.255.6:23 route_targets: import: @@ -102,10 +101,10 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.6 rd: 192.168.255.6:21 route_targets: import: @@ -116,10 +115,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.6 rd: 192.168.255.6:22 route_targets: import: @@ -130,10 +129,10 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.6 rd: 192.168.255.6:33 route_targets: import: @@ -145,25 +144,25 @@ router_bgp: route_targets: - '33:33' evpn_multicast: false + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.6 - rd: 192.168.255.6:31 + rd: 192.168.255.6:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 evpn_multicast: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.6 rd: 192.168.255.6:32 route_targets: import: @@ -175,10 +174,10 @@ router_bgp: route_targets: - '32:32' evpn_multicast: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.6 rd: 192.168.255.6:42 route_targets: import: @@ -190,10 +189,10 @@ router_bgp: route_targets: - '42:42' evpn_multicast: false + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.6 rd: 192.168.255.6:41 route_targets: import: @@ -205,10 +204,10 @@ router_bgp: route_targets: - '41:41' evpn_multicast: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.6 rd: 192.168.255.6:55 route_targets: import: @@ -220,10 +219,10 @@ router_bgp: route_targets: - '55:55' evpn_multicast: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.6 rd: 192.168.255.6:60 route_targets: import: @@ -238,10 +237,10 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.6 rd: 192.168.255.6:52 route_targets: import: @@ -256,10 +255,10 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.6 rd: 192.168.255.6:51 route_targets: import: @@ -271,6 +270,7 @@ router_bgp: route_targets: - '51:51' evpn_multicast: true + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected vlans: @@ -460,6 +460,23 @@ router_bgp: - 10131:10131 redistribute_routes: - learned + - id: 136 + tenant: Tenant_C + rd: 192.168.255.6:10136 + route_targets: + both: + - 10136:10136 + redistribute_routes: + - learned + - igmp + - id: 137 + tenant: Tenant_C + rd: 192.168.255.6:10137 + route_targets: + both: + - 10137:10137 + redistribute_routes: + - learned - id: 230 tenant: Tenant_C rd: 192.168.255.6:10230 @@ -594,6 +611,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -659,7 +682,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -677,7 +700,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 pim: ipv4: @@ -686,7 +710,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.2.52.0/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_TRANSIT pim: ipv4: @@ -695,29 +722,35 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.51.4/31 shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 10 + sflow: + enable: true + encapsulation_dot1q: + vlan: 10 vrf: TEN_E_PEG_L3_MULTICAST_ENABLED - name: Ethernet8 peer_type: l3_interface ip_address: 10.1.51.4/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_PEG_L3_MULTICAST_ENABLED pim: ipv4: sparse_mode: true - name: Ethernet7 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 - name: Loopback33 @@ -851,6 +884,12 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 tenant: Tenant_C @@ -941,6 +980,14 @@ ip_igmp_snooping: enabled: true address: 2.2.2.2 version: 1 + - id: 136 + querier: + enabled: true + address: 192.168.255.6 + - id: 137 + querier: + enabled: true + address: 192.168.255.6 - id: 230 querier: enabled: true @@ -1087,6 +1134,24 @@ vlan_interfaces: - 10.1.14.1 ip_igmp: true vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 - name: Vlan230 tenant: Tenant_C tags: @@ -1252,6 +1317,12 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + multicast_group: 236.0.0.135 + - id: 137 + vni: 10137 + multicast_group: 236.0.0.136 - id: 230 vni: 10230 - id: 231 @@ -1294,7 +1365,7 @@ vxlan_interface: vni: 33 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 vni: 31 - multicast_group: 232.0.32.31 + multicast_group: 232.0.32.66 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vni: 32 multicast_group: 232.0.32.32 @@ -1302,7 +1373,7 @@ vxlan_interface: vni: 42 - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vni: 41 - multicast_group: 232.0.64.40 + multicast_group: 232.0.64.2 - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vni: 55 multicast_group: 232.0.96.54 @@ -1373,5 +1444,12 @@ standard_access_lists: sequence_numbers: - sequence: 10 action: permit 232.0.136.0/21 +sflow: + run: true + vrfs: + - name: sflow_vrf + destinations: + - destination: 10.10.10.12 + port: 1234 metadata: platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3B.yml index 872f414bf63..12c9333619a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-L3LEAF3B.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-SPINE1 - description: EVPN-MULTICAST-SPINE1 + description: EVPN-MULTICAST-SPINE1_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -49,7 +49,6 @@ router_bgp: activate: true vrfs: - name: MULTICAST_DISABLED_310_311 - router_id: 192.168.255.7 rd: 192.168.255.7:13 route_targets: import: @@ -60,10 +59,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_110_111 - router_id: 192.168.255.7 rd: 192.168.255.7:11 route_targets: import: @@ -74,10 +73,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_210_DISABLED_211 - router_id: 192.168.255.7 rd: 192.168.255.7:12 route_targets: import: @@ -88,10 +87,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: MULTICAST_DISABLED_5_6 - router_id: 192.168.255.7 rd: 192.168.255.7:23 route_targets: import: @@ -102,10 +101,10 @@ router_bgp: - address_family: evpn route_targets: - '23:23' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_1_2 - router_id: 192.168.255.7 rd: 192.168.255.7:21 route_targets: import: @@ -116,10 +115,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: MULTICAST_ENABLED_3_DISABLED_4 - router_id: 192.168.255.7 rd: 192.168.255.7:22 route_targets: import: @@ -130,10 +129,10 @@ router_bgp: - address_family: evpn route_targets: - '22:22' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_DISABLED_330_331 - router_id: 192.168.255.7 rd: 192.168.255.7:33 route_targets: import: @@ -145,25 +144,25 @@ router_bgp: route_targets: - '33:33' evpn_multicast: false + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_130_131 - router_id: 192.168.255.7 - rd: 192.168.255.7:31 + rd: 192.168.255.7:66 route_targets: import: - address_family: evpn route_targets: - - '31:31' + - 66:66 export: - address_family: evpn route_targets: - - '31:31' + - 66:66 evpn_multicast: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 - router_id: 192.168.255.7 rd: 192.168.255.7:32 route_targets: import: @@ -175,10 +174,10 @@ router_bgp: route_targets: - '32:32' evpn_multicast: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_DISABLED_240_241 - router_id: 192.168.255.7 rd: 192.168.255.7:42 route_targets: import: @@ -190,10 +189,10 @@ router_bgp: route_targets: - '42:42' evpn_multicast: false + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 - router_id: 192.168.255.7 rd: 192.168.255.7:41 route_targets: import: @@ -205,10 +204,10 @@ router_bgp: route_targets: - '41:41' evpn_multicast: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE - router_id: 192.168.255.7 rd: 192.168.255.7:55 route_targets: import: @@ -220,10 +219,10 @@ router_bgp: route_targets: - '55:55' evpn_multicast: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_EVPN_PEG_RP_NODES - router_id: 192.168.255.7 rd: 192.168.255.7:60 route_targets: import: @@ -238,10 +237,10 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_E_L3_MULTICAST_TRANSIT - router_id: 192.168.255.7 rd: 192.168.255.7:52 route_targets: import: @@ -256,10 +255,10 @@ router_bgp: evpn_multicast_address_family: ipv4: transit: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected - name: TEN_E_PEG_L3_MULTICAST_ENABLED - router_id: 192.168.255.7 rd: 192.168.255.7:51 route_targets: import: @@ -271,6 +270,7 @@ router_bgp: route_targets: - '51:51' evpn_multicast: true + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected vlans: @@ -460,6 +460,23 @@ router_bgp: - 10131:10131 redistribute_routes: - learned + - id: 136 + tenant: Tenant_C + rd: 192.168.255.7:10136 + route_targets: + both: + - 10136:10136 + redistribute_routes: + - learned + - igmp + - id: 137 + tenant: Tenant_C + rd: 192.168.255.7:10137 + route_targets: + both: + - 10137:10137 + redistribute_routes: + - learned - id: 230 tenant: Tenant_C rd: 192.168.255.7:10230 @@ -594,6 +611,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -659,7 +682,7 @@ vrfs: description: PEG_L3_MULTICAST_ENABLED in Tenant E management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -677,7 +700,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-SPINE1_Ethernet5 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.9/31 pim: ipv4: @@ -686,7 +710,10 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.2.52.2/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_L3_MULTICAST_TRANSIT pim: ipv4: @@ -695,29 +722,35 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.1.51.6/31 shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 10 + sflow: + enable: true + encapsulation_dot1q: + vlan: 10 vrf: TEN_E_PEG_L3_MULTICAST_ENABLED - name: Ethernet8 peer_type: l3_interface ip_address: 10.1.51.6/31 shutdown: false - type: routed + sflow: + enable: true + switchport: + enabled: false vrf: TEN_E_PEG_L3_MULTICAST_ENABLED pim: ipv4: sparse_mode: true - name: Ethernet7 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.7/32 - name: Loopback33 @@ -851,6 +884,12 @@ vlans: - id: 131 name: L3_MULTICAST_ENABLED_131 tenant: Tenant_C +- id: 136 + name: L3_L2_MULTICAST_ENABLED_136 + tenant: Tenant_C +- id: 137 + name: L3_L2_MULTICAST_ENABLED_137 + tenant: Tenant_C - id: 230 name: L3_MULTICAST_ENABLED_230 tenant: Tenant_C @@ -941,6 +980,14 @@ ip_igmp_snooping: enabled: true address: 2.2.2.2 version: 1 + - id: 136 + querier: + enabled: true + address: 192.168.255.7 + - id: 137 + querier: + enabled: true + address: 192.168.255.7 - id: 230 querier: enabled: true @@ -1087,6 +1134,24 @@ vlan_interfaces: - 10.1.14.1 ip_igmp: true vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan136 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_136 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 +- name: Vlan137 + tenant: Tenant_C + description: L3_L2_MULTICAST_ENABLED_137 + shutdown: false + ip_igmp: true + pim: + ipv4: + local_interface: Loopback31 + vrf: TEN_C_L3_MULTICAST_ENABLED_130_131 - name: Vlan230 tenant: Tenant_C tags: @@ -1252,6 +1317,12 @@ vxlan_interface: vni: 10130 - id: 131 vni: 10131 + - id: 136 + vni: 10136 + multicast_group: 236.0.0.135 + - id: 137 + vni: 10137 + multicast_group: 236.0.0.136 - id: 230 vni: 10230 - id: 231 @@ -1294,7 +1365,7 @@ vxlan_interface: vni: 33 - name: TEN_C_L3_MULTICAST_ENABLED_130_131 vni: 31 - multicast_group: 232.0.32.31 + multicast_group: 232.0.32.66 - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 vni: 32 multicast_group: 232.0.32.32 @@ -1302,7 +1373,7 @@ vxlan_interface: vni: 42 - name: TEN_D_L3_MULTICAST_ENABLED_140_DISABLED_141 vni: 41 - multicast_group: 232.0.64.40 + multicast_group: 232.0.64.2 - name: TEN_E_L3_MULTICAST_ENABLED_PEG_OVERRIDE vni: 55 multicast_group: 232.0.96.54 @@ -1373,5 +1444,12 @@ standard_access_lists: sequence_numbers: - sequence: 10 action: permit 232.0.136.0/21 +sflow: + run: true + vrfs: + - name: sflow_vrf + destinations: + - destination: 10.10.10.12 + port: 1234 metadata: platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-SPINE1.yml index 6a5bf0cf173..49516d388bb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/EVPN-MULTICAST-SPINE1.yml @@ -67,32 +67,32 @@ router_bgp: - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-DISABLED - description: EVPN-MULTICAST-DISABLED + description: EVPN-MULTICAST-DISABLED_Loopback0 remote_as: '65106' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-L3LEAF1A - description: EVPN-MULTICAST-L3LEAF1A + description: EVPN-MULTICAST-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-L3LEAF1B - description: EVPN-MULTICAST-L3LEAF1B + description: EVPN-MULTICAST-L3LEAF1B_Loopback0 remote_as: '65101' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-L3LEAF2A - description: EVPN-MULTICAST-L3LEAF2A + description: EVPN-MULTICAST-L3LEAF2A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-L3LEAF3A - description: EVPN-MULTICAST-L3LEAF3A + description: EVPN-MULTICAST-L3LEAF3A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: EVPN-MULTICAST-L3LEAF3B - description: EVPN-MULTICAST-L3LEAF3B + description: EVPN-MULTICAST-L3LEAF3B_Loopback0 remote_as: '65105' address_family_evpn: peer_groups: @@ -112,6 +112,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -119,7 +125,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -137,7 +143,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-L3LEAF1A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 pim: ipv4: @@ -149,7 +156,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-L3LEAF1B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 pim: ipv4: @@ -161,7 +169,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-L3LEAF2A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 pim: ipv4: @@ -173,7 +182,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-L3LEAF3A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 pim: ipv4: @@ -185,7 +195,8 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-L3LEAF3B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.8/31 pim: ipv4: @@ -197,14 +208,15 @@ ethernet_interfaces: description: P2P_LINK_TO_EVPN-MULTICAST-DISABLED_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.10/31 pim: ipv4: sparse_mode: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L2LEAF1A.yml index 44beb5b4044..7fad500f10a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L2LEAF1A.yml @@ -10,12 +10,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -32,17 +38,18 @@ ethernet_interfaces: peer_type: l3leaf description: IGMP-QUERIER-L3LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: IGMP-QUERIER-L3LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-3,11-12,21-23,101-103,111-113,121-123 shutdown: false - mode: trunk - vlans: 1-3,11-12,21-23,101-103,111-113,121-123 vlans: - id: 1 name: VLAN_1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L3LEAF1A.yml index 5df86255393..a1b74b72715 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/IGMP-QUERIER-L3LEAF1A.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: IGMP_QUERIER_TEST_1 - router_id: 192.168.255.1 rd: 192.168.255.1:11 route_targets: import: @@ -49,10 +48,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected - name: IGMP_QUERIER_TEST_2 - router_id: 192.168.255.1 rd: 192.168.255.1:21 route_targets: import: @@ -63,10 +62,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected - name: IGMP_QUERIER_TEST_3 - router_id: 192.168.255.1 rd: 192.168.255.1:41 route_targets: import: @@ -77,6 +76,7 @@ router_bgp: - address_family: evpn route_targets: - '41:41' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected vlans: @@ -227,6 +227,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -244,7 +250,7 @@ vrfs: description: IGMP_QUERIER_TEST_3 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -261,24 +267,25 @@ ethernet_interfaces: peer_type: l2leaf description: IGMP-QUERIER-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: IGMP-QUERIER-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-3,11-12,21-23,101-103,111-113,121-123 shutdown: false - mode: trunk - vlans: 1-3,11-12,21-23,101-103,111-113,121-123 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.1/32 prefix_lists: @@ -367,7 +374,6 @@ ip_igmp_snooping: - id: 3 querier: enabled: false - address: 192.168.255.1 - id: 101 querier: enabled: true @@ -380,7 +386,6 @@ ip_igmp_snooping: - id: 103 querier: enabled: false - address: 192.168.255.1 - id: 11 querier: enabled: true @@ -404,8 +409,6 @@ ip_igmp_snooping: - id: 113 querier: enabled: false - address: 1.1.1.1 - version: 3 - id: 21 querier: enabled: true @@ -432,7 +435,6 @@ ip_igmp_snooping: - id: 123 querier: enabled: false - address: 192.168.255.1 ip_virtual_router_mac_address: 00:dc:00:00:00:0a vlan_interfaces: - name: Vlan1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-L2LEAF1A.yml index 58045c7f45f..8ca90979f48 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -53,7 +59,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.201/24 @@ -87,7 +93,6 @@ ethernet_interfaces: peer_type: l3leaf description: MH-LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -97,20 +102,23 @@ ethernet_interfaces: peer_type: server description: server02_Eth1 shutdown: false - type: switched + switchport: + enabled: true link_tracking_groups: - name: l2leaf-server02 direction: downstream port_channel_interfaces: - name: Port-Channel1 description: MH-LEAF2A_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' shutdown: false - mode: trunk link_tracking_groups: - name: l2leaf-server02 direction: upstream - vlans: '310' vlans: - id: 310 name: Tenant_X_OP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1A.yml index 1ece8037827..93e360b2198 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1A.yml @@ -56,7 +56,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_X_OP_Zone - router_id: 192.168.255.33 rd: 192.168.255.33:20 route_targets: import: @@ -67,6 +66,7 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.33 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -99,6 +99,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -130,7 +136,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.104/24 @@ -170,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet19 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false link_tracking_groups: - name: LT_GROUP1 direction: upstream @@ -182,7 +189,6 @@ ethernet_interfaces: port_profile: Tenant_X description: server01_ES1_Eth1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -193,7 +199,6 @@ ethernet_interfaces: port_profile: Tenant_X description: server03_AUTO_ESI_Eth1 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -204,7 +209,6 @@ ethernet_interfaces: port_profile: Tenant_ESI_Auto description: server04_AUTO_ESI_Profile_Eth1 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active @@ -215,7 +219,6 @@ ethernet_interfaces: port_profile: Tenant_ESI_Auto description: server05_AUTO_ESI_Profile_Override_Eth1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -226,7 +229,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk_Auto description: server06_Single_Active_Port_Channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 15 mode: active @@ -237,7 +239,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server07_Single_Active_Port_Channel_Manual_DF_Eth1 shutdown: false - type: port-channel-member channel_group: id: 16 mode: active @@ -248,9 +249,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk_Auto_Eth description: server08_Single_Active_Ethernet_Eth1 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:213f:36b8:ff71 redundancy: single-active @@ -265,9 +268,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server09_All_Active_Ethernet_Eth1 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:00dd:00dd:00dd redundancy: all-active @@ -281,9 +286,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server10_Single_Active_Ethernet_Manual_DF_Eth1 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:885b:86cc:8bac redundancy: single-active @@ -298,7 +305,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Eth1 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -309,9 +315,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server12_Single_Active_Ethernet_Manual_DF_Dont_Preempt_Eth1 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:5d0b:68d3:6ff9 redundancy: single-active @@ -327,7 +335,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Eth1 shutdown: false - type: port-channel-member channel_group: id: 22 mode: active @@ -338,9 +345,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server14_Single_Active_Ethernet_Manual_DF_Dont_Preempt_modulus_Eth1 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:262b:7df9:c98b redundancy: single-active @@ -353,17 +362,16 @@ ethernet_interfaces: peer_type: router description: ROUTER02_WITH_SUBIF_Eth1 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.33/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.33/32 - name: Loopback100 @@ -424,62 +432,68 @@ virtual_source_nat_vrfs: port_channel_interfaces: - name: Port-Channel10 description: server01_ES1_PortChanne1 - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:0001:1010:1010 route_target: 00:01:10:10:10:10 lacp_id: 0001.1010.1010 - name: Port-Channel12 description: server03_AUTO_ESI_Auto-ESI PortChannel - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:fc87:ae24:2cb3 route_target: fc:87:ae:24:2c:b3 lacp_id: fc87.ae24.2cb3 - name: Port-Channel13 description: server04_AUTO_ESI_Profile_Auto-ESI PortChannel from profile - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:29cc:4043:0a29 route_target: 29:cc:40:43:0a:29 lacp_id: 29cc.4043.0a29 - name: Port-Channel14 description: server05_AUTO_ESI_Profile_Override_Auto-ESI PortChannel overridden on server - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:010a:010a:010a route_target: 01:0a:01:0a:01:0a lacp_id: 010a.010a.010a - name: Port-Channel15 description: server06_Single_Active_Port_Channel_Single-Active ESI - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:2873:c14b:64ec redundancy: single-active @@ -490,10 +504,12 @@ port_channel_interfaces: lacp_id: 2873.c14b.64ec - name: Port-Channel16 description: server07_Single_Active_Port_Channel_Manual_DF_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:ec11:73f8:7361 redundancy: single-active @@ -504,10 +520,12 @@ port_channel_interfaces: lacp_id: ec11.73f8.7361 - name: Port-Channel20 description: server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:47cb:834e:c0c7 redundancy: single-active @@ -519,10 +537,12 @@ port_channel_interfaces: lacp_id: 47cb.834e.c0c7 - name: Port-Channel22 description: server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:d716:1795:361e redundancy: single-active @@ -532,53 +552,50 @@ port_channel_interfaces: lacp_id: d716.1795.361e - name: Port-Channel11 description: ROUTER02_WITH_SUBIF_Testing L2 subinterfaces - type: routed shutdown: false + switchport: + enabled: false - name: Port-Channel11.101 - type: l2dot1q vlan_id: 101 encapsulation_vlan: client: - dot1q: - vlan: 101 + encapsulation: dot1q + vlan: 101 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:0000:0000:0101 route_target: 00:00:00:00:01:01 - name: Port-Channel11.102 - type: l2dot1q vlan_id: 1102 encapsulation_vlan: client: - dot1q: - vlan: 2102 + encapsulation: dot1q + vlan: 2102 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:0000:0000:0102 route_target: 00:00:00:00:01:02 - name: Port-Channel11.103 - type: l2dot1q vlan_id: 1103 encapsulation_vlan: client: - dot1q: - vlan: 2103 + encapsulation: dot1q + vlan: 2103 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:c2c9:c85a:ed92 route_target: c2:c9:c8:5a:ed:92 - name: Port-Channel11.104 - type: l2dot1q vlan_id: 1104 encapsulation_vlan: client: - dot1q: - vlan: 2104 + encapsulation: dot1q + vlan: 2104 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:5c8e:1f50:9fc4 route_target: 5c:8e:1f:50:9f:c4 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1B.yml index 0bfb7bdba2b..8ecee723b3f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF1B.yml @@ -56,7 +56,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_X_OP_Zone - router_id: 192.168.255.34 rd: 192.168.255.34:20 route_targets: import: @@ -67,6 +66,7 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.34 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -99,6 +99,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -130,7 +136,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.105/24 @@ -170,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet20 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false link_tracking_groups: - name: LT_GROUP1 direction: upstream @@ -182,7 +189,6 @@ ethernet_interfaces: port_profile: Tenant_X description: server01_ES1_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -193,7 +199,6 @@ ethernet_interfaces: port_profile: Tenant_X description: server03_AUTO_ESI_Eth2 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -204,7 +209,6 @@ ethernet_interfaces: port_profile: Tenant_ESI_Auto description: server04_AUTO_ESI_Profile_Eth2 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active @@ -215,7 +219,6 @@ ethernet_interfaces: port_profile: Tenant_ESI_Auto description: server05_AUTO_ESI_Profile_Override_Eth2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -226,7 +229,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk_Auto description: server06_Single_Active_Port_Channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 15 mode: active @@ -237,7 +239,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server07_Single_Active_Port_Channel_Manual_DF_Eth2 shutdown: false - type: port-channel-member channel_group: id: 16 mode: active @@ -248,9 +249,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk_Auto_Eth description: server08_Single_Active_Ethernet_Eth2 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:213f:36b8:ff71 redundancy: single-active @@ -265,9 +268,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server09_All_Active_Ethernet_Eth2 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:00dd:00dd:00dd redundancy: all-active @@ -281,9 +286,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server10_Single_Active_Ethernet_Manual_DF_Eth2 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:885b:86cc:8bac redundancy: single-active @@ -298,7 +305,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Eth2 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -309,9 +315,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server12_Single_Active_Ethernet_Manual_DF_Dont_Preempt_Eth2 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:5d0b:68d3:6ff9 redundancy: single-active @@ -327,7 +335,6 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Eth2 shutdown: false - type: port-channel-member channel_group: id: 22 mode: active @@ -338,9 +345,11 @@ ethernet_interfaces: port_profile: Tenant_X_Trunk description: server14_Single_Active_Ethernet_Manual_DF_Dont_Preempt_modulus_Eth2 shutdown: false - type: switched - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:262b:7df9:c98b redundancy: single-active @@ -353,17 +362,16 @@ ethernet_interfaces: peer_type: router description: ROUTER02_WITH_SUBIF_Eth2 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.34/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.34/32 - name: Loopback100 @@ -424,62 +432,68 @@ virtual_source_nat_vrfs: port_channel_interfaces: - name: Port-Channel10 description: server01_ES1_PortChanne1 - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:0001:1010:1010 route_target: 00:01:10:10:10:10 lacp_id: 0001.1010.1010 - name: Port-Channel12 description: server03_AUTO_ESI_Auto-ESI PortChannel - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:fc87:ae24:2cb3 route_target: fc:87:ae:24:2c:b3 lacp_id: fc87.ae24.2cb3 - name: Port-Channel13 description: server04_AUTO_ESI_Profile_Auto-ESI PortChannel from profile - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:29cc:4043:0a29 route_target: 29:cc:40:43:0a:29 lacp_id: 29cc.4043.0a29 - name: Port-Channel14 description: server05_AUTO_ESI_Profile_Override_Auto-ESI PortChannel overridden on server - type: switched shutdown: false link_tracking_groups: - name: LT_GROUP1 direction: downstream - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:010a:010a:010a route_target: 01:0a:01:0a:01:0a lacp_id: 010a.010a.010a - name: Port-Channel15 description: server06_Single_Active_Port_Channel_Single-Active ESI - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:2873:c14b:64ec redundancy: single-active @@ -490,10 +504,12 @@ port_channel_interfaces: lacp_id: 2873.c14b.64ec - name: Port-Channel16 description: server07_Single_Active_Port_Channel_Manual_DF_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:ec11:73f8:7361 redundancy: single-active @@ -504,10 +520,12 @@ port_channel_interfaces: lacp_id: ec11.73f8.7361 - name: Port-Channel20 description: server11_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:47cb:834e:c0c7 redundancy: single-active @@ -519,10 +537,12 @@ port_channel_interfaces: lacp_id: 47cb.834e.c0c7 - name: Port-Channel22 description: server13_Single_Active_Port_Channel_Manual_DF_Dont_Preempt_modulus_Single-Active ESI with Manual DF - type: switched shutdown: false - mode: trunk - vlans: '310' + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' evpn_ethernet_segment: identifier: 0000:0000:d716:1795:361e redundancy: single-active @@ -532,53 +552,50 @@ port_channel_interfaces: lacp_id: d716.1795.361e - name: Port-Channel11 description: ROUTER02_WITH_SUBIF_Testing L2 subinterfaces - type: routed shutdown: false + switchport: + enabled: false - name: Port-Channel11.101 - type: l2dot1q vlan_id: 101 encapsulation_vlan: client: - dot1q: - vlan: 101 + encapsulation: dot1q + vlan: 101 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:0000:0000:0101 route_target: 00:00:00:00:01:01 - name: Port-Channel11.102 - type: l2dot1q vlan_id: 1102 encapsulation_vlan: client: - dot1q: - vlan: 2102 + encapsulation: dot1q + vlan: 2102 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:0000:0000:0102 route_target: 00:00:00:00:01:02 - name: Port-Channel11.103 - type: l2dot1q vlan_id: 1103 encapsulation_vlan: client: - dot1q: - vlan: 2103 + encapsulation: dot1q + vlan: 2103 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:c2c9:c85a:ed92 route_target: c2:c9:c8:5a:ed:92 - name: Port-Channel11.104 - type: l2dot1q vlan_id: 1104 encapsulation_vlan: client: - dot1q: - vlan: 2104 + encapsulation: dot1q + vlan: 2104 network: - client: true + encapsulation: client evpn_ethernet_segment: identifier: 0000:0000:5c8e:1f50:9fc4 route_target: 5c:8e:1f:50:9f:c4 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF2A.yml index d6c2440665f..804e1d37b39 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MH-LEAF2A.yml @@ -70,7 +70,6 @@ router_bgp: - '21:21' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: Tenant_X_OP_Zone - router_id: 192.168.255.35 rd: 192.168.255.35:20 route_targets: import: @@ -81,6 +80,7 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.35 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -124,6 +124,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -155,7 +161,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.106/24 @@ -195,7 +201,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet21 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false link_tracking_groups: - name: Eth-conn-to-router direction: upstream @@ -206,7 +213,6 @@ ethernet_interfaces: peer_type: l2leaf description: MH-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -217,26 +223,29 @@ ethernet_interfaces: port_profile: Tenant_X_LT description: ROUTER01_Eth1 shutdown: false - type: switched - mode: access - vlans: '310' + switchport: + enabled: true + mode: access + access_vlan: '310' link_tracking_groups: - name: Eth-conn-to-router direction: downstream port_channel_interfaces: - name: Port-Channel2 description: MH-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '310' shutdown: false - mode: trunk - vlans: '310' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml index 5a417cb5322..fc6ce92b662 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml @@ -60,6 +60,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -88,7 +94,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.114/24 @@ -132,19 +138,20 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel5 description: MLAG_PEER_MLAG-OSPF-L3LEAF1B_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG-OSPF-L3LEAF1B peer_interface: Ethernet5 peer_type: mlag_peer description: MLAG_PEER_MLAG-OSPF-L3LEAF1B_Ethernet5 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -154,7 +161,6 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: mlag_peer description: MLAG_PEER_MLAG-OSPF-L3LEAF1B_Ethernet6 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -166,7 +172,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet18 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.7/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -187,12 +194,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.36/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.36/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml index 437837b8a07..cc9ba24abe7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml @@ -60,6 +60,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -88,7 +94,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.115/24 @@ -132,19 +138,20 @@ vlan_interfaces: port_channel_interfaces: - name: Port-Channel5 description: MLAG_PEER_MLAG-OSPF-L3LEAF1A_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + - LEAF_PEER_L3 shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG-OSPF-L3LEAF1A peer_interface: Ethernet5 peer_type: mlag_peer description: MLAG_PEER_MLAG-OSPF-L3LEAF1A_Ethernet5 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -154,7 +161,6 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: mlag_peer description: MLAG_PEER_MLAG-OSPF-L3LEAF1A_Ethernet6 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -166,7 +172,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet220 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.10.101.9/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -187,12 +194,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.37/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.36/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1A.yml index 952b9620408..4344adec92c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_IPV6_L3LEAF1B - description: MLAG_IPV6_L3LEAF1B + description: MLAG_IPV6_L3LEAF1B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.116/24 @@ -78,42 +84,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ipv6_address: 2001:db8:0:2::1/64 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_IPV6_L3LEAF1B_Po5 - type: switched + description: MLAG_MLAG_IPV6_L3LEAF1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_IPV6_L3LEAF1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_IPV6_L3LEAF1B_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_IPV6_L3LEAF1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -122,8 +128,7 @@ ethernet_interfaces: peer: MLAG_IPV6_L3LEAF1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_IPV6_L3LEAF1B_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_IPV6_L3LEAF1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -151,11 +156,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1B.yml index bf46eda80d8..3822643532e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_IPV6_L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_IPV6_L3LEAF1A - description: MLAG_IPV6_L3LEAF1A + description: MLAG_IPV6_L3LEAF1A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.117/24 @@ -78,42 +84,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ipv6_address: 2001:db8:0:2::2/64 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_IPV6_L3LEAF1A_Po5 - type: switched + description: MLAG_MLAG_IPV6_L3LEAF1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_IPV6_L3LEAF1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_IPV6_L3LEAF1A_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_IPV6_L3LEAF1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -122,8 +128,7 @@ ethernet_interfaces: peer: MLAG_IPV6_L3LEAF1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_IPV6_L3LEAF1A_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_IPV6_L3LEAF1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -151,11 +156,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.36/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1A.yml index 1f75dfb4edf..18399561d21 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.3 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_ODD_ID_L3LEAF1B - description: MLAG_ODD_ID_L3LEAF1B + description: MLAG_ODD_ID_L3LEAF1B_Vlan4093 - ip_address: 10.254.255.250 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65123' @@ -63,12 +63,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.116/24 @@ -83,42 +89,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.2/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.2/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Po5 - type: switched + description: MLAG_MLAG_ODD_ID_L3LEAF1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_ODD_ID_L3LEAF1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_ODD_ID_L3LEAF1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -127,8 +133,7 @@ ethernet_interfaces: peer: MLAG_ODD_ID_L3LEAF1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1B_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_ODD_ID_L3LEAF1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -140,7 +145,8 @@ ethernet_interfaces: description: P2P_LINK_TO_P2P-UPLINKS-IPV4-PREFIX-LENGTH_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.255.249/30 mlag_configuration: domain_id: MLAG_ODD_ID_L3LEAF1 @@ -165,11 +171,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1B.yml index 42d73d05536..90d6d3e16e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_ODD_ID_L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.2 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_ODD_ID_L3LEAF1A - description: MLAG_ODD_ID_L3LEAF1A + description: MLAG_ODD_ID_L3LEAF1A_Vlan4093 - ip_address: 10.254.255.254 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65123' @@ -63,12 +63,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.117/24 @@ -83,42 +89,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.3/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.3/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Po5 - type: switched + description: MLAG_MLAG_ODD_ID_L3LEAF1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_ODD_ID_L3LEAF1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_ODD_ID_L3LEAF1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -127,8 +133,7 @@ ethernet_interfaces: peer: MLAG_ODD_ID_L3LEAF1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_ODD_ID_L3LEAF1A_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_ODD_ID_L3LEAF1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -140,7 +145,8 @@ ethernet_interfaces: description: P2P_LINK_TO_P2P-UPLINKS-IPV4-PREFIX-LENGTH_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.255.253/30 mlag_configuration: domain_id: MLAG_ODD_ID_L3LEAF1 @@ -163,11 +169,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.36/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1A.yml index 5c624900785..fd8ae6ca6fa 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.2 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_SAME_SUBNET_L3LEAF1B - description: MLAG_SAME_SUBNET_L3LEAF1B + description: MLAG_SAME_SUBNET_L3LEAF1B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 192.168.255.32 rd: 192.168.255.32:1 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.32 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.10.224.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: MLAG_SAME_SUBNET_L3LEAF1B_Vlan3000 updates: wait_install: true vlans: @@ -87,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,7 +102,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.116/24 @@ -110,30 +117,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 name: VLAN10 tenant: TEST_MLAG_SAME_SUBNET_ON_VRF - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST_MLAG_SAME_SUBNET_ON_VRF vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.1/30 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -148,26 +155,26 @@ vlan_interfaces: tenant: TEST_MLAG_SAME_SUBNET_ON_VRF type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 10.10.224.1/30 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Po5 - type: switched + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_SAME_SUBNET_L3LEAF1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -176,8 +183,7 @@ ethernet_interfaces: peer: MLAG_SAME_SUBNET_L3LEAF1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -205,11 +211,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.32/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.32/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1B.yml index e2b6c88997f..b9a2b2341ab 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_SAME_SUBNET_L3LEAF1A - description: MLAG_SAME_SUBNET_L3LEAF1A + description: MLAG_SAME_SUBNET_L3LEAF1A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 192.168.255.33 rd: 192.168.255.33:1 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.33 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.10.224.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: MLAG_SAME_SUBNET_L3LEAF1A_Vlan3000 updates: wait_install: true vlans: @@ -87,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,7 +102,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.117/24 @@ -110,30 +117,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 name: VLAN10 tenant: TEST_MLAG_SAME_SUBNET_ON_VRF - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST_MLAG_SAME_SUBNET_ON_VRF vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.2/30 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -148,26 +155,26 @@ vlan_interfaces: tenant: TEST_MLAG_SAME_SUBNET_ON_VRF type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 10.10.224.2/30 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Po5 - type: switched + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_SAME_SUBNET_L3LEAF1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -176,8 +183,7 @@ ethernet_interfaces: peer: MLAG_SAME_SUBNET_L3LEAF1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -205,11 +211,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.33/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.32/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2A.yml index 7acfc9cc3fc..02a4d97b569 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.2 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_SAME_SUBNET_L3LEAF2B - description: MLAG_SAME_SUBNET_L3LEAF2B + description: MLAG_SAME_SUBNET_L3LEAF2B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 192.168.255.34 rd: 192.168.255.34:1 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.34 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.10.224.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: MLAG_SAME_SUBNET_L3LEAF2B_Vlan3000 updates: wait_install: true vlans: @@ -87,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,7 +102,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.118/24 @@ -110,30 +117,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 name: VLAN10 tenant: TEST_MLAG_SAME_SUBNET_ON_VRF - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST_MLAG_SAME_SUBNET_ON_VRF vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.1/30 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -148,26 +155,26 @@ vlan_interfaces: tenant: TEST_MLAG_SAME_SUBNET_ON_VRF type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 10.10.224.1/30 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Po5 - type: switched + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_SAME_SUBNET_L3LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -176,8 +183,7 @@ ethernet_interfaces: peer: MLAG_SAME_SUBNET_L3LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -205,11 +211,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.34/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.34/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2B.yml index b9dedce86f3..4a47dcc3820 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG_SAME_SUBNET_L3LEAF2B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: MLAG_SAME_SUBNET_L3LEAF2A - description: MLAG_SAME_SUBNET_L3LEAF2A + description: MLAG_SAME_SUBNET_L3LEAF2A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TEST - router_id: 192.168.255.35 rd: 192.168.255.35:1 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.35 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.10.224.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: MLAG_SAME_SUBNET_L3LEAF2A_Vlan3000 updates: wait_install: true vlans: @@ -87,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,7 +102,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.119/24 @@ -110,30 +117,30 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 10 name: VLAN10 tenant: TEST_MLAG_SAME_SUBNET_ON_VRF - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST_MLAG_SAME_SUBNET_ON_VRF vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.2/30 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -148,26 +155,26 @@ vlan_interfaces: tenant: TEST_MLAG_SAME_SUBNET_ON_VRF type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 10.10.224.2/30 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Po5 - type: switched + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: MLAG_SAME_SUBNET_L3LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -176,8 +183,7 @@ ethernet_interfaces: peer: MLAG_SAME_SUBNET_L3LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_MLAG_SAME_SUBNET_L3LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -205,11 +211,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.34/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.yml index 1eaea529813..6424547734a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF1.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -42,11 +48,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.yml index 1d78a62f611..35598de1c82 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_L3LEAF2.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -42,11 +48,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.yml index 0771f6d245a..5044016eaf7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER1.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -13,7 +19,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.254.254/23 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.yml index edb5f3428a0..299d31ba2ac 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_CVX_SERVER2.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -13,7 +19,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.254.255/23 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.yml index 52283dc5f24..781f4a215b7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF1.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -42,11 +48,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.yml index 573703a3b29..c3eb2c5bc53 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF2.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -42,11 +48,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.yml index e0f288c366b..6100ff56aea 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A.yml @@ -34,7 +34,7 @@ router_bgp: - ip_address: 192.168.253.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B - description: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B + description: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -45,6 +45,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -60,12 +66,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 3900 @@ -75,9 +81,9 @@ vlans: name: SVI_ON_LEAF2-3 tenant: TEST - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST - id: 2900 name: L2VLAN_ON_ALL_LEAFS @@ -87,12 +93,12 @@ vlans: tenant: TEST vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 192.168.253.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -118,26 +124,26 @@ vlan_interfaces: tenant: TEST type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 192.168.253.4/31 port_channel_interfaces: - name: Port-Channel1 - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Po1 - type: switched + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Port-Channel1 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Eth1 peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B peer_interface: Eth1 peer_type: mlag_peer - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth1 - type: port-channel-member + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth1 shutdown: false channel_group: id: 1 @@ -146,8 +152,7 @@ ethernet_interfaces: peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B peer_interface: Eth2 peer_type: mlag_peer - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth2 - type: port-channel-member + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B_Eth2 shutdown: false channel_group: id: 1 @@ -175,11 +180,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.yml index d61e480ee5a..abf2707b752 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3B.yml @@ -34,7 +34,7 @@ router_bgp: - ip_address: 192.168.253.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A - description: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A + description: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -45,6 +45,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -60,12 +66,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 3900 @@ -75,9 +81,9 @@ vlans: name: SVI_ON_LEAF2-3 tenant: TEST - id: 3000 - name: MLAG_iBGP_TEST + name: MLAG_L3_VRF_TEST trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TEST - id: 2900 name: L2VLAN_ON_ALL_LEAFS @@ -87,12 +93,12 @@ vlans: tenant: TEST vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 192.168.253.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -118,26 +124,26 @@ vlan_interfaces: tenant: TEST type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TEST' + description: MLAG_L3_VRF_TEST vrf: TEST mtu: 9214 ip_address: 192.168.253.5/31 port_channel_interfaces: - name: Port-Channel1 - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Po1 - type: switched + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Port-Channel1 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Eth1 peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A peer_interface: Eth1 peer_type: mlag_peer - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth1 - type: port-channel-member + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth1 shutdown: false channel_group: id: 1 @@ -146,8 +152,7 @@ ethernet_interfaces: peer: OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A peer_interface: Eth2 peer_type: mlag_peer - description: MLAG_PEER_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth2 - type: port-channel-member + description: MLAG_OVERLAY_ROUTING_PROTOCOL_HER_L3LEAF3A_Eth2 shutdown: false channel_group: id: 1 @@ -175,11 +180,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.254.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.253.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1A.yml index ac1d6a87db3..a34c46ff4c1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: OVERRIDE_VTEP_L3LEAF1B - description: OVERRIDE_VTEP_L3LEAF1B + description: OVERRIDE_VTEP_L3LEAF1B_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.116/24 @@ -78,42 +84,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.4/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Po5 - type: switched + description: MLAG_OVERRIDE_VTEP_L3LEAF1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: OVERRIDE_VTEP_L3LEAF1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Ethernet5 - type: port-channel-member + description: MLAG_OVERRIDE_VTEP_L3LEAF1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -122,8 +128,7 @@ ethernet_interfaces: peer: OVERRIDE_VTEP_L3LEAF1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1B_Ethernet6 - type: port-channel-member + description: MLAG_OVERRIDE_VTEP_L3LEAF1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -151,11 +156,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.35/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.35/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1B.yml index fa5874da0d1..15f9d31249e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/OVERRIDE_VTEP_L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.10.224.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: OVERRIDE_VTEP_L3LEAF1A - description: OVERRIDE_VTEP_L3LEAF1A + description: OVERRIDE_VTEP_L3LEAF1A_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,12 +58,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.117/24 @@ -78,42 +84,42 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.10.224.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.5/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Po5 - type: switched + description: MLAG_OVERRIDE_VTEP_L3LEAF1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: OVERRIDE_VTEP_L3LEAF1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Ethernet5 - type: port-channel-member + description: MLAG_OVERRIDE_VTEP_L3LEAF1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -122,8 +128,7 @@ ethernet_interfaces: peer: OVERRIDE_VTEP_L3LEAF1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_OVERRIDE_VTEP_L3LEAF1A_Ethernet6 - type: port-channel-member + description: MLAG_OVERRIDE_VTEP_L3LEAF1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -151,7 +156,7 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.36/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.yml index 2490333c4d8..f2a72fd3bc4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/P2P-UPLINKS-IPV4-PREFIX-LENGTH.yml @@ -55,6 +55,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -72,7 +78,8 @@ ethernet_interfaces: description: P2P_LINK_TO_MLAG_ODD_ID_L3LEAF1A_Ethernet10 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.255.250/30 - name: Ethernet2 peer: MLAG_ODD_ID_L3LEAF1B @@ -81,11 +88,12 @@ ethernet_interfaces: description: P2P_LINK_TO_MLAG_ODD_ID_L3LEAF1B_Ethernet10 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.255.254/30 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.254.32/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml index 109bfc3bb4b..8bda0e94399 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.1 rd: 192.168.255.1:11 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.yml index d0134ec4984..27ff2d2f5fe 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF2.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.2 rd: 192.168.254.2:11 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '65002:11' + router_id: 192.168.255.2 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.yml index c55349277aa..7cf0bb130d6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF3.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.3 rd: '123:11' route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '65003:11' + router_id: 192.168.255.3 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.yml index c615ae2bede..17d8e3ccd99 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF4.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.4 rd: '5004:11' route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '4294967295:11' + router_id: 192.168.255.4 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.yml index 17b25a555f4..3be10a816f0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF5.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.5 rd: 1.1.1.1:11 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '22:11' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.yml index 2dc59300a21..39af07bc22e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF6.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.6 rd: '65535:11' route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.yml index 5003e20b76b..bec3942aded 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/RD-RT-ADMIN-SUBFIELD-L3LEAF7.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: TEST1 - router_id: 192.168.255.7 rd: '4294967295:11' route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected vlans: @@ -95,6 +95,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,7 +110,7 @@ vrfs: description: TEST1 management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -116,11 +122,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.7/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0A.yml index 6a79e6b7374..c079e2dd9c5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0A.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,31 +24,32 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.0/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF0B_Po25 - type: switched + description: MLAG_SL-LEAF0B_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF0B peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF0B_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF0B_Ethernet25 shutdown: false channel_group: id: 25 @@ -51,8 +58,7 @@ ethernet_interfaces: peer: SL-LEAF0B peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF0B_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF0B_Ethernet26 shutdown: false channel_group: id: 25 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0B.yml index 7c587520740..d92884c6555 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF0B.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,43 +24,50 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.1/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF0A_Po25 - type: switched + description: MLAG_SL-LEAF0A_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel27 description: SL-LEAF1_Po27 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none + mlag: 27 - name: Port-Channel41 description: SL-LEAF2_Po41 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none + mlag: 41 ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF0A peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF0A_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF0A_Ethernet25 shutdown: false channel_group: id: 25 @@ -63,8 +76,7 @@ ethernet_interfaces: peer: SL-LEAF0A peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF0A_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF0A_Ethernet26 shutdown: false channel_group: id: 25 @@ -72,60 +84,54 @@ ethernet_interfaces: - name: Ethernet27 peer: SL-LEAF1A peer_interface: Ethernet27 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF1A_Ethernet27 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active - name: Ethernet28 peer: SL-LEAF1B peer_interface: Ethernet27 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF1B_Ethernet27 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active - name: Ethernet41 peer: SL-LEAF2A peer_interface: Ethernet41 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF2A_Ethernet41 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active - name: Ethernet42 peer: SL-LEAF2A peer_interface: Ethernet42 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF2A_Ethernet42 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active - name: Ethernet43 peer: SL-LEAF2B peer_interface: Ethernet41 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF2B_Ethernet41 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active - name: Ethernet44 peer: SL-LEAF2B peer_interface: Ethernet42 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF2B_Ethernet42 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1A.yml index dc9f89c1f25..136def8d72f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1A.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,44 +24,50 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.4/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF1B_Po25 - type: switched + description: MLAG_SL-LEAF1B_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel27 description: SL-LEAF0_Po27 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 27 - name: Port-Channel28 description: SL-MLEAF1_Po16 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none + mlag: 28 ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF1B peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF1B_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF1B_Ethernet25 shutdown: false channel_group: id: 25 @@ -64,8 +76,7 @@ ethernet_interfaces: peer: SL-LEAF1B peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF1B_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF1B_Ethernet26 shutdown: false channel_group: id: 25 @@ -73,20 +84,18 @@ ethernet_interfaces: - name: Ethernet27 peer: SL-LEAF0B peer_interface: Ethernet27 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet27 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active - name: Ethernet28 peer: SL-MLEAF1 peer_interface: Ethernet16 - peer_type: leaf + peer_type: l2leaf description: SL-MLEAF1_Ethernet16 shutdown: false - type: port-channel-member channel_group: id: 28 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1B.yml index 70e179d9438..a3f9cf258cc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF1B.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,38 +24,41 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.5/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF1A_Po25 - type: switched + description: MLAG_SL-LEAF1A_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel27 description: SL-LEAF0_Po27 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 27 ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF1A peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF1A_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF1A_Ethernet25 shutdown: false channel_group: id: 25 @@ -58,8 +67,7 @@ ethernet_interfaces: peer: SL-LEAF1A peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF1A_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF1A_Ethernet26 shutdown: false channel_group: id: 25 @@ -67,10 +75,9 @@ ethernet_interfaces: - name: Ethernet27 peer: SL-LEAF0B peer_interface: Ethernet28 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet28 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2A.yml index 9c3f42a5911..b444f8e733e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2A.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,38 +24,41 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.10/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF2B_Po25 - type: switched + description: MLAG_SL-LEAF2B_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel41 description: SL-LEAF0_Po41 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 41 ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF2B peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF2B_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF2B_Ethernet25 shutdown: false channel_group: id: 25 @@ -58,8 +67,7 @@ ethernet_interfaces: peer: SL-LEAF2B peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF2B_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF2B_Ethernet26 shutdown: false channel_group: id: 25 @@ -67,20 +75,18 @@ ethernet_interfaces: - name: Ethernet41 peer: SL-LEAF0B peer_interface: Ethernet41 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet41 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active - name: Ethernet42 peer: SL-LEAF0B peer_interface: Ethernet42 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet42 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2B.yml index 7b577e39612..032600c75fb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-LEAF2B.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,38 +24,41 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.10.255.11/31 port_channel_interfaces: - name: Port-Channel25 - description: MLAG_PEER_SL-LEAF2A_Po25 - type: switched + description: MLAG_SL-LEAF2A_Port-Channel25 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel41 description: SL-LEAF0_Po41 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 41 ethernet_interfaces: - name: Ethernet25 peer: SL-LEAF2A peer_interface: Ethernet25 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF2A_Ethernet25 - type: port-channel-member + description: MLAG_SL-LEAF2A_Ethernet25 shutdown: false channel_group: id: 25 @@ -58,8 +67,7 @@ ethernet_interfaces: peer: SL-LEAF2A peer_interface: Ethernet26 peer_type: mlag_peer - description: MLAG_PEER_SL-LEAF2A_Ethernet26 - type: port-channel-member + description: MLAG_SL-LEAF2A_Ethernet26 shutdown: false channel_group: id: 25 @@ -67,20 +75,18 @@ ethernet_interfaces: - name: Ethernet41 peer: SL-LEAF0B peer_interface: Ethernet43 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet43 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active - name: Ethernet42 peer: SL-LEAF0B peer_interface: Ethernet44 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF0B_Ethernet44 shutdown: false - type: port-channel-member channel_group: id: 41 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-MLEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-MLEAF1.yml index 6570ad7050c..1391ddc61fc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-MLEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SL-MLEAF1.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -17,20 +23,21 @@ ethernet_interfaces: - name: Ethernet16 peer: SL-LEAF1A peer_interface: Ethernet28 - peer_type: leaf + peer_type: l2leaf description: SL-LEAF1A_Ethernet28 shutdown: false - type: port-channel-member channel_group: id: 16 mode: active port_channel_interfaces: - name: Port-Channel16 description: SL-LEAF1_Po28 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none ip_igmp_snooping: globally_enabled: true metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_AUTOGEN_ENGINEID.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_AUTOGEN_ENGINEID.yml index 1554b974749..7ebd7c368f3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_AUTOGEN_ENGINEID.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_AUTOGEN_ENGINEID.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_1.yml index 5cf9dacae48..53690ec5167 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_1.yml @@ -7,6 +7,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_2.yml index 323558aa886..262db499797 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SNMP_SYSTEM_MAC_ENGINEID_2.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_1.yml index 0e376d63ef9..025ff9217c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_1.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: svi_profile_tests_vrf - router_id: 192.168.255.1 rd: 192.168.255.1:1 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected - source_protocol: ospf @@ -212,6 +212,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -224,11 +230,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.1/32 prefix_lists: @@ -328,18 +334,24 @@ vlan_interfaces: shutdown: false ip_address_virtual: 10.1.10.1/24 vrf: svi_profile_tests_vrf + mtu: 1000 + no_autostate: true - name: Vlan111 tenant: svi_profile_tests description: set from structured_config on svi_profile.nodes[inventory_hostname].structured_config shutdown: false ip_address_virtual: 10.1.11.1/24 vrf: svi_profile_tests_vrf + mtu: 1000 + no_autostate: true - name: Vlan112 tenant: svi_profile_tests description: set from structured_config on svi_parent_profile.nodes[inventory_hostname].structured_config shutdown: false ip_address_virtual: 10.1.12.1/24 vrf: svi_profile_tests_vrf + mtu: 1200 + no_autostate: true - name: Vlan113 tenant: svi_profile_tests description: set from svi.structured_config @@ -464,7 +476,8 @@ router_ospf: - Vlan512 max_lsa: 15000 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: SVI_PROFILE_NODE_1_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_2.yml index 42790b3c728..19a501577f1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/SVI_PROFILE_NODE_2.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: svi_profile_tests_vrf - router_id: 192.168.255.1 rd: 192.168.255.1:1 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.1 redistribute_routes: - source_protocol: connected - source_protocol: ospf @@ -84,6 +84,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -96,11 +102,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.1/32 prefix_lists: @@ -200,18 +206,24 @@ vlan_interfaces: shutdown: false ip_address_virtual: 10.1.10.1/24 vrf: svi_profile_tests_vrf + mtu: 1000 + no_autostate: true - name: Vlan111 tenant: svi_profile_tests description: set from structured_config on svi_profile.nodes[inventory_hostname].structured_config shutdown: false ip_address_virtual: 10.1.11.1/24 vrf: svi_profile_tests_vrf + mtu: 1000 + no_autostate: true - name: Vlan112 tenant: svi_profile_tests description: set from structured_config on svi_parent_profile.nodes[inventory_hostname].structured_config shutdown: false ip_address_virtual: 10.1.12.1/24 vrf: svi_profile_tests_vrf + mtu: 1200 + no_autostate: true - name: Vlan113 tenant: svi_profile_tests description: set from svi.structured_config @@ -336,7 +348,8 @@ router_ospf: - Vlan512 max_lsa: 15000 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: SVI_PROFILE_NODE_2_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.yml index f7fefe6ff09..36629b20451 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/TEST-MGMT-GATEWAY-IN-NODE-GROUP.yml @@ -14,13 +14,19 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false ipv6_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.202/24 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L2LEAF1A.yml index 631efde6fad..72cfadc2967 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L2LEAF1A.yml @@ -10,12 +10,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -32,17 +38,18 @@ ethernet_interfaces: peer_type: l3leaf description: UNDERLAY-MULTICAST-L3LEAF1A_Ethernet6 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF1_Po6 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none ip_igmp_snooping: globally_enabled: true metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1A.yml index aedbcc433b4..cfefc4f5451 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UNDERLAY-MULTICAST-L3LEAF1B - description: UNDERLAY-MULTICAST-L3LEAF1B + description: UNDERLAY-MULTICAST-L3LEAF1B_Vlan4093 - ip_address: 172.31.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -57,12 +57,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE1 - description: UNDERLAY-MULTICAST-SPINE1 + description: UNDERLAY-MULTICAST-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE2 - description: UNDERLAY-MULTICAST-SPINE2 + description: UNDERLAY-MULTICAST-SPINE2_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -85,12 +85,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -105,17 +111,17 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.0/31 @@ -123,34 +129,35 @@ vlan_interfaces: ipv4: sparse_mode: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Po3 - type: switched + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel6 description: UNDERLAY-MULTICAST-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none - mlag: 6 ethernet_interfaces: - name: Ethernet3 peer: UNDERLAY-MULTICAST-L3LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet3 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet3 shutdown: false channel_group: id: 3 @@ -159,8 +166,7 @@ ethernet_interfaces: peer: UNDERLAY-MULTICAST-L3LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet4 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet4 shutdown: false channel_group: id: 3 @@ -172,7 +178,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 pim: ipv4: @@ -184,7 +191,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 - name: Ethernet6 peer: UNDERLAY-MULTICAST-L2LEAF1A @@ -192,7 +200,6 @@ ethernet_interfaces: peer_type: l2leaf description: UNDERLAY-MULTICAST-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 6 mode: active @@ -223,11 +230,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-PIM-RP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 - name: Loopback3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1B.yml index a8162495902..c2b6d850cd5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UNDERLAY-MULTICAST-L3LEAF1A - description: UNDERLAY-MULTICAST-L3LEAF1A + description: UNDERLAY-MULTICAST-L3LEAF1A_Vlan4093 - ip_address: 172.31.255.4 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -57,12 +57,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE1 - description: UNDERLAY-MULTICAST-SPINE1 + description: UNDERLAY-MULTICAST-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE2 - description: UNDERLAY-MULTICAST-SPINE2 + description: UNDERLAY-MULTICAST-SPINE2_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -85,12 +85,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -105,17 +111,17 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.1/31 @@ -123,27 +129,27 @@ vlan_interfaces: ipv4: sparse_mode: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Po3 - type: switched + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: UNDERLAY-MULTICAST-L3LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet3 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet3 shutdown: false channel_group: id: 3 @@ -152,8 +158,7 @@ ethernet_interfaces: peer: UNDERLAY-MULTICAST-L3LEAF1A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet4 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet4 shutdown: false channel_group: id: 3 @@ -165,7 +170,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 pim: ipv4: @@ -177,7 +183,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 mlag_configuration: domain_id: DC1_LEAF1 @@ -206,11 +213,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-PIM-RP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 - name: Loopback4 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2A.yml index e6c6611deae..fdbb289643f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.252.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UNDERLAY-MULTICAST-L3LEAF2B - description: UNDERLAY-MULTICAST-L3LEAF2B + description: UNDERLAY-MULTICAST-L3LEAF2B_Vlan4094 - ip_address: 172.31.255.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -57,12 +57,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE1 - description: UNDERLAY-MULTICAST-SPINE1 + description: UNDERLAY-MULTICAST-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE2 - description: UNDERLAY-MULTICAST-SPINE2 + description: UNDERLAY-MULTICAST-SPINE2_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -85,12 +85,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -105,12 +111,12 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -120,20 +126,20 @@ vlan_interfaces: sparse_mode: true port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Po3 - type: switched + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: UNDERLAY-MULTICAST-L3LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -142,8 +148,7 @@ ethernet_interfaces: peer: UNDERLAY-MULTICAST-L3LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -155,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.9/31 pim: ipv4: @@ -167,7 +173,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE2_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.11/31 mlag_configuration: domain_id: DC1_LEAF2 @@ -196,11 +203,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-PIM-RP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 - name: Loopback5 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2B.yml index f70dd2260b4..7f5d2a73404 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-L3LEAF2B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.252.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UNDERLAY-MULTICAST-L3LEAF2A - description: UNDERLAY-MULTICAST-L3LEAF2A + description: UNDERLAY-MULTICAST-L3LEAF2A_Vlan4094 - ip_address: 172.31.255.12 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -57,12 +57,12 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE1 - description: UNDERLAY-MULTICAST-SPINE1 + description: UNDERLAY-MULTICAST-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-SPINE2 - description: UNDERLAY-MULTICAST-SPINE2 + description: UNDERLAY-MULTICAST-SPINE2_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -85,12 +85,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -105,12 +111,12 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -120,20 +126,20 @@ vlan_interfaces: sparse_mode: true port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Po3 - type: switched + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: UNDERLAY-MULTICAST-L3LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -142,8 +148,7 @@ ethernet_interfaces: peer: UNDERLAY-MULTICAST-L3LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -155,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE1_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.13/31 pim: ipv4: @@ -167,7 +173,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-SPINE2_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 mlag_configuration: domain_id: DC1_LEAF2 @@ -196,11 +203,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-PIM-RP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 - name: Loopback5 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE1.yml index f0baa445678..4492ee48bcf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE1.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF1A - description: UNDERLAY-MULTICAST-L3LEAF1A + description: UNDERLAY-MULTICAST-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF1B - description: UNDERLAY-MULTICAST-L3LEAF1B + description: UNDERLAY-MULTICAST-L3LEAF1B_Loopback0 remote_as: '65101' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF2A - description: UNDERLAY-MULTICAST-L3LEAF2A + description: UNDERLAY-MULTICAST-L3LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF2B - description: UNDERLAY-MULTICAST-L3LEAF2B + description: UNDERLAY-MULTICAST-L3LEAF2B_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -92,6 +92,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -99,7 +105,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -117,7 +123,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 pim: ipv4: @@ -129,7 +136,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 pim: ipv4: @@ -141,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.8/31 pim: ipv4: @@ -153,14 +162,15 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.12/31 pim: ipv4: sparse_mode: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE2.yml index 94dd5c72c0a..28b1fc5a4e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY-MULTICAST-SPINE2.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF1A - description: UNDERLAY-MULTICAST-L3LEAF1A + description: UNDERLAY-MULTICAST-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF1B - description: UNDERLAY-MULTICAST-L3LEAF1B + description: UNDERLAY-MULTICAST-L3LEAF1B_Loopback0 remote_as: '65101' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF2A - description: UNDERLAY-MULTICAST-L3LEAF2A + description: UNDERLAY-MULTICAST-L3LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: UNDERLAY-MULTICAST-L3LEAF2B - description: UNDERLAY-MULTICAST-L3LEAF2B + description: UNDERLAY-MULTICAST-L3LEAF2B_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -96,7 +102,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -114,7 +120,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF1A_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 - name: Ethernet2 peer: UNDERLAY-MULTICAST-L3LEAF1B @@ -123,7 +130,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF1B_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 - name: Ethernet3 peer: UNDERLAY-MULTICAST-L3LEAF2A @@ -132,7 +140,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF2A_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.10/31 - name: Ethernet4 peer: UNDERLAY-MULTICAST-L3LEAF2B @@ -141,11 +150,12 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY-MULTICAST-L3LEAF2B_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.14/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.yml index 05b7995d4c1..fe637a49c37 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_L3LEAF1.yml @@ -42,6 +42,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -57,7 +63,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.0.1/31 - name: Ethernet2 peer: UNDERLAY_FILTER_PEER_AS_SPINE2 @@ -66,15 +73,16 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_SPINE2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.0.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 route_maps: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE1.yml index 8eb11b34860..e68a0a28d7c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE1.yml @@ -37,6 +37,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -54,11 +60,12 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_L3LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.0.0/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE2.yml index 40b6a985e10..ce3d91a4fa1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UNDERLAY_FILTER_PEER_AS_SPINE2.yml @@ -37,6 +37,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -54,11 +60,12 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_L3LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.0.2/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.yml index f12ca02a422..07f9679eb5b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -21,7 +27,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.201/24 @@ -34,50 +40,53 @@ management_api_http: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Po3 - type: switched + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + native_vlan_tag: true shutdown: false - mode: trunk - trunk_groups: - - MLAG storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true - name: Port-Channel1 description: DC1_LEAF1_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + native_vlan_tag: true shutdown: false - mode: trunk - vlans: none mlag: 1 storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true ethernet_interfaces: - name: Ethernet3 peer: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet3 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet3 shutdown: false channel_group: id: 3 @@ -86,8 +95,7 @@ ethernet_interfaces: peer: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet4 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet4 shutdown: false channel_group: id: 3 @@ -98,7 +106,6 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet5 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -108,7 +115,6 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet5 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.yml index 26e419d81f5..7948754b2c2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -21,7 +27,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.201.201/24 @@ -34,50 +40,53 @@ management_api_http: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Po3 - type: switched + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + native_vlan_tag: true shutdown: false - mode: trunk - trunk_groups: - - MLAG storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true - name: Port-Channel1 description: DC1_LEAF1_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + native_vlan_tag: true shutdown: false - mode: trunk - vlans: none mlag: 1 storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true ethernet_interfaces: - name: Ethernet3 peer: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet3 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet3 shutdown: false channel_group: id: 3 @@ -86,8 +95,7 @@ ethernet_interfaces: peer: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet4 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet4 shutdown: false channel_group: id: 3 @@ -98,7 +106,6 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet6 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -108,7 +115,6 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet6 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.yml index cc74cbf650b..3fcec9e10d4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B - description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B + description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Vlan4093 - ip_address: 172.31.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 - description: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 + description: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -72,6 +72,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -83,7 +89,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -96,17 +102,17 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.0/31 @@ -121,33 +127,35 @@ vlan_interfaces: ip_address: 10.255.252.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Po3 - type: switched + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel5 description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + native_vlan_tag: true shutdown: false - mode: trunk - vlans: none mlag: 5 storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true ethernet_interfaces: - name: Ethernet3 peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet3 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet3 shutdown: false channel_group: id: 3 @@ -156,8 +164,7 @@ ethernet_interfaces: peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet4 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet4 shutdown: false channel_group: id: 3 @@ -169,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 pim: ipv4: @@ -180,7 +188,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -190,7 +197,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -217,11 +223,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.yml index d33cef76f3a..dc0a2daf667 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.251.0 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A - description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A + description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Vlan4093 - ip_address: 172.31.255.2 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65001' @@ -52,7 +52,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 - description: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1 + description: UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -72,6 +72,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -83,7 +89,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -96,17 +102,17 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.251.1/31 @@ -121,33 +127,35 @@ vlan_interfaces: ip_address: 10.255.252.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Po3 - type: switched + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel5 description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none + native_vlan_tag: true shutdown: false - mode: trunk - vlans: none mlag: 5 storm_control: broadcast: level: '25' unknown_unicast: level: '25' - native_vlan_tag: true ethernet_interfaces: - name: Ethernet3 peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet3 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet3 shutdown: false channel_group: id: 3 @@ -156,8 +164,7 @@ ethernet_interfaces: peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet4 - type: port-channel-member + description: MLAG_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet4 shutdown: false channel_group: id: 3 @@ -169,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 pim: ipv4: @@ -180,7 +188,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -190,7 +197,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-MLAG-STRUCTURED-CONFIG-L2LEAF1B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -217,11 +223,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.yml index 42426608921..472eac04d64 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK-MLAG-STRUCTURED-CONFIG-SPINE1.yml @@ -47,12 +47,12 @@ router_bgp: - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A - description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A + description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B - description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B + description: UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Loopback0 remote_as: '65101' address_family_evpn: peer_groups: @@ -69,6 +69,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -76,7 +82,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -94,7 +100,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 pim: ipv4: @@ -106,14 +113,15 @@ ethernet_interfaces: description: P2P_LINK_TO_UPLINK-MLAG-STRUCTURED-CONFIG-L3LEAF1B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 pim: ipv4: sparse_mode: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.yml index 4647f1fccef..de9c9cf7459 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_L2LEAF1.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet51 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,22 +35,23 @@ ethernet_interfaces: peer_type: l3leaf description: UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet52 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active - name: Ethernet10 peer_type: network_port shutdown: false - type: switched - vlans: '66' + switchport: + enabled: true port_channel_interfaces: - name: Port-Channel1 description: UPLINK_P2P_VRFS_TESTS_LEAF1_Po51 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '66' shutdown: false - mode: trunk - vlans: '66' vlans: - id: 66 name: TEST-L2VLAN-ATTRACTION diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_LEAF1.yml index aecf611951f..5071b0860e0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_LEAF1.yml @@ -72,6 +72,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -98,7 +104,8 @@ ethernet_interfaces: mtu: 9214 mac_security: profile: TEST - type: routed + switchport: + enabled: false ip_address: 10.42.42.9/31 - name: Ethernet1.42 peer: UPLINK_P2P_VRFS_TESTS_SPINE1 @@ -107,8 +114,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_SPINE1_Ethernet1.42_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 mtu: 9214 ip_address: 10.42.42.9/31 - name: Ethernet1.66 @@ -118,8 +125,8 @@ ethernet_interfaces: vrf: ONLY-ON-L2LEAF description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_SPINE1_Ethernet1.66_vrf_ONLY-ON-L2LEAF shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 66 + encapsulation_dot1q: + vlan: 66 mtu: 9214 ip_address: 10.42.42.9/31 - name: Ethernet2 @@ -131,7 +138,8 @@ ethernet_interfaces: mtu: 9214 mac_security: profile: TEST - type: routed + switchport: + enabled: false ip_address: 10.42.42.11/31 - name: Ethernet2.100 peer: UPLINK_P2P_VRFS_TESTS_SPINE2 @@ -140,8 +148,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_SPINE2_Ethernet2.100_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 mtu: 9214 ip_address: 10.42.42.11/31 - name: Ethernet2.42 @@ -151,8 +159,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_SPINE2_Ethernet2.42_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 mtu: 9214 ip_address: 10.42.42.11/31 - name: Ethernet51 @@ -161,7 +169,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK_P2P_VRFS_TESTS_L2LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 51 mode: active @@ -171,20 +178,21 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK_P2P_VRFS_TESTS_L2LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 51 mode: active port_channel_interfaces: - name: Port-Channel51 description: UPLINK_P2P_VRFS_TESTS_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '66' shutdown: false - mode: trunk - vlans: '66' loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.3/32 vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE1.yml index 444a033672b..9747045541d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE1.yml @@ -50,6 +50,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -75,7 +81,8 @@ ethernet_interfaces: mtu: 9214 mac_security: profile: TEST - type: routed + switchport: + enabled: false ip_address: 10.42.42.8/31 - name: Ethernet1.42 peer: UPLINK_P2P_VRFS_TESTS_LEAF1 @@ -84,8 +91,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet1.42_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 mtu: 9214 ip_address: 10.42.42.8/31 - name: Ethernet1.66 @@ -95,13 +102,13 @@ ethernet_interfaces: vrf: ONLY-ON-L2LEAF description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet1.66_vrf_ONLY-ON-L2LEAF shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 66 + encapsulation_dot1q: + vlan: 66 mtu: 9214 ip_address: 10.42.42.8/31 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE2.yml index 7565fd92540..d6159c83962 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/UPLINK_P2P_VRFS_TESTS_SPINE2.yml @@ -50,6 +50,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -75,7 +81,8 @@ ethernet_interfaces: mtu: 9214 mac_security: profile: TEST - type: routed + switchport: + enabled: false ip_address: 10.42.42.10/31 - name: Ethernet2.100 peer: UPLINK_P2P_VRFS_TESTS_LEAF1 @@ -84,8 +91,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet2.100_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 mtu: 9214 ip_address: 10.42.42.10/31 - name: Ethernet2.42 @@ -95,13 +102,13 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_UPLINK_P2P_VRFS_TESTS_LEAF1_Ethernet2.42_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 mtu: 9214 ip_address: 10.42.42.10/31 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.2/32 metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/always-configure-ip-routing.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/always-configure-ip-routing.yml index 2f43bd04d21..271e4f28daf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/always-configure-ip-routing.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/always-configure-ip-routing.yml @@ -8,6 +8,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-1.yml new file mode 100644 index 00000000000..b6b48088f1c --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-1.yml @@ -0,0 +1,150 @@ +hostname: bgp-from-network-services-1 +is_deployed: true +router_bgp: + as: '65001' + router_id: 192.0.255.1 + bgp: + default: + ipv4_unicast: false + maximum_paths: + paths: 4 + ecmp: 4 + updates: + wait_install: true + peer_groups: + - name: MYPEERGROUP + remote_as: '65991' + next_hop_self: true + bfd: true + - name: MLAG-IPv4-UNDERLAY-PEER + type: ipv4 + remote_as: '65001' + next_hop_self: true + description: bgp-from-network-services-2 + maximum_routes: 12000 + send_community: all + route_map_in: RM-MLAG-PEER-IN + redistribute_routes: + - source_protocol: connected + neighbors: + - ip_address: 10.10.20.1 + peer_group: MLAG-IPv4-UNDERLAY-PEER + description: bgp-from-network-services-2_Vlan3099 + - ip_address: 10.10.1.2 + peer_group: MYPEERGROUP + address_family_ipv4: + neighbors: + - ip_address: 10.10.1.2 + activate: true + peer_groups: + - name: MLAG-IPv4-UNDERLAY-PEER + activate: true +service_routing_protocols_model: multi-agent +ip_routing: true +vlan_internal_order: + allocation: ascending + range: + beginning: 1006 + ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true +spanning_tree: + mode: none + no_spanning_tree_vlan: 4093-4094 +vrfs: +- name: MGMT + ip_routing: false +management_interfaces: +- name: Management1 + description: OOB_MANAGEMENT + shutdown: false + vrf: MGMT + ip_address: 10.1.1.1/24 + gateway: null + type: oob +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +vlans: +- id: 4094 + tenant: system + name: MLAG + trunk_groups: + - MLAG +- id: 3099 + name: MLAG_L3_VRF_default + trunk_groups: + - MLAG + tenant: TEST +vlan_interfaces: +- name: Vlan4094 + description: MLAG + shutdown: false + no_autostate: true + mtu: 9214 + ip_address: 10.10.10.0/31 +- name: Vlan3099 + tenant: TEST + type: underlay_peering + shutdown: false + description: MLAG_L3_VRF_default + vrf: default + mtu: 9214 + ip_address: 10.10.20.0/31 +port_channel_interfaces: +- name: Port-Channel10 + description: MLAG_bgp-from-network-services-2_Port-Channel10 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + shutdown: false +ethernet_interfaces: +- name: Ethernet10 + peer: bgp-from-network-services-2 + peer_interface: Ethernet10 + peer_type: mlag_peer + description: MLAG_bgp-from-network-services-2_Ethernet10 + shutdown: false + channel_group: + id: 10 + mode: active +- name: Ethernet47 + peer_type: l3_interface + ip_address: 10.10.1.1/30 + shutdown: false + switchport: + enabled: false +mlag_configuration: + domain_id: GROUP1 + local_interface: Vlan4094 + peer_address: 10.10.10.1 + peer_link: Port-Channel10 + reload_delay_mlag: '300' + reload_delay_non_mlag: '330' +loopback_interfaces: +- name: Loopback0 + description: ROUTER_ID + shutdown: false + ip_address: 192.0.255.1/32 +ip_igmp_snooping: + globally_enabled: true +route_maps: +- name: RM-MLAG-PEER-IN + sequence_numbers: + - sequence: 10 + type: permit + set: + - origin incomplete + description: Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing +static_routes: +- destination_address_prefix: 0.0.0.0 + gateway: 10.10.1.1 + vrf: default diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-2.yml new file mode 100644 index 00000000000..bcce2a31979 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-from-network-services-2.yml @@ -0,0 +1,80 @@ +hostname: bgp-from-network-services-2 +is_deployed: true +service_routing_protocols_model: multi-agent +ip_routing: true +vlan_internal_order: + allocation: ascending + range: + beginning: 1006 + ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true +spanning_tree: + mode: none + no_spanning_tree_vlan: 4093-4094 +vrfs: +- name: MGMT + ip_routing: false +management_interfaces: +- name: Management1 + description: OOB_MANAGEMENT + shutdown: false + vrf: MGMT + ip_address: 10.1.1.2/24 + gateway: null + type: oob +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +vlans: +- id: 4094 + tenant: system + name: MLAG + trunk_groups: + - MLAG +vlan_interfaces: +- name: Vlan4094 + description: MLAG + shutdown: false + no_autostate: true + mtu: 9214 + ip_address: 10.10.10.1/31 +port_channel_interfaces: +- name: Port-Channel10 + description: MLAG_bgp-from-network-services-1_Port-Channel10 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG + shutdown: false +ethernet_interfaces: +- name: Ethernet10 + peer: bgp-from-network-services-1 + peer_interface: Ethernet10 + peer_type: mlag_peer + description: MLAG_bgp-from-network-services-1_Ethernet10 + shutdown: false + channel_group: + id: 10 + mode: active +mlag_configuration: + domain_id: GROUP1 + local_interface: Vlan4094 + peer_address: 10.10.10.0 + peer_link: Port-Channel10 + reload_delay_mlag: '300' + reload_delay_non_mlag: '330' +loopback_interfaces: +- name: Loopback0 + description: ROUTER_ID + shutdown: false + ip_address: 192.0.255.2/32 +ip_igmp_snooping: + globally_enabled: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-options.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-options.yml index 84579bbbca0..a078a956be1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-options.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-options.yml @@ -48,6 +48,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -59,7 +65,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.10.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-1.yml index e722f892ab7..5eab72811ad 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-1.yml @@ -47,11 +47,11 @@ router_bgp: - ip_address: 192.168.253.205 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: bgp-peer-groups-2 - description: bgp-peer-groups-2 + description: bgp-peer-groups-2_Vlan4094 - ip_address: 192.168.255.112 peer_group: EVPN-OVERLAY-PEERS peer: bgp-peer-groups-2 - description: bgp-peer-groups-2 + description: bgp-peer-groups-2_Loopback0 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -73,6 +73,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -85,32 +91,32 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 192.168.253.204/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_bgp-peer-groups-2_Po3 - type: switched + description: MLAG_bgp-peer-groups-2_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: bgp-peer-groups-2 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_bgp-peer-groups-2_Ethernet3 - type: port-channel-member + description: MLAG_bgp-peer-groups-2_Ethernet3 shutdown: false channel_group: id: 3 @@ -152,11 +158,11 @@ route_maps: - extcommunity soo 192.168.254.111:1 additive loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.111/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.111/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-2.yml index a7ca07b65ed..fbef1e3a76c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-2.yml @@ -58,11 +58,11 @@ router_bgp: - ip_address: 192.168.253.204 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: bgp-peer-groups-1 - description: bgp-peer-groups-1 + description: bgp-peer-groups-1_Vlan4094 - ip_address: 192.168.255.111 peer_group: EVPN-OVERLAY-PEERS peer: bgp-peer-groups-1 - description: bgp-peer-groups-1 + description: bgp-peer-groups-1_Loopback0 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -71,8 +71,6 @@ router_bgp: peer_groups: - name: EVPN-OVERLAY-PEERS activate: true - - name: RR-OVERLAY-PEERS - activate: true address_family_vpn_ipv4: peer_groups: - name: RR-OVERLAY-PEERS @@ -88,6 +86,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -100,32 +104,32 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 192.168.253.205/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_bgp-peer-groups-1_Po3 - type: switched + description: MLAG_bgp-peer-groups-1_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: bgp-peer-groups-1 peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_bgp-peer-groups-1_Ethernet3 - type: port-channel-member + description: MLAG_bgp-peer-groups-1_Ethernet3 shutdown: false channel_group: id: 3 @@ -153,11 +157,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.112/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.111/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-3.yml index b10a2c22bed..2815a65d6b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/bgp-peer-groups-3.yml @@ -63,6 +63,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -72,7 +78,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.114/32 isis_enable: CORE @@ -82,7 +88,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0002.0106.00 + net: 49.0001.1921.6825.5114.00 router_id: 192.168.255.114 is_type: level-1-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/connected_endpoints.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/connected_endpoints.yml index b7289cbd162..20e8843b5bc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/connected_endpoints.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/connected_endpoints.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -19,27 +25,53 @@ link_tracking_groups: ip_igmp_snooping: globally_enabled: true ethernet_interfaces: +- name: Ethernet1 + peer: OLD_SW-1/2 + peer_interface: Endpoint_port1 + peer_type: server + description: Interface description server_OLD_SW-1/2_ENDPOINT_PORT1 + shutdown: false + channel_group: + id: 1 + mode: active +- name: Ethernet2 + peer: OLD_SW-1/2 + peer_interface: ENDPOINT_PORT2 + peer_type: server + description: Interface description server_OLD_SW-1/2_ENDPOINT_PORT2 + shutdown: false + channel_group: + id: 1 + mode: active +- name: Ethernet3 + peer: OLD_SW-1/3 + peer_interface: ENDPOINT_PORT + peer_type: server + description: SERVER_OLD_SW-1/3_ENDPOINT_PORT + shutdown: false + channel_group: + id: 3 + mode: active - name: Ethernet4 peer: OLD_SW-1/4 peer_type: server description: PHYSICAL_PORT_DESCRIPTION shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet5 peer: OLD_SW-1/5 peer_type: server - description: OLD_SW-1/5 + description: SERVER_OLD_SW-1/5 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active - name: Ethernet6 peer: OLD_SW-1/5 peer_type: server - description: OLD_SW-1/5 + description: SERVER_OLD_SW-1/5 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -48,7 +80,6 @@ ethernet_interfaces: peer_type: server description: PHYSICAL_PORT_DESCRIPTION shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -57,7 +88,6 @@ ethernet_interfaces: peer_type: server description: PHYSICAL_PORT_DESCRIPTION shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -66,13 +96,13 @@ ethernet_interfaces: peer_type: server description: test of var set under play vars shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet10 peer: OLD_SW-1/7 peer_type: server description: PHYSICAL_PORT_DESCRIPTION_1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -81,23 +111,24 @@ ethernet_interfaces: peer_type: server description: PHYSICAL_PORT_DESCRIPTION_2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active - name: Ethernet12 peer: INDIVIDUAL_1 peer_type: server - description: INDIVIDUAL_1 + description: SERVER_INDIVIDUAL_1 shutdown: false - type: switched channel_group: id: 12 mode: active - mode: trunk - vlans: 1,2,3,4,5,6,7,123,234 - native_vlan_tag: false - native_vlan: 123 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,2,3,4,5,6,7,123,234 + native_vlan_tag: false + native_vlan: 123 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' dot1x: @@ -122,16 +153,18 @@ ethernet_interfaces: - name: Ethernet13 peer: INDIVIDUAL_1 peer_type: server - description: INDIVIDUAL_1 + description: SERVER_INDIVIDUAL_1 shutdown: false - type: switched channel_group: id: 12 mode: active - mode: trunk - vlans: 1,2,3,4,5,6,7,123,234 - native_vlan_tag: false - native_vlan: 123 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,2,3,4,5,6,7,123,234 + native_vlan_tag: false + native_vlan: 123 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' dot1x: @@ -157,13 +190,15 @@ ethernet_interfaces: peer: DOT1X_UNAUTHORIZED peer_type: server port_profile: INDIVIDUAL_TRUNK - description: DOT1X_UNAUTHORIZED + description: SERVER_DOT1X_UNAUTHORIZED shutdown: false - type: switched - mode: trunk - vlans: 1,2,3,4,5,6,7,123,234 - native_vlan_tag: false - native_vlan: 123 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1,2,3,4,5,6,7,123,234 + native_vlan_tag: false + native_vlan: 123 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' dot1x: @@ -188,58 +223,77 @@ ethernet_interfaces: - name: Ethernet15 peer: INDIVIDUAL_2_TRUNK_PHONE peer_type: server - description: INDIVIDUAL_2_TRUNK_PHONE + description: SERVER_INDIVIDUAL_2_TRUNK_PHONE shutdown: false - type: switched channel_group: id: 15 mode: active - mode: trunk phone - native_vlan: 123 - phone: - vlan: 321 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 123 + phone: + vlan: 321 link_tracking_groups: - name: LT_GROUP1 direction: downstream - name: Ethernet16 peer: INDIVIDUAL_2_TRUNK_PHONE peer_type: server - description: INDIVIDUAL_2_TRUNK_PHONE + description: SERVER_INDIVIDUAL_2_TRUNK_PHONE shutdown: false - type: switched channel_group: id: 15 mode: active - mode: trunk phone - native_vlan: 123 - phone: - vlan: 321 + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 123 + phone: + vlan: 321 link_tracking_groups: - name: LT_GROUP1 direction: downstream port_channel_interfaces: +- name: Port-Channel1 + description: Port channel description server_OLD_SW-1/2_Po1_ENDPOINT_PORT_CHANNEL_INTERFACE DESCRIPTION SERVER_OLD_SW-1/2_ENDPOINT_PORT_CHANNEL + shutdown: false + switchport: + enabled: true +- name: Port-Channel3 + description: SERVER_OLD_SW-1/3_ENDPOINT_PORT_CHANNEL + shutdown: false + switchport: + enabled: true - name: Port-Channel5 - description: OLD_SW-1/5_PORT_CHANNEL_DESCRIPTION - type: switched + description: PORT_CHANNEL_DESCRIPTION shutdown: false + switchport: + enabled: true - name: Port-Channel7 - description: PHYSICAL_PORT_DESCRIPTION_PORT_CHANNEL_DESCRIPTION - type: switched + description: PORT_CHANNEL_DESCRIPTION shutdown: false + switchport: + enabled: true - name: Port-Channel10 - description: OLD_SW-1/7_PORT_CHANNEL_DESCRIPTION - type: switched + description: PORT_CHANNEL_DESCRIPTION shutdown: false + switchport: + enabled: true - name: Port-Channel12 - description: INDIVIDUAL_1_INDIVIDUAL_1 - type: switched + description: SERVER_INDIVIDUAL_1_INDIVIDUAL_1 shutdown: false + switchport: + enabled: true lacp_fallback_mode: individual lacp_fallback_timeout: 90 - name: Port-Channel15 - description: INDIVIDUAL_2_TRUNK_PHONE - type: switched + description: SERVER_INDIVIDUAL_2_TRUNK_PHONE shutdown: false + switchport: + enabled: true lacp_fallback_mode: individual lacp_fallback_timeout: 90 metadata: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-1-isis-sr-ldp.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-1-isis-sr-ldp.yml index f870b4bb50d..997bb300ff1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-1-isis-sr-ldp.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-1-isis-sr-ldp.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -23,7 +29,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.0.0.1/32 ipv6_address: 2000:1234:ffff:ffff::1/128 @@ -38,7 +44,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0001.00 + net: 49.0001.0100.0000.0001.00 router_id: 10.0.0.1 is_type: level-2 address_family_ipv4: @@ -74,7 +80,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: unnumbered loopback0 @@ -97,7 +104,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1601 service_profile: test_qos_profile @@ -118,7 +126,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.4/31 @@ -141,7 +150,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.6/31 @@ -159,7 +169,8 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet5 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.8/31 @@ -179,7 +190,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: core_router description: Custom description on core-1-isis-sr-ldp eth6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1602 service_profile: test_qos_profile @@ -203,7 +215,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.12/31 @@ -219,7 +232,6 @@ ethernet_interfaces: igp_sync: true speed: forced 1000full - name: Ethernet12 - type: port-channel-member peer: core-2-ospf-ldp peer_interface: Ethernet12 peer_type: core_router @@ -230,7 +242,6 @@ ethernet_interfaces: mode: active speed: forced 1000full - name: Ethernet13 - type: port-channel-member peer: core-2-ospf-ldp peer_interface: Ethernet13 peer_type: core_router @@ -245,7 +256,8 @@ ethernet_interfaces: peer_interface: ethernet21 peer_type: other description: P2P_LINK_TO_peer2_ethernet21 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 192.168.0.2/31 @@ -259,7 +271,8 @@ ethernet_interfaces: peer_interface: ethernet22 peer_type: other description: P2P_LINK_TO_peer3_ethernet22 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 172.16.0.0/31 @@ -270,7 +283,8 @@ ethernet_interfaces: peer_interface: ethernet23 peer_type: other description: P2P_LINK_TO_peer4_ethernet23 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 172.16.0.2/31 @@ -281,7 +295,8 @@ ethernet_interfaces: peer_interface: ethernet22 peer_type: other description: P2P_LINK_TO_peer5_ethernet22 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 172.16.1.1/29 @@ -292,7 +307,8 @@ ethernet_interfaces: peer_interface: ethernet23 peer_type: other description: P2P_LINK_TO_peer6_ethernet23 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 172.16.1.9/29 @@ -304,7 +320,8 @@ port_channel_interfaces: peer_interface: Port-Channel12 peer_type: core_router description: P2P_LINK_TO_core-2-ospf-ldp_Port-Channel12 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.16/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-2-ospf-ldp.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-2-ospf-ldp.yml index 82fbaa78bd4..d707da041bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-2-ospf-ldp.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-2-ospf-ldp.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -23,7 +29,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.0.0.2/32 ipv6_address: 2000:1234:ffff:ffff::2/128 @@ -60,7 +66,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: unnumbered loopback0 @@ -78,7 +85,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1601 service_profile: test_qos_profile @@ -96,7 +104,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.5/31 @@ -114,7 +123,8 @@ ethernet_interfaces: peer_interface: Ethernet4 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.7/31 @@ -127,7 +137,8 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet5 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.9/31 @@ -142,7 +153,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: core_router description: Custom description on core-2-ospf-ldp eth6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1602 service_profile: test_qos_profile @@ -161,7 +173,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.13/31 @@ -174,7 +187,6 @@ ethernet_interfaces: igp_sync: true speed: forced 1000full - name: Ethernet12 - type: port-channel-member peer: core-1-isis-sr-ldp peer_interface: Ethernet12 peer_type: core_router @@ -185,7 +197,6 @@ ethernet_interfaces: mode: active speed: forced 1000full - name: Ethernet13 - type: port-channel-member peer: core-1-isis-sr-ldp peer_interface: Ethernet13 peer_type: core_router @@ -201,7 +212,8 @@ port_channel_interfaces: peer_interface: Port-Channel12 peer_type: core_router description: P2P_LINK_TO_core-1-isis-sr-ldp_Port-Channel12 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.48.17/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-3-isis-sr-ldp.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-3-isis-sr-ldp.yml index dd8f0f1cae1..f48a212d8cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-3-isis-sr-ldp.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-3-isis-sr-ldp.yml @@ -12,6 +12,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -23,7 +29,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.0.0.3/32 ipv6_address: 2000:1234:ffff:ffff::3/128 @@ -38,7 +44,7 @@ loopback_interfaces: router_isis: instance: CORE log_adjacency_changes: true - net: 49.0001.0000.0001.0003.00 + net: 49.0001.0100.0000.0003.00 router_id: 10.0.0.3 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-4-multicast.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-4-multicast.yml index eac8d09615f..e317c11aae2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-4-multicast.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/core-4-multicast.yml @@ -61,6 +61,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -72,7 +78,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: LSR_Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.0.0.4/32 ipv6_address: 2000:1234:ffff:ffff::4/128 @@ -103,7 +109,8 @@ ethernet_interfaces: peer_interface: Ethernet1 peer_type: other description: P2P_LINK_TO_peer1_Ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 100.64.48.18/31 @@ -117,7 +124,8 @@ ethernet_interfaces: peer_interface: Ethernet2 peer_type: other description: P2P_LINK_TO_peer2_Ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 100.64.48.20/31 @@ -128,7 +136,8 @@ ethernet_interfaces: peer_interface: Ethernet3 peer_type: other description: P2P_LINK_TO_peer3_Ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 1600 ip_address: 100.64.48.22/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-1.yml index 3b846e069f5..7bf293b2886 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-1.yml @@ -42,6 +42,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4_sr_te: @@ -68,7 +69,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.42.1:1 @@ -83,7 +84,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.1 rd: 192.168.42.1:1000 route_targets: import: @@ -94,10 +94,10 @@ router_bgp: - address_family: evpn route_targets: - 1000:1000 + router_id: 192.168.42.1 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.1 rd: 192.168.42.1:142 route_targets: import: @@ -108,10 +108,16 @@ router_bgp: - address_family: evpn route_targets: - 142:142 + router_id: 192.168.42.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -135,12 +141,13 @@ ethernet_interfaces: peer_interface: Ethernet42 ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666_peer3_Ethernet42 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 prefix_lists: @@ -406,7 +413,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.1/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-2.yml index dde57cd973b..f0a6288c502 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-2.yml @@ -42,6 +42,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4_sr_te: @@ -68,7 +69,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.42.2:1 @@ -83,7 +84,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.2 rd: 192.168.42.2:1000 route_targets: import: @@ -94,10 +94,10 @@ router_bgp: - address_family: evpn route_targets: - 1000:1000 + router_id: 192.168.42.2 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.2 rd: 192.168.42.2:142 route_targets: import: @@ -108,10 +108,16 @@ router_bgp: - address_family: evpn route_targets: - 142:142 + router_id: 192.168.42.2 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -135,12 +141,13 @@ ethernet_interfaces: peer_interface: Ethernet42 ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666_peer3_Ethernet42 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.2/32 prefix_lists: @@ -406,7 +413,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.2/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-3.yml index 28326c1b453..8c4f0bc90bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-edge-3.yml @@ -42,6 +42,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4_sr_te: @@ -68,7 +69,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.42.3:1 @@ -83,7 +84,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.3 rd: 192.168.42.3:1000 route_targets: import: @@ -94,10 +94,10 @@ router_bgp: - address_family: evpn route_targets: - 1000:1000 + router_id: 192.168.42.3 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.3 rd: 192.168.42.3:142 route_targets: import: @@ -108,10 +108,16 @@ router_bgp: - address_family: evpn route_targets: - 142:142 + router_id: 192.168.42.3 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -135,12 +141,13 @@ ethernet_interfaces: peer_interface: Ethernet42 ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666_peer3_Ethernet42 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.3/32 prefix_lists: @@ -357,7 +364,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.3/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.yml index 8843d84a3eb..e4d91367d88 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-custom-control-plane-policy-pathfinder-1.yml @@ -64,10 +64,12 @@ router_bgp: remote_as: '65000' address_family_evpn: peer_groups: - - name: WAN-OVERLAY-PEERS - activate: true - name: WAN-RR-OVERLAY-PEERS activate: true + encapsulation: path-selection + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4_sr_te: @@ -103,7 +105,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-RR-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.44.1:1 @@ -119,6 +121,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -137,23 +144,26 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.7.7.7/31 shutdown: false - type: routed + switchport: + enabled: false description: Bouygues_Telecom_777 - name: Ethernet2 peer_type: l3_interface ip_address: 172.16.0.1/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10000 - name: Ethernet3 peer_type: l3_interface ip_address: 10.9.9.9/31 shutdown: false - type: routed + switchport: + enabled: false description: Another-ISP_999 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.44.1/32 prefix_lists: @@ -402,7 +412,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.144.1/32 flow_tracker: hardware: FLOW-TRACKER @@ -496,7 +506,11 @@ metadata: - name: Site404 id: 404 location: - address: Not Found + address: Atlantis + - name: Site405 + id: 405 + location: + address: El Dorado - name: Site422 id: 422 location: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-custom-default-policy.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-custom-default-policy.yml index e31db6ac248..8bda9503849 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-custom-default-policy.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-custom-default-policy.yml @@ -31,6 +31,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -61,7 +62,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.42.1:1 @@ -76,7 +77,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: PROD - router_id: 192.168.42.1 rd: 192.168.42.1:42 route_targets: import: @@ -87,10 +87,16 @@ router_bgp: - address_family: evpn route_targets: - '42:42' + router_id: 192.168.42.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -109,24 +115,27 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666 dhcp_client_accept_default_route: true - name: Ethernet2 peer_type: l3_interface ip_address: 172.15.5.5/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10555 - name: Ethernet3 peer_type: l3_interface ip_address: 172.20.20.20/31 shutdown: false - type: routed + switchport: + enabled: false description: Comcast-5G_AF830 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 prefix_lists: @@ -364,7 +373,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.255.1/32 flow_tracker: hardware: custom_flow_track_name diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-no-default-policy.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-no-default-policy.yml index b3d6010e133..570ed8038e1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-no-default-policy.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge-no-default-policy.yml @@ -31,6 +31,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -61,7 +62,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: default rd: 192.168.42.1:1 @@ -76,7 +77,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.1 rd: 192.168.42.1:100 route_targets: import: @@ -87,10 +87,10 @@ router_bgp: - address_family: evpn route_targets: - 100:100 + router_id: 192.168.42.1 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.1 rd: 192.168.42.1:42 route_targets: import: @@ -101,10 +101,16 @@ router_bgp: - address_family: evpn route_targets: - '42:42' + router_id: 192.168.42.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -126,24 +132,27 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666 dhcp_client_accept_default_route: true - name: Ethernet2 peer_type: l3_interface ip_address: 172.15.5.5/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10555 - name: Ethernet3 peer_type: l3_interface ip_address: 172.20.20.20/31 shutdown: false - type: routed + switchport: + enabled: false description: Comcast-5G_AF830 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 prefix_lists: @@ -370,7 +379,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.255.1/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge.yml index bd2feecebd1..236d440c1f1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge.yml @@ -60,7 +60,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 vrfs: - name: IT router_id: 192.168.42.1 @@ -135,6 +135,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4_sr_te: @@ -159,6 +160,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -186,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.1/31 - name: Ethernet52.1000 peer: site-ha-disabled-leaf @@ -195,8 +202,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet1.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet52.142 @@ -206,8 +213,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet1.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet52.666 @@ -217,8 +224,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet1.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet1 @@ -227,7 +234,8 @@ ethernet_interfaces: peer_interface: Ethernet42 ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_666_peer3_Ethernet42 flow_tracker: hardware: FLOW-TRACKER @@ -236,7 +244,8 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.15.5.5/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10555 ip_nat: service_profile: NAT-IE-DIRECT @@ -244,7 +253,8 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.15.5.6/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10555 ip_nat: service_profile: NAT-IE-DIRECT @@ -252,11 +262,12 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.20.20.20/31 shutdown: false - type: routed + switchport: + enabled: false description: Comcast-5G_AF830 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 prefix_lists: @@ -800,7 +811,7 @@ router_internet_exit: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.1/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge1.yml index 3ed6ad3f83b..1a548017125 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge1.yml @@ -54,11 +54,11 @@ router_bgp: - ip_address: 192.168.144.2 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder1 - description: cv-pathfinder-pathfinder1 + description: cv-pathfinder-pathfinder1_Dps1 - ip_address: 192.168.144.3 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder2 - description: cv-pathfinder-pathfinder2 + description: cv-pathfinder-pathfinder2_Dps1 vrfs: - name: IT router_id: 192.168.42.2 @@ -133,6 +133,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4_sr_te: @@ -157,6 +158,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -184,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.3/31 - name: Ethernet52.1000 peer: site-ha-disabled-leaf @@ -193,8 +200,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet2.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet52.142 @@ -204,8 +211,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet2.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet52.666 @@ -215,30 +222,32 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-DISABLED-LEAF_Ethernet2.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet1/49.3 peer_type: l3_interface ip_address: dhcp shutdown: false - type: l3dot1q description: Inmrasat_S511 access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet1_49.3 - encapsulation_dot1q_vlan: 3 + encapsulation_dot1q: + vlan: 3 - name: Ethernet2 peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: AWS-1_212 dhcp_client_accept_default_route: true - name: Ethernet3 peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_404 dhcp_client_accept_default_route: true ip_nat: @@ -247,21 +256,24 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false dhcp_client_accept_default_route: true - name: Ethernet5 peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false dhcp_client_accept_default_route: true - name: Ethernet1/49 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.2/32 prefix_lists: @@ -809,7 +821,7 @@ router_internet_exit: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.2/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2A.yml index 9ec1926d6f5..5de837d8695 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2A.yml @@ -56,7 +56,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.142.3 peer: cv-pathfinder-edge2B description: cv-pathfinder-edge2B @@ -152,6 +152,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -160,6 +161,7 @@ router_bgp: neighbors: - ip_address: 192.168.142.3 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -182,6 +184,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -209,7 +216,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.5/31 - name: Ethernet52.1000 peer: site-ha-enabled-leaf2A @@ -218,8 +226,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet1.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.5/31 - name: Ethernet52.142 @@ -229,8 +237,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet1.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.5/31 - name: Ethernet52.666 @@ -240,8 +248,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet1.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.5/31 - name: Ethernet53 @@ -251,7 +259,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.7/31 - name: Ethernet53.1000 peer: site-ha-enabled-leaf2B @@ -260,8 +269,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet1.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.7/31 - name: Ethernet53.142 @@ -271,8 +280,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet1.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.7/31 - name: Ethernet53.666 @@ -282,20 +291,21 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet1.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.7/31 - name: Ethernet1 peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_423-01 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.2/32 as_path: @@ -484,6 +494,8 @@ router_adaptive_virtual_topology: load_balance_policy: LB-PROD-AVT-POLICY-VOICE - name: PROD-AVT-POLICY-VIDEO load_balance_policy: LB-PROD-AVT-POLICY-VIDEO + - name: PROD-AVT-POLICY-MPLS-ONLY + load_balance_policy: LB-PROD-AVT-POLICY-MPLS-ONLY - name: PROD-AVT-POLICY-DEFAULT load_balance_policy: LB-PROD-AVT-POLICY-DEFAULT - name: DEFAULT-POLICY-DEFAULT @@ -505,6 +517,8 @@ router_adaptive_virtual_topology: id: 2 - name: PROD-AVT-POLICY-VIDEO id: 4 + - name: PROD-AVT-POLICY-MPLS-ONLY + id: 5 - name: PROD-AVT-POLICY-DEFAULT id: 1 - name: IT @@ -534,6 +548,8 @@ router_adaptive_virtual_topology: avt_profile: PROD-AVT-POLICY-VOICE - application_profile: VIDEO avt_profile: PROD-AVT-POLICY-VIDEO + - application_profile: MPLS-ONLY + avt_profile: PROD-AVT-POLICY-MPLS-ONLY - application_profile: default avt_profile: PROD-AVT-POLICY-DEFAULT - name: DEFAULT-AVT-POLICY @@ -611,6 +627,9 @@ router_path_selection: priority: 2 - name: LAN_HA loss_rate: '42.0' + - name: LB-PROD-AVT-POLICY-MPLS-ONLY + path_groups: + - name: LAN_HA - name: LB-PROD-AVT-POLICY-DEFAULT path_groups: - name: INET @@ -643,6 +662,7 @@ application_traffic_recognition: - name: VOICE applications: - name: CUSTOM-VOICE-APPLICATION + - name: MPLS-ONLY - name: APP-PROFILE-CONTROL-PLANE applications: - name: APP-CONTROL-PLANE @@ -694,7 +714,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.2/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2B.yml index 4ae89ec9817..e02b9b7d21b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge2B.yml @@ -56,7 +56,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.142.2 peer: cv-pathfinder-edge2A description: cv-pathfinder-edge2A @@ -152,6 +152,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: vxlan route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -160,6 +161,7 @@ router_bgp: neighbors: - ip_address: 192.168.142.2 activate: true + encapsulation: vxlan address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -182,6 +184,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -209,7 +216,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.9/31 - name: Ethernet52.1000 peer: site-ha-enabled-leaf2A @@ -218,8 +226,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet2.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.9/31 - name: Ethernet52.142 @@ -229,8 +237,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet2.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.9/31 - name: Ethernet52.666 @@ -240,8 +248,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2A_Ethernet2.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.9/31 - name: Ethernet53 @@ -251,7 +259,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.11/31 - name: Ethernet53.1000 peer: site-ha-enabled-leaf2B @@ -260,8 +269,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet2.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.11/31 - name: Ethernet53.142 @@ -271,8 +280,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet2.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.11/31 - name: Ethernet53.666 @@ -282,19 +291,20 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF2B_Ethernet2.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.11/31 - name: Ethernet2 peer_type: l3_interface ip_address: 172.15.6.6/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10423 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.3/32 as_path: @@ -415,31 +425,15 @@ ip_extcommunity_lists: extcommunities: soo 192.168.42.2:423 ip_security: ike_policies: - - name: DP-IKE-POLICY - local_id: 192.168.142.3 - name: CP-IKE-POLICY local_id: 192.168.142.3 sa_policies: - - name: DP-SA-POLICY - esp: - encryption: aes256gcm128 - pfs_dh_group: 14 - name: CP-SA-POLICY esp: encryption: aes256gcm128 pfs_dh_group: 14 profiles: - - name: DP-PROFILE - ike_policy: DP-IKE-POLICY - sa_policy: DP-SA-POLICY - connection: start - shared_key: ABCDEF1234567890666 - dpd: - interval: 10 - time: 50 - action: clear - mode: transport - - name: CP-PROFILE + - name: ONE-PROFILE-TO-CONTROL-THEM-ALL ike_policy: CP-IKE-POLICY sa_policy: CP-SA-POLICY connection: start @@ -450,7 +444,7 @@ ip_security: action: clear mode: transport key_controller: - profile: DP-PROFILE + profile: ONE-PROFILE-TO-CONTROL-THEM-ALL management_security: ssl_profiles: - name: profileA @@ -590,7 +584,7 @@ router_path_selection: ipv4_addresses: - 172.17.0.5 - 172.17.0.7 - ipsec_profile: DP-PROFILE + ipsec_profile: ONE-PROFILE-TO-CONTROL-THEM-ALL load_balance_policies: - name: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE path_groups: @@ -702,7 +696,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.3/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3A.yml index 441db807e92..a3e1f4889d0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3A.yml @@ -43,6 +43,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -51,6 +52,7 @@ router_bgp: neighbors: - ip_address: 192.168.142.7 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -75,7 +77,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.142.7 peer: cv-pathfinder-edge3B description: cv-pathfinder-edge3B @@ -99,7 +101,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.6 rd: 192.168.42.6:1000 route_targets: import: @@ -110,10 +111,10 @@ router_bgp: - address_family: evpn route_targets: - 1000:1000 + router_id: 192.168.42.6 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.6 rd: 192.168.42.6:142 route_targets: import: @@ -124,10 +125,16 @@ router_bgp: - address_family: evpn route_targets: - 142:142 + router_id: 192.168.42.6 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -149,20 +156,24 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_404-01 dhcp_client_accept_default_route: true - name: Ethernet52 - type: routed + switchport: + enabled: false peer_type: l3_interface peer: cv-pathfinder-edge3B shutdown: false - description: DIRECT LAN HA LINK - ip_address: 10.10.10.0/31 - flow_tracker: null + description: WAN_HA_cv-pathfinder-edge3B_Ethernet52 + ip_address: 10.10.10.1/24 + flow_tracker: + hardware: FLOW-TRACKER + mtu: 9100 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.6/32 prefix_lists: @@ -319,6 +330,8 @@ router_adaptive_virtual_topology: load_balance_policy: LB-PROD-AVT-POLICY-VOICE - name: PROD-AVT-POLICY-VIDEO load_balance_policy: LB-PROD-AVT-POLICY-VIDEO + - name: PROD-AVT-POLICY-MPLS-ONLY + load_balance_policy: LB-PROD-AVT-POLICY-MPLS-ONLY - name: PROD-AVT-POLICY-DEFAULT load_balance_policy: LB-PROD-AVT-POLICY-DEFAULT vrfs: @@ -338,6 +351,8 @@ router_adaptive_virtual_topology: id: 2 - name: PROD-AVT-POLICY-VIDEO id: 4 + - name: PROD-AVT-POLICY-MPLS-ONLY + id: 5 - name: PROD-AVT-POLICY-DEFAULT id: 1 - name: IT @@ -362,6 +377,8 @@ router_adaptive_virtual_topology: avt_profile: PROD-AVT-POLICY-VOICE - application_profile: VIDEO avt_profile: PROD-AVT-POLICY-VIDEO + - application_profile: MPLS-ONLY + avt_profile: PROD-AVT-POLICY-MPLS-ONLY - application_profile: default avt_profile: PROD-AVT-POLICY-DEFAULT - name: DEFAULT-AVT-POLICY @@ -405,7 +422,7 @@ router_path_selection: - router_ip: 192.168.142.7 name: cv-pathfinder-edge3B ipv4_addresses: - - 10.10.10.1 + - 10.10.10.2 ipsec_profile: DP-PROFILE load_balance_policies: - name: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE @@ -433,6 +450,9 @@ router_path_selection: priority: 2 - name: LAN_HA loss_rate: '42.0' + - name: LB-PROD-AVT-POLICY-MPLS-ONLY + path_groups: + - name: LAN_HA - name: LB-PROD-AVT-POLICY-DEFAULT path_groups: - name: INET @@ -461,6 +481,7 @@ application_traffic_recognition: - name: VOICE applications: - name: CUSTOM-VOICE-APPLICATION + - name: MPLS-ONLY - name: APP-PROFILE-CONTROL-PLANE applications: - name: APP-CONTROL-PLANE @@ -512,7 +533,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.6/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3B.yml index e57f91bd502..9fe0511421d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge3B.yml @@ -43,6 +43,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -51,6 +52,7 @@ router_bgp: neighbors: - ip_address: 192.168.142.6 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -75,7 +77,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.142.6 peer: cv-pathfinder-edge3A description: cv-pathfinder-edge3A @@ -99,7 +101,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.42.7 rd: 192.168.42.7:1000 route_targets: import: @@ -110,10 +111,10 @@ router_bgp: - address_family: evpn route_targets: - 1000:1000 + router_id: 192.168.42.7 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.42.7 rd: 192.168.42.7:142 route_targets: import: @@ -124,10 +125,16 @@ router_bgp: - address_family: evpn route_targets: - 142:142 + router_id: 192.168.42.7 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -149,19 +156,23 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.15.6.6/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10423 - name: Ethernet52 - type: routed + switchport: + enabled: false peer_type: l3_interface peer: cv-pathfinder-edge3A shutdown: false - description: DIRECT LAN HA LINK - ip_address: 10.10.10.1/31 - flow_tracker: null + description: WAN_HA_cv-pathfinder-edge3A_Ethernet52 + ip_address: 10.10.10.2/24 + flow_tracker: + hardware: FLOW-TRACKER + mtu: 9100 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.42.7/32 prefix_lists: @@ -411,7 +422,7 @@ router_path_selection: - router_ip: 192.168.142.6 name: cv-pathfinder-edge3A ipv4_addresses: - - 10.10.10.0 + - 10.10.10.1 ipsec_profile: DP-PROFILE load_balance_policies: - name: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE @@ -520,7 +531,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.142.7/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4A.yml new file mode 100644 index 00000000000..75d63d4996f --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4A.yml @@ -0,0 +1,632 @@ +hostname: cv-pathfinder-edge4A +is_deployed: true +router_bgp: + as: '65000' + router_id: 192.168.42.8 + bgp: + default: + ipv4_unicast: false + maximum_paths: + paths: 16 + updates: + wait_install: true + peer_groups: + - name: IPv4-UNDERLAY-PEERS + type: ipv4 + maximum_routes: 12000 + send_community: all + route_map_in: RM-BGP-UNDERLAY-PEERS-IN + route_map_out: RM-BGP-UNDERLAY-PEERS-OUT + - name: WAN-OVERLAY-PEERS + type: wan + update_source: Dps1 + bfd: true + password: htm4AZe9mIQOO1uiMuGgYQ== + send_community: all + maximum_routes: 0 + remote_as: '65000' + ttl_maximum_hops: 1 + bfd_timers: + interval: 1000 + min_rx: 1000 + multiplier: 10 + address_family_ipv4: + peer_groups: + - name: IPv4-UNDERLAY-PEERS + activate: true + - name: WAN-OVERLAY-PEERS + activate: false + redistribute_routes: + - source_protocol: connected + route_map: RM-CONN-2-BGP + address_family_evpn: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection + route_map_in: RM-EVPN-SOO-IN + route_map_out: RM-EVPN-SOO-OUT + neighbor_default: + next_hop_self_received_evpn_routes: + enable: true + neighbors: + - ip_address: 192.168.142.9 + activate: true + encapsulation: path-selection + address_family_ipv4_sr_te: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + address_family_link_state: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + path_selection: + roles: + producer: true + address_family_path_selection: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + bgp: + additional_paths: + receive: true + send: + any: true + neighbors: + - ip_address: 192.168.144.1 + peer_group: WAN-OVERLAY-PEERS + peer: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 + - ip_address: 192.168.142.9 + peer: cv-pathfinder-edge4B + description: cv-pathfinder-edge4B + remote_as: '65000' + update_source: Dps1 + route_reflector_client: true + send_community: all + route_map_in: RM-WAN-HA-PEER-IN + route_map_out: RM-WAN-HA-PEER-OUT + vrfs: + - name: default + rd: 192.168.42.8:1 + route_targets: + import: + - address_family: evpn + route_targets: + - '1:1' + export: + - address_family: evpn + route_targets: + - '1:1' + - route-map RM-EVPN-EXPORT-VRF-DEFAULT + - name: IT + rd: 192.168.42.8:1000 + route_targets: + import: + - address_family: evpn + route_targets: + - 1000:1000 + export: + - address_family: evpn + route_targets: + - 1000:1000 + router_id: 192.168.42.8 + redistribute_routes: + - source_protocol: connected + - name: PROD + rd: 192.168.42.8:142 + route_targets: + import: + - address_family: evpn + route_targets: + - 142:142 + export: + - address_family: evpn + route_targets: + - 142:142 + router_id: 192.168.42.8 + redistribute_routes: + - source_protocol: connected +service_routing_protocols_model: multi-agent +ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: false +spanning_tree: + mode: none +vrfs: +- name: MGMT + ip_routing: false +- name: IT + tenant: TenantA + ip_routing: true +- name: PROD + tenant: TenantA + ip_routing: true +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +ethernet_interfaces: +- name: Ethernet1.42 + peer_type: l3_interface + ip_address: dhcp + shutdown: false + description: Comcast + encapsulation_dot1q: + vlan: 42 + dhcp_client_accept_default_route: true +- name: Ethernet1 + switchport: + enabled: false + peer_type: l3_interface + shutdown: false +- name: Ethernet42 + peer_type: wan_ha_peer + peer_interface: Ethernet42 + peer: cv-pathfinder-edge4B + description: WAN_HA_cv-pathfinder-edge4B_Ethernet42 + shutdown: false + channel_group: + id: 666 + mode: active + mtu: 9194 +- name: Ethernet43 + peer_type: wan_ha_peer + peer_interface: Ethernet43 + peer: cv-pathfinder-edge4B + description: WAN_HA_cv-pathfinder-edge4B_Ethernet43 + shutdown: false + channel_group: + id: 666 + mode: active + mtu: 9194 +port_channel_interfaces: +- name: Port-Channel666 + switchport: + enabled: false + peer_type: l3_interface + peer_interface: Port-Channel666 + peer: cv-pathfinder-edge4B + shutdown: false + description: WAN_HA_cv-pathfinder-edge4B_Port-Channel666 + ip_address: 10.10.10.1/24 + flow_tracker: + hardware: FLOW-TRACKER + mtu: 9194 +loopback_interfaces: +- name: Loopback0 + description: ROUTER_ID + shutdown: false + ip_address: 192.168.42.8/32 +prefix_lists: +- name: PL-LOOPBACKS-EVPN-OVERLAY + sequence_numbers: + - sequence: 10 + action: permit 192.168.42.0/24 eq 32 +route_maps: +- name: RM-CONN-2-BGP + sequence_numbers: + - sequence: 10 + type: permit + match: + - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-BGP-UNDERLAY-PEERS-IN + sequence_numbers: + - sequence: 40 + type: permit + description: Mark prefixes originated from the LAN + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-BGP-UNDERLAY-PEERS-OUT + sequence_numbers: + - sequence: 10 + type: permit + description: Make routes learned from WAN HA peer less preferred on LAN routers + match: + - tag 50 + - route-type internal + set: + - metric 50 + - sequence: 20 + type: permit +- name: RM-EVPN-SOO-IN + sequence_numbers: + - sequence: 10 + type: deny + match: + - extcommunity ECL-EVPN-SOO + - sequence: 20 + type: permit +- name: RM-EVPN-SOO-OUT + sequence_numbers: + - sequence: 10 + type: permit + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-WAN-HA-PEER-IN + sequence_numbers: + - sequence: 10 + type: permit + description: Set tag 50 on routes received from HA peer over EVPN + set: + - tag 50 +- name: RM-WAN-HA-PEER-OUT + sequence_numbers: + - sequence: 10 + type: permit + description: Make EVPN routes learned from WAN less preferred on HA peer + match: + - route-type internal + set: + - local-preference 50 + - sequence: 20 + type: permit + description: Make locally injected routes less preferred on HA peer + set: + - local-preference 75 +- name: RM-EVPN-EXPORT-VRF-DEFAULT + sequence_numbers: + - sequence: 10 + type: permit + match: + - extcommunity ECL-EVPN-SOO +agents: +- name: KernelFib + environment_variables: + - name: KERNELFIB_PROGRAM_ALL_ECMP + value: '1' +ip_extcommunity_lists: +- name: ECL-EVPN-SOO + entries: + - type: permit + extcommunities: soo 192.168.42.8:405 +ip_security: + ike_policies: + - name: CP-IKE-POLICY + local_id: 192.168.142.8 + sa_policies: + - name: DP-SA-POLICY + esp: + encryption: aes256gcm128 + pfs_dh_group: 14 + - name: CP-SA-POLICY + esp: + encryption: aes256gcm128 + pfs_dh_group: 14 + profiles: + - name: DP-PROFILE + sa_policy: DP-SA-POLICY + connection: start + shared_key: ABCDEF1234567890666 + dpd: + interval: 10 + time: 50 + action: clear + mode: transport + - name: CP-PROFILE + ike_policy: CP-IKE-POLICY + sa_policy: CP-SA-POLICY + connection: start + shared_key: ABCDEF1234567890 + dpd: + interval: 10 + time: 50 + action: clear + mode: transport + key_controller: + profile: DP-PROFILE +management_security: + ssl_profiles: + - name: profileA + certificate: + file: profileA.crt + key: profileA.key + trust_certificate: + certificates: + - aristaDeviceCertProvisionerDefaultRootCA.crt + tls_versions: '1.2' +router_adaptive_virtual_topology: + topology_role: transit region + region: + name: AVD_Land_West + id: 42 + zone: + name: AVD_Land_West-ZONE + id: 1 + site: + name: Site405 + id: 405 + profiles: + - name: DEFAULT-AVT-POLICY-CONTROL-PLANE + load_balance_policy: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + - name: DEFAULT-AVT-POLICY-VIDEO + load_balance_policy: LB-DEFAULT-AVT-POLICY-VIDEO + - name: DEFAULT-AVT-POLICY-DEFAULT + load_balance_policy: LB-DEFAULT-AVT-POLICY-DEFAULT + - name: PROD-AVT-POLICY-VOICE + load_balance_policy: LB-PROD-AVT-POLICY-VOICE + - name: PROD-AVT-POLICY-VIDEO + load_balance_policy: LB-PROD-AVT-POLICY-VIDEO + - name: PROD-AVT-POLICY-MPLS-ONLY + load_balance_policy: LB-PROD-AVT-POLICY-MPLS-ONLY + - name: PROD-AVT-POLICY-DEFAULT + load_balance_policy: LB-PROD-AVT-POLICY-DEFAULT + vrfs: + - name: default + policy: DEFAULT-AVT-POLICY-WITH-CP + profiles: + - name: DEFAULT-AVT-POLICY-CONTROL-PLANE + id: 254 + - name: DEFAULT-AVT-POLICY-VIDEO + id: 3 + - name: DEFAULT-AVT-POLICY-DEFAULT + id: 1 + - name: PROD + policy: PROD-AVT-POLICY + profiles: + - name: PROD-AVT-POLICY-VOICE + id: 2 + - name: PROD-AVT-POLICY-VIDEO + id: 4 + - name: PROD-AVT-POLICY-MPLS-ONLY + id: 5 + - name: PROD-AVT-POLICY-DEFAULT + id: 1 + - name: IT + policy: DEFAULT-AVT-POLICY + profiles: + - name: DEFAULT-AVT-POLICY-VIDEO + id: 3 + - name: DEFAULT-AVT-POLICY-DEFAULT + id: 1 + policies: + - name: DEFAULT-AVT-POLICY-WITH-CP + matches: + - application_profile: APP-PROFILE-CONTROL-PLANE + avt_profile: DEFAULT-AVT-POLICY-CONTROL-PLANE + - application_profile: VIDEO + avt_profile: DEFAULT-AVT-POLICY-VIDEO + - application_profile: default + avt_profile: DEFAULT-AVT-POLICY-DEFAULT + - name: PROD-AVT-POLICY + matches: + - application_profile: VOICE + avt_profile: PROD-AVT-POLICY-VOICE + - application_profile: VIDEO + avt_profile: PROD-AVT-POLICY-VIDEO + - application_profile: MPLS-ONLY + avt_profile: PROD-AVT-POLICY-MPLS-ONLY + - application_profile: default + avt_profile: PROD-AVT-POLICY-DEFAULT + - name: DEFAULT-AVT-POLICY + matches: + - application_profile: VIDEO + avt_profile: DEFAULT-AVT-POLICY-VIDEO + - application_profile: default + avt_profile: DEFAULT-AVT-POLICY-DEFAULT +router_bfd: + multihop: + interval: 300 + min_rx: 300 + multiplier: 3 +router_path_selection: + tcp_mss_ceiling: + ipv4_segment_size: auto + path_groups: + - name: INET + id: 101 + local_interfaces: + - name: Ethernet1.42 + stun: + server_profiles: + - INET-cv-pathfinder-pathfinder-Ethernet1 + - INET-cv-pathfinder-pathfinder-Ethernet3 + dynamic_peers: + enabled: true + static_peers: + - router_ip: 192.168.144.1 + name: cv-pathfinder-pathfinder + ipv4_addresses: + - 172.17.7.7 + - 10.9.9.9 + ipsec_profile: CP-PROFILE + - name: LAN_HA + id: 65535 + flow_assignment: lan + local_interfaces: + - name: Port-Channel666 + static_peers: + - router_ip: 192.168.142.9 + name: cv-pathfinder-edge4B + ipv4_addresses: + - 10.10.10.2 + load_balance_policies: + - name: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + path_groups: + - name: INET + - name: LAN_HA + - name: LB-DEFAULT-AVT-POLICY-VIDEO + path_groups: + - name: INET + - name: LAN_HA + - name: LB-DEFAULT-AVT-POLICY-DEFAULT + path_groups: + - name: INET + - name: LAN_HA + - name: LB-PROD-AVT-POLICY-VOICE + path_groups: + - name: INET + priority: 2 + - name: LAN_HA + jitter: 42 + lowest_hop_count: true + - name: LB-PROD-AVT-POLICY-VIDEO + path_groups: + - name: INET + priority: 2 + - name: LAN_HA + loss_rate: '42.0' + - name: LB-PROD-AVT-POLICY-MPLS-ONLY + path_groups: + - name: LAN_HA + - name: LB-PROD-AVT-POLICY-DEFAULT + path_groups: + - name: INET + - name: LAN_HA +router_traffic_engineering: + enabled: true +stun: + client: + server_profiles: + - name: INET-cv-pathfinder-pathfinder-Ethernet1 + ip_address: 172.17.7.7 + ssl_profile: profileA + - name: INET-cv-pathfinder-pathfinder-Ethernet3 + ip_address: 10.9.9.9 + ssl_profile: profileA +application_traffic_recognition: + application_profiles: + - name: VIDEO + categories: + - name: VIDEO1 + applications: + - name: CUSTOM-APPLICATION-1 + - name: skype + application_transports: + - rtp + - name: VOICE + applications: + - name: CUSTOM-VOICE-APPLICATION + - name: MPLS-ONLY + - name: APP-PROFILE-CONTROL-PLANE + applications: + - name: APP-CONTROL-PLANE + categories: + - name: VIDEO1 + applications: + - name: CUSTOM-APPLICATION-2 + - name: CUSTOM-DSCP-APPLICATION + - name: microsoft-teams + applications: + ipv4_applications: + - name: CUSTOM-APPLICATION-1 + protocols: + - tcp + src_prefix_set_name: CUSTOM-SRC-PREFIX-1 + dest_prefix_set_name: CUSTOM-DEST-PREFIX-1 + - name: CUSTOM-APPLICATION-2 + protocols: + - tcp + tcp_src_port_set_name: TCP-SRC-2 + tcp_dest_port_set_name: TCP-DEST-2 + - name: CUSTOM-DSCP-APPLICATION + dscp_ranges: + - ef + - 12-14 + - cs6 + - '42' + - name: APP-CONTROL-PLANE + dest_prefix_set_name: PFX-PATHFINDERS + field_sets: + l4_ports: + - name: TCP-SRC-2 + port_values: + - '42' + - name: TCP-DEST-2 + port_values: + - '666' + - '777' + ipv4_prefixes: + - name: CUSTOM-SRC-PREFIX-1 + prefix_values: + - 42.42.42.0/24 + - name: CUSTOM-DEST-PREFIX-1 + prefix_values: + - 6.6.6.0/24 + - name: PFX-PATHFINDERS + prefix_values: + - 192.168.144.1/32 +dps_interfaces: +- name: Dps1 + description: DPS Interface + mtu: 9194 + ip_address: 192.168.142.8/32 + flow_tracker: + hardware: FLOW-TRACKER +vxlan_interface: + vxlan1: + description: cv-pathfinder-edge4A_VTEP + vxlan: + udp_port: 4789 + source_interface: Dps1 + vrfs: + - name: default + vni: 1 + - name: IT + vni: 100 + - name: PROD + vni: 42 +flow_tracking: + hardware: + trackers: + - name: FLOW-TRACKER + record_export: + on_inactive_timeout: 70000 + on_interval: 300000 + exporters: + - name: CV-TELEMETRY + collector: + host: 127.0.0.1 + local_interface: Loopback0 + template_interval: 3600000 + shutdown: false +metadata: + cv_tags: + device_tags: + - name: Role + value: transit region + - name: Region + value: AVD_Land_West + - name: Zone + value: AVD_Land_West-ZONE + - name: Site + value: Site405 + interface_tags: + - interface: Ethernet1.42 + tags: + - name: Type + value: wan + - name: Carrier + value: Comcast + - interface: Ethernet1 + tags: + - name: Type + value: lan + - interface: Ethernet42 + tags: + - name: Type + value: lan + - interface: Ethernet43 + tags: + - name: Type + value: lan + cv_pathfinder: + role: transit region + ssl_profile: profileA + vtep_ip: 192.168.142.8 + region: AVD_Land_West + zone: AVD_Land_West-ZONE + site: Site405 + interfaces: + - name: Ethernet1.42 + carrier: Comcast + pathgroup: INET + pathfinders: + - vtep_ip: 192.168.144.1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4B.yml new file mode 100644 index 00000000000..4cd19e54f94 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-edge4B.yml @@ -0,0 +1,632 @@ +hostname: cv-pathfinder-edge4B +is_deployed: true +router_bgp: + as: '65000' + router_id: 192.168.42.9 + bgp: + default: + ipv4_unicast: false + maximum_paths: + paths: 16 + updates: + wait_install: true + peer_groups: + - name: IPv4-UNDERLAY-PEERS + type: ipv4 + maximum_routes: 12000 + send_community: all + route_map_in: RM-BGP-UNDERLAY-PEERS-IN + route_map_out: RM-BGP-UNDERLAY-PEERS-OUT + - name: WAN-OVERLAY-PEERS + type: wan + update_source: Dps1 + bfd: true + password: htm4AZe9mIQOO1uiMuGgYQ== + send_community: all + maximum_routes: 0 + remote_as: '65000' + ttl_maximum_hops: 1 + bfd_timers: + interval: 1000 + min_rx: 1000 + multiplier: 10 + address_family_ipv4: + peer_groups: + - name: IPv4-UNDERLAY-PEERS + activate: true + - name: WAN-OVERLAY-PEERS + activate: false + redistribute_routes: + - source_protocol: connected + route_map: RM-CONN-2-BGP + address_family_evpn: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection + route_map_in: RM-EVPN-SOO-IN + route_map_out: RM-EVPN-SOO-OUT + neighbor_default: + next_hop_self_received_evpn_routes: + enable: true + neighbors: + - ip_address: 192.168.142.8 + activate: true + encapsulation: path-selection + address_family_ipv4_sr_te: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + address_family_link_state: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + path_selection: + roles: + producer: true + address_family_path_selection: + peer_groups: + - name: WAN-OVERLAY-PEERS + activate: true + bgp: + additional_paths: + receive: true + send: + any: true + neighbors: + - ip_address: 192.168.144.1 + peer_group: WAN-OVERLAY-PEERS + peer: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 + - ip_address: 192.168.142.8 + peer: cv-pathfinder-edge4A + description: cv-pathfinder-edge4A + remote_as: '65000' + update_source: Dps1 + route_reflector_client: true + send_community: all + route_map_in: RM-WAN-HA-PEER-IN + route_map_out: RM-WAN-HA-PEER-OUT + vrfs: + - name: default + rd: 192.168.42.9:1 + route_targets: + import: + - address_family: evpn + route_targets: + - '1:1' + export: + - address_family: evpn + route_targets: + - '1:1' + - route-map RM-EVPN-EXPORT-VRF-DEFAULT + - name: IT + rd: 192.168.42.9:1000 + route_targets: + import: + - address_family: evpn + route_targets: + - 1000:1000 + export: + - address_family: evpn + route_targets: + - 1000:1000 + router_id: 192.168.42.9 + redistribute_routes: + - source_protocol: connected + - name: PROD + rd: 192.168.42.9:142 + route_targets: + import: + - address_family: evpn + route_targets: + - 142:142 + export: + - address_family: evpn + route_targets: + - 142:142 + router_id: 192.168.42.9 + redistribute_routes: + - source_protocol: connected +service_routing_protocols_model: multi-agent +ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: false +spanning_tree: + mode: none +vrfs: +- name: MGMT + ip_routing: false +- name: IT + tenant: TenantA + ip_routing: true +- name: PROD + tenant: TenantA + ip_routing: true +management_api_http: + enable_vrfs: + - name: MGMT + enable_https: true +ethernet_interfaces: +- name: Ethernet1.42 + peer_type: l3_interface + ip_address: dhcp + shutdown: false + description: Comcast + encapsulation_dot1q: + vlan: 42 + dhcp_client_accept_default_route: true +- name: Ethernet1 + switchport: + enabled: false + peer_type: l3_interface + shutdown: false +- name: Ethernet42 + peer_type: wan_ha_peer + peer_interface: Ethernet42 + peer: cv-pathfinder-edge4A + description: WAN_HA_cv-pathfinder-edge4A_Ethernet42 + shutdown: false + channel_group: + id: 666 + mode: active + mtu: 9194 +- name: Ethernet43 + peer_type: wan_ha_peer + peer_interface: Ethernet43 + peer: cv-pathfinder-edge4A + description: WAN_HA_cv-pathfinder-edge4A_Ethernet43 + shutdown: false + channel_group: + id: 666 + mode: active + mtu: 9194 +port_channel_interfaces: +- name: Port-Channel666 + switchport: + enabled: false + peer_type: l3_interface + peer_interface: Port-Channel666 + peer: cv-pathfinder-edge4A + shutdown: false + description: WAN_HA_cv-pathfinder-edge4A_Port-Channel666 + ip_address: 10.10.10.2/24 + flow_tracker: + hardware: FLOW-TRACKER + mtu: 9194 +loopback_interfaces: +- name: Loopback0 + description: ROUTER_ID + shutdown: false + ip_address: 192.168.42.9/32 +prefix_lists: +- name: PL-LOOPBACKS-EVPN-OVERLAY + sequence_numbers: + - sequence: 10 + action: permit 192.168.42.0/24 eq 32 +route_maps: +- name: RM-CONN-2-BGP + sequence_numbers: + - sequence: 10 + type: permit + match: + - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-BGP-UNDERLAY-PEERS-IN + sequence_numbers: + - sequence: 40 + type: permit + description: Mark prefixes originated from the LAN + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-BGP-UNDERLAY-PEERS-OUT + sequence_numbers: + - sequence: 10 + type: permit + description: Make routes learned from WAN HA peer less preferred on LAN routers + match: + - tag 50 + - route-type internal + set: + - metric 50 + - sequence: 20 + type: permit +- name: RM-EVPN-SOO-IN + sequence_numbers: + - sequence: 10 + type: deny + match: + - extcommunity ECL-EVPN-SOO + - sequence: 20 + type: permit +- name: RM-EVPN-SOO-OUT + sequence_numbers: + - sequence: 10 + type: permit + set: + - extcommunity soo 192.168.42.8:405 additive +- name: RM-WAN-HA-PEER-IN + sequence_numbers: + - sequence: 10 + type: permit + description: Set tag 50 on routes received from HA peer over EVPN + set: + - tag 50 +- name: RM-WAN-HA-PEER-OUT + sequence_numbers: + - sequence: 10 + type: permit + description: Make EVPN routes learned from WAN less preferred on HA peer + match: + - route-type internal + set: + - local-preference 50 + - sequence: 20 + type: permit + description: Make locally injected routes less preferred on HA peer + set: + - local-preference 75 +- name: RM-EVPN-EXPORT-VRF-DEFAULT + sequence_numbers: + - sequence: 10 + type: permit + match: + - extcommunity ECL-EVPN-SOO +agents: +- name: KernelFib + environment_variables: + - name: KERNELFIB_PROGRAM_ALL_ECMP + value: '1' +ip_extcommunity_lists: +- name: ECL-EVPN-SOO + entries: + - type: permit + extcommunities: soo 192.168.42.8:405 +ip_security: + ike_policies: + - name: CP-IKE-POLICY + local_id: 192.168.142.9 + sa_policies: + - name: DP-SA-POLICY + esp: + encryption: aes256gcm128 + pfs_dh_group: 14 + - name: CP-SA-POLICY + esp: + encryption: aes256gcm128 + pfs_dh_group: 14 + profiles: + - name: DP-PROFILE + sa_policy: DP-SA-POLICY + connection: start + shared_key: ABCDEF1234567890666 + dpd: + interval: 10 + time: 50 + action: clear + mode: transport + - name: CP-PROFILE + ike_policy: CP-IKE-POLICY + sa_policy: CP-SA-POLICY + connection: start + shared_key: ABCDEF1234567890 + dpd: + interval: 10 + time: 50 + action: clear + mode: transport + key_controller: + profile: DP-PROFILE +management_security: + ssl_profiles: + - name: profileA + certificate: + file: profileA.crt + key: profileA.key + trust_certificate: + certificates: + - aristaDeviceCertProvisionerDefaultRootCA.crt + tls_versions: '1.2' +router_adaptive_virtual_topology: + topology_role: transit region + region: + name: AVD_Land_West + id: 42 + zone: + name: AVD_Land_West-ZONE + id: 1 + site: + name: Site405 + id: 405 + profiles: + - name: DEFAULT-AVT-POLICY-CONTROL-PLANE + load_balance_policy: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + - name: DEFAULT-AVT-POLICY-VIDEO + load_balance_policy: LB-DEFAULT-AVT-POLICY-VIDEO + - name: DEFAULT-AVT-POLICY-DEFAULT + load_balance_policy: LB-DEFAULT-AVT-POLICY-DEFAULT + - name: PROD-AVT-POLICY-VOICE + load_balance_policy: LB-PROD-AVT-POLICY-VOICE + - name: PROD-AVT-POLICY-VIDEO + load_balance_policy: LB-PROD-AVT-POLICY-VIDEO + - name: PROD-AVT-POLICY-MPLS-ONLY + load_balance_policy: LB-PROD-AVT-POLICY-MPLS-ONLY + - name: PROD-AVT-POLICY-DEFAULT + load_balance_policy: LB-PROD-AVT-POLICY-DEFAULT + vrfs: + - name: default + policy: DEFAULT-AVT-POLICY-WITH-CP + profiles: + - name: DEFAULT-AVT-POLICY-CONTROL-PLANE + id: 254 + - name: DEFAULT-AVT-POLICY-VIDEO + id: 3 + - name: DEFAULT-AVT-POLICY-DEFAULT + id: 1 + - name: PROD + policy: PROD-AVT-POLICY + profiles: + - name: PROD-AVT-POLICY-VOICE + id: 2 + - name: PROD-AVT-POLICY-VIDEO + id: 4 + - name: PROD-AVT-POLICY-MPLS-ONLY + id: 5 + - name: PROD-AVT-POLICY-DEFAULT + id: 1 + - name: IT + policy: DEFAULT-AVT-POLICY + profiles: + - name: DEFAULT-AVT-POLICY-VIDEO + id: 3 + - name: DEFAULT-AVT-POLICY-DEFAULT + id: 1 + policies: + - name: DEFAULT-AVT-POLICY-WITH-CP + matches: + - application_profile: APP-PROFILE-CONTROL-PLANE + avt_profile: DEFAULT-AVT-POLICY-CONTROL-PLANE + - application_profile: VIDEO + avt_profile: DEFAULT-AVT-POLICY-VIDEO + - application_profile: default + avt_profile: DEFAULT-AVT-POLICY-DEFAULT + - name: PROD-AVT-POLICY + matches: + - application_profile: VOICE + avt_profile: PROD-AVT-POLICY-VOICE + - application_profile: VIDEO + avt_profile: PROD-AVT-POLICY-VIDEO + - application_profile: MPLS-ONLY + avt_profile: PROD-AVT-POLICY-MPLS-ONLY + - application_profile: default + avt_profile: PROD-AVT-POLICY-DEFAULT + - name: DEFAULT-AVT-POLICY + matches: + - application_profile: VIDEO + avt_profile: DEFAULT-AVT-POLICY-VIDEO + - application_profile: default + avt_profile: DEFAULT-AVT-POLICY-DEFAULT +router_bfd: + multihop: + interval: 300 + min_rx: 300 + multiplier: 3 +router_path_selection: + tcp_mss_ceiling: + ipv4_segment_size: auto + path_groups: + - name: INET + id: 101 + local_interfaces: + - name: Ethernet1.42 + stun: + server_profiles: + - INET-cv-pathfinder-pathfinder-Ethernet1 + - INET-cv-pathfinder-pathfinder-Ethernet3 + dynamic_peers: + enabled: true + static_peers: + - router_ip: 192.168.144.1 + name: cv-pathfinder-pathfinder + ipv4_addresses: + - 172.17.7.7 + - 10.9.9.9 + ipsec_profile: CP-PROFILE + - name: LAN_HA + id: 65535 + flow_assignment: lan + local_interfaces: + - name: Port-Channel666 + static_peers: + - router_ip: 192.168.142.8 + name: cv-pathfinder-edge4A + ipv4_addresses: + - 10.10.10.1 + load_balance_policies: + - name: LB-DEFAULT-AVT-POLICY-CONTROL-PLANE + path_groups: + - name: INET + - name: LAN_HA + - name: LB-DEFAULT-AVT-POLICY-VIDEO + path_groups: + - name: INET + - name: LAN_HA + - name: LB-DEFAULT-AVT-POLICY-DEFAULT + path_groups: + - name: INET + - name: LAN_HA + - name: LB-PROD-AVT-POLICY-VOICE + path_groups: + - name: INET + priority: 2 + - name: LAN_HA + jitter: 42 + lowest_hop_count: true + - name: LB-PROD-AVT-POLICY-VIDEO + path_groups: + - name: INET + priority: 2 + - name: LAN_HA + loss_rate: '42.0' + - name: LB-PROD-AVT-POLICY-MPLS-ONLY + path_groups: + - name: LAN_HA + - name: LB-PROD-AVT-POLICY-DEFAULT + path_groups: + - name: INET + - name: LAN_HA +router_traffic_engineering: + enabled: true +stun: + client: + server_profiles: + - name: INET-cv-pathfinder-pathfinder-Ethernet1 + ip_address: 172.17.7.7 + ssl_profile: profileA + - name: INET-cv-pathfinder-pathfinder-Ethernet3 + ip_address: 10.9.9.9 + ssl_profile: profileA +application_traffic_recognition: + application_profiles: + - name: VIDEO + categories: + - name: VIDEO1 + applications: + - name: CUSTOM-APPLICATION-1 + - name: skype + application_transports: + - rtp + - name: VOICE + applications: + - name: CUSTOM-VOICE-APPLICATION + - name: MPLS-ONLY + - name: APP-PROFILE-CONTROL-PLANE + applications: + - name: APP-CONTROL-PLANE + categories: + - name: VIDEO1 + applications: + - name: CUSTOM-APPLICATION-2 + - name: CUSTOM-DSCP-APPLICATION + - name: microsoft-teams + applications: + ipv4_applications: + - name: CUSTOM-APPLICATION-1 + protocols: + - tcp + src_prefix_set_name: CUSTOM-SRC-PREFIX-1 + dest_prefix_set_name: CUSTOM-DEST-PREFIX-1 + - name: CUSTOM-APPLICATION-2 + protocols: + - tcp + tcp_src_port_set_name: TCP-SRC-2 + tcp_dest_port_set_name: TCP-DEST-2 + - name: CUSTOM-DSCP-APPLICATION + dscp_ranges: + - ef + - 12-14 + - cs6 + - '42' + - name: APP-CONTROL-PLANE + dest_prefix_set_name: PFX-PATHFINDERS + field_sets: + l4_ports: + - name: TCP-SRC-2 + port_values: + - '42' + - name: TCP-DEST-2 + port_values: + - '666' + - '777' + ipv4_prefixes: + - name: CUSTOM-SRC-PREFIX-1 + prefix_values: + - 42.42.42.0/24 + - name: CUSTOM-DEST-PREFIX-1 + prefix_values: + - 6.6.6.0/24 + - name: PFX-PATHFINDERS + prefix_values: + - 192.168.144.1/32 +dps_interfaces: +- name: Dps1 + description: DPS Interface + mtu: 9194 + ip_address: 192.168.142.9/32 + flow_tracker: + hardware: FLOW-TRACKER +vxlan_interface: + vxlan1: + description: cv-pathfinder-edge4B_VTEP + vxlan: + udp_port: 4789 + source_interface: Dps1 + vrfs: + - name: default + vni: 1 + - name: IT + vni: 100 + - name: PROD + vni: 42 +flow_tracking: + hardware: + trackers: + - name: FLOW-TRACKER + record_export: + on_inactive_timeout: 70000 + on_interval: 300000 + exporters: + - name: CV-TELEMETRY + collector: + host: 127.0.0.1 + local_interface: Loopback0 + template_interval: 3600000 + shutdown: false +metadata: + cv_tags: + device_tags: + - name: Role + value: transit region + - name: Region + value: AVD_Land_West + - name: Zone + value: AVD_Land_West-ZONE + - name: Site + value: Site405 + interface_tags: + - interface: Ethernet1.42 + tags: + - name: Type + value: wan + - name: Carrier + value: Comcast + - interface: Ethernet1 + tags: + - name: Type + value: lan + - interface: Ethernet42 + tags: + - name: Type + value: lan + - interface: Ethernet43 + tags: + - name: Type + value: lan + cv_pathfinder: + role: transit region + ssl_profile: profileA + vtep_ip: 192.168.142.9 + region: AVD_Land_West + zone: AVD_Land_West-ZONE + site: Site405 + interfaces: + - name: Ethernet1.42 + carrier: Comcast + pathgroup: INET + pathfinders: + - vtep_ip: 192.168.144.1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder.yml index 9f279a58c4c..b901cf77a1a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder.yml @@ -51,6 +51,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4_sr_te: @@ -91,6 +92,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -109,23 +115,26 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.7.7.7/31 shutdown: false - type: routed + switchport: + enabled: false description: Bouygues_Telecom_777 - name: Ethernet2/2 peer_type: l3_interface ip_address: 172.16.0.1/31 shutdown: false - type: routed + switchport: + enabled: false description: Colt_10000 - name: Ethernet3 peer_type: l3_interface ip_address: 10.9.9.9/31 shutdown: false - type: routed + switchport: + enabled: false description: Another-ISP_999 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.44.1/32 prefix_lists: @@ -470,7 +479,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.144.1/32 flow_tracker: hardware: FLOW-TRACKER @@ -574,7 +583,11 @@ metadata: - name: Site404 id: 404 location: - address: Not Found + address: Atlantis + - name: Site405 + id: 405 + location: + address: El Dorado - name: Site422 id: 422 location: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder1.yml index 9d4daaffbd1..e1a7ea9fbd9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder1.yml @@ -64,10 +64,12 @@ router_bgp: remote_as: '65000' address_family_evpn: peer_groups: - - name: WAN-OVERLAY-PEERS - activate: true - name: WAN-RR-OVERLAY-PEERS activate: true + encapsulation: path-selection + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4_sr_te: @@ -103,11 +105,11 @@ router_bgp: - ip_address: 192.168.144.3 peer_group: WAN-RR-OVERLAY-PEERS peer: cv-pathfinder-pathfinder2 - description: cv-pathfinder-pathfinder2 + description: cv-pathfinder-pathfinder2_Dps1 - ip_address: 6.6.6.6 peer_group: WAN-RR-OVERLAY-PEERS peer: cv-pathfinder-pathfinder3 - description: cv-pathfinder-pathfinder3 + description: cv-pathfinder-pathfinder3_Dps1 vrfs: - name: default rd: 192.168.44.2:1 @@ -123,6 +125,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -141,11 +148,12 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.8.8.8/31 shutdown: false - type: routed + switchport: + enabled: false description: Orange_888 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.44.2/32 prefix_lists: @@ -488,7 +496,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.144.2/32 flow_tracker: hardware: FLOW-TRACKER @@ -583,7 +591,11 @@ metadata: - name: Site404 id: 404 location: - address: Not Found + address: Atlantis + - name: Site405 + id: 405 + location: + address: El Dorado - name: Site422 id: 422 location: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder2.yml index 6aca5ebcd4c..ccec3bd5e3a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-pathfinder2.yml @@ -64,10 +64,12 @@ router_bgp: remote_as: '65000' address_family_evpn: peer_groups: - - name: WAN-OVERLAY-PEERS - activate: true - name: WAN-RR-OVERLAY-PEERS activate: true + encapsulation: path-selection + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4_sr_te: @@ -103,11 +105,11 @@ router_bgp: - ip_address: 192.168.144.2 peer_group: WAN-RR-OVERLAY-PEERS peer: cv-pathfinder-pathfinder1 - description: cv-pathfinder-pathfinder1 + description: cv-pathfinder-pathfinder1_Dps1 - ip_address: 6.6.6.6 peer_group: WAN-RR-OVERLAY-PEERS peer: cv-pathfinder-pathfinder3 - description: cv-pathfinder-pathfinder3 + description: cv-pathfinder-pathfinder3_Dps1 vrfs: - name: default rd: 192.168.44.3:1 @@ -123,6 +125,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -141,17 +148,19 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.9.9.9/31 shutdown: false - type: routed + switchport: + enabled: false description: SFR_999 - name: Ethernet2 peer_type: l3_interface ip_address: 172.19.9.9/31 shutdown: false - type: routed + switchport: + enabled: false description: ATT-MPLS_10999 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.44.3/32 prefix_lists: @@ -505,7 +514,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.144.3/32 flow_tracker: hardware: FLOW-TRACKER @@ -603,7 +612,11 @@ metadata: - name: Site404 id: 404 location: - address: Not Found + address: Atlantis + - name: Site405 + id: 405 + location: + address: El Dorado - name: Site422 id: 422 location: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1A.yml index d83615a98e0..d2550b41125 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1A.yml @@ -51,7 +51,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.143.2 peer: cv-pathfinder-transit1B description: cv-pathfinder-transit1B @@ -136,7 +136,6 @@ router_bgp: redistribute_routes: - source_protocol: connected - name: TRANSIT - router_id: 192.168.43.1 rd: 192.168.43.1:66 route_targets: import: @@ -147,12 +146,14 @@ router_bgp: - address_family: evpn route_targets: - 66:66 + router_id: 192.168.43.1 redistribute_routes: - source_protocol: connected address_family_evpn: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -161,6 +162,7 @@ router_bgp: neighbors: - ip_address: 192.168.143.2 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -183,6 +185,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -216,7 +223,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.1/31 - name: Ethernet52.1000 peer: site-ha-enabled-leaf1 @@ -225,8 +233,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet1.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet52.142 @@ -236,8 +244,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet1.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet52.666 @@ -247,38 +255,40 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet1.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.1/31 - name: Ethernet1.42 peer_type: l3_interface ip_address: dhcp shutdown: false - type: l3dot1q description: Comcast - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 dhcp_client_accept_default_route: true - name: Ethernet2.42 peer_type: l3_interface ip_address: 172.16.6.6/31 shutdown: false - type: l3dot1q description: Colt_10666 - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 ip_nat: service_profile: NAT-IE-DIRECT - name: Ethernet1 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet2 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.43.1/32 as_path: @@ -776,7 +786,7 @@ router_internet_exit: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.143.1/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1B.yml index 3455f5a22eb..d8260f89404 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cv-pathfinder-transit1B.yml @@ -51,7 +51,7 @@ router_bgp: - ip_address: 192.168.144.1 peer_group: WAN-OVERLAY-PEERS peer: cv-pathfinder-pathfinder - description: cv-pathfinder-pathfinder + description: cv-pathfinder-pathfinder_Dps1 - ip_address: 192.168.143.1 peer: cv-pathfinder-transit1A description: cv-pathfinder-transit1A @@ -136,7 +136,6 @@ router_bgp: redistribute_routes: - source_protocol: connected - name: TRANSIT - router_id: 192.168.43.2 rd: 192.168.43.2:66 route_targets: import: @@ -147,12 +146,14 @@ router_bgp: - address_family: evpn route_targets: - 66:66 + router_id: 192.168.43.2 redistribute_routes: - source_protocol: connected address_family_evpn: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -161,6 +162,7 @@ router_bgp: neighbors: - ip_address: 192.168.143.1 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -183,6 +185,11 @@ router_bgp: any: true service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -216,7 +223,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.3/31 - name: Ethernet52.1000 peer: site-ha-enabled-leaf1 @@ -225,8 +233,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet2.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet52.142 @@ -236,8 +244,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet2.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet52.666 @@ -247,36 +255,38 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_SITE-HA-ENABLED-LEAF1_Ethernet2.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.3/31 - name: Ethernet1.42 peer_type: l3_interface ip_address: dhcp shutdown: false - type: l3dot1q description: Comcast - encapsulation_dot1q_vlan: 42 + encapsulation_dot1q: + vlan: 42 dhcp_client_accept_default_route: true - name: Ethernet2.42 peer_type: l3_interface ip_address: 172.16.6.6/31 shutdown: false - type: l3dot1q description: Colt_10666 - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 - name: Ethernet1 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet2 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.43.2/32 as_path: @@ -735,7 +745,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.143.2/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-cvaas.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-cvaas.yml index 6cc593228bf..7c21a6504f5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-cvaas.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-cvaas.yml @@ -58,6 +58,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -69,7 +75,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-onprem-token.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-onprem-token.yml index 7aaa1db5be4..aecb92f44d2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-onprem-token.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/cvp-instance-ips-onprem-token.yml @@ -16,6 +16,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_hostvars.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_hostvars.yml index 0e17af80eff..f5a16e04b92 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_hostvars.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_hostvars.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true interface_defaults: mtu: 1234 vrfs: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_platform.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_platform.yml index b4083d0d918..94d1881ae2b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_platform.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_interface_mtu_platform.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true interface_defaults: mtu: 1234 vrfs: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_cvx.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_cvx.yml index 6d8c2a6c258..a8c46ed0265 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_cvx.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_cvx.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -41,7 +47,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.0.42/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_her.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_her.yml index 5958443cd52..4700ac27779 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_her.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/default_overlay_protocol_her.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -41,7 +47,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.0.42/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/device.with.dots.in.hostname.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/device.with.dots.in.hostname.yml index fec97d8d18f..d656bf99049 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/device.with.dots.in.hostname.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/device.with.dots.in.hostname.yml @@ -48,6 +48,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -59,7 +65,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf1.yml index 66a54faa735..1f43eeeba8a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf1.yml @@ -46,7 +46,7 @@ router_bgp: - ip_address: 192.168.0.10 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine1 - description: downlink-pools-spine1 + description: downlink-pools-spine1_Loopback0 remote_as: '65000' address_family_evpn: peer_groups: @@ -59,6 +59,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -74,7 +80,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.1/31 - name: Ethernet2 peer: downlink-pools-spine1 @@ -83,15 +90,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.1.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.2.10/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf2.yml index ecd3cc348c0..86bab74bdc4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf2.yml @@ -46,7 +46,7 @@ router_bgp: - ip_address: 192.168.0.20 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine2 - description: downlink-pools-spine2 + description: downlink-pools-spine2_Loopback0 remote_as: '65000' address_family_evpn: peer_groups: @@ -59,6 +59,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -74,7 +80,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.2.1/31 - name: Ethernet2 peer: downlink-pools-spine2 @@ -83,15 +90,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.2.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.1.20/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.2.20/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf3.yml index 3f6b02fce3d..f3666bbde03 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf3.yml @@ -56,12 +56,12 @@ router_bgp: - ip_address: 192.168.0.10 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine1 - description: downlink-pools-spine1 + description: downlink-pools-spine1_Loopback0 remote_as: '65000' - ip_address: 192.168.0.20 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine2 - description: downlink-pools-spine2 + description: downlink-pools-spine2_Loopback0 remote_as: '65000' address_family_evpn: peer_groups: @@ -74,6 +74,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -89,7 +95,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet5 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.5/31 - name: Ethernet2 peer: downlink-pools-spine2 @@ -98,7 +105,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet5 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.1/31 - name: Ethernet3 peer: downlink-pools-spine1 @@ -107,7 +115,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet15 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.3.1/31 - name: Ethernet4 peer: downlink-pools-spine2 @@ -116,15 +125,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet15 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.5/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.1.30/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.2.30/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf4.yml index 78c8eca997f..d860a369c67 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-l3leaf4.yml @@ -56,12 +56,12 @@ router_bgp: - ip_address: 192.168.0.10 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine1 - description: downlink-pools-spine1 + description: downlink-pools-spine1_Loopback0 remote_as: '65000' - ip_address: 192.168.0.20 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-spine2 - description: downlink-pools-spine2 + description: downlink-pools-spine2_Loopback0 remote_as: '65000' address_family_evpn: peer_groups: @@ -74,6 +74,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -89,7 +95,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet6 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.7/31 - name: Ethernet2 peer: downlink-pools-spine2 @@ -98,7 +105,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet6 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.3/31 - name: Ethernet3 peer: downlink-pools-spine1 @@ -107,7 +115,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE1_Ethernet16 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.3.19/31 - name: Ethernet4 peer: downlink-pools-spine2 @@ -116,15 +125,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-SPINE2_Ethernet16 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.7/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.1.40/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.2.40/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine1.yml index 98334741ea2..babb1f0ddc5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine1.yml @@ -67,17 +67,17 @@ router_bgp: - ip_address: 192.168.1.10 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf1 - description: downlink-pools-l3leaf1 + description: downlink-pools-l3leaf1_Loopback0 remote_as: '65009' - ip_address: 192.168.1.30 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf3 - description: downlink-pools-l3leaf3 + description: downlink-pools-l3leaf3_Loopback0 remote_as: '65029' - ip_address: 192.168.1.40 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf4 - description: downlink-pools-l3leaf4 + description: downlink-pools-l3leaf4_Loopback0 remote_as: '65039' address_family_evpn: peer_groups: @@ -90,6 +90,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -107,7 +113,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.0/31 - name: Ethernet4 peer: downlink-pools-l3leaf1 @@ -116,7 +123,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.2/31 - name: Ethernet5 peer: downlink-pools-l3leaf3 @@ -125,7 +133,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF3_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.4/31 - name: Ethernet6 peer: downlink-pools-l3leaf4 @@ -134,7 +143,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF4_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.1.6/31 - name: Ethernet15 peer: downlink-pools-l3leaf3 @@ -143,7 +153,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF3_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.3.0/31 - name: Ethernet16 peer: downlink-pools-l3leaf4 @@ -152,11 +163,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF4_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.3.18/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.0.10/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine2.yml index e79a74c15ab..eac21882b98 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/downlink-pools-spine2.yml @@ -67,17 +67,17 @@ router_bgp: - ip_address: 192.168.1.20 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf2 - description: downlink-pools-l3leaf2 + description: downlink-pools-l3leaf2_Loopback0 remote_as: '65019' - ip_address: 192.168.1.30 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf3 - description: downlink-pools-l3leaf3 + description: downlink-pools-l3leaf3_Loopback0 remote_as: '65029' - ip_address: 192.168.1.40 peer_group: EVPN-OVERLAY-PEERS peer: downlink-pools-l3leaf4 - description: downlink-pools-l3leaf4 + description: downlink-pools-l3leaf4_Loopback0 remote_as: '65039' address_family_evpn: peer_groups: @@ -90,6 +90,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -107,7 +113,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.2.0/31 - name: Ethernet4 peer: downlink-pools-l3leaf2 @@ -116,7 +123,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.2.2/31 - name: Ethernet5 peer: downlink-pools-l3leaf3 @@ -125,7 +133,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF3_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.0/31 - name: Ethernet6 peer: downlink-pools-l3leaf4 @@ -134,7 +143,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF4_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.2/31 - name: Ethernet15 peer: downlink-pools-l3leaf3 @@ -143,7 +153,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF3_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.4/31 - name: Ethernet16 peer: downlink-pools-l3leaf4 @@ -152,11 +163,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DOWNLINK-POOLS-L3LEAF4_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.0.4.6/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.0.20/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/duplicate-vrfs.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/duplicate-vrfs.yml index 88b6d1bd4a6..9af4cc22ad7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/duplicate-vrfs.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/duplicate-vrfs.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 192.168.255.101 rd: 192.168.255.101:1 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.101 redistribute_routes: - source_protocol: connected vlans: @@ -75,6 +75,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -87,11 +93,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.101/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.101/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-to-ipvpn-gateway.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-to-ipvpn-gateway.yml index 83e27ab3e4b..f78d5a852f9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-to-ipvpn-gateway.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-to-ipvpn-gateway.yml @@ -69,7 +69,6 @@ router_bgp: remote_as: '65555.100' vrfs: - name: testvrf - router_id: 10.10.0.1 rd: 10.10.0.1:1 route_targets: import: @@ -80,6 +79,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.10.0.1 redistribute_routes: - source_protocol: connected vlans: @@ -98,6 +98,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -110,11 +116,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.0.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.11.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-vtep-with-default-vrf-not-evpn.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-vtep-with-default-vrf-not-evpn.yml index cf09f1aa407..b84876c8054 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-vtep-with-default-vrf-not-evpn.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn-vtep-with-default-vrf-not-evpn.yml @@ -52,6 +52,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -61,11 +67,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.109/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.109/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_false.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_false.yml index f78f7e3c70c..1af6e3b2243 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_false.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_false.yml @@ -34,6 +34,7 @@ router_bgp: redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP + - source_protocol: ospf address_family_evpn: peer_groups: - name: EVPN-OVERLAY-PEERS @@ -45,7 +46,6 @@ router_bgp: expiry_timeout: 10 vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:12 route_targets: import: @@ -56,10 +56,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_A_DB_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:13 route_targets: import: @@ -70,10 +70,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:9 route_targets: import: @@ -84,10 +84,10 @@ router_bgp: - address_family: evpn route_targets: - '9:9' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_A_WAN_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:14 route_targets: import: @@ -100,10 +100,10 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:11 route_targets: import: @@ -114,10 +114,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:20 route_targets: import: @@ -128,10 +128,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:21 route_targets: import: @@ -142,10 +142,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_C_OP_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:30 route_targets: import: @@ -156,10 +156,10 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:31 route_targets: import: @@ -170,10 +170,10 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: '12345678' - router_id: 192.168.255.109 rd: 192.168.255.109:41 route_targets: import: @@ -184,6 +184,7 @@ router_bgp: - address_family: evpn route_targets: - '41:41' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected - name: default @@ -197,10 +198,7 @@ router_bgp: - address_family: evpn route_targets: - 123:123 - redistribute_routes: - - source_protocol: ospf - name: Tenant_D_OP_Zone - router_id: 192.168.255.109 rd: 192.168.255.109:40 route_targets: import: @@ -211,6 +209,7 @@ router_bgp: - address_family: evpn route_targets: - '40:40' + router_id: 192.168.255.109 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -371,6 +370,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -435,7 +440,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.101/24 @@ -461,11 +466,11 @@ snmp_server: location: EOS_DESIGNS_UNIT_TESTS evpn_services_l2_only_false loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.109/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.109/32 - name: Loopback100 @@ -901,7 +906,8 @@ router_ospf: no_passive_interfaces: - Vlan1234 redistribute: - bgp: {} + bgp: + enabled: true vxlan_interface: vxlan1: description: evpn_services_l2_only_false_VTEP diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_true.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_true.yml index ae5d734216b..b8517fac011 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_true.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_services_l2_only_true.yml @@ -197,6 +197,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -225,7 +231,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.101/24 @@ -251,11 +257,11 @@ snmp_server: location: EOS_DESIGNS_UNIT_TESTS evpn_services_l2_only_true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.109/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.109/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle.yml index 7fe3d889bbe..de90dacfd27 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: research1 - router_id: 10.10.0.3 rd: 10.10.0.3:654556 route_targets: import: @@ -49,10 +48,10 @@ router_bgp: - address_family: evpn route_targets: - 654556:654556 + router_id: 10.10.0.3 redistribute_routes: - source_protocol: connected - name: SIT2 - router_id: 10.10.0.3 rd: 10.10.0.3:654789 route_targets: import: @@ -63,10 +62,10 @@ router_bgp: - address_family: evpn route_targets: - 654789:654789 + router_id: 10.10.0.3 redistribute_routes: - source_protocol: connected - name: SIT3 - router_id: 10.10.0.3 rd: 10.10.0.3:654555 route_targets: import: @@ -77,10 +76,10 @@ router_bgp: - address_family: evpn route_targets: - 654555:654555 + router_id: 10.10.0.3 redistribute_routes: - source_protocol: connected - name: SIT_VRF - router_id: 10.10.0.3 rd: 10.10.0.3:789654 route_targets: import: @@ -91,6 +90,7 @@ router_bgp: - address_family: evpn route_targets: - 789654:789654 + router_id: 10.10.0.3 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -177,6 +177,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -198,11 +204,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.0.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.11.0.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle_svi_l2vlan.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle_svi_l2vlan.yml index 02613ed0b39..0127a5b6238 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle_svi_l2vlan.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/evpn_vlan_bundle_svi_l2vlan.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: SIT_VRF - router_id: 10.10.0.3 rd: 10.10.0.3:789654 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - 789654:789654 + router_id: 10.10.0.3 redistribute_routes: - source_protocol: connected vlans: @@ -92,6 +92,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,11 +110,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.0.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.11.0.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.only_vlans_in_use.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.only_vlans_in_use.yml index e8a655a2c6c..a41e80edacf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.only_vlans_in_use.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.only_vlans_in_use.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -31,8 +37,10 @@ ethernet_interfaces: peer: testserver peer_interface: Nic1 peer_type: server - description: testserver_Nic1 + description: SERVER_testserver_Nic1 shutdown: false - type: switched - mode: trunk - vlans: 1-2 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.vrfs.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.vrfs.yml index 38bde303a91..f27139e0299 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.vrfs.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/filter.vrfs.yml @@ -43,6 +43,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -60,7 +66,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.0.1/32 - name: Loopback2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf1.yml index be0a47841ae..9fe6cc4328d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf1.yml @@ -12,12 +12,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.201/24 @@ -34,7 +40,6 @@ ethernet_interfaces: peer_type: l3leaf description: FLOW-TRACKING-TESTS-LEAF3_Ethernet31 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -44,19 +49,20 @@ ethernet_interfaces: peer_type: l3leaf description: FLOW-TRACKING-TESTS-LEAF4_Ethernet31 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: FLOW-TRACKING-TESTS-LEAF-MLAG_Po31 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk flow_tracker: sampled: FLOW-TRACKER - vlans: 11,4092 vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf2.yml index 34e125f1dc6..49c8082c8a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-l2-leaf2.yml @@ -12,12 +12,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.202/24 @@ -34,7 +40,6 @@ ethernet_interfaces: peer_type: l3leaf description: FLOW-TRACKING-TESTS-LEAF3_Ethernet32 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -44,19 +49,20 @@ ethernet_interfaces: peer_type: l3leaf description: FLOW-TRACKING-TESTS-LEAF4_Ethernet32 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: FLOW-TRACKING-TESTS-LEAF-MLAG_Po32 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk flow_tracker: sampled: FLOW-TRACKER - vlans: 11,4092 vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf1.yml index 6840e02037a..1d6acc0eaa6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf1.yml @@ -44,12 +44,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine1 - description: flow-tracking-tests-spine1 + description: flow-tracking-tests-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine2 - description: flow-tracking-tests-spine2 + description: flow-tracking-tests-spine2_Loopback0 remote_as: '65200' address_family_evpn: peer_groups: @@ -57,7 +57,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.1 rd: 10.254.1.1:1 route_targets: import: @@ -68,6 +67,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.1 redistribute_routes: - source_protocol: connected vlans: @@ -90,6 +90,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -103,7 +109,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.101/24 @@ -121,7 +127,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER ip_address: 10.254.2.1/31 @@ -132,7 +139,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER ip_address: 10.254.2.3/31 @@ -142,13 +150,15 @@ ethernet_interfaces: shutdown: false flow_tracker: hardware: FLOW-TRACKER-3 - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet82 peer_type: l3_interface ip_address: 10.1.55.0/31 shutdown: false - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet83 peer_type: l3_interface @@ -156,7 +166,8 @@ ethernet_interfaces: shutdown: false flow_tracker: hardware: FLOW-TRACKER - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet84 peer_type: l3_interface @@ -164,57 +175,62 @@ ethernet_interfaces: shutdown: false flow_tracker: hardware: FLOW-TRACKER - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet10 peer: single-interface-true peer_interface: eth1 peer_type: server - description: single-interface-true_eth1 + description: SERVER_single-interface-true_eth1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' flow_tracker: hardware: FLOW-TRACKER-3 - name: Ethernet11 peer: single-interface-false peer_interface: eth11 peer_type: server - description: single-interface-false_eth11 + description: SERVER_single-interface-false_eth11 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' - name: Ethernet12 peer: single-interface-no-definition peer_interface: eth12 peer_type: server - description: single-interface-no-definition_eth12 + description: SERVER_single-interface-no-definition_eth12 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' flow_tracker: hardware: FLOW-TRACKER - name: Ethernet13 peer: single-interface-true4 peer_interface: eth1 peer_type: server - description: single-interface-true4_eth1 + description: SERVER_single-interface-true4_eth1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' flow_tracker: hardware: FLOW-TRACKER loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf2.yml index d07c1b1bc40..880cbb5efb7 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf2.yml @@ -44,12 +44,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine1 - description: flow-tracking-tests-spine1 + description: flow-tracking-tests-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine2 - description: flow-tracking-tests-spine2 + description: flow-tracking-tests-spine2_Loopback0 remote_as: '65200' address_family_evpn: peer_groups: @@ -57,7 +57,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.2 rd: 10.254.1.2:1 route_targets: import: @@ -68,6 +67,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.2 redistribute_routes: - source_protocol: connected vlans: @@ -90,6 +90,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -103,7 +109,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.102/24 @@ -121,7 +127,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.2.5/31 - name: Ethernet2 peer: flow-tracking-tests-spine2 @@ -130,7 +137,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE2_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 10.254.2.7/31 - name: Ethernet81 peer_type: l3_interface @@ -138,19 +146,22 @@ ethernet_interfaces: shutdown: false flow_tracker: sampled: FLOW-TRACKER-3 - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet82 peer_type: l3_interface ip_address: 10.1.55.2/31 shutdown: false - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet83 peer_type: l3_interface ip_address: 10.1.55.2/31 shutdown: false - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet84 peer_type: l3_interface @@ -158,53 +169,58 @@ ethernet_interfaces: shutdown: false flow_tracker: sampled: FLOW-TRACKER-4 - type: routed + switchport: + enabled: false vrf: VRF1 - name: Ethernet10 peer: single-interface-true peer_interface: eth2 peer_type: server - description: single-interface-true_eth2 + description: SERVER_single-interface-true_eth2 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' - name: Ethernet11 peer: single-interface-false peer_interface: eth12 peer_type: server - description: single-interface-false_eth12 + description: SERVER_single-interface-false_eth12 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' - name: Ethernet12 peer: single-interface-no-definition peer_interface: eth13 peer_type: server - description: single-interface-no-definition_eth13 + description: SERVER_single-interface-no-definition_eth13 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' flow_tracker: sampled: FLOW-TRACKER-3 - name: Ethernet13 peer: single-interface-true4 peer_interface: eth1 peer_type: server - description: single-interface-true4_eth1 + description: SERVER_single-interface-true4_eth1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf3.yml index 68aa4f58aaa..2a0854dd968 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf3.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.105 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: flow-tracking-tests-leaf4 - description: flow-tracking-tests-leaf4 + description: flow-tracking-tests-leaf4_Vlan4093 - ip_address: 10.254.2.16 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,12 +55,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine1 - description: flow-tracking-tests-spine1 + description: flow-tracking-tests-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine2 - description: flow-tracking-tests-spine2 + description: flow-tracking-tests-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -72,7 +72,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.5 rd: 10.254.1.5:1 route_targets: import: @@ -83,11 +82,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.105 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: flow-tracking-tests-leaf4_Vlan3000 vlans: - id: 11 tenant: FLOW_TRACKING @@ -108,6 +109,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -122,7 +129,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.103/24 @@ -135,33 +142,33 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: FLOW_TRACKING - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: FLOW_TRACKING - id: 4092 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.104/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -175,7 +182,7 @@ vlan_interfaces: tenant: FLOW_TRACKING type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.104/31 @@ -191,55 +198,63 @@ vlan_interfaces: - 10.254.254.1 port_channel_interfaces: - name: Port-Channel21 - description: MLAG_PEER_flow-tracking-tests-leaf4_Po21 - type: switched + description: MLAG_flow-tracking-tests-leaf4_Port-Channel21 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel31 description: FLOW-TRACKING-TESTS-L2-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk flow_tracker: hardware: FLOW-TRACKER - vlans: 11,4092 mlag: 31 - name: Port-Channel32 description: FLOW-TRACKING-TESTS-L2-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk flow_tracker: hardware: FLOW-TRACKER - vlans: 11,4092 mlag: 32 - name: Port-Channel14 - description: port-channel-interface-true - type: switched + description: SERVER_port-channel-interface-true shutdown: false - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 14 - name: Port-Channel15 - description: port-channel-interface-false - type: switched + description: SERVER_port-channel-interface-false shutdown: false flow_tracker: hardware: FLOW-TRACKER - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 15 - name: Port-Channel16 - description: port-channel-interface-no-definition - type: switched + description: SERVER_port-channel-interface-no-definition shutdown: false - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 16 ethernet_interfaces: @@ -247,8 +262,7 @@ ethernet_interfaces: peer: flow-tracking-tests-leaf4 peer_interface: Ethernet21 peer_type: mlag_peer - description: MLAG_PEER_flow-tracking-tests-leaf4_Ethernet21 - type: port-channel-member + description: MLAG_flow-tracking-tests-leaf4_Ethernet21 shutdown: false channel_group: id: 21 @@ -257,8 +271,7 @@ ethernet_interfaces: peer: flow-tracking-tests-leaf4 peer_interface: Ethernet22 peer_type: mlag_peer - description: MLAG_PEER_flow-tracking-tests-leaf4_Ethernet22 - type: port-channel-member + description: MLAG_flow-tracking-tests-leaf4_Ethernet22 shutdown: false channel_group: id: 21 @@ -270,7 +283,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE1_Ethernet5 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-3 ip_address: 10.254.2.17/31 @@ -281,7 +295,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE2_Ethernet6 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-3 ip_address: 10.254.2.19/31 @@ -291,7 +306,6 @@ ethernet_interfaces: peer_type: l2leaf description: FLOW-TRACKING-TESTS-L2-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 31 mode: active @@ -301,7 +315,6 @@ ethernet_interfaces: peer_type: l2leaf description: FLOW-TRACKING-TESTS-L2-LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 32 mode: active @@ -309,9 +322,8 @@ ethernet_interfaces: peer: port-channel-interface-true peer_interface: PCI1 peer_type: server - description: port-channel-interface-true_PCI1 + description: SERVER_port-channel-interface-true_PCI1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: 'on' @@ -319,9 +331,8 @@ ethernet_interfaces: peer: port-channel-interface-false peer_interface: PCI11 peer_type: server - description: port-channel-interface-false_PCI11 + description: SERVER_port-channel-interface-false_PCI11 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -329,9 +340,8 @@ ethernet_interfaces: peer: port-channel-interface-no-definition peer_interface: PCI13 peer_type: server - description: port-channel-interface-no-definition_PCI13 + description: SERVER_port-channel-interface-no-definition_PCI13 shutdown: false - type: port-channel-member channel_group: id: 16 mode: 'on' @@ -362,11 +372,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf4.yml index 07c65c941ce..0e0e776130f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-leaf4.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.104 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: flow-tracking-tests-leaf3 - description: flow-tracking-tests-leaf3 + description: flow-tracking-tests-leaf3_Vlan4093 - ip_address: 10.254.2.20 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,12 +55,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine1 - description: flow-tracking-tests-spine1 + description: flow-tracking-tests-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-spine2 - description: flow-tracking-tests-spine2 + description: flow-tracking-tests-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -72,7 +72,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.6 rd: 10.254.1.6:1 route_targets: import: @@ -83,11 +82,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.104 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: flow-tracking-tests-leaf3_Vlan3000 vlans: - id: 11 tenant: FLOW_TRACKING @@ -108,6 +109,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -122,7 +129,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.104/24 @@ -135,33 +142,33 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: FLOW_TRACKING - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: FLOW_TRACKING - id: 4092 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.105/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -175,7 +182,7 @@ vlan_interfaces: tenant: FLOW_TRACKING type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.105/31 @@ -191,55 +198,63 @@ vlan_interfaces: - 10.254.254.1 port_channel_interfaces: - name: Port-Channel21 - description: MLAG_PEER_flow-tracking-tests-leaf3_Po21 - type: switched + description: MLAG_flow-tracking-tests-leaf3_Port-Channel21 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG flow_tracker: hardware: FLOW-TRACKER - name: Port-Channel31 description: FLOW-TRACKING-TESTS-L2-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk - vlans: 11,4092 mlag: 31 - name: Port-Channel32 description: FLOW-TRACKING-TESTS-L2-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk - vlans: 11,4092 mlag: 32 - name: Port-Channel14 - description: port-channel-interface-true - type: switched + description: SERVER_port-channel-interface-true shutdown: false flow_tracker: hardware: FLOW-TRACKER-4 - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 14 - name: Port-Channel15 - description: port-channel-interface-false - type: switched + description: SERVER_port-channel-interface-false shutdown: false flow_tracker: hardware: FLOW-TRACKER - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 15 - name: Port-Channel16 - description: port-channel-interface-no-definition - type: switched + description: SERVER_port-channel-interface-no-definition shutdown: false - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 16 ethernet_interfaces: @@ -247,8 +262,7 @@ ethernet_interfaces: peer: flow-tracking-tests-leaf3 peer_interface: Ethernet21 peer_type: mlag_peer - description: MLAG_PEER_flow-tracking-tests-leaf3_Ethernet21 - type: port-channel-member + description: MLAG_flow-tracking-tests-leaf3_Ethernet21 shutdown: false channel_group: id: 21 @@ -257,8 +271,7 @@ ethernet_interfaces: peer: flow-tracking-tests-leaf3 peer_interface: Ethernet22 peer_type: mlag_peer - description: MLAG_PEER_flow-tracking-tests-leaf3_Ethernet22 - type: port-channel-member + description: MLAG_flow-tracking-tests-leaf3_Ethernet22 shutdown: false channel_group: id: 21 @@ -270,7 +283,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE1_Ethernet7 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER ip_address: 10.254.2.21/31 @@ -281,7 +295,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-SPINE2_Ethernet8 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER ip_address: 10.254.2.23/31 @@ -291,7 +306,6 @@ ethernet_interfaces: peer_type: l2leaf description: FLOW-TRACKING-TESTS-L2-LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 31 mode: active @@ -301,7 +315,6 @@ ethernet_interfaces: peer_type: l2leaf description: FLOW-TRACKING-TESTS-L2-LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 32 mode: active @@ -309,9 +322,8 @@ ethernet_interfaces: peer: port-channel-interface-true peer_interface: PCI2 peer_type: server - description: port-channel-interface-true_PCI2 + description: SERVER_port-channel-interface-true_PCI2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: 'on' @@ -319,9 +331,8 @@ ethernet_interfaces: peer: port-channel-interface-false peer_interface: PCI12 peer_type: server - description: port-channel-interface-false_PCI12 + description: SERVER_port-channel-interface-false_PCI12 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -329,9 +340,8 @@ ethernet_interfaces: peer: port-channel-interface-no-definition peer_interface: PCI14 peer_type: server - description: port-channel-interface-no-definition_PCI14 + description: SERVER_port-channel-interface-no-definition_PCI14 shutdown: false - type: port-channel-member channel_group: id: 16 mode: 'on' @@ -362,11 +372,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine1.yml index 0951e46d22e..bc4ced39b84 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine1.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.254.1.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf1 - description: flow-tracking-tests-leaf1 + description: flow-tracking-tests-leaf1_Loopback0 remote_as: '65101' - ip_address: 10.254.1.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf2 - description: flow-tracking-tests-leaf2 + description: flow-tracking-tests-leaf2_Loopback0 remote_as: '65102' - ip_address: 10.254.1.5 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf3 - description: flow-tracking-tests-leaf3 + description: flow-tracking-tests-leaf3_Loopback0 remote_as: '65105' - ip_address: 10.254.1.6 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf4 - description: flow-tracking-tests-leaf4 + description: flow-tracking-tests-leaf4_Loopback0 remote_as: '65105' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -96,7 +102,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.11/24 @@ -114,7 +120,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: sampled: FLOW-TRACKER ip_address: 10.254.2.0/31 @@ -125,7 +132,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: sampled: FLOW-TRACKER ip_address: 10.254.2.4/31 @@ -136,7 +144,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF3_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: sampled: FLOW-TRACKER ip_address: 10.254.2.16/31 @@ -147,7 +156,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF4_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: sampled: FLOW-TRACKER ip_address: 10.254.2.20/31 @@ -156,7 +166,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -166,7 +177,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -176,7 +188,8 @@ ethernet_interfaces: peer_interface: Ethernet11 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet11 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 - name: Ethernet12 @@ -184,7 +197,8 @@ ethernet_interfaces: peer_interface: Ethernet12 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet12 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -194,7 +208,8 @@ ethernet_interfaces: peer_interface: Ethernet13 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet13 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -204,7 +219,8 @@ ethernet_interfaces: peer_interface: Ethernet14 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet14 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -214,7 +230,8 @@ ethernet_interfaces: peer_interface: Ethernet15 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet15 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 - name: Ethernet16 @@ -222,14 +239,15 @@ ethernet_interfaces: peer_interface: Ethernet16 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine2_Ethernet16 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: sampled: FLOW-TRACKER loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine2.yml index 446ad9f5bfb..b963de46181 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/flow-tracking-tests-spine2.yml @@ -57,22 +57,22 @@ router_bgp: - ip_address: 10.254.1.1 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf1 - description: flow-tracking-tests-leaf1 + description: flow-tracking-tests-leaf1_Loopback0 remote_as: '65101' - ip_address: 10.254.1.2 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf2 - description: flow-tracking-tests-leaf2 + description: flow-tracking-tests-leaf2_Loopback0 remote_as: '65102' - ip_address: 10.254.1.5 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf3 - description: flow-tracking-tests-leaf3 + description: flow-tracking-tests-leaf3_Loopback0 remote_as: '65105' - ip_address: 10.254.1.6 peer_group: EVPN-OVERLAY-PEERS peer: flow-tracking-tests-leaf4 - description: flow-tracking-tests-leaf4 + description: flow-tracking-tests-leaf4_Loopback0 remote_as: '65105' address_family_evpn: peer_groups: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -96,7 +102,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.21/24 @@ -114,7 +120,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-2 ip_address: 10.254.2.2/31 @@ -125,7 +132,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-2 ip_address: 10.254.2.6/31 @@ -136,7 +144,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF3_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-2 ip_address: 10.254.2.18/31 @@ -147,7 +156,8 @@ ethernet_interfaces: description: P2P_LINK_TO_FLOW-TRACKING-TESTS-LEAF4_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false flow_tracker: hardware: FLOW-TRACKER-2 ip_address: 10.254.2.22/31 @@ -156,7 +166,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -166,7 +177,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -176,7 +188,8 @@ ethernet_interfaces: peer_interface: Ethernet11 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet11 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 - name: Ethernet12 @@ -184,7 +197,8 @@ ethernet_interfaces: peer_interface: Ethernet12 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet12 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 - name: Ethernet13 @@ -192,7 +206,8 @@ ethernet_interfaces: peer_interface: Ethernet13 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet13 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -202,7 +217,8 @@ ethernet_interfaces: peer_interface: Ethernet14 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet14 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 flow_tracker: @@ -212,7 +228,8 @@ ethernet_interfaces: peer_interface: Ethernet15 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet15 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 - name: Ethernet16 @@ -220,12 +237,13 @@ ethernet_interfaces: peer_interface: Ethernet16 peer_type: spine description: P2P_LINK_TO_flow-tracking-tests-spine1_Ethernet16 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-1.yml index 59283d2e7be..2e74daf0afd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-1.yml @@ -44,6 +44,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -59,11 +65,12 @@ ethernet_interfaces: peer: Someotherdevice ip_address: 10.20.30.40/24 shutdown: false - type: routed + switchport: + enabled: false description: Test interface loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-2.yml index 29f62a49931..12d322ddfcb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/generate-cv-tags-2.yml @@ -44,6 +44,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -55,7 +61,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/hardware_counters.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/hardware_counters.yml index d9534ecefc0..381ad175b6a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/hardware_counters.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/hardware_counters.yml @@ -36,6 +36,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ignore-custom-keys-in-data-models.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ignore-custom-keys-in-data-models.yml index 56a57c2f009..ab0eefdfc1b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ignore-custom-keys-in-data-models.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ignore-custom-keys-in-data-models.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -19,6 +25,7 @@ _custom_key2: - custom_value2 ethernet_interfaces: - name: Ethernet1 - type: switched + switchport: + enabled: true _custom_key3: custom_dict3: custom_value3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-ips.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-ips.yml index c681d9bb5ec..5c10af26ec0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-ips.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-ips.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-DUALSTACK1_Ethernet25 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,17 +35,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-DUALSTACK2_Ethernet25 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENTS-DUALSTACK_Po25 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '105' shutdown: false - mode: trunk - vlans: '105' vlans: - id: 105 name: INBAND_MGMT diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-subnets.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-subnets.yml index 292036b2a6a..b31fc666a48 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-subnets.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-dualstack-subnets.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-DUALSTACK1_Ethernet24 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,17 +35,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-DUALSTACK2_Ethernet24 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENTS-DUALSTACK_Po24 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '104' shutdown: false - mode: trunk - vlans: '104' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ip.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ip.yml index 8f228361e7e..e718b82b379 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ip.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ip.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -21,7 +27,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT_Ethernet23 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -31,17 +36,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-VRF_Ethernet23 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENT_Po23 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '103' shutdown: false - mode: trunk - vlans: '103' vlans: - id: 103 name: MYVLANNAME diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only-vrf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only-vrf.yml index a1140fedfd2..34e6ccf9ed0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only-vrf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only-vrf.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-IPV6-1_Ethernet27 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,17 +35,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-IPV6-2_Ethernet27 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENTS-IPV6_Po27 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '107' shutdown: false - mode: trunk - vlans: '107' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only.yml index 3a3abf2ff6d..5333cbcd97a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-ipv6-only.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-IPV6-1_Ethernet26 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,17 +35,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-IPV6-2_Ethernet26 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENTS-IPV6_Po26 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '106' shutdown: false - mode: trunk - vlans: '106' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-a.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-a.yml index 5e67e90d1cb..cf3c9722b50 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-a.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-a.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,7 +24,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 101 @@ -26,7 +32,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -39,149 +45,162 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-mlag-b_Po11 - type: switched + description: MLAG_inband-mgmt-mlag-b_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel1 description: INBAND-MGMT-PARENT_Po101 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' mlag: 1 ethernet_interfaces: - name: Ethernet11 peer: inband-mgmt-mlag-b peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet11 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet12 peer: inband-mgmt-mlag-b peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet12 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet13 peer: inband-mgmt-mlag-b peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet13 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet14 peer: inband-mgmt-mlag-b peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet14 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet15 peer: inband-mgmt-mlag-b peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet15 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet16 peer: inband-mgmt-mlag-b peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet16 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet17 peer: inband-mgmt-mlag-b peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet17 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet18 peer: inband-mgmt-mlag-b peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet18 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet19 peer: inband-mgmt-mlag-b peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet19 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet20 peer: inband-mgmt-mlag-b peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-b_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-b_Ethernet20 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet1 peer: inband-mgmt-parent peer_interface: Ethernet101 peer_type: l3leaf description: INBAND-MGMT-PARENT_Ethernet101 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -191,7 +210,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-VRF_Ethernet101 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-b.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-b.yml index a30cf390cf9..5fa1e33a8e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-b.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-mlag-b.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -18,7 +24,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 101 @@ -26,7 +32,7 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -39,149 +45,162 @@ vlan_interfaces: type: inband_mgmt port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-mlag-a_Po11 - type: switched + description: MLAG_inband-mgmt-mlag-a_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel1 description: INBAND-MGMT-PARENT_Po101 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' mlag: 1 ethernet_interfaces: - name: Ethernet11 peer: inband-mgmt-mlag-a peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet11 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet12 peer: inband-mgmt-mlag-a peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet12 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet13 peer: inband-mgmt-mlag-a peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet13 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet14 peer: inband-mgmt-mlag-a peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet14 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet15 peer: inband-mgmt-mlag-a peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet15 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet16 peer: inband-mgmt-mlag-a peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet16 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet17 peer: inband-mgmt-mlag-a peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet17 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet18 peer: inband-mgmt-mlag-a peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet18 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet19 peer: inband-mgmt-mlag-a peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet19 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet20 peer: inband-mgmt-mlag-a peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-mlag-a_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-mlag-a_Ethernet20 shutdown: false channel_group: id: 11 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet1 peer: inband-mgmt-parent peer_interface: Ethernet102 peer_type: l3leaf description: INBAND-MGMT-PARENT_Ethernet102 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -191,7 +210,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-VRF_Ethernet102 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack1.yml index 5cfff1acecb..185018ab6cb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack1.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 100.64.1.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: inband-mgmt-parent-dualstack2 - description: inband-mgmt-parent-dualstack2 + description: inband-mgmt-parent-dualstack2_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -54,7 +54,6 @@ router_bgp: activate: true vrfs: - name: INBANDMGMT - router_id: 10.0.255.3 rd: 10.0.255.3:1 route_targets: import: @@ -65,11 +64,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.0.255.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 100.64.1.5 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: inband-mgmt-parent-dualstack2_Vlan3000 updates: wait_install: true service_routing_protocols_model: multi-agent @@ -79,6 +80,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,33 +102,33 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 105 name: Inband_management_vlan_ipv6 tenant: INBAND_MGMT_TESTS - id: 3000 - name: MLAG_iBGP_INBANDMGMT + name: MLAG_L3_VRF_INBANDMGMT trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: INBAND_MGMT_TESTS - id: 104 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 100.64.1.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -142,7 +149,7 @@ vlan_interfaces: tenant: INBAND_MGMT_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf INBANDMGMT' + description: MLAG_L3_VRF_INBANDMGMT vrf: INBANDMGMT mtu: 9214 ip_address: 100.64.1.4/31 @@ -165,28 +172,33 @@ vlan_interfaces: - 2a00:104::1 port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Po11 - type: switched + description: MLAG_inband-mgmt-parent-dualstack2_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel24 description: INBAND-MGMT-DUALSTACK-SUBNETS_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '104' shutdown: false - mode: trunk - vlans: '104' mlag: 24 lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel25 description: INBAND-MGMT-DUALSTACK-IPS_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '105' shutdown: false - mode: trunk - vlans: '105' mlag: 25 lacp_fallback_mode: individual lacp_fallback_timeout: 30 @@ -195,8 +207,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet11 shutdown: false channel_group: id: 11 @@ -205,8 +216,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet12 shutdown: false channel_group: id: 11 @@ -215,8 +225,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet13 shutdown: false channel_group: id: 11 @@ -225,8 +234,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet14 shutdown: false channel_group: id: 11 @@ -235,8 +243,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet15 shutdown: false channel_group: id: 11 @@ -245,8 +252,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet16 shutdown: false channel_group: id: 11 @@ -255,8 +261,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet17 shutdown: false channel_group: id: 11 @@ -265,8 +270,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet18 shutdown: false channel_group: id: 11 @@ -275,8 +279,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet19 shutdown: false channel_group: id: 11 @@ -285,8 +288,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack2 peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack2_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack2_Ethernet20 shutdown: false channel_group: id: 11 @@ -297,24 +299,26 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-DUALSTACK-SUBNETS_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 24 mode: active - mode: access - vlans: 104 + switchport: + enabled: true + mode: access + access_vlan: 104 - name: Ethernet25 peer: inband-mgmt-dualstack-ips peer_interface: Ethernet1 peer_type: l2leaf description: INBAND-MGMT-DUALSTACK-IPS_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 25 mode: active - mode: access - vlans: 105 + switchport: + enabled: true + mode: access + access_vlan: 105 mlag_configuration: domain_id: inband-mgmt-parents-dualstack local_interface: Vlan4094 @@ -346,11 +350,11 @@ route_maps: - ipv6 address prefix-list IPv6-PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack2.yml index d9ff53bef10..91b872c68d2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-dualstack2.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 100.64.1.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: inband-mgmt-parent-dualstack1 - description: inband-mgmt-parent-dualstack1 + description: inband-mgmt-parent-dualstack1_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -54,7 +54,6 @@ router_bgp: activate: true vrfs: - name: INBANDMGMT - router_id: 10.0.255.4 rd: 10.0.255.4:1 route_targets: import: @@ -65,11 +64,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.0.255.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 100.64.1.4 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: inband-mgmt-parent-dualstack1_Vlan3000 updates: wait_install: true service_routing_protocols_model: multi-agent @@ -79,6 +80,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -95,33 +102,33 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 105 name: Inband_management_vlan_ipv6 tenant: INBAND_MGMT_TESTS - id: 3000 - name: MLAG_iBGP_INBANDMGMT + name: MLAG_L3_VRF_INBANDMGMT trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: INBAND_MGMT_TESTS - id: 104 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 100.64.1.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -142,7 +149,7 @@ vlan_interfaces: tenant: INBAND_MGMT_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf INBANDMGMT' + description: MLAG_L3_VRF_INBANDMGMT vrf: INBANDMGMT mtu: 9214 ip_address: 100.64.1.5/31 @@ -165,28 +172,33 @@ vlan_interfaces: - 2a00:104::1 port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Po11 - type: switched + description: MLAG_inband-mgmt-parent-dualstack1_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel24 description: INBAND-MGMT-DUALSTACK-SUBNETS_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '104' shutdown: false - mode: trunk - vlans: '104' mlag: 24 lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel25 description: INBAND-MGMT-DUALSTACK-IPS_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '105' shutdown: false - mode: trunk - vlans: '105' mlag: 25 lacp_fallback_mode: individual lacp_fallback_timeout: 30 @@ -195,8 +207,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet11 shutdown: false channel_group: id: 11 @@ -205,8 +216,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet12 shutdown: false channel_group: id: 11 @@ -215,8 +225,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet13 shutdown: false channel_group: id: 11 @@ -225,8 +234,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet14 shutdown: false channel_group: id: 11 @@ -235,8 +243,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet15 shutdown: false channel_group: id: 11 @@ -245,8 +252,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet16 shutdown: false channel_group: id: 11 @@ -255,8 +261,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet17 shutdown: false channel_group: id: 11 @@ -265,8 +270,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet18 shutdown: false channel_group: id: 11 @@ -275,8 +279,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet19 shutdown: false channel_group: id: 11 @@ -285,8 +288,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-dualstack1 peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-dualstack1_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-parent-dualstack1_Ethernet20 shutdown: false channel_group: id: 11 @@ -297,24 +299,26 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-DUALSTACK-SUBNETS_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 24 mode: active - mode: access - vlans: 104 + switchport: + enabled: true + mode: access + access_vlan: 104 - name: Ethernet25 peer: inband-mgmt-dualstack-ips peer_interface: Ethernet2 peer_type: l2leaf description: INBAND-MGMT-DUALSTACK-IPS_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 25 mode: active - mode: access - vlans: 105 + switchport: + enabled: true + mode: access + access_vlan: 105 mlag_configuration: domain_id: inband-mgmt-parents-dualstack local_interface: Vlan4094 @@ -346,11 +350,11 @@ route_maps: - ipv6 address prefix-list IPv6-PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-1.yml index a35a88931a3..06f65858355 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-1.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 100.64.1.9 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: inband-mgmt-parent-ipv6-2 - description: inband-mgmt-parent-ipv6-2 + description: inband-mgmt-parent-ipv6-2_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -59,6 +59,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -71,12 +77,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 106 @@ -87,12 +93,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 100.64.1.8/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -121,28 +127,33 @@ vlan_interfaces: - 2a00:107::1 port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Po11 - type: switched + description: MLAG_inband-mgmt-parent-ipv6-2_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel26 description: INBAND-MGMT-IPV6-ONLY_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '106' shutdown: false - mode: trunk - vlans: '106' mlag: 26 lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel27 description: INBAND-MGMT-IPV6-ONLY-VRF_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '107' shutdown: false - mode: trunk - vlans: '107' mlag: 27 lacp_fallback_mode: individual lacp_fallback_timeout: 30 @@ -151,8 +162,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet11 shutdown: false channel_group: id: 11 @@ -161,8 +171,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet12 shutdown: false channel_group: id: 11 @@ -171,8 +180,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet13 shutdown: false channel_group: id: 11 @@ -181,8 +189,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet14 shutdown: false channel_group: id: 11 @@ -191,8 +198,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet15 shutdown: false channel_group: id: 11 @@ -201,8 +207,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet16 shutdown: false channel_group: id: 11 @@ -211,8 +216,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet17 shutdown: false channel_group: id: 11 @@ -221,8 +225,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet18 shutdown: false channel_group: id: 11 @@ -231,8 +234,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet19 shutdown: false channel_group: id: 11 @@ -241,8 +243,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-2 peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-2_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-2_Ethernet20 shutdown: false channel_group: id: 11 @@ -253,24 +254,26 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-IPV6-ONLY_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 26 mode: active - mode: access - vlans: 106 + switchport: + enabled: true + mode: access + access_vlan: 106 - name: Ethernet27 peer: inband-mgmt-ipv6-only-vrf peer_interface: Ethernet1 peer_type: l2leaf description: INBAND-MGMT-IPV6-ONLY-VRF_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active - mode: access - vlans: 107 + switchport: + enabled: true + mode: access + access_vlan: 107 mlag_configuration: domain_id: inband-mgmt-parents-ipv6 local_interface: Vlan4094 @@ -298,11 +301,11 @@ route_maps: - ipv6 address prefix-list IPv6-PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-2.yml index a207ecd444d..e4a70a93e7b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-ipv6-2.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 100.64.1.8 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: inband-mgmt-parent-ipv6-1 - description: inband-mgmt-parent-ipv6-1 + description: inband-mgmt-parent-ipv6-1_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -58,6 +58,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -71,12 +77,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 106 @@ -87,12 +93,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 100.64.1.9/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -123,28 +129,33 @@ vlan_interfaces: - 2a00:107::1 port_channel_interfaces: - name: Port-Channel11 - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Po11 - type: switched + description: MLAG_inband-mgmt-parent-ipv6-1_Port-Channel11 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel26 description: INBAND-MGMT-IPV6-ONLY_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '106' shutdown: false - mode: trunk - vlans: '106' mlag: 26 lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel27 description: INBAND-MGMT-IPV6-ONLY-VRF_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '107' shutdown: false - mode: trunk - vlans: '107' mlag: 27 lacp_fallback_mode: individual lacp_fallback_timeout: 30 @@ -153,8 +164,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet11 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet11 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet11 shutdown: false channel_group: id: 11 @@ -163,8 +173,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet12 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet12 shutdown: false channel_group: id: 11 @@ -173,8 +182,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet13 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet13 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet13 shutdown: false channel_group: id: 11 @@ -183,8 +191,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet14 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet14 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet14 shutdown: false channel_group: id: 11 @@ -193,8 +200,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet15 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet15 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet15 shutdown: false channel_group: id: 11 @@ -203,8 +209,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet16 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet16 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet16 shutdown: false channel_group: id: 11 @@ -213,8 +218,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet17 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet17 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet17 shutdown: false channel_group: id: 11 @@ -223,8 +227,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet18 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet18 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet18 shutdown: false channel_group: id: 11 @@ -233,8 +236,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet19 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet19 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet19 shutdown: false channel_group: id: 11 @@ -243,8 +245,7 @@ ethernet_interfaces: peer: inband-mgmt-parent-ipv6-1 peer_interface: Ethernet20 peer_type: mlag_peer - description: MLAG_PEER_inband-mgmt-parent-ipv6-1_Ethernet20 - type: port-channel-member + description: MLAG_inband-mgmt-parent-ipv6-1_Ethernet20 shutdown: false channel_group: id: 11 @@ -255,24 +256,26 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-IPV6-ONLY_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 26 mode: active - mode: access - vlans: 106 + switchport: + enabled: true + mode: access + access_vlan: 106 - name: Ethernet27 peer: inband-mgmt-ipv6-only-vrf peer_interface: Ethernet2 peer_type: l2leaf description: INBAND-MGMT-IPV6-ONLY-VRF_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 27 mode: active - mode: access - vlans: 107 + switchport: + enabled: true + mode: access + access_vlan: 107 mlag_configuration: domain_id: inband-mgmt-parents-ipv6 local_interface: Vlan4094 @@ -296,11 +299,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-vrf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-vrf.yml index 4bb32fce379..a20386f333c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-vrf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent-vrf.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: INBANDMGMT - router_id: 10.0.255.2 rd: 10.0.255.2:1 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.0.255.2 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent @@ -58,6 +58,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -75,31 +81,32 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-SUBNET_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 21 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet22 peer: inband-mgmt-subnet-vrf peer_interface: Ethernet2 peer_type: l2leaf description: INBAND-MGMT-SUBNET-VRF_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 22 mode: active - mode: access - vlans: 102 + switchport: + enabled: true + mode: access + access_vlan: 102 - name: Ethernet23 peer: inband-mgmt-ip peer_interface: Ethernet2 peer_type: l2leaf description: INBAND-MGMT-IP_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 23 mode: active @@ -109,62 +116,72 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-MLAG-A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 101 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet102 peer: inband-mgmt-mlag-b peer_interface: Ethernet2 peer_type: l2leaf description: INBAND-MGMT-MLAG-B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 101 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 port_channel_interfaces: - name: Port-Channel21 description: INBAND-MGMT-SUBNET_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel22 description: INBAND-MGMT-SUBNET-VRF_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '102' shutdown: false - mode: trunk - vlans: '102' lacp_fallback_mode: individual lacp_fallback_timeout: 90 - name: Port-Channel23 description: INBAND-MGMT-IP_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '103' shutdown: false - mode: trunk - vlans: '103' - name: Port-Channel101 description: INBAND-MGMT-MLAG-TEST_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' lacp_fallback_mode: individual lacp_fallback_timeout: 30 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent.yml index 9f55b024e4b..2931f49972b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-parent.yml @@ -39,7 +39,6 @@ router_bgp: activate: true vrfs: - name: INBANDMGMT - router_id: 10.0.255.1 rd: 10.0.255.1:1 route_targets: import: @@ -50,6 +49,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.0.255.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent @@ -59,6 +59,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -76,31 +82,32 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-SUBNET_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 21 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet22 peer: inband-mgmt-subnet-vrf peer_interface: Ethernet1 peer_type: l2leaf description: INBAND-MGMT-SUBNET-VRF_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 22 mode: active - mode: access - vlans: 102 + switchport: + enabled: true + mode: access + access_vlan: 102 - name: Ethernet23 peer: inband-mgmt-ip peer_interface: Ethernet1 peer_type: l2leaf description: INBAND-MGMT-IP_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 23 mode: active @@ -110,62 +117,72 @@ ethernet_interfaces: peer_type: l2leaf description: INBAND-MGMT-MLAG-A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 101 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 - name: Ethernet102 peer: inband-mgmt-mlag-b peer_interface: Ethernet1 peer_type: l2leaf description: INBAND-MGMT-MLAG-B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 101 mode: active - mode: access - vlans: 101 + switchport: + enabled: true + mode: access + access_vlan: 101 port_channel_interfaces: - name: Port-Channel21 description: INBAND-MGMT-SUBNET_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' lacp_fallback_mode: individual lacp_fallback_timeout: 30 - name: Port-Channel22 description: INBAND-MGMT-SUBNET-VRF_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '102' shutdown: false - mode: trunk - vlans: '102' lacp_fallback_mode: individual lacp_fallback_timeout: 90 - name: Port-Channel23 description: INBAND-MGMT-IP_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '103' shutdown: false - mode: trunk - vlans: '103' - name: Port-Channel101 description: INBAND-MGMT-MLAG-TEST_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' lacp_fallback_mode: individual lacp_fallback_timeout: 30 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.0.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.0.254.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet-vrf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet-vrf.yml index 3183e4a29da..3bdc8bee5cb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet-vrf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet-vrf.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -21,7 +27,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT_Ethernet22 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -31,17 +36,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-VRF_Ethernet22 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENT_Po22 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '102' shutdown: false - mode: trunk - vlans: '102' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet.yml index ee8afef63af..8be52e7766f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/inband-mgmt-subnet.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,7 +26,6 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT_Ethernet21 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -30,17 +35,18 @@ ethernet_interfaces: peer_type: l3leaf description: INBAND-MGMT-PARENT-VRF_Ethernet21 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: INBAND-MGMT-PARENT_Po21 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '101' shutdown: false - mode: trunk - vlans: '101' ip_igmp_snooping: globally_enabled: true vlans: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ipv4-acls.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ipv4-acls.yml index af2f09fe3e7..e9be6cd2a55 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ipv4-acls.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ipv4-acls.yml @@ -44,6 +44,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -58,14 +64,16 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.16.0.2/30 shutdown: false - type: routed + switchport: + enabled: false access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet1 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet1 - name: Ethernet2 peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet2 access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet2 dhcp_client_accept_default_route: true @@ -73,7 +81,8 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false access_group_in: TEST-IPV4-ACL-WITH-NO-FIELDS-IN access_group_out: TEST-IPV4-ACL-WITH-NO-FIELDS-OUT dhcp_client_accept_default_route: true @@ -81,29 +90,32 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 172.19.19.0/31 shutdown: false - type: routed + switchport: + enabled: false access_group_in: TEST-IPV4-ACL-WITH-NO-FIELDS-IN access_group_out: TEST-IPV4-ACL-WITH-NO-FIELDS-OUT - name: Ethernet5/1 peer_type: l3_interface ip_address: 172.20.20.0/31 shutdown: false - type: routed + switchport: + enabled: false access_group_in: TEST-IPV4-ACL-WITH-IP-FIELDS-IN_Ethernet5_1 - name: Ethernet6/6.6 peer_type: l3_interface ip_address: 172.21.21.0/31 shutdown: false - type: l3dot1q access_group_out: TEST-IPV4-ACL-WITH-IP-FIELDS-OUT_Ethernet6_6.6 - encapsulation_dot1q_vlan: 6 + encapsulation_dot1q: + vlan: 6 - name: Ethernet6/6 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-node-id.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-node-id.yml index f9fc6df67f9..92f664f30b9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-node-id.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-node-id.yml @@ -37,6 +37,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -46,7 +52,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 172.28.4.99/32 isis_enable: CORE diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-underlay-loopback.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-underlay-loopback.yml index ac5cc3293cd..91bdc00e58e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-underlay-loopback.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/isis-system-id-format-using-underlay-loopback.yml @@ -37,6 +37,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -46,7 +52,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: MPLS_Overlay_peering + description: ROUTER_ID shutdown: false ip_address: 172.28.4.99/32 isis_enable: CORE diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_bgp.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_bgp.yml index 1fbeb413e8f..c10d427eccc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_bgp.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_bgp.yml @@ -56,6 +56,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -67,7 +73,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 prefix_lists: @@ -88,7 +94,8 @@ ethernet_interfaces: peer_interface: ethernet1 peer_type: other description: P2P_LINK_TO_peer1_ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 2000 service_profile: TEST-QOS-PROFILE @@ -109,7 +116,8 @@ ethernet_interfaces: peer_interface: ethernet2 peer_type: other description: P2P_LINK_TO_peer2_ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.2/31 @@ -119,7 +127,8 @@ ethernet_interfaces: peer_interface: ethernet3 peer_type: other description: P2P_LINK_TO_peer3_ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.4/31 @@ -128,12 +137,12 @@ ethernet_interfaces: peer_interface: ethernet4 peer_type: other description: Custom description on l3_edge_bgp eth4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.6/31 - name: Ethernet5 - type: port-channel-member peer: peer5 peer_interface: Ethernet5 peer_type: other @@ -143,7 +152,6 @@ ethernet_interfaces: id: 5 mode: active - name: Ethernet6 - type: port-channel-member peer: peer5 peer_interface: Ethernet6 peer_type: other @@ -153,7 +161,6 @@ ethernet_interfaces: id: 5 mode: active - name: Ethernet7 - type: port-channel-member peer: peer6 peer_interface: Ethernet7 peer_type: other @@ -163,7 +170,6 @@ ethernet_interfaces: id: 7 mode: active - name: Ethernet8 - type: port-channel-member peer: peer6 peer_interface: Ethernet8 peer_type: other @@ -178,7 +184,8 @@ port_channel_interfaces: peer_interface: Port-Channel5 peer_type: other description: P2P_LINK_TO_peer5_Port-Channel5 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.8/31 @@ -187,7 +194,8 @@ port_channel_interfaces: peer_interface: Port-Channel7 peer_type: other description: P2P_LINK_TO_peer6_Port-Channel7 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.10/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_isis.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_isis.yml index afde48e1e85..5c49a9f9bdd 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_isis.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_isis.yml @@ -7,6 +7,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -18,7 +24,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 isis_enable: EVPN_UNDERLAY @@ -26,7 +32,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0001.00 + net: 49.0001.0010.0200.3001.00 router_id: 1.2.3.1 is_type: level-2 address_family_ipv4: @@ -38,7 +44,8 @@ ethernet_interfaces: peer_interface: ethernet1 peer_type: other description: P2P_LINK_TO_peer1_ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 2000 service_profile: TEST-QOS-PROFILE @@ -53,7 +60,8 @@ ethernet_interfaces: peer_interface: ethernet2 peer_type: other description: P2P_LINK_TO_peer2_ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.2/31 @@ -70,7 +78,8 @@ ethernet_interfaces: peer_interface: ethernet3 peer_type: other description: P2P_LINK_TO_peer3_ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.4/31 @@ -85,7 +94,8 @@ ethernet_interfaces: peer_interface: ethernet4 peer_type: other description: P2P_LINK_TO_peer4_ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.6/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_multicast.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_multicast.yml index 8ef312c8b75..a846c38036b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_multicast.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_multicast.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -21,7 +27,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 ospf_area: 0.0.0.0 @@ -41,7 +47,8 @@ ethernet_interfaces: peer_interface: ethernet1 peer_type: other description: P2P_LINK_TO_peer1_ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.4/31 @@ -52,7 +59,8 @@ ethernet_interfaces: peer_interface: ethernet2 peer_type: other description: P2P_LINK_TO_peer2_ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.2/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_ospf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_ospf.yml index 3d188d1689a..919ab86efce 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_ospf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/l3_edge_ospf.yml @@ -7,6 +7,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -18,7 +24,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 ospf_area: 0.0.0.0 @@ -39,7 +45,8 @@ ethernet_interfaces: peer_interface: ethernet1 peer_type: other description: P2P_LINK_TO_peer1_ethernet1 - type: routed + switchport: + enabled: false shutdown: false mtu: 2000 service_profile: TEST-QOS-PROFILE @@ -54,7 +61,8 @@ ethernet_interfaces: peer_interface: ethernet2 peer_type: other description: P2P_LINK_TO_peer2_ethernet2 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.2/31 @@ -65,7 +73,8 @@ ethernet_interfaces: peer_interface: ethernet3 peer_type: other description: P2P_LINK_TO_peer3_ethernet3 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.4/31 @@ -76,7 +85,8 @@ ethernet_interfaces: peer_interface: ethernet4 peer_type: other description: P2P_LINK_TO_peer4_ethernet4 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ip_address: 192.168.0.6/31 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge-no-default-policy.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge-no-default-policy.yml similarity index 92% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge-no-default-policy.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge-no-default-policy.yml index 114c6585b13..e3f7b8dcf38 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge-no-default-policy.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge-no-default-policy.yml @@ -1,4 +1,4 @@ -hostname: autovpn-edge-no-default-policy +hostname: legacy-autovpn-edge-no-default-policy is_deployed: true router_bgp: as: '65000' @@ -31,6 +31,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -49,8 +50,8 @@ router_bgp: neighbors: - ip_address: 2.2.2.2 peer_group: WAN-OVERLAY-PEERS - peer: autovpn-rr3 - description: autovpn-rr3 + peer: legacy-autovpn-rr3 + description: legacy-autovpn-rr3_Dps1 vrfs: - name: default rd: 192.168.30.1:1 @@ -65,7 +66,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: IT - router_id: 192.168.30.1 rd: 192.168.30.1:100 route_targets: import: @@ -76,10 +76,10 @@ router_bgp: - address_family: evpn route_targets: - 100:100 + router_id: 192.168.30.1 redistribute_routes: - source_protocol: connected - name: PROD - router_id: 192.168.30.1 rd: 192.168.30.1:42 route_targets: import: @@ -90,10 +90,16 @@ router_bgp: - address_family: evpn route_targets: - '42:42' + router_id: 192.168.30.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -115,12 +121,13 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: Comcast_666 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.30.1/32 prefix_lists: @@ -211,12 +218,12 @@ router_path_selection: - name: Ethernet1 stun: server_profiles: - - INET-autovpn-rr3-Ethernet1 + - INET-legacy-autovpn-rr3-Ethernet1 dynamic_peers: enabled: true static_peers: - router_ip: 2.2.2.2 - name: autovpn-rr3 + name: legacy-autovpn-rr3 ipv4_addresses: - 10.7.7.7 ipsec_profile: AUTOVPN @@ -248,7 +255,7 @@ router_path_selection: stun: client: server_profiles: - - name: INET-autovpn-rr3-Ethernet1 + - name: INET-legacy-autovpn-rr3-Ethernet1 ip_address: 10.7.7.7 ssl_profile: STUN-DTLS application_traffic_recognition: @@ -268,13 +275,13 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.255.1/32 flow_tracker: hardware: FLOW-TRACKER vxlan_interface: vxlan1: - description: autovpn-edge-no-default-policy_VTEP + description: legacy-autovpn-edge-no-default-policy_VTEP vxlan: udp_port: 4789 source_interface: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge.yml similarity index 91% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge.yml index fd04df5f03e..de36a1c6a9b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-edge.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-edge.yml @@ -1,4 +1,4 @@ -hostname: autovpn-edge +hostname: legacy-autovpn-edge is_deployed: true router_bgp: as: '65000' @@ -31,6 +31,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -49,12 +50,12 @@ router_bgp: neighbors: - ip_address: 192.168.131.1 peer_group: WAN-OVERLAY-PEERS - peer: autovpn-rr1 - description: autovpn-rr1 + peer: legacy-autovpn-rr1 + description: legacy-autovpn-rr1_Dps1 - ip_address: 192.168.131.2 peer_group: WAN-OVERLAY-PEERS - peer: autovpn-rr2 - description: autovpn-rr2 + peer: legacy-autovpn-rr2 + description: legacy-autovpn-rr2_Dps1 vrfs: - name: default rd: 192.168.30.1:1 @@ -69,7 +70,6 @@ router_bgp: - '1:1' - route-map RM-EVPN-EXPORT-VRF-DEFAULT - name: PROD - router_id: 192.168.30.1 rd: 192.168.30.1:42 route_targets: import: @@ -80,10 +80,16 @@ router_bgp: - address_family: evpn route_targets: - '42:42' + router_id: 192.168.30.1 redistribute_routes: - source_protocol: connected service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -105,18 +111,20 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: Comcast_666 dhcp_client_accept_default_route: true - name: Ethernet2 peer_type: l3_interface ip_address: 10.14.14.14/31 shutdown: false - type: routed + switchport: + enabled: false description: MPLS-SP-1_Cat6 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.30.1/32 prefix_lists: @@ -197,17 +205,17 @@ router_path_selection: - name: Ethernet1 stun: server_profiles: - - INET-autovpn-rr1-Ethernet1 - - INET-autovpn-rr2-Ethernet1 + - INET-legacy-autovpn-rr1-Ethernet1 + - INET-legacy-autovpn-rr2-Ethernet1 dynamic_peers: enabled: true static_peers: - router_ip: 192.168.131.1 - name: autovpn-rr1 + name: legacy-autovpn-rr1 ipv4_addresses: - 10.7.7.7 - router_ip: 192.168.131.2 - name: autovpn-rr2 + name: legacy-autovpn-rr2 ipv4_addresses: - 10.8.8.8 ipsec_profile: AUTOVPN @@ -265,9 +273,9 @@ router_path_selection: stun: client: server_profiles: - - name: INET-autovpn-rr1-Ethernet1 + - name: INET-legacy-autovpn-rr1-Ethernet1 ip_address: 10.7.7.7 - - name: INET-autovpn-rr2-Ethernet1 + - name: INET-legacy-autovpn-rr2-Ethernet1 ip_address: 10.8.8.8 application_traffic_recognition: application_profiles: @@ -290,13 +298,13 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.130.1/32 flow_tracker: hardware: FLOW-TRACKER vxlan_interface: vxlan1: - description: autovpn-edge_VTEP + description: legacy-autovpn-edge_VTEP vxlan: udp_port: 4789 source_interface: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr1.yml similarity index 94% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr1.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr1.yml index f4e8c674dd7..12bcfadc05a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr1.yml @@ -1,4 +1,4 @@ -hostname: autovpn-rr1 +hostname: legacy-autovpn-rr1 is_deployed: true router_bgp: as: '65000' @@ -48,10 +48,12 @@ router_bgp: route_reflector_client: true address_family_evpn: peer_groups: - - name: WAN-OVERLAY-PEERS - activate: true - name: WAN-RR-OVERLAY-PEERS activate: true + encapsulation: path-selection + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4: @@ -74,8 +76,8 @@ router_bgp: neighbors: - ip_address: 192.168.131.2 peer_group: WAN-RR-OVERLAY-PEERS - peer: autovpn-rr2 - description: autovpn-rr2 + peer: legacy-autovpn-rr2 + description: legacy-autovpn-rr2_Dps1 vrfs: - name: default rd: 192.168.31.1:1 @@ -91,6 +93,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -109,12 +116,13 @@ ethernet_interfaces: peer_type: l3_interface ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: ATT_777 dhcp_client_accept_default_route: true loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.31.1/32 prefix_lists: @@ -181,7 +189,7 @@ router_path_selection: - name: Ethernet1 static_peers: - router_ip: 192.168.131.2 - name: autovpn-rr2 + name: legacy-autovpn-rr2 ipv4_addresses: - 10.8.8.8 ipsec_profile: AUTOVPN @@ -256,13 +264,13 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.131.1/32 flow_tracker: hardware: FLOW-TRACKER vxlan_interface: vxlan1: - description: autovpn-rr1_VTEP + description: legacy-autovpn-rr1_VTEP vxlan: udp_port: 4789 source_interface: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr2.yml similarity index 94% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr2.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr2.yml index f8bf9b64c10..de2248280f2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/autovpn-rr2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/legacy-autovpn-rr2.yml @@ -1,4 +1,4 @@ -hostname: autovpn-rr2 +hostname: legacy-autovpn-rr2 is_deployed: true router_bgp: as: '65000' @@ -48,10 +48,12 @@ router_bgp: route_reflector_client: true address_family_evpn: peer_groups: - - name: WAN-OVERLAY-PEERS - activate: true - name: WAN-RR-OVERLAY-PEERS activate: true + encapsulation: path-selection + - name: WAN-OVERLAY-PEERS + activate: true + encapsulation: path-selection next_hop: resolution_disabled: true address_family_ipv4: @@ -74,8 +76,8 @@ router_bgp: neighbors: - ip_address: 192.168.131.1 peer_group: WAN-RR-OVERLAY-PEERS - peer: autovpn-rr1 - description: autovpn-rr1 + peer: legacy-autovpn-rr1 + description: legacy-autovpn-rr1_Dps1 vrfs: - name: default rd: 192.168.31.2:1 @@ -91,6 +93,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -109,11 +116,12 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.8.8.8/31 shutdown: false - type: routed + switchport: + enabled: false description: ATT_888 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.31.2/32 prefix_lists: @@ -183,7 +191,7 @@ router_path_selection: - name: Ethernet1 static_peers: - router_ip: 192.168.131.1 - name: autovpn-rr1 + name: legacy-autovpn-rr1 ipv4_addresses: - 10.7.7.7 ipsec_profile: AUTOVPN @@ -258,13 +266,13 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.131.2/32 flow_tracker: hardware: FLOW-TRACKER vxlan_interface: vxlan1: - description: autovpn-rr2_VTEP + description: legacy-autovpn-rr2_VTEP vxlan: udp_port: 4789 source_interface: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_default.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_default.yml index c64b180d476..35eb31fa11d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_default.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_default.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 1.1.1.2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_description.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_description.yml index 94bc26fb29d..a9194e01b12 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_description.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_description.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_dualstack.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_dualstack.yml index 7a2e000b63e..baf6c4269a9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_dualstack.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_dualstack.yml @@ -20,13 +20,19 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false ipv6_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_fabric.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_fabric.yml index 23a744cdab0..948b45e6584 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_fabric.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_fabric.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: MY_INTERFACE_FABRIC - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 1.1.1.2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_host.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_host.yml index 4954081ff85..1ce54f468cc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_host.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_host.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: MY_INTERFACE_HOST - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 1.1.1.2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_ipv6.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_ipv6.yml index 74a6cdc3d1e..88e0c90e23b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_ipv6.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_ipv6.yml @@ -10,13 +10,19 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false ipv6_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: null diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_platform.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_platform.yml index 3b13ec2990f..c2f0598753d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_platform.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/mgmt_interface_platform.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management0 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 1.1.1.2 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests-2.yml index d2918769587..ed8d045069c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests-2.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -22,7 +28,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -33,58 +39,63 @@ vlans: tenant: TEST vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.1/31 port_channel_interfaces: - name: Port-Channel101 - description: MLAG_PEER_network-ports-tests.1_Po101 - type: switched + description: MLAG_network-ports-tests.1_Port-Channel101 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: AP1 with port_channel - type: switched shutdown: false - mode: access - vlans: '101' + switchport: + enabled: true + mode: access + access_vlan: '101' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled mlag: 1 - name: Port-Channel2 description: AP1 with port_channel - type: switched shutdown: false - mode: access - vlans: '101' + switchport: + enabled: true + mode: access + access_vlan: '101' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled mlag: 2 - name: Port-Channel42 description: Checking port-channels - type: switched shutdown: false + switchport: + enabled: true mlag: 42 - name: Port-Channel44 - description: Checking monitor sessions on port-channels - type: switched shutdown: false + switchport: + enabled: true mlag: 44 - name: Port-Channel43 - type: switched shutdown: false + switchport: + enabled: true mlag: 43 ethernet_interfaces: - name: Ethernet10/1 peer: network-ports-tests.1 peer_interface: Ethernet10/1 peer_type: mlag_peer - description: MLAG_PEER_network-ports-tests.1_Ethernet10/1 - type: port-channel-member + description: MLAG_network-ports-tests.1_Ethernet10/1 shutdown: false channel_group: id: 101 @@ -95,7 +106,6 @@ ethernet_interfaces: port_profile: ap_with_port_channel description: AP1 with port_channel shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -105,7 +115,6 @@ ethernet_interfaces: port_profile: ap_with_port_channel description: AP1 with port_channel shutdown: false - type: port-channel-member channel_group: id: 2 mode: active @@ -115,9 +124,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet4 @@ -126,9 +136,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/1 @@ -137,9 +148,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/2 @@ -148,9 +160,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/3 @@ -159,9 +172,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/4 @@ -170,9 +184,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/5 @@ -181,9 +196,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/6 @@ -192,9 +208,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/7 @@ -203,9 +220,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/8 @@ -214,9 +232,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/9 @@ -225,9 +244,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/10 @@ -236,9 +256,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/11 @@ -247,9 +268,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/12 @@ -258,9 +280,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/13 @@ -269,9 +292,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/14 @@ -280,9 +304,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/15 @@ -291,9 +316,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/16 @@ -302,9 +328,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/17 @@ -313,9 +340,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/18 @@ -324,9 +352,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/19 @@ -335,9 +364,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/20 @@ -346,9 +376,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/21 @@ -357,9 +388,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/22 @@ -368,9 +400,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/23 @@ -379,9 +412,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/24 @@ -390,9 +424,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/25 @@ -401,9 +436,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/26 @@ -412,9 +448,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/27 @@ -423,9 +460,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/28 @@ -434,9 +472,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/29 @@ -445,9 +484,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/30 @@ -456,9 +496,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/31 @@ -467,9 +508,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/32 @@ -478,9 +520,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/33 @@ -489,9 +532,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/34 @@ -500,9 +544,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/35 @@ -511,9 +556,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/36 @@ -522,9 +568,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/37 @@ -533,9 +580,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/38 @@ -544,9 +592,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/39 @@ -555,9 +604,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/40 @@ -566,9 +616,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/41 @@ -577,9 +628,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/42 @@ -588,9 +640,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/43 @@ -599,9 +652,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/44 @@ -610,9 +664,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/45 @@ -621,9 +676,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/46 @@ -632,9 +688,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/47 @@ -643,9 +700,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/48 @@ -654,41 +712,43 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet11 - peer: Phones with attached PCs peer_type: network_port port_profile: phone_with_pc description: Phones with attached PCs shutdown: false - type: switched - mode: trunk phone - native_vlan: 100 - phone: - vlan: 300 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 100 + phone: + vlan: 300 + trunk: untagged - name: Ethernet12 - peer: Phones with attached PCs peer_type: network_port port_profile: phone_with_pc description: Phones with attached PCs shutdown: false - type: switched - mode: trunk phone - native_vlan: 100 - phone: - vlan: 300 - trunk: untagged + switchport: + enabled: true + mode: trunk phone + trunk: + native_vlan: 100 + phone: + vlan: 300 + trunk: untagged - name: Ethernet7 peer: Checking port-channels peer_type: network_port description: Checking port-channels shutdown: false - type: port-channel-member channel_group: id: 42 mode: active @@ -697,7 +757,6 @@ ethernet_interfaces: peer_type: network_port description: Checking port-channels shutdown: false - type: port-channel-member channel_group: id: 42 mode: active @@ -706,7 +765,6 @@ ethernet_interfaces: peer_type: network_port description: Checking port-channels shutdown: false - type: port-channel-member channel_group: id: 42 mode: active @@ -715,51 +773,44 @@ ethernet_interfaces: peer_type: network_port description: Checking port-channels shutdown: false - type: port-channel-member channel_group: id: 42 mode: active - name: Ethernet14 - peer: Checking monitor sessions on single interface peer_type: network_port description: Checking monitor sessions on single interface shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet15 - peer: Checking monitor sessions on port-channels peer_type: network_port description: Checking monitor sessions on port-channels shutdown: false - type: port-channel-member channel_group: id: 44 mode: active - name: Ethernet16 - peer: Checking monitor sessions on port-channels peer_type: network_port description: Checking monitor sessions on port-channels shutdown: false - type: port-channel-member channel_group: id: 44 mode: active - name: Ethernet17 - peer: Monitor sessions destination peer_type: network_port description: Monitor sessions destination shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet51 peer_type: network_port shutdown: false - type: port-channel-member channel_group: id: 43 mode: active - name: Ethernet52 peer_type: network_port shutdown: false - type: port-channel-member channel_group: id: 43 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests.1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests.1.yml index 4122a420825..ef92ecdd31a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests.1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/network-ports-tests.1.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -22,7 +28,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -36,26 +42,27 @@ vlans: tenant: TEST vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.252.0/31 port_channel_interfaces: - name: Port-Channel101 - description: MLAG_PEER_network-ports-tests-2_Po101 - type: switched + description: MLAG_network-ports-tests-2_Port-Channel101 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG ethernet_interfaces: - name: Ethernet10/1 peer: network-ports-tests-2 peer_interface: Ethernet10/1 peer_type: mlag_peer - description: MLAG_PEER_network-ports-tests-2_Ethernet10/1 - type: port-channel-member + description: MLAG_network-ports-tests-2_Ethernet10/1 shutdown: false channel_group: id: 101 @@ -66,9 +73,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2 @@ -77,9 +85,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet3 @@ -88,9 +97,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet4 @@ -99,9 +109,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/1 @@ -110,9 +121,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/2 @@ -121,9 +133,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/3 @@ -132,9 +145,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/4 @@ -143,9 +157,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/5 @@ -154,9 +169,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/6 @@ -165,9 +181,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/7 @@ -176,9 +193,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/8 @@ -187,9 +205,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/9 @@ -198,9 +217,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/10 @@ -209,9 +229,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/11 @@ -220,9 +241,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/12 @@ -231,9 +253,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/13 @@ -242,9 +265,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/14 @@ -253,9 +277,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/15 @@ -264,9 +289,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/16 @@ -275,9 +301,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/17 @@ -286,9 +313,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/18 @@ -297,9 +325,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/19 @@ -308,9 +337,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/20 @@ -319,9 +349,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/21 @@ -330,9 +361,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/22 @@ -341,9 +373,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/23 @@ -352,9 +385,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/24 @@ -363,9 +397,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/25 @@ -374,9 +409,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/26 @@ -385,9 +421,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/27 @@ -396,9 +433,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/28 @@ -407,9 +445,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/29 @@ -418,9 +457,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/30 @@ -429,9 +469,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/31 @@ -440,9 +481,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/32 @@ -451,9 +493,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/33 @@ -462,9 +505,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/34 @@ -473,9 +517,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/35 @@ -484,9 +529,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/36 @@ -495,9 +541,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/37 @@ -506,9 +553,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/38 @@ -517,9 +565,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/39 @@ -528,9 +577,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/40 @@ -539,9 +589,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/41 @@ -550,9 +601,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/42 @@ -561,9 +613,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/43 @@ -572,9 +625,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/44 @@ -583,9 +637,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/45 @@ -594,9 +649,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/46 @@ -605,9 +661,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/47 @@ -616,9 +673,10 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet2/48 @@ -627,64 +685,72 @@ ethernet_interfaces: port_profile: pc description: PCs shutdown: false - type: switched - mode: access - vlans: '100' + switchport: + enabled: true + mode: access + access_vlan: '100' spanning_tree_portfast: edge spanning_tree_bpdufilter: enabled - name: Ethernet5 - peer: 'N: blah' + peer: blah peer_type: network_port description: 'N: blah' shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet6 - peer: 'N: blah' + peer: blah peer_type: network_port description: 'N: blah' shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet11 - peer: Base config which may be overwritten peer_type: network_port description: Base config which may be overwritten shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet12 - peer: Config overwriting base config peer_type: network_port description: Config overwriting base config shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet13 - peer: Base config which may be overwritten peer_type: network_port description: Base config which may be overwritten shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet14 peer: CONNECTED_ENDPOINT_OVERWRITING_NETWORK_PORT peer_interface: Eth42 peer_type: server - description: CONNECTED_ENDPOINT_OVERWRITING_NETWORK_PORT_Eth42 + description: SERVER_CONNECTED_ENDPOINT_OVERWRITING_NETWORK_PORT_Eth42 shutdown: false - type: switched + switchport: + enabled: true - name: Ethernet51 peer_type: network_port shutdown: true - type: switched + switchport: + enabled: true - name: Ethernet52 peer_type: network_port shutdown: true - type: switched + switchport: + enabled: true - name: Ethernet53 peer_type: network_port shutdown: true - type: switched + switchport: + enabled: true - name: Ethernet54 peer_type: network_port shutdown: true - type: switched + switchport: + enabled: true mlag_configuration: domain_id: mlag local_interface: Vlan4094 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_false.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_false.yml deleted file mode 100644 index dd139fe1844..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_false.yml +++ /dev/null @@ -1,73 +0,0 @@ -hostname: new_network_services_bgp_vrf_config_false -is_deployed: true -router_bgp: - as: '65000' - router_id: 192.168.42.2 - bgp: - default: - ipv4_unicast: false - maximum_paths: - paths: 4 - ecmp: 4 - updates: - wait_install: true - peer_groups: - - name: IPv4-UNDERLAY-PEERS - type: ipv4 - maximum_routes: 12000 - send_community: all - address_family_ipv4: - peer_groups: - - name: IPv4-UNDERLAY-PEERS - activate: true - redistribute_routes: - - source_protocol: connected -service_routing_protocols_model: multi-agent -ip_routing: true -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -vrfs: -- name: MGMT - ip_routing: false -- name: PROD - tenant: TenantA - ip_routing: true -management_api_http: - enable_vrfs: - - name: MGMT - enable_https: true -loopback_interfaces: -- name: Loopback0 - description: Router_ID - shutdown: false - ip_address: 192.168.42.2/32 -ip_igmp_snooping: - globally_enabled: true -ip_virtual_router_mac_address: cafe:cafe:cafe -ethernet_interfaces: -- name: Ethernet7 - peer_type: l3_interface - ip_address: 11.11.11.11/24 - mtu: 9000 - shutdown: false - description: test - type: routed - vrf: PROD -route_maps: -- name: RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT - sequence_numbers: - - sequence: 10 - type: permit - set: - - ip next-hop 123.1.1.1 -- name: RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT - sequence_numbers: - - sequence: 10 - type: permit - set: - - ipv6 next-hop fd5a:fe45:8831:06c5::1 -metadata: - platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_true.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_true.yml deleted file mode 100644 index 3dcfe3b50de..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/new_network_services_bgp_vrf_config_true.yml +++ /dev/null @@ -1,132 +0,0 @@ -hostname: new_network_services_bgp_vrf_config_true -is_deployed: true -router_bgp: - as: '65000' - router_id: 192.168.42.1 - bgp: - default: - ipv4_unicast: false - maximum_paths: - paths: 4 - ecmp: 4 - updates: - wait_install: true - peer_groups: - - name: IPv4-UNDERLAY-PEERS - type: ipv4 - maximum_routes: 12000 - send_community: all - address_family_ipv4: - peer_groups: - - name: IPv4-UNDERLAY-PEERS - activate: true - redistribute_routes: - - source_protocol: connected - vrfs: - - name: PROD - router_id: 192.168.42.1 - redistribute_routes: - - source_protocol: connected - address_family_ipv4: - neighbors: - - ip_address: 123.1.1.10 - activate: true - - ip_address: 123.1.1.11 - activate: true - prefix_list_in: PL-TEST-IN-AF4 - prefix_list_out: PL-TEST-OUT-AF4 - neighbors: - - ip_address: 123.1.1.10 - remote_as: '1234' - password: oBztv71m2uhR7hh58/OCNA== - description: External IPv4 BGP peer - send_community: standard extended - maximum_routes: 0 - default_originate: - always: false - route_map: RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT - update_source: Loopback123 - ebgp_multihop: 3 - route_map_in: RM-123-1-1-10-IN - shutdown: true - route_map_out: RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT - local_as: '123' - - ip_address: 123.1.1.11 - remote_as: '65000.100' - password: oBztv71m2uhR7hh58/OCNA== - description: External IPv4 BGP peer - send_community: standard extended - maximum_routes: 0 - default_originate: - always: false - update_source: Loopback123 - ebgp_multihop: 3 - route_map_in: RM-123-1-1-11-IN - route_map_out: RM-123-1-1-11-OUT - local_as: '123' - bfd: true - - ip_address: fd5a:fe45:8831:06c5::a - remote_as: '12345' - send_community: all - route_map_out: RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT - - ip_address: fd5a:fe45:8831:06c5::b - remote_as: '12345' - address_family_ipv6: - neighbors: - - ip_address: fd5a:fe45:8831:06c5::a - activate: true - prefix_list_in: PL-TEST-IN-AF6 - prefix_list_out: PL-TEST-OUT-AF6 - - ip_address: fd5a:fe45:8831:06c5::b - activate: true - updates: - wait_install: true -service_routing_protocols_model: multi-agent -ip_routing: true -vlan_internal_order: - allocation: ascending - range: - beginning: 1006 - ending: 1199 -vrfs: -- name: MGMT - ip_routing: false -- name: PROD - tenant: TenantA - ip_routing: true -management_api_http: - enable_vrfs: - - name: MGMT - enable_https: true -loopback_interfaces: -- name: Loopback0 - description: Router_ID - shutdown: false - ip_address: 192.168.42.1/32 -ip_igmp_snooping: - globally_enabled: true -ip_virtual_router_mac_address: cafe:cafe:cafe -ethernet_interfaces: -- name: Ethernet7 - peer_type: l3_interface - ip_address: 10.10.10.10/24 - mtu: 9000 - shutdown: false - description: test - type: routed - vrf: PROD -route_maps: -- name: RM-PROD-123.1.1.10-SET-NEXT-HOP-OUT - sequence_numbers: - - sequence: 10 - type: permit - set: - - ip next-hop 123.1.1.1 -- name: RM-PROD-fd5a:fe45:8831:06c5::a-SET-NEXT-HOP-OUT - sequence_numbers: - - sequence: 10 - type: permit - set: - - ipv6 next-hop fd5a:fe45:8831:06c5::1 -metadata: - platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_gateway.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_gateway.yml index ee8281dd993..65db29d163c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_gateway.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_gateway.yml @@ -6,12 +6,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_interface.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_interface.yml index 8242eef6931..794764df09a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_interface.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/no_mgmt_interface.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/node-type-l3-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/node-type-l3-interfaces.yml index a8a82c7c418..046f2bcb8a3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/node-type-l3-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/node-type-l3-interfaces.yml @@ -30,6 +30,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -46,13 +52,16 @@ ethernet_interfaces: peer_interface: eth1 ip_address: 192.168.1.2/31 shutdown: false - type: routed + switchport: + enabled: false description: peer1_eth1 speed: forced 10000full service_profile: TEST-QOS-PROFILE eos_cli: '! TEST RAW_EOS_CLI ' + sflow: + enable: true service_policy: qos: input: TEST_POLICY @@ -61,25 +70,34 @@ ethernet_interfaces: peer: peer2 ip_address: dhcp shutdown: false - type: routed + switchport: + enabled: false description: peer2 + sflow: + enable: true dhcp_client_accept_default_route: true - name: Ethernet42 peer_type: l3_interface peer: peer3 ip_address: dhcp shutdown: true - type: routed + switchport: + enabled: false description: This is a custom description + sflow: + enable: true dhcp_client_accept_default_route: true - name: Ethernet43 peer_type: l3_interface ip_address: 192.168.42.42/24 shutdown: true - type: routed + switchport: + enabled: false + sflow: + enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 1.2.3.1/32 prefix_lists: @@ -97,3 +115,10 @@ route_maps: static_routes: - destination_address_prefix: 0.0.0.0/0 gateway: 192.168.1.3 +sflow: + run: true + vrfs: + - name: sflow_vrf + destinations: + - destination: 10.10.10.12 + port: 1234 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-1.yml index 0957f6c252d..219e39abf3c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-1.yml @@ -6,12 +6,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.2/24 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-2.yml index 1049512f036..aced2788d50 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ntp-settings-2.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/only-connected-endpoints.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/only-connected-endpoints.yml new file mode 100644 index 00000000000..9cbdee25b34 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/only-connected-endpoints.yml @@ -0,0 +1,175 @@ +hostname: only-connected-endpoints +is_deployed: null +service_routing_protocols_model: null +vlan_internal_order: null +aaa_root: null +config_end: null +enable_password: null +transceiver_qsfp_default_mode_4x10: null +spanning_tree: null +vrfs: null +management_api_http: null +ethernet_interfaces: +- name: Ethernet20 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet21 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet22 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet23 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet24 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet25 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet26 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet27 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet28 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet29 + peer: Network Port + peer_type: network_port + port_profile: MY_PROFILE + description: Network Port + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet12 + peer: TEST_SERVER_01 + peer_interface: Nic1 + peer_type: server + port_profile: MY_PROFILE + description: SERVER_TEST_SERVER_01_Nic1 + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 +- name: Ethernet1 + peer: TEST_SERVER_01 + peer_interface: Nic1 + peer_type: server + port_profile: MY_PROFILE + description: SERVER_TEST_SERVER_01_Nic1 + shutdown: false + channel_group: + id: 1 + mode: active +- name: Ethernet2 + peer: TEST_SERVER_01 + peer_interface: Nic2 + peer_type: server + port_profile: MY_PROFILE + description: SERVER_TEST_SERVER_01_Nic2 + shutdown: false + channel_group: + id: 1 + mode: active +port_channel_interfaces: +- name: Port-Channel1 + description: SERVER_TEST_SERVER_01 + shutdown: false + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-100 + native_vlan: 1000 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-d.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-d.yml index fa1d9671f58..d76ac8fe177 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-d.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-d.yml @@ -7,6 +7,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -23,19 +29,20 @@ ethernet_interfaces: peer_type: spine description: OVERRIDE_UPLINK_TYPE-U_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: OVERRIDE_UPLINK_TYPE-U_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.42.2/32 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-u.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-u.yml index 208ec889f11..0bb79fd5714 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-u.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/override_uplink_type-u.yml @@ -44,6 +44,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -60,21 +66,22 @@ ethernet_interfaces: peer_type: spine description: OVERRIDE_UPLINK_TYPE-D_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: OVERRIDE_UPLINK_TYPE-D_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk spanning_tree_portfast: edge - vlans: none loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.42.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/platform_settings.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/platform_settings.yml index 2faa7829ed9..10d10a2e527 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/platform_settings.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/platform_settings.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -23,5 +29,6 @@ ip_igmp_snooping: globally_enabled: true ethernet_interfaces: - name: Ethernet12 - type: switched + switchport: + enabled: true description: Interface Created from platform_settings.structured_config diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf1-ptp-disabled.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf1-ptp-disabled.yml index b836f9e8194..dcaf56c6e56 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf1-ptp-disabled.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf1-ptp-disabled.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,6 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF1_Ethernet11 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -39,17 +44,18 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF2_Ethernet11 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: PTP-TEST-LEAF_Po11 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.yml index 283bbaab8a1..3c73a437c76 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled-uplink-disabled.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -47,7 +53,6 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF1_Ethernet14 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -57,17 +62,18 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF2_Ethernet14 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: PTP-TEST-LEAF_Po14 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled.yml index 17eaba0b164..0cafb8d25c1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-l2leaf2-ptp-enabled.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -47,7 +53,6 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF1_Ethernet12 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -57,17 +62,18 @@ ethernet_interfaces: peer_type: l3leaf description: PTP-TESTS-LEAF2_Ethernet12 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: PTP-TEST-LEAF_Po12 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' ptp: announce: interval: 0 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf1.yml index fd67b1e4220..894f8e67f87 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf1.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: ptp-tests-leaf2 - description: ptp-tests-leaf2 + description: ptp-tests-leaf2_Vlan4093 - ip_address: 10.254.2.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,7 +55,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: ptp-tests-spine1 - description: ptp-tests-spine1 + description: ptp-tests-spine1_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -66,7 +66,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.1 rd: 10.254.1.1:1 route_targets: import: @@ -77,11 +76,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.1 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: ptp-tests-leaf2_Vlan3000 vlans: - id: 11 tenant: PTP @@ -102,6 +103,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -116,7 +123,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.101/24 @@ -148,30 +155,30 @@ ptp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: PTP - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: PTP vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.96/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -186,19 +193,20 @@ vlan_interfaces: tenant: PTP type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.96/31 port_channel_interfaces: - name: Port-Channel9 - description: MLAG_PEER_ptp-tests-leaf2_Po9 - type: switched + description: MLAG_ptp-tests-leaf2_Port-Channel9 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ptp: announce: interval: 0 @@ -210,17 +218,21 @@ port_channel_interfaces: enable: true - name: Port-Channel11 description: PTP-TESTS-L2LEAF1-PTP-DISABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 11 - name: Port-Channel12 description: PTP-TESTS-L2LEAF2-PTP-ENABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 12 ptp: announce: @@ -233,14 +245,15 @@ port_channel_interfaces: enable: true - name: Port-Channel14 description: PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 14 - name: Port-Channel6 - description: Endpoint-with-mpass - type: switched + description: SERVER_Endpoint-with-mpass shutdown: false ptp: announce: @@ -253,16 +266,17 @@ port_channel_interfaces: enable: true role: master mpass: true - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' mlag: 6 ethernet_interfaces: - name: Ethernet9 peer: ptp-tests-leaf2 peer_interface: Ethernet9 peer_type: mlag_peer - description: MLAG_PEER_ptp-tests-leaf2_Ethernet9 - type: port-channel-member + description: MLAG_ptp-tests-leaf2_Ethernet9 shutdown: false channel_group: id: 9 @@ -271,8 +285,7 @@ ethernet_interfaces: peer: ptp-tests-leaf2 peer_interface: Ethernet10 peer_type: mlag_peer - description: MLAG_PEER_ptp-tests-leaf2_Ethernet10 - type: port-channel-member + description: MLAG_ptp-tests-leaf2_Ethernet10 shutdown: false channel_group: id: 9 @@ -284,7 +297,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -302,7 +316,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -319,7 +334,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF1-PTP-DISABLED_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -329,7 +343,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF2-PTP-ENABLED_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -339,7 +352,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -348,11 +360,12 @@ ethernet_interfaces: peer_interface: eth1 peer_type: server port_profile: PTP-profile-BMCA - description: bmca-endpoint_eth1 + description: SERVER_bmca-endpoint_eth1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' ptp: announce: interval: 0 @@ -366,11 +379,12 @@ ethernet_interfaces: peer: video-endpoint peer_interface: PCI1 peer_type: server - description: video-endpoint_PCI1 + description: SERVER_video-endpoint_PCI1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge ptp: announce: @@ -386,9 +400,8 @@ ethernet_interfaces: peer: Endpoint-with-mpass peer_interface: PCI1 peer_type: server - description: Endpoint-with-mpass_PCI1 + description: SERVER_Endpoint-with-mpass_PCI1 shutdown: false - type: port-channel-member channel_group: id: 6 mode: active @@ -396,11 +409,12 @@ ethernet_interfaces: peer: Endpoint-with-specific-PTP-profile peer_interface: eth3 peer_type: server - description: Endpoint-with-specific-PTP-profile_eth3 + description: SERVER_Endpoint-with-specific-PTP-profile_eth3 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' ptp: announce: interval: -2 @@ -434,11 +448,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf2.yml index ab1e8b78841..1738de1cf6b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-leaf2.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: ptp-tests-leaf1 - description: ptp-tests-leaf1 + description: ptp-tests-leaf1_Vlan4093 - ip_address: 10.254.2.4 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,7 +55,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: ptp-tests-spine1 - description: ptp-tests-spine1 + description: ptp-tests-spine1_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -66,7 +66,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.2 rd: 10.254.1.2:1 route_targets: import: @@ -77,11 +76,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.2 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: ptp-tests-leaf1_Vlan3000 vlans: - id: 11 tenant: PTP @@ -102,6 +103,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -116,7 +123,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.102/24 @@ -159,30 +166,30 @@ ptp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: PTP - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: PTP vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.97/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -197,19 +204,20 @@ vlan_interfaces: tenant: PTP type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.97/31 port_channel_interfaces: - name: Port-Channel9 - description: MLAG_PEER_ptp-tests-leaf1_Po9 - type: switched + description: MLAG_ptp-tests-leaf1_Port-Channel9 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ptp: announce: interval: 0 @@ -221,17 +229,21 @@ port_channel_interfaces: enable: true - name: Port-Channel11 description: PTP-TESTS-L2LEAF1-PTP-DISABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 11 - name: Port-Channel12 description: PTP-TESTS-L2LEAF2-PTP-ENABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 12 ptp: announce: @@ -244,14 +256,15 @@ port_channel_interfaces: enable: true - name: Port-Channel14 description: PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '11' shutdown: false - mode: trunk - vlans: '11' mlag: 14 - name: Port-Channel6 - description: Endpoint-with-mpass - type: switched + description: SERVER_Endpoint-with-mpass shutdown: false ptp: announce: @@ -264,16 +277,17 @@ port_channel_interfaces: enable: true role: master mpass: true - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' mlag: 6 ethernet_interfaces: - name: Ethernet9 peer: ptp-tests-leaf1 peer_interface: Ethernet9 peer_type: mlag_peer - description: MLAG_PEER_ptp-tests-leaf1_Ethernet9 - type: port-channel-member + description: MLAG_ptp-tests-leaf1_Ethernet9 shutdown: false channel_group: id: 9 @@ -282,8 +296,7 @@ ethernet_interfaces: peer: ptp-tests-leaf1 peer_interface: Ethernet10 peer_type: mlag_peer - description: MLAG_PEER_ptp-tests-leaf1_Ethernet10 - type: port-channel-member + description: MLAG_ptp-tests-leaf1_Ethernet10 shutdown: false channel_group: id: 9 @@ -295,7 +308,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -313,7 +327,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-SPINE1_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -330,7 +345,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF1-PTP-DISABLED_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -340,7 +354,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF2-PTP-ENABLED_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -350,7 +363,6 @@ ethernet_interfaces: peer_type: l2leaf description: PTP-TESTS-L2LEAF2-PTP-ENABLED-UPLINK-DISABLED_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -358,11 +370,12 @@ ethernet_interfaces: peer: video-endpoint peer_interface: PCI2 peer_type: server - description: video-endpoint_PCI2 + description: SERVER_video-endpoint_PCI2 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge ptp: announce: @@ -378,9 +391,8 @@ ethernet_interfaces: peer: Endpoint-with-mpass peer_interface: PCI2 peer_type: server - description: Endpoint-with-mpass_PCI2 + description: SERVER_Endpoint-with-mpass_PCI2 shutdown: false - type: port-channel-member channel_group: id: 6 mode: active @@ -407,11 +419,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine1.yml index 24685d6d1fe..41a21f6113c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine1.yml @@ -57,12 +57,12 @@ router_bgp: - ip_address: 10.254.1.1 peer_group: EVPN-OVERLAY-PEERS peer: ptp-tests-leaf1 - description: ptp-tests-leaf1 + description: ptp-tests-leaf1_Loopback0 remote_as: '65101' - ip_address: 10.254.1.2 peer_group: EVPN-OVERLAY-PEERS peer: ptp-tests-leaf2 - description: ptp-tests-leaf2 + description: ptp-tests-leaf2_Loopback0 remote_as: '65102' address_family_evpn: peer_groups: @@ -79,6 +79,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -86,7 +92,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.11/24 @@ -123,7 +129,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -141,7 +148,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -159,7 +167,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-LEAF2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -177,7 +186,8 @@ ethernet_interfaces: description: P2P_LINK_TO_PTP-TESTS-LEAF2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ptp: announce: interval: 0 @@ -193,7 +203,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine2_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -210,7 +221,8 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine2_Ethernet7 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -227,7 +239,8 @@ ethernet_interfaces: peer_interface: Ethernet8 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine2_Ethernet8 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -244,7 +257,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine2_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -258,7 +272,7 @@ ethernet_interfaces: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine2.yml index dc29393303a..ac2bbb79895 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine2.yml @@ -48,6 +48,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -55,7 +61,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.21/24 @@ -99,7 +105,7 @@ ptp: sync: 14 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: @@ -125,7 +131,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine1_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -142,7 +149,8 @@ ethernet_interfaces: peer_interface: Ethernet7 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine1_Ethernet7 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -159,7 +167,8 @@ ethernet_interfaces: peer_interface: Ethernet8 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine1_Ethernet8 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: @@ -176,7 +185,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_ptp-tests-spine1_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 ptp: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine3.yml index 75dc7afb546..01481091f73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/ptp-tests-spine3.yml @@ -48,6 +48,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -55,7 +61,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.31/24 @@ -85,7 +91,7 @@ ptp: sync: 3 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf1.yml index eb33b5dc466..7b27771daec 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf1.yml @@ -12,12 +12,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.201/24 @@ -34,7 +40,6 @@ ethernet_interfaces: peer_type: l3leaf description: SFLOW-TESTS-LEAF3_Ethernet16 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -44,19 +49,20 @@ ethernet_interfaces: peer_type: l3leaf description: SFLOW-TESTS-LEAF4_Ethernet16 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: SFLOW-TESTS-LEAF-MLAG_Po16 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf2.yml index b5ae21162ae..9785228e392 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-l2-leaf2.yml @@ -12,12 +12,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.202/24 @@ -34,7 +40,6 @@ ethernet_interfaces: peer_type: l3leaf description: SFLOW-TESTS-LEAF3_Ethernet17 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -44,19 +49,20 @@ ethernet_interfaces: peer_type: l3leaf description: SFLOW-TESTS-LEAF4_Ethernet17 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: SFLOW-TESTS-LEAF-MLAG_Po17 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 vlans: - id: 11 name: VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf1.yml index 632451ebb40..740628b79c9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf1.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-spine1 - description: sflow-tests-spine1 + description: sflow-tests-spine1_Loopback0 remote_as: '65200' address_family_evpn: peer_groups: @@ -52,7 +52,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.1 rd: 10.254.1.1:1 route_targets: import: @@ -63,6 +62,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.1 redistribute_routes: - source_protocol: connected vlans: @@ -85,6 +85,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -98,7 +104,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.101/24 @@ -116,7 +122,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.1/31 @@ -127,7 +134,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.3/31 @@ -135,42 +143,45 @@ ethernet_interfaces: peer: single-interface-true peer_interface: eth1 peer_type: server - description: single-interface-true_eth1 + description: SERVER_single-interface-true_eth1 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' sflow: enable: true - name: Ethernet12 peer: single-interface-false peer_interface: eth11 peer_type: server - description: single-interface-false_eth11 + description: SERVER_single-interface-false_eth11 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' sflow: enable: false - name: Ethernet14 peer: single-interface-no-definition peer_interface: eth12 peer_type: server - description: single-interface-no-definition_eth12 + description: SERVER_single-interface-no-definition_eth12 shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' sflow: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf2.yml index 7185c5eda21..bf4ff86a25b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf2.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-spine1 - description: sflow-tests-spine1 + description: sflow-tests-spine1_Loopback0 remote_as: '65200' address_family_evpn: peer_groups: @@ -52,7 +52,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.2 rd: 10.254.1.2:1 route_targets: import: @@ -63,6 +62,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.2 redistribute_routes: - source_protocol: connected vlans: @@ -85,6 +85,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -98,7 +104,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.102/24 @@ -116,7 +122,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet3 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.5/31 @@ -127,17 +134,18 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet4 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.7/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf3.yml index dbe19db2bd1..ecf939a1426 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf3.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.105 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: sflow-tests-leaf4 - description: sflow-tests-leaf4 + description: sflow-tests-leaf4_Vlan4093 - ip_address: 10.254.2.16 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,7 +55,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-spine1 - description: sflow-tests-spine1 + description: sflow-tests-spine1_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -67,7 +67,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.5 rd: 10.254.1.5:1 route_targets: import: @@ -78,11 +77,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.105 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: sflow-tests-leaf4_Vlan3000 vlans: - id: 11 tenant: SFLOW @@ -103,6 +104,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -117,7 +124,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.103/24 @@ -130,33 +137,33 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: SFLOW - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: SFLOW - id: 4092 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.104/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -170,7 +177,7 @@ vlan_interfaces: tenant: SFLOW type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.104/31 @@ -186,54 +193,61 @@ vlan_interfaces: - 10.254.254.1 port_channel_interfaces: - name: Port-Channel11 - description: port-channel-interface-true - type: switched + description: SERVER_port-channel-interface-true + switchport: + enabled: true + mode: access + trunk: + groups: + - MLAG + access_vlan: '11' shutdown: false - mode: access - trunk_groups: - - LEAF_PEER_L3 - - MLAG sflow: enable: true - vlans: '11' spanning_tree_portfast: edge mlag: 11 - name: Port-Channel16 description: SFLOW-TESTS-L2-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 mlag: 16 - name: Port-Channel17 description: SFLOW-TESTS-L2-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 mlag: 17 - name: Port-Channel13 - description: port-channel-interface-false - type: switched + description: SERVER_port-channel-interface-false shutdown: false sflow: enable: false - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 13 - name: Port-Channel15 - description: port-channel-interface-no-definition - type: switched + description: SERVER_port-channel-interface-no-definition shutdown: false sflow: enable: true - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 15 ethernet_interfaces: @@ -241,8 +255,7 @@ ethernet_interfaces: peer: port-channel-interface-true peer_interface: PCI1 peer_type: server - description: port-channel-interface-true_PCI1 - type: port-channel-member + description: SERVER_port-channel-interface-true_PCI1 shutdown: false channel_group: id: 11 @@ -251,8 +264,7 @@ ethernet_interfaces: peer: sflow-tests-leaf4 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_sflow-tests-leaf4_Ethernet12 - type: port-channel-member + description: MLAG_sflow-tests-leaf4_Ethernet12 shutdown: false channel_group: id: 11 @@ -264,7 +276,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet5 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.17/31 @@ -275,7 +288,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet6 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.19/31 @@ -285,7 +299,6 @@ ethernet_interfaces: peer_type: l2leaf description: SFLOW-TESTS-L2-LEAF1_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 16 mode: active @@ -295,7 +308,6 @@ ethernet_interfaces: peer_type: l2leaf description: SFLOW-TESTS-L2-LEAF2_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 17 mode: active @@ -303,9 +315,8 @@ ethernet_interfaces: peer: port-channel-interface-false peer_interface: PCI11 peer_type: server - description: port-channel-interface-false_PCI11 + description: SERVER_port-channel-interface-false_PCI11 shutdown: false - type: port-channel-member channel_group: id: 13 mode: 'on' @@ -313,9 +324,8 @@ ethernet_interfaces: peer: port-channel-interface-no-definition peer_interface: PCI13 peer_type: server - description: port-channel-interface-no-definition_PCI13 + description: SERVER_port-channel-interface-no-definition_PCI13 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -346,11 +356,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf4.yml index 484d15f1707..7058426ac9a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-leaf4.yml @@ -41,7 +41,7 @@ router_bgp: - ip_address: 10.254.1.104 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: sflow-tests-leaf3 - description: sflow-tests-leaf3 + description: sflow-tests-leaf3_Vlan4093 - ip_address: 10.254.2.20 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -55,7 +55,7 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-spine1 - description: sflow-tests-spine1 + description: sflow-tests-spine1_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -67,7 +67,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.254.1.6 rd: 10.254.1.6:1 route_targets: import: @@ -78,11 +77,13 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 10.254.1.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.254.1.104 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: sflow-tests-leaf3_Vlan3000 vlans: - id: 11 tenant: SFLOW @@ -103,6 +104,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -117,7 +124,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.104/24 @@ -130,33 +137,33 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 name: VLAN11 tenant: SFLOW - id: 3000 - name: MLAG_iBGP_VRF1 + name: MLAG_L3_VRF_VRF1 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: SFLOW - id: 4092 tenant: system name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.254.1.105/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -170,7 +177,7 @@ vlan_interfaces: tenant: SFLOW type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF1' + description: MLAG_L3_VRF_VRF1 vrf: VRF1 mtu: 9214 ip_address: 10.254.1.105/31 @@ -186,54 +193,61 @@ vlan_interfaces: - 10.254.254.1 port_channel_interfaces: - name: Port-Channel11 - description: port-channel-interface-true - type: switched + description: SERVER_port-channel-interface-true + switchport: + enabled: true + mode: access + trunk: + groups: + - MLAG + access_vlan: '11' shutdown: false - mode: access - trunk_groups: - - LEAF_PEER_L3 - - MLAG sflow: enable: true - vlans: '11' spanning_tree_portfast: edge mlag: 11 - name: Port-Channel16 description: SFLOW-TESTS-L2-LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 mlag: 16 - name: Port-Channel17 description: SFLOW-TESTS-L2-LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11,4092 shutdown: false - mode: trunk sflow: enable: true - vlans: 11,4092 mlag: 17 - name: Port-Channel13 - description: port-channel-interface-false - type: switched + description: SERVER_port-channel-interface-false shutdown: false sflow: enable: false - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 13 - name: Port-Channel15 - description: port-channel-interface-no-definition - type: switched + description: SERVER_port-channel-interface-no-definition shutdown: false sflow: enable: true - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag: 15 ethernet_interfaces: @@ -241,8 +255,7 @@ ethernet_interfaces: peer: port-channel-interface-true peer_interface: PCI2 peer_type: server - description: port-channel-interface-true_PCI2 - type: port-channel-member + description: SERVER_port-channel-interface-true_PCI2 shutdown: false channel_group: id: 11 @@ -251,8 +264,7 @@ ethernet_interfaces: peer: sflow-tests-leaf3 peer_interface: Ethernet12 peer_type: mlag_peer - description: MLAG_PEER_sflow-tests-leaf3_Ethernet12 - type: port-channel-member + description: MLAG_sflow-tests-leaf3_Ethernet12 shutdown: false channel_group: id: 11 @@ -264,7 +276,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet7 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.21/31 @@ -275,7 +288,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-SPINE1_Ethernet8 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.23/31 @@ -285,7 +299,6 @@ ethernet_interfaces: peer_type: l2leaf description: SFLOW-TESTS-L2-LEAF1_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 16 mode: active @@ -295,7 +308,6 @@ ethernet_interfaces: peer_type: l2leaf description: SFLOW-TESTS-L2-LEAF2_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 17 mode: active @@ -303,9 +315,8 @@ ethernet_interfaces: peer: port-channel-interface-false peer_interface: PCI12 peer_type: server - description: port-channel-interface-false_PCI12 + description: SERVER_port-channel-interface-false_PCI12 shutdown: false - type: port-channel-member channel_group: id: 13 mode: 'on' @@ -313,9 +324,8 @@ ethernet_interfaces: peer: port-channel-interface-no-definition peer_interface: PCI14 peer_type: server - description: port-channel-interface-no-definition_PCI14 + description: SERVER_port-channel-interface-no-definition_PCI14 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -346,11 +356,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.254.1.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.254.11.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine1.yml index 61b6762f7b8..1ac212b68c3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine1.yml @@ -77,22 +77,22 @@ router_bgp: - ip_address: 10.254.1.1 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-leaf1 - description: sflow-tests-leaf1 + description: sflow-tests-leaf1_Loopback0 remote_as: '65101' - ip_address: 10.254.1.2 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-leaf2 - description: sflow-tests-leaf2 + description: sflow-tests-leaf2_Loopback0 remote_as: '65102' - ip_address: 10.254.1.5 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-leaf3 - description: sflow-tests-leaf3 + description: sflow-tests-leaf3_Loopback0 remote_as: '65105' - ip_address: 10.254.1.6 peer_group: EVPN-OVERLAY-PEERS peer: sflow-tests-leaf4 - description: sflow-tests-leaf4 + description: sflow-tests-leaf4_Loopback0 remote_as: '65105' address_family_evpn: peer_groups: @@ -109,6 +109,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -116,7 +122,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.11/24 @@ -134,7 +140,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.0/31 @@ -145,7 +152,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.2/31 @@ -156,7 +164,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.4/31 @@ -167,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF2_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.6/31 @@ -178,7 +188,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF3_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.16/31 @@ -189,7 +200,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF3_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.18/31 @@ -200,7 +212,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF4_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.20/31 @@ -211,7 +224,8 @@ ethernet_interfaces: description: P2P_LINK_TO_SFLOW-TESTS-LEAF4_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false sflow: enable: true ip_address: 10.254.2.22/31 @@ -220,7 +234,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -230,7 +245,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -240,7 +256,8 @@ ethernet_interfaces: peer_interface: Ethernet11 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet11 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -250,7 +267,8 @@ ethernet_interfaces: peer_interface: Ethernet12 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet12 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -260,7 +278,8 @@ ethernet_interfaces: peer_interface: Ethernet13 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet13 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -270,14 +289,15 @@ ethernet_interfaces: peer_interface: Ethernet14 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine2_Ethernet14 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine2.yml index 1ab554b78ca..4331daba5d1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/sflow-tests-spine2.yml @@ -48,6 +48,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none vrfs: @@ -55,7 +61,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.0.21/24 @@ -67,7 +73,7 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: @@ -93,7 +99,8 @@ ethernet_interfaces: peer_interface: Ethernet9 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -103,7 +110,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -113,7 +121,8 @@ ethernet_interfaces: peer_interface: Ethernet11 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet11 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -123,7 +132,8 @@ ethernet_interfaces: peer_interface: Ethernet12 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet12 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -133,7 +143,8 @@ ethernet_interfaces: peer_interface: Ethernet13 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet13 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: @@ -143,7 +154,8 @@ ethernet_interfaces: peer_interface: Ethernet14 peer_type: spine description: P2P_LINK_TO_sflow-tests-spine1_Ethernet14 - type: routed + switchport: + enabled: false shutdown: false mtu: 9214 sflow: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-disabled-leaf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-disabled-leaf.yml index 725358a7f5a..40adb4e435d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-disabled-leaf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-disabled-leaf.yml @@ -160,6 +160,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -184,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.0/31 - name: Ethernet1.1000 peer: cv-pathfinder-edge @@ -193,8 +200,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet1.142 @@ -204,8 +211,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet1.666 @@ -215,8 +222,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet2 @@ -226,7 +233,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE1_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.2/31 - name: Ethernet2.1000 peer: cv-pathfinder-edge1 @@ -235,8 +243,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE1_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.2/31 - name: Ethernet2.142 @@ -246,8 +254,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE1_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.2/31 - name: Ethernet2.666 @@ -257,17 +265,17 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE1_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.2/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.45.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.255.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf1.yml index 67cc94ded64..15d14ee447e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf1.yml @@ -160,6 +160,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -184,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1A_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.0/31 - name: Ethernet1.1000 peer: cv-pathfinder-transit1A @@ -193,8 +200,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1A_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet1.142 @@ -204,8 +211,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1A_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet1.666 @@ -215,8 +222,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1A_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.0/31 - name: Ethernet2 @@ -226,7 +233,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1B_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.2/31 - name: Ethernet2.1000 peer: cv-pathfinder-transit1B @@ -235,8 +243,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1B_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.2/31 - name: Ethernet2.142 @@ -246,8 +254,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1B_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.2/31 - name: Ethernet2.666 @@ -257,17 +265,17 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-TRANSIT1B_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.2/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.45.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2A.yml index 2cef59ffd65..813fe87b71c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2A.yml @@ -160,6 +160,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -184,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.4/31 - name: Ethernet1.1000 peer: cv-pathfinder-edge2A @@ -193,8 +200,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.4/31 - name: Ethernet1.142 @@ -204,8 +211,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.4/31 - name: Ethernet1.666 @@ -215,8 +222,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.4/31 - name: Ethernet2 @@ -226,7 +233,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet52 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.8/31 - name: Ethernet2.1000 peer: cv-pathfinder-edge2B @@ -235,8 +243,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet52.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.8/31 - name: Ethernet2.142 @@ -246,8 +254,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet52.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.8/31 - name: Ethernet2.666 @@ -257,17 +265,17 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet52.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.8/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.45.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2B.yml index 2e376ddbb69..1a8abde0d26 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/site-ha-enabled-leaf2B.yml @@ -160,6 +160,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -184,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet53 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.6/31 - name: Ethernet1.1000 peer: cv-pathfinder-edge2A @@ -193,8 +200,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet53.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.6/31 - name: Ethernet1.142 @@ -204,8 +211,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet53.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.6/31 - name: Ethernet1.666 @@ -215,8 +222,8 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE2A_Ethernet53.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.6/31 - name: Ethernet2 @@ -226,7 +233,8 @@ ethernet_interfaces: description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet53 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 172.17.0.10/31 - name: Ethernet2.1000 peer: cv-pathfinder-edge2B @@ -235,8 +243,8 @@ ethernet_interfaces: vrf: IT description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet53.1000_vrf_IT shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 1000 + encapsulation_dot1q: + vlan: 1000 mtu: 9214 ip_address: 172.17.0.10/31 - name: Ethernet2.142 @@ -246,8 +254,8 @@ ethernet_interfaces: vrf: PROD description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet53.142_vrf_PROD shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 142 + encapsulation_dot1q: + vlan: 142 mtu: 9214 ip_address: 172.17.0.10/31 - name: Ethernet2.666 @@ -257,17 +265,17 @@ ethernet_interfaces: vrf: ATTRACTED-VRF-FROM-UPLINK description: P2P_LINK_TO_CV-PATHFINDER-EDGE2B_Ethernet53.666_vrf_ATTRACTED-VRF-FROM-UPLINK shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 666 + encapsulation_dot1q: + vlan: 666 mtu: 9214 ip_address: 172.17.0.10/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.45.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.255.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-1.yml index f0622425515..4a8edd8d3ee 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-1.yml @@ -10,12 +10,18 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 10.10.10.43/26 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-2.yml index c1886dba0b7..3e982ae9e15 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/snmp-settings-2.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/source-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/source-interfaces.yml index 3a2a7a28ba2..3b91100bea5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/source-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/source-interfaces.yml @@ -6,13 +6,19 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: default ip_routing: false - name: INBANDMGMT management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: default ip_address: 192.168.0.2/24 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/spanning-tree-mode-rapid-pvst.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/spanning-tree-mode-rapid-pvst.yml index 0eb5972854e..af11c959480 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/spanning-tree-mode-rapid-pvst.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/spanning-tree-mode-rapid-pvst.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: rapid-pvst rapid_pvst_instances: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1a.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1a.yml index 1071c09fd28..55455339646 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1a.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1a.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -22,7 +28,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -87,43 +93,48 @@ vlans: - UPLINK vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.248.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l2leaf1b_Po3 - type: switched + description: MLAG_trunk-group-tests-l2leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L3LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - UPLINK shutdown: false - mode: trunk - trunk_groups: - - UPLINK mlag: 1 - name: Port-Channel13 - description: server_with_tg_300_portchannel - type: switched + description: portchannel shutdown: false - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_300 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_300 mlag: 13 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l2leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l2leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l2leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -132,8 +143,7 @@ ethernet_interfaces: peer: trunk-group-tests-l2leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l2leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l2leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -144,7 +154,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -154,7 +163,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -162,9 +170,8 @@ ethernet_interfaces: peer: server_with_tg_300 peer_interface: Nic3 peer_type: server - description: server_with_tg_300_Nic3 + description: SERVER_server_with_tg_300_Nic3 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1b.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1b.yml index e8eb96f38ce..08b355d8ca3 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1b.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf1b.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -22,7 +28,7 @@ spanning_tree: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - CUSTOM_MLAG_TG_NAME - id: 100 @@ -79,43 +85,48 @@ vlans: - CUSTOM_UPLINK_TG_NAME vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 ip_address: 10.255.248.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l2leaf1a_Po3 - type: switched + description: MLAG_trunk-group-tests-l2leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - CUSTOM_MLAG_TG_NAME shutdown: false - mode: trunk - trunk_groups: - - CUSTOM_MLAG_TG_NAME - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L3LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - UPLINK shutdown: false - mode: trunk - trunk_groups: - - UPLINK mlag: 1 - name: Port-Channel13 - description: server_with_tg_300_portchannel - type: switched + description: portchannel shutdown: false - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_300 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_300 mlag: 13 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l2leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l2leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l2leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -124,8 +135,7 @@ ethernet_interfaces: peer: trunk-group-tests-l2leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l2leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l2leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -136,7 +146,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -146,7 +155,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -154,20 +162,21 @@ ethernet_interfaces: peer: server_with_tg_200 peer_interface: Nic1 peer_type: server - description: server_with_tg_200_Nic1 + description: SERVER_server_with_tg_200_Nic1 shutdown: false - type: switched - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_200 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_200 - name: Ethernet13 peer: server_with_tg_300 peer_interface: Nic4 peer_type: server - description: server_with_tg_300_Nic4 + description: SERVER_server_with_tg_300_Nic4 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf3.yml index 3b210265c7d..5797beec0f2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf3.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -24,7 +30,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1A_Ethernet5 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -34,7 +39,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF1B_Ethernet5 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -42,21 +46,25 @@ ethernet_interfaces: peer: server_with_tg_200 peer_interface: Nic2 peer_type: server - description: server_with_tg_200_Nic2 + description: SERVER_server_with_tg_200_Nic2 shutdown: false - type: switched - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_200 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_200 port_channel_interfaces: - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L3LEAF1_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - UPLINK shutdown: false - mode: trunk - trunk_groups: - - UPLINK vlans: - id: 200 name: svi200_with_trunk_groups diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf4.yml index 8ef8a1eb00d..d3261ea85e6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf4.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l2leaf4.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -24,7 +30,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -34,7 +39,6 @@ ethernet_interfaces: peer_type: l3leaf description: TRUNK-GROUP-TESTS-L3LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -42,21 +46,25 @@ ethernet_interfaces: peer: server_with_tg_200 peer_interface: Nic3 peer_type: server - description: server_with_tg_200_Nic3 + description: SERVER_server_with_tg_200_Nic3 shutdown: false - type: switched - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_200 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_200 port_channel_interfaces: - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L3LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - UPLINK shutdown: false - mode: trunk - trunk_groups: - - UPLINK vlans: - id: 200 name: svi200_with_trunk_groups diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1a.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1a.yml index 81e6e24bcab..5a43d23fa61 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1a.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1a.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.247.1 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: trunk-group-tests-l3leaf1b - description: trunk-group-tests-l3leaf1b + description: trunk-group-tests-l3leaf1b_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TG_100 - router_id: 192.168.250.9 rd: 192.168.250.9:100 route_targets: import: @@ -64,15 +63,16 @@ router_bgp: - address_family: evpn route_targets: - 100:100 + router_id: 192.168.250.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1b_Vlan3099 updates: wait_install: true - name: TG_200 - router_id: 192.168.250.9 rd: 192.168.250.9:200 route_targets: import: @@ -83,15 +83,16 @@ router_bgp: - address_family: evpn route_targets: - 200:200 + router_id: 192.168.250.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1b_Vlan3199 updates: wait_install: true - name: TG_300 - router_id: 192.168.250.9 rd: 192.168.250.9:300 route_targets: import: @@ -102,11 +103,13 @@ router_bgp: - address_family: evpn route_targets: - 300:300 + router_id: 192.168.250.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.1 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1b_Vlan3299 updates: wait_install: true vlans: @@ -201,6 +204,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -222,12 +231,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 100 @@ -293,14 +302,14 @@ vlans: name: l2vlan399_without_trunk_groups tenant: TRUNK_GROUP_TESTS - id: 3099 - name: MLAG_iBGP_TG_100 + name: MLAG_L3_VRF_TG_100 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TRUNK_GROUP_TESTS - id: 3199 - name: MLAG_iBGP_TG_200 + name: MLAG_L3_VRF_TG_200 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TRUNK_GROUP_TESTS - id: 301 name: svi301_with_trunk_groups_only_l3leaf @@ -310,9 +319,9 @@ vlans: - TG_300 - TG_NOT_MATCHING_ANY_SERVERS - id: 3299 - name: MLAG_iBGP_TG_300 + name: MLAG_L3_VRF_TG_300 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TRUNK_GROUP_TESTS - id: 311 name: l2vlan310_with_trunk_groups_only_l3leaf @@ -323,12 +332,12 @@ vlans: - TG_NOT_MATCHING_ANY_SERVERS vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.247.0/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -346,7 +355,7 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_100' + description: MLAG_L3_VRF_TG_100 vrf: TG_100 mtu: 9214 ip_address: 10.255.247.0/31 @@ -363,7 +372,7 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_200' + description: MLAG_L3_VRF_TG_200 vrf: TG_200 mtu: 9214 ip_address: 10.255.247.0/31 @@ -397,51 +406,57 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_300' + description: MLAG_L3_VRF_TG_300 vrf: TG_300 mtu: 9214 ip_address: 10.255.247.0/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l3leaf1b_Po3 - type: switched + description: MLAG_trunk-group-tests-l3leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TRUNK_GROUP_TESTS_L2LEAF1 shutdown: false - mode: trunk - trunk_groups: - - TRUNK_GROUP_TESTS_L2LEAF1 mlag: 1 - name: Port-Channel5 description: TRUNK-GROUP-TESTS-L2LEAF3_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - trunk-group-tests-l2leaf3 shutdown: false - mode: trunk - trunk_groups: - - trunk-group-tests-l2leaf3 mlag: 5 - name: Port-Channel13 - description: server_with_tg_300_portchannel - type: switched + description: portchannel shutdown: false - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_300 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_300 mlag: 13 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l3leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -450,8 +465,7 @@ ethernet_interfaces: peer: trunk-group-tests-l3leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -462,7 +476,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -472,7 +485,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF1B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -482,7 +494,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF3_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -490,20 +501,21 @@ ethernet_interfaces: peer: server_with_tg_100 peer_interface: Nic1 peer_type: server - description: server_with_tg_100_Nic1 + description: SERVER_server_with_tg_100_Nic1 shutdown: false - type: switched - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_100 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_100 - name: Ethernet13 peer: server_with_tg_300 peer_interface: Nic1 peer_type: server - description: server_with_tg_300_Nic1 + description: SERVER_server_with_tg_300_Nic1 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active @@ -530,11 +542,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.250.9/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.249.9/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1b.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1b.yml index 17d70066f7c..753b4217837 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1b.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf1b.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.247.0 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: trunk-group-tests-l3leaf1a - description: trunk-group-tests-l3leaf1a + description: trunk-group-tests-l3leaf1a_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TG_100 - router_id: 192.168.250.10 rd: 192.168.250.10:100 route_targets: import: @@ -64,15 +63,16 @@ router_bgp: - address_family: evpn route_targets: - 100:100 + router_id: 192.168.250.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1a_Vlan3099 updates: wait_install: true - name: TG_200 - router_id: 192.168.250.10 rd: 192.168.250.10:200 route_targets: import: @@ -83,15 +83,16 @@ router_bgp: - address_family: evpn route_targets: - 200:200 + router_id: 192.168.250.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1a_Vlan3199 updates: wait_install: true - name: TG_300 - router_id: 192.168.250.10 rd: 192.168.250.10:300 route_targets: import: @@ -102,11 +103,13 @@ router_bgp: - address_family: evpn route_targets: - 300:300 + router_id: 192.168.250.10 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.0 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf1a_Vlan3299 updates: wait_install: true vlans: @@ -201,6 +204,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -222,12 +231,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - CUSTOM_LEAF_PEER_L3_TG_NAME - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - CUSTOM_MLAG_TG_NAME - id: 100 @@ -283,12 +292,12 @@ vlans: name: l2vlan399_without_trunk_groups tenant: TRUNK_GROUP_TESTS - id: 3099 - name: MLAG_iBGP_TG_100 + name: MLAG_L3_VRF_TG_100 trunk_groups: - CUSTOM_LEAF_PEER_L3_TG_NAME tenant: TRUNK_GROUP_TESTS - id: 3199 - name: MLAG_iBGP_TG_200 + name: MLAG_L3_VRF_TG_200 trunk_groups: - CUSTOM_LEAF_PEER_L3_TG_NAME tenant: TRUNK_GROUP_TESTS @@ -299,7 +308,7 @@ vlans: - CUSTOM_MLAG_TG_NAME - TG_300 - id: 3299 - name: MLAG_iBGP_TG_300 + name: MLAG_L3_VRF_TG_300 trunk_groups: - CUSTOM_LEAF_PEER_L3_TG_NAME tenant: TRUNK_GROUP_TESTS @@ -311,12 +320,12 @@ vlans: - TG_300 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.247.1/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -334,7 +343,7 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_100' + description: MLAG_L3_VRF_TG_100 vrf: TG_100 mtu: 9214 ip_address: 10.255.247.1/31 @@ -351,7 +360,7 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_200' + description: MLAG_L3_VRF_TG_200 vrf: TG_200 mtu: 9214 ip_address: 10.255.247.1/31 @@ -385,51 +394,58 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_300' + description: MLAG_L3_VRF_TG_300 vrf: TG_300 mtu: 9214 ip_address: 10.255.247.1/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l3leaf1a_Po3 - type: switched + description: MLAG_trunk-group-tests-l3leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - CUSTOM_MLAG_TG_NAME + - CUSTOM_LEAF_PEER_L3_TG_NAME shutdown: false - mode: trunk - trunk_groups: - - CUSTOM_LEAF_PEER_L3_TG_NAME - - CUSTOM_MLAG_TG_NAME - name: Port-Channel1 description: TRUNK_GROUP_TESTS_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TRUNK_GROUP_TESTS_L2LEAF1 shutdown: false - mode: trunk - trunk_groups: - - TRUNK_GROUP_TESTS_L2LEAF1 mlag: 1 - name: Port-Channel5 description: TRUNK-GROUP-TESTS-L2LEAF3_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - trunk-group-tests-l2leaf3 shutdown: false - mode: trunk - trunk_groups: - - trunk-group-tests-l2leaf3 mlag: 5 - name: Port-Channel13 - description: server_with_tg_300_portchannel - type: switched + description: portchannel shutdown: false - mode: trunk - trunk_groups: - - TG_NOT_MATCHING_ANY_VLANS - - TG_300 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - TG_NOT_MATCHING_ANY_VLANS + - TG_300 mlag: 13 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l3leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -438,8 +454,7 @@ ethernet_interfaces: peer: trunk-group-tests-l3leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -450,7 +465,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -460,7 +474,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF1B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -470,7 +483,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF3_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -478,9 +490,8 @@ ethernet_interfaces: peer: server_with_tg_300 peer_interface: Nic2 peer_type: server - description: server_with_tg_300_Nic2 + description: SERVER_server_with_tg_300_Nic2 shutdown: false - type: port-channel-member channel_group: id: 13 mode: active @@ -507,11 +518,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.250.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.249.9/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2a.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2a.yml index 8dbd085974a..0e6250b1c37 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2a.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2a.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.247.5 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: trunk-group-tests-l3leaf2b - description: trunk-group-tests-l3leaf2b + description: trunk-group-tests-l3leaf2b_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TG_200 - router_id: 192.168.250.11 rd: 192.168.250.11:200 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - 200:200 + router_id: 192.168.250.11 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.5 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf2b_Vlan3199 updates: wait_install: true vlans: @@ -99,6 +100,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -114,12 +121,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 200 @@ -139,18 +146,18 @@ vlans: name: l2vlan210_with_trunk_groups tenant: TRUNK_GROUP_TESTS - id: 3199 - name: MLAG_iBGP_TG_200 + name: MLAG_L3_VRF_TG_200 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TRUNK_GROUP_TESTS vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.247.4/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -168,34 +175,36 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_200' + description: MLAG_L3_VRF_TG_200 vrf: TG_200 mtu: 9214 ip_address: 10.255.247.4/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l3leaf2b_Po3 - type: switched + description: MLAG_trunk-group-tests-l3leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel1 description: TRUNK-GROUP-TESTS-L2LEAF4_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - trunk-group-tests-l2leaf4 shutdown: false - mode: trunk - trunk_groups: - - trunk-group-tests-l2leaf4 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l3leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -204,8 +213,7 @@ ethernet_interfaces: peer: trunk-group-tests-l3leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -216,7 +224,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF4_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -243,11 +250,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.250.11/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.249.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2b.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2b.yml index 10128b5c84f..9e80c8b6c73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2b.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/trunk-group-tests-l3leaf2b.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 10.255.247.4 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: trunk-group-tests-l3leaf2a - description: trunk-group-tests-l3leaf2a + description: trunk-group-tests-l3leaf2a_Vlan4093 redistribute_routes: - source_protocol: connected route_map: RM-CONN-2-BGP @@ -53,7 +53,6 @@ router_bgp: activate: true vrfs: - name: TG_200 - router_id: 192.168.250.12 rd: 192.168.250.12:200 route_targets: import: @@ -64,11 +63,13 @@ router_bgp: - address_family: evpn route_targets: - 200:200 + router_id: 192.168.250.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.247.4 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: trunk-group-tests-l3leaf2a_Vlan3199 updates: wait_install: true vlans: @@ -99,6 +100,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -114,12 +121,12 @@ spanning_tree: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - CUSTOM_MLAG_TG_NAME - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - CUSTOM_MLAG_TG_NAME - id: 200 @@ -135,18 +142,18 @@ vlans: name: l2vlan210_with_trunk_groups tenant: TRUNK_GROUP_TESTS - id: 3199 - name: MLAG_iBGP_TG_200 + name: MLAG_L3_VRF_TG_200 trunk_groups: - CUSTOM_MLAG_TG_NAME tenant: TRUNK_GROUP_TESTS vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 9214 ip_address: 10.255.247.5/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 9214 @@ -164,33 +171,36 @@ vlan_interfaces: tenant: TRUNK_GROUP_TESTS type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf TG_200' + description: MLAG_L3_VRF_TG_200 vrf: TG_200 mtu: 9214 ip_address: 10.255.247.5/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_trunk-group-tests-l3leaf2a_Po3 - type: switched + description: MLAG_trunk-group-tests-l3leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - CUSTOM_MLAG_TG_NAME shutdown: false - mode: trunk - trunk_groups: - - CUSTOM_MLAG_TG_NAME - name: Port-Channel1 description: TRUNK-GROUP-TESTS-L2LEAF4_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - trunk-group-tests-l2leaf4 shutdown: false - mode: trunk - trunk_groups: - - trunk-group-tests-l2leaf4 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: trunk-group-tests-l3leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -199,8 +209,7 @@ ethernet_interfaces: peer: trunk-group-tests-l3leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_trunk-group-tests-l3leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_trunk-group-tests-l3leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -211,7 +220,6 @@ ethernet_interfaces: peer_type: l2leaf description: TRUNK-GROUP-TESTS-L2LEAF4_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -238,11 +246,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.250.12/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.249.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_1.yml index 27ee667bd5e..421c3270d79 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_1.yml @@ -48,12 +48,12 @@ router_bgp: - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: underlay_filter_peer_as_evpn_2 - description: underlay_filter_peer_as_evpn_2 + description: underlay_filter_peer_as_evpn_2_Loopback0 remote_as: '64513' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: underlay_filter_peer_as_evpn_3 - description: underlay_filter_peer_as_evpn_3 + description: underlay_filter_peer_as_evpn_3_Loopback0 remote_as: '64513' address_family_evpn: peer_groups: @@ -66,6 +66,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -81,7 +87,8 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_EVPN_2_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.153.1/31 - name: Ethernet2 peer: underlay_filter_peer_as_evpn_3 @@ -90,15 +97,16 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_EVPN_3_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.153.3/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_2.yml index 47f146baf66..e685fc392a8 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_2.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: underlay_filter_peer_as_evpn_1 - description: underlay_filter_peer_as_evpn_1 + description: underlay_filter_peer_as_evpn_1_Loopback0 remote_as: '64512' address_family_evpn: peer_groups: @@ -56,6 +56,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -71,15 +77,16 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_EVPN_1_Ethernet1 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.153.0/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_3.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_3.yml index f4b99d4643d..2dab6d98c87 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_3.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/underlay_filter_peer_as_evpn_3.yml @@ -43,7 +43,7 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: underlay_filter_peer_as_evpn_1 - description: underlay_filter_peer_as_evpn_1 + description: underlay_filter_peer_as_evpn_1_Loopback0 remote_as: '64512' address_family_evpn: peer_groups: @@ -56,6 +56,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -71,15 +77,16 @@ ethernet_interfaces: description: P2P_LINK_TO_UNDERLAY_FILTER_PEER_AS_EVPN_1_Ethernet2 shutdown: false mtu: 9214 - type: routed + switchport: + enabled: false ip_address: 192.168.153.2/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-child.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-child.yml index 93756f89970..e17b26e78cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-child.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-child.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -27,17 +33,18 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-NATIVE-VLAN-PARENT_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active port_channel_interfaces: - name: Port-Channel2 description: UPLINK-NATIVE-VLAN-PARENT_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + native_vlan: 200 + allowed_vlan: '100' shutdown: false - mode: trunk - native_vlan: 200 - vlans: '100' ip_igmp_snooping: globally_enabled: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-grandparent.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-grandparent.yml index ee6e999ada8..711d65167f5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-grandparent.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-grandparent.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,18 +26,19 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-NATIVE-VLAN-PARENT_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: UPLINK-NATIVE-VLAN-PARENT_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + native_vlan: 100 + allowed_vlan: '100' shutdown: false - mode: trunk - native_vlan: 100 - vlans: '100' vlans: - id: 100 name: NETWORK_SERVICES_VLAN diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-parent.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-parent.yml index 58c83b0467a..be2a65fb604 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-parent.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink-native-vlan-parent.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -27,7 +33,6 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-NATIVE-VLAN-GRANDPARENT_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -37,24 +42,27 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK-NATIVE-VLAN-CHILD_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 2 mode: active port_channel_interfaces: - name: Port-Channel1 description: UPLINK-NATIVE-VLAN-GRANDPARENT_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + native_vlan: 100 + allowed_vlan: '100' shutdown: false - mode: trunk - native_vlan: 100 - vlans: '100' - name: Port-Channel2 description: UPLINK-NATIVE-VLAN-CHILD_Po2 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + native_vlan: 200 + allowed_vlan: '100' shutdown: false - mode: trunk - native_vlan: 200 - vlans: '100' ip_igmp_snooping: globally_enabled: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_l2leaf.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_l2leaf.yml index b9d5c913edb..62f6f91a327 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_l2leaf.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_l2leaf.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -20,10 +26,12 @@ ethernet_interfaces: peer_type: wan_router description: UPLINK_LAN_WAN_ROUTER1_Ethernet2 shutdown: false - type: switched - vlans: 10,100 - mode: trunk - native_vlan: 10 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,100 + native_vlan: 10 spanning_tree_portfast: edge flow_tracker: sampled: FLOW-TRACKER @@ -33,9 +41,11 @@ ethernet_interfaces: peer_type: wan_router description: UPLINK_LAN_WAN_ROUTER2_Ethernet2 shutdown: false - type: switched - vlans: 10,100 - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 10,100 spanning_tree_portfast: edge flow_tracker: sampled: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router1.yml index 383aaf98a77..cfe7d1d0ea0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router1.yml @@ -30,6 +30,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -58,7 +59,6 @@ router_bgp: any: true vrfs: - name: VRF1 - router_id: 192.168.1.1 rd: 192.168.1.1:123 route_targets: import: @@ -69,6 +69,7 @@ router_bgp: - address_family: evpn route_targets: - 123:123 + router_id: 192.168.1.1 redistribute_routes: - source_protocol: connected - name: default @@ -85,6 +86,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -106,10 +112,11 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK_LAN_L2LEAF_Ethernet1 shutdown: false - type: routed + switchport: + enabled: false vrf: VRF1 ip_address: 10.0.10.1/24 - mtu: 9214 + mtu: 9218 flow_tracker: hardware: FLOW-TRACKER - name: Ethernet2.100 @@ -118,8 +125,8 @@ ethernet_interfaces: peer_type: l2leaf description: My vlan 100 shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: VRF1 ip_address: 10.0.100.1/24 ipv6_address: cafe::cafe/64 @@ -132,11 +139,12 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.9.9.9/31 shutdown: false - type: routed + switchport: + enabled: false description: Comcast_999 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.1.1/32 prefix_lists: @@ -294,7 +302,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.2.1/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router2.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router2.yml index 80b46e1c65d..b265926fb00 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router2.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/uplink_lan_wan_router2.yml @@ -30,6 +30,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT address_family_ipv4: @@ -58,7 +59,6 @@ router_bgp: any: true vrfs: - name: VRF1 - router_id: 192.168.1.2 rd: 192.168.1.2:123 route_targets: import: @@ -69,6 +69,7 @@ router_bgp: - address_family: evpn route_targets: - 123:123 + router_id: 192.168.1.2 redistribute_routes: - source_protocol: connected - name: default @@ -85,6 +86,11 @@ router_bgp: - route-map RM-EVPN-EXPORT-VRF-DEFAULT service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -106,19 +112,20 @@ ethernet_interfaces: peer_type: l2leaf description: UPLINK_LAN_L2LEAF_Ethernet2 shutdown: false - type: routed - mtu: 9214 + switchport: + enabled: false + mtu: 9218 - name: Ethernet2.10 peer: uplink_lan_l2leaf peer_interface: Ethernet2 VLAN 10 peer_type: l2leaf description: VLAN10_NATIVE shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 10 + encapsulation_dot1q: + vlan: 10 vrf: VRF1 ip_address: 10.0.10.1/24 - mtu: 9214 + mtu: 9218 flow_tracker: hardware: FLOW-TRACKER - name: Ethernet2.100 @@ -127,8 +134,8 @@ ethernet_interfaces: peer_type: l2leaf description: My vlan 100 shutdown: false - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: VRF1 ip_address: 10.0.100.1/24 ipv6_address: cafe::cafe/64 @@ -141,11 +148,12 @@ ethernet_interfaces: peer_type: l3_interface ip_address: 10.9.9.1/31 shutdown: false - type: routed + switchport: + enabled: false description: Comcast_999 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 192.168.1.2/32 prefix_lists: @@ -303,7 +311,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 192.168.2.2/32 flow_tracker: hardware: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/varpv6.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/varpv6.yml index 4f95fcfb41e..fa946149582 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/varpv6.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/varpv6.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 192.168.255.101 rd: 192.168.255.101:1 route_targets: import: @@ -49,6 +48,7 @@ router_bgp: - address_family: evpn route_targets: - '1:1' + router_id: 192.168.255.101 redistribute_routes: - source_protocol: connected vlans: @@ -99,6 +99,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -112,11 +118,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.101/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.101/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/vrfs_rd_rt_override.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/vrfs_rd_rt_override.yml index 631f8892277..e7327d72d6e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/vrfs_rd_rt_override.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/intended/structured_configs/vrfs_rd_rt_override.yml @@ -38,7 +38,6 @@ router_bgp: activate: true vrfs: - name: VRF1 - router_id: 10.10.0.20 rd: 111:222 route_targets: import: @@ -49,10 +48,10 @@ router_bgp: - address_family: evpn route_targets: - 333:444 + router_id: 10.10.0.20 redistribute_routes: - source_protocol: connected - name: VRF2 - router_id: 10.10.0.20 rd: 10.10.0.20:999 route_targets: import: @@ -63,6 +62,7 @@ router_bgp: - address_family: evpn route_targets: - 2:999 + router_id: 10.10.0.20 redistribute_routes: - source_protocol: connected vlans: @@ -89,6 +89,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false @@ -104,11 +110,11 @@ management_api_http: enable_https: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.10.0.20/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: MY_VTEP_LOOPBACK shutdown: false ip_address: 10.11.0.20/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AVD_LAB.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AVD_LAB.yml index 7132199fe26..cb407c0d8b0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AVD_LAB.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AVD_LAB.yml @@ -1,4 +1,28 @@ -# Nashua EVE-NG LAB shared attributes +--- + +# Overwriting the default names match the <5.0 description styling +trunk_groups: + mlag_l3: + name: LEAF_PEER_L3 + +# Overwriting the default description templates to match the <5.0 description styling +default_network_ports_description: "" +default_network_ports_port_channel_description: "{adapter_description_or_endpoint?}{endpoint_port_channel?<_}" +default_connected_endpoints_description: "{endpoint}{endpoint_port?<_}" +default_connected_endpoints_port_channel_description: "{adapter_description_or_endpoint}{endpoint_port_channel?<_}" +mlag_member_description: "MLAG_PEER_{mlag_peer}_{interface}" +mlag_port_channel_description: "MLAG_PEER_{mlag_peer}_Po{mlag_port_channel_id}" +mlag_peer_svi_description: "MLAG_PEER" +mlag_peer_l3_svi_description: "MLAG_PEER_L3_PEERING" +mlag_peer_vlan_name: "MLAG_PEER" +mlag_peer_l3_vlan_name: "LEAF_PEER_L3" +mlag_peer_l3_vrf_svi_description: "MLAG_PEER_L3_iBGP: vrf {vrf}" +mlag_peer_l3_vrf_vlan_name: "MLAG_iBGP_{vrf}" +mlag_bgp_peer_description: "{mlag_peer}" +overlay_bgp_peer_description: "{peer}" + +# Test for custom description templates +mlag_bgp_peer_group_description: "MLAG_PEER_{mlag_peer}" # local users local_users: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/BGP_FROM_NETWORK_SERVICES.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/BGP_FROM_NETWORK_SERVICES.yml new file mode 100644 index 00000000000..2f621335a77 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/BGP_FROM_NETWORK_SERVICES.yml @@ -0,0 +1,53 @@ +--- +# bgp-from-network-services-1 should get BGP configured for VRF default since there are BGP peers for the device under the VRF. +# Notice that the node type l3spine does not have a default overlay or underlay routing protocol, so they will not contribute BGP. + +# bgp-from-network-services-2 will *NOT* get BGP configured because of a bug. See issue #3804 + +type: l3spine + +l3spine: + defaults: + bgp_as: 65001 + spanning_tree_mode: none + loopback_ipv4_pool: 192.0.255.0/24 + uplink_ipv4_pool: 10.255.1.0/24 + mlag_interfaces: [Ethernet10] + mlag_peer_ipv4_pool: "10.10.10.0/24" + mlag_peer_l3_ipv4_pool: "10.10.20.0/24" + node_groups: + - group: GROUP1 + nodes: + - name: bgp-from-network-services-1 + id: 1 + mgmt_ip: 10.1.1.1/24 + - name: bgp-from-network-services-2 + id: 2 + mgmt_ip: 10.1.1.2/24 + +tenants: + - name: TEST + vrfs: + - name: default + vrf_id: 100 + address_families: [] + static_routes: + - destination_address_prefix: 0.0.0.0 + gateway: 10.10.1.1 + nodes: [bgp-from-network-services-1] + l3_interfaces: + - interfaces: + - Ethernet47 + ip_addresses: + - 10.10.1.1/30 + nodes: + - bgp-from-network-services-1 + bgp_peers: + - ip_address: 10.10.1.2 + peer_group: MYPEERGROUP + nodes: [bgp-from-network-services-1, bgp-from-network-services-2] + bgp_peer_groups: + - name: MYPEERGROUP + remote_as: 65991 + next_hop_self: true + bfd: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_L2LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_L2LEAFS.yml new file mode 100644 index 00000000000..b180caca8a8 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_L2LEAFS.yml @@ -0,0 +1,22 @@ +--- + +type: l2leaf + +l2leaf: + defaults: + platform: vEOS-LAB + uplink_interfaces: [Ethernet1, Ethernet2] + uplink_switches: [CUSTOM-TEMPLATES-L3LEAF1A, CUSTOM-TEMPLATES-L3LEAF1B] + mlag_interfaces: [Ethernet3, Ethernet4] + mlag_peer_ipv4_pool: 10.255.252.0/24 + node_groups: + - group: CUSTOM_TEMPLATES_L2LEAF1 + nodes: + - name: CUSTOM-TEMPLATES-L2LEAF1A + id: 1 + mgmt_ip: 192.168.200.103/24 + uplink_switch_interfaces: [Ethernet5, Ethernet5 ] + - name: CUSTOM-TEMPLATES-L2LEAF1B + id: 1 + mgmt_ip: 192.168.200.103/24 + uplink_switch_interfaces: [Ethernet6, Ethernet6 ] diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_TESTS.yml index dad9bcad876..93fbe89a9c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CUSTOM_TEMPLATES_TESTS.yml @@ -14,7 +14,7 @@ node_type_keys: mlag_port_channel_interfaces: 'custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2' connected_endpoints_ethernet_interfaces: 'custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2' connected_endpoints_port_channel_interfaces: 'custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2' - overlay_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/overlay-loopback.j2' + router_id_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/router-id-loopback.j2' vtep_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/vtep-loopback.j2' - key: l3leaf type: l3leaf @@ -46,8 +46,20 @@ node_type_keys: mlag_port_channel_interfaces: 'custom_templates/interface_descriptions/mlag/port-channel-interfaces.j2' connected_endpoints_ethernet_interfaces: 'custom_templates/interface_descriptions/connected_endpoints/ethernet-interfaces.j2' connected_endpoints_port_channel_interfaces: 'custom_templates/interface_descriptions/connected_endpoints/port-channel-interfaces.j2' - overlay_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/overlay-loopback.j2' + router_id_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/router-id-loopback.j2' vtep_loopback_interface: 'custom_templates/interface_descriptions/loopbacks/vtep-loopback.j2' + - key: l2leaf + type: l2leaf + connected_endpoints: true + mlag_support: true + network_services: + l2: true + underlay_router: false + uplink_type: port-channel + interface_descriptions: + # Override interface description templates with our custom templates + underlay_ethernet_interfaces: 'custom_templates/interface_descriptions/underlay/ethernet-interfaces.j2' + underlay_port_channel_interfaces: 'custom_templates/interface_descriptions/underlay/port-channel-interfaces.j2' ip_offset_10: 10 ip_offset_20: 20 @@ -62,6 +74,7 @@ servers: switches: [ CUSTOM-TEMPLATES-L3LEAF1A ] mode: trunk enabled: true + description: management - name: SERVER-2 adapters: - endpoint_ports: [ Nic1, Nic2 ] @@ -69,6 +82,7 @@ servers: switches: [ CUSTOM-TEMPLATES-L3LEAF1B, CUSTOM-TEMPLATES-L3LEAF1B ] mode: trunk enabled: true + description: data port_channel: mode: active description: portchannel diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CV_PATHFINDER_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CV_PATHFINDER_TESTS.yml index 014f23e6e96..69a762c9b73 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CV_PATHFINDER_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/CV_PATHFINDER_TESTS.yml @@ -24,7 +24,10 @@ cv_pathfinder_regions: sites: - name: Site404 id: 404 - location: Not Found + location: Atlantis + - name: Site405 + id: 405 + location: El Dorado - name: Site422 id: 422 location: Somewhere @@ -59,6 +62,10 @@ bgp_peer_groups: - 192.168.142.0/24 - 192.168.143.0/24 +fabric_ip_addressing: + wan_ha: + ipv4_prefix_length: 24 + wan_stun_dtls_profile_name: profileA wan_route_servers: @@ -94,6 +101,8 @@ wan_router: # Testing HA and disabling HA node_groups: # SITE_HA_DISABLED + # Because HA is disabled, this allow to test that MPLS-ONLY, present on + # cv-pathfinder-edge is not configured on cv-pathfinder-edge1 - group: Site511 uplink_type: p2p-vrfs uplink_switches: [ site-ha-disabled-leaf ] @@ -204,6 +213,9 @@ wan_router: peer_as: 64520 ipv4_prefix_list_out: PL2 # SITE_HA_ENABLED + # Because HA is enabled, this allow to test that MPLS-ONLY, present on + # cv-pathfinder-edge2B (because of Colt) is being configured on cv-pathfinder-edge2A + # with only LAN_HA path-group. - group: Site423 cv_pathfinder_region: AVD_Land_West cv_pathfinder_site: Site423 @@ -283,13 +295,21 @@ wan_router: ip_address: 172.16.6.6/31 # SITE_HA_ENABLED_DIRECT_HA + # One interface disable usage of port-channel + # test flow-tracking on ethernet interface for direct HA - group: Site404 cv_pathfinder_region: AVD_Land_West cv_pathfinder_site: Site404 wan_ha: enabled: true # TODO AVD4.8.0: Remove once WAN HA is GA. ha_interfaces: [Ethernet52] + # Test wan_ha mtu + mtu: 9100 ha_ipv4_pool: 10.10.10.0/24 + # Check flow tracking on ethernet interface + flow_tracking: + enabled: true + use_port_channel_for_direct_ha: false nodes: - name: cv-pathfinder-edge3A id: 6 @@ -307,6 +327,41 @@ wan_router: wan_circuit_id: 10423 ip_address: 172.15.6.6/31 + # SITE_HA_ENABLED_DIRECT_HA + # Multiple interfaces in port-channel for direct HA + # test changing port-channel ID + - group: SITE_DIRECT_HA_PORT_CHANNEL + cv_pathfinder_transit_mode: region + cv_pathfinder_region: AVD_Land_West + cv_pathfinder_site: Site405 + # Disable HA IPsec + wan_ha: + enabled: true # TODO AVD4.8.0: Remove once WAN HA is GA. + ipsec: false + ha_interfaces: [Ethernet42, Ethernet43] + ha_ipv4_pool: 10.10.10.0/24 + # Check flow tracking on port-channel + flow_tracking: + enabled: true + # Testing overwriting port-channel ID + port_channel_id: 666 + nodes: + - name: cv-pathfinder-edge4A + id: 8 + l3_interfaces: + - name: Ethernet1.42 + wan_carrier: Comcast + dhcp_accept_default_route: true + ip_address: dhcp + - name: cv-pathfinder-edge4B + cv_pathfinder_region: AVD_Land_West + id: 9 + l3_interfaces: + - name: Ethernet1.42 + wan_carrier: Comcast + dhcp_accept_default_route: true + ip_address: dhcp + # Fake DC1 l3leaf: defaults: @@ -474,10 +529,13 @@ tenants: vrf_id: 1 - name: TRANSIT vrf_id: 66 - # Test that a VRF with address_families: [] on a WAN router is not configured on Vxlan1 interface nor BGP + # Test that a VRF with address_families: [] on a WAN router is not configured on Vxlan1 interface. Only configured for BGP because we force enabled: True - name: NOT-WAN-VRF vrf_id: 13 address_families: [] + bgp: + # Test that we can forcefully configure BGP for this VRF even if not needed by anything. + enabled: true - name: TenantC mac_vrf_vni_base: 1000 vrfs: @@ -542,7 +600,8 @@ wan_virtual_topologies: internet_exit: policy: ZSCALER-EXIT-POLICY-2 id: 4 - # This will not be rendered on devices without MPLS + # This will not be rendered on devices without MPLS except if their HA + # peer have MPLS. - application_profile: MPLS-ONLY path_groups: - names: [MPLS] diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_BL1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_BL1.yml index 656f3a2df8e..aec48675e07 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_BL1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_BL1.yml @@ -4,7 +4,8 @@ my_dci_ethernet_interfaces: description: My test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_FABRIC.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_FABRIC.yml index 3f0d068ff74..2a36471d9d5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_FABRIC.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_FABRIC.yml @@ -179,7 +179,11 @@ l3leaf: uplink_switch_interfaces: [ Ethernet22, Ethernet22, Ethernet22, Ethernet22 ] evpn_gateway: remote_peers: - - hostname: "DC1-BL2A" + - hostname: DC1-BL2A + # Testing below that the override is working + - hostname: DC1-BL2B + ip_address: 192.168.42.42 # Should be 192.168.255.17 + bgp_as: 65042 # Should be 65107 evpn_l2: enabled: true evpn_l3: @@ -193,10 +197,10 @@ l3leaf: uplink_switch_interfaces: [ Ethernet23, Ethernet23, Ethernet23, Ethernet23 ] evpn_gateway: remote_peers: - - hostname: "MY_EVPN_GW1_USER_DEFINED" + - hostname: MY_EVPN_GW1_USER_DEFINED ip_address: 1.1.1.1 bgp_as: 65555 - - hostname: "MY_EVPN_GW2_USER_DEFINED" + - hostname: MY_EVPN_GW2_USER_DEFINED ip_address: 2.2.2.2 bgp_as: 65555 evpn_l2: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_SERVERS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_SERVERS.yml index 92270734b84..1f972cd291c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/DC1_SERVERS.yml @@ -1,3 +1,5 @@ +--- + port_profiles: - profile: TENANT_A_B mode: trunk @@ -23,7 +25,6 @@ port_profiles: phone_trunk_mode: untagged - profile: ALL_WITH_SECURITY - parent_profile: NON_EXISTING_PROFILE # Test that pointing to a nonexisting profile won't break templates. mode: trunk vlans: "1-4094" spanning_tree_bpdufilter: disabled @@ -67,7 +68,7 @@ port_profiles: level: 2 unit: percent port_channel: - description: ALL_WITH_SECURITY_PORT_CHANNEL + endpoint_port_channel: ALL_WITH_SECURITY_PORT_CHANNEL mode: active - profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK @@ -91,7 +92,7 @@ port_profiles: level: 2 unit: percent port_channel: - description: ALL_WITH_SECURITY_PORT_CHANNEL + endpoint_port_channel: ALL_WITH_SECURITY_PORT_CHANNEL mode: active lacp_fallback: mode: static @@ -101,7 +102,7 @@ port_profiles: mode: trunk vlans: "1-4094" port_channel: - description: PORT_CHANNEL_LACP_MODE + endpoint_port_channel: PORT_CHANNEL_LACP_MODE mode: active lacp_timer: mode: fast @@ -111,7 +112,7 @@ port_profiles: mode: trunk vlans: "1-4094" port_channel: - description: PORT_CHANNEL_LACP_MODE_NORMAL + endpoint_port_channel: PORT_CHANNEL_LACP_MODE_NORMAL mode: active lacp_timer: mode: normal @@ -120,7 +121,7 @@ port_profiles: - profile: NESTED_PORT_PROFILE parent_profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK port_channel: - description: NESTED_ALL_WITH_SECURITY_PORT_CHANNEL + endpoint_port_channel: NESTED_ALL_WITH_SECURITY_PORT_CHANNEL mode: active - profile: DOT1X_PORT_PROFILE @@ -151,7 +152,7 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_B port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active spanning_tree_bpdufilter: disabled spanning_tree_bpduguard: disabled @@ -164,7 +165,7 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_A_MTU port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active spanning_tree_bpdufilter: enabled spanning_tree_bpduguard: enabled @@ -177,7 +178,7 @@ servers: switches: [ DC1-LEAF2A, DC1-LEAF2B ] mtu: 1601 port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active spanning_tree_bpdufilter: true spanning_tree_bpduguard: true @@ -210,7 +211,7 @@ servers: ethernet_segment: short_esi: '0303:0202:0101' port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active # Test short_esi on non-vtep device. @@ -224,7 +225,7 @@ servers: ethernet_segment: short_esi: '0303:0202:0101' port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active - name: server04_inherit_all_from_profile @@ -319,7 +320,7 @@ servers: level: 2 unit: percent port_channel: - description: server08_no_profile_port_channel + endpoint_port_channel: server08_no_profile_port_channel mode: 'on' - name: server09_override_profile_no_port_channel @@ -374,7 +375,7 @@ servers: level: 2 unit: percent port_channel: - description: server10_no_profile_port_channel_lacp_fallback + endpoint_port_channel: server10_no_profile_port_channel_lacp_fallback mode: passive lacp_fallback: mode: static @@ -422,7 +423,7 @@ servers: profile: TENANT_A enabled: false port_channel: - description: server15_port_channel_with_disabled_phy_interfaces + endpoint_port_channel: server15_port_channel_with_disabled_phy_interfaces mode: active enabled: true @@ -434,7 +435,7 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: TENANT_A port_channel: - description: server16_port_channel_with_disabled_port_channel + endpoint_port_channel: server16_port_channel_with_disabled_port_channel mode: active enabled: false @@ -447,7 +448,7 @@ servers: profile: TENANT_A enabled: false port_channel: - description: server17_port_channel_with_disabled_phy_and_po_interfaces + endpoint_port_channel: server17_port_channel_with_disabled_phy_and_po_interfaces mode: active enabled: false @@ -481,7 +482,7 @@ servers: profile: TENANT_A enabled: true port_channel: - description: server18_monitoring_session_source_po + endpoint_port_channel: server18_monitoring_session_source_po mode: active enabled: true monitor_sessions: @@ -565,7 +566,7 @@ servers: profile: TENANT_A enabled: true port_channel: - description: server21_monitoring_session_destination_po + endpoint_port_channel: server21_monitoring_session_destination_po mode: active enabled: true monitor_sessions: @@ -580,7 +581,7 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: TENANT_A port_channel: - description: server22_port_channel_with_custom_id + endpoint_port_channel: server22_port_channel_with_custom_id mode: active enabled: true channel_id: 1291 @@ -603,7 +604,7 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: PORT_CHANNEL_LACP_TIMER port_channel: - description: server24_port_channel_with_lacp_timer + endpoint_port_channel: server24_port_channel_with_lacp_timer - name: server25_port_channel_lacp_timer rack: RackC @@ -612,7 +613,7 @@ servers: switch_ports: [ Ethernet32, Ethernet32 ] switches: [ DC1-SVC3A, DC1-SVC3B ] port_channel: - description: server25_port_channel_with_lacp_timer + endpoint_port_channel: server25_port_channel_with_lacp_timer mode: active enabled: true lacp_timer: @@ -627,7 +628,7 @@ servers: switches: [ DC1-SVC3A, DC1-SVC3B ] profile: PORT_CHANNEL_LACP_TIMER_NORMAL port_channel: - description: server26_port_channel_with_lacp_timer + endpoint_port_channel: server26_port_channel_with_lacp_timer - name: server27_port_channel_lacp_timer rack: RackC @@ -636,7 +637,7 @@ servers: switch_ports: [ Ethernet34, Ethernet34 ] switches: [ DC1-SVC3A, DC1-SVC3B ] port_channel: - description: server27_port_channel_with_lacp_timer + endpoint_port_channel: server27_port_channel_with_lacp_timer mode: active enabled: true lacp_timer: @@ -672,7 +673,7 @@ phones: profile: PHONE_WITH_PC port_channel: mode: active - description: Port-Channel to Phone + description: "{endpoint} Port-Channel to {endpoint_type}" firewalls: - name: FIREWALL01 @@ -683,7 +684,7 @@ firewalls: switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_A_B port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active routers: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/EVPN_MULTICAST_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/EVPN_MULTICAST_TESTS.yml index 1eba6fb9b97..08625e1fdc2 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/EVPN_MULTICAST_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/EVPN_MULTICAST_TESTS.yml @@ -6,10 +6,19 @@ underlay_multicast: true # If set to "false" will raise an error. evpn_multicast: true # default_igmp_snooping_enabled: true # Default is true, if set to "false" will raise error. -# Default is overlay_loopback_ip +# Default is router_id # If set to same value on MLAG pairs will raise error. Trigger error with "bgp_as" or "vtep_loopback". # overlay_rd_type: -# admin_subfield: overlay_loopback_ip +# admin_subfield: router_id + +# Test for sflow on l3_interfaces from network services +sflow_settings: + destinations: + - destination: 10.10.10.12 + vrf: sflow_vrf + port: 1234 +fabric_sflow: + l3_interfaces: true tenants: - name: Tenant_A @@ -228,6 +237,9 @@ tenants: # Tenant_C is for testing of EVPN L3/OISM only - name: Tenant_C mac_vrf_vni_base: 10000 + evpn_l2_multicast: + enabled: False + underlay_l2_multicast_group_ipv4_pool: 236.0.0.0/20 evpn_l3_multicast: # Enabled = # - Enable multicast-routing on VRF @@ -243,6 +255,7 @@ tenants: loopback: 31 loopback_ip_range: 10.255.1.0/24 vrf_vni: 31 + vrf_id: 66 svis: # Expected results: # - VRF L3_MULTICAST_ENABLED_130_131 enabled for Multicast: @@ -278,6 +291,18 @@ tenants: ip_address: 10.1.14.5/24 - node: EVPN-MULTICAST-L3LEAF3B ip_address: 10.1.14.6/24 + - id: 136 + name: "L3_L2_MULTICAST_ENABLED_136" + enabled: true + evpn_l2_multicast: + enabled: true + always_redistribute_igmp: true + - id: 137 + name: "L3_L2_MULTICAST_ENABLED_137" + enabled: true + evpn_l2_multicast: + enabled: true + always_redistribute_igmp: false - name: TEN_C_L3_MULTICAST_ENABLED_230_DISABLED_231 description: "L3_MULTICAST_ENABLED_230_DISABLED_231" @@ -350,6 +375,7 @@ tenants: loopback_ip_range: 10.255.41.0/24 evpn_l3_multicast: enabled: true + evpn_underlay_l3_multicast_group: 232.0.64.2 vrf_vni: 41 svis: # Expected results: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AUTOVPN_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/LEGACY_AUTOVPN_TESTS.yml similarity index 93% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AUTOVPN_TESTS.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/LEGACY_AUTOVPN_TESTS.yml index 46d42ebde5d..3be354280cf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/AUTOVPN_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/LEGACY_AUTOVPN_TESTS.yml @@ -1,6 +1,6 @@ --- -# Testing autovpn -wan_mode: autovpn +# Testing legacy-autovpn +wan_mode: legacy-autovpn # Disabling underlay for tests underlay_routing_protocol: none @@ -16,13 +16,13 @@ wan_stun_dtls_disable: true wan_route_servers: # Testing having the interface configured with DHCP - - hostname: autovpn-rr1 + - hostname: legacy-autovpn-rr1 path_groups: - name: INET interfaces: - name: Ethernet1 public_ip: 10.7.7.7 - - hostname: autovpn-rr2 + - hostname: legacy-autovpn-rr2 wan_ipsec_profiles: control_plane: @@ -34,10 +34,10 @@ wan_ipsec_profiles: default_node_types: - node_type: wan_rr match_hostnames: - - "autovpn-rr.*" + - "legacy-autovpn-rr.*" - node_type: wan_router match_hostnames: - - "autovpn-edge" + - "legacy-autovpn-edge" wan_router: defaults: @@ -47,7 +47,7 @@ wan_router: # TODO find a way to not need this always_include_vrfs_in_tenants: [TenantA] nodes: - - name: autovpn-edge + - name: legacy-autovpn-edge id: 1 l3_interfaces: - name: Ethernet1 @@ -66,7 +66,7 @@ wan_rr: vtep_loopback_ipv4_pool: 192.168.131.0/24 data_plane_cpu_allocation_max: 2 nodes: - - name: autovpn-rr1 + - name: legacy-autovpn-rr1 id: 1 l3_interfaces: - name: Ethernet1 @@ -74,7 +74,7 @@ wan_rr: wan_circuit_id: 777 ip_address: dhcp dhcp_accept_default_route: true - - name: autovpn-rr2 + - name: legacy-autovpn-rr2 id: 2 l3_interfaces: - name: Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MH_SERVERS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MH_SERVERS.yml index 22fee5b68d2..17bab0f6ee4 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MH_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MH_SERVERS.yml @@ -48,7 +48,7 @@ servers: ethernet_segment: short_esi: 0001:1010:1010 port_channel: - description: PortChanne1 + endpoint_port_channel: PortChanne1 mode: active - name: server02 @@ -71,7 +71,7 @@ servers: ethernet_segment: short_esi: auto port_channel: - description: Auto-ESI PortChannel + endpoint_port_channel: Auto-ESI PortChannel mode: active - name: server04_AUTO_ESI_Profile @@ -82,7 +82,7 @@ servers: switches: [ MH-LEAF1A, MH-LEAF1B ] profile: Tenant_ESI_Auto port_channel: - description: Auto-ESI PortChannel from profile + endpoint_port_channel: Auto-ESI PortChannel from profile mode: active - name: server05_AUTO_ESI_Profile_Override @@ -95,7 +95,7 @@ servers: ethernet_segment: short_esi: 010a:010a:010a port_channel: - description: Auto-ESI PortChannel overridden on server + endpoint_port_channel: Auto-ESI PortChannel overridden on server mode: active - name: server06_Single_Active_Port_Channel @@ -107,7 +107,7 @@ servers: profile: Tenant_X_Trunk_Auto # All ethernet_segment settings from profile port_channel: - description: Single-Active ESI + endpoint_port_channel: Single-Active ESI - name: server07_Single_Active_Port_Channel_Manual_DF rack: RackA @@ -117,7 +117,7 @@ servers: switches: [ MH-LEAF1A, MH-LEAF1B ] profile: Tenant_X_Trunk port_channel: - description: Single-Active ESI with Manual DF + endpoint_port_channel: Single-Active ESI with Manual DF mode: active ethernet_segment: short_esi: auto @@ -168,7 +168,7 @@ servers: switches: [ MH-LEAF1A, MH-LEAF1B ] profile: Tenant_X_Trunk port_channel: - description: Single-Active ESI with Manual DF + endpoint_port_channel: Single-Active ESI with Manual DF mode: active ethernet_segment: short_esi: auto @@ -200,7 +200,7 @@ servers: switches: [ MH-LEAF1A, MH-LEAF1B ] profile: Tenant_X_Trunk port_channel: - description: Single-Active ESI with Manual DF + endpoint_port_channel: Single-Active ESI with Manual DF mode: active ethernet_segment: short_esi: auto @@ -237,7 +237,7 @@ routers: switch_ports: [ Ethernet11, Ethernet11 ] switches: [ MH-LEAF1A, MH-LEAF1B ] port_channel: - description: Testing L2 subinterfaces + endpoint_port_channel: Testing L2 subinterfaces mode: active # Port-Channel L2 Subinterfaces # Subinterfaces are only supported on routed port-channels, which means they cannot be configured on MLAG port-channels. diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NETWORK_PORTS_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NETWORK_PORTS_TESTS.yml index 3296c726221..d4b7555313e 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NETWORK_PORTS_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NETWORK_PORTS_TESTS.yml @@ -31,14 +31,14 @@ network_ports: switch_ports: - Ethernet1-2 profile: pc - description: PCs + endpoint: PCs - switches: - network-ports-tests-2$ switch_ports: - Ethernet1-2 profile: ap_with_port_channel - description: AP1 with port_channel + endpoint: AP1 with port_channel - switches: - network-ports-[est]{5}[-.].* @@ -46,7 +46,7 @@ network_ports: - Ethernet3-4 - Ethernet2/1-48 profile: pc - description: PCs + endpoint: PCs - switches: - network-ports-tests-2 @@ -60,13 +60,14 @@ network_ports: - network-ports-tests.1 switch_ports: - Ethernet5-6 - description: "N: blah" + description: "N: {endpoint}" + endpoint: blah - switches: - network-ports-tests.2 switch_ports: - Ethernet7-10 - description: "Checking port-channels" + endpoint: "Checking port-channels" port_channel: channel_id: 42 mode: "active" diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NEW_NETWORK_SERVICES_BGP_VRF_CONFIG_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NEW_NETWORK_SERVICES_BGP_VRF_CONFIG_TESTS.yml deleted file mode 100644 index e98acb97c84..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/NEW_NETWORK_SERVICES_BGP_VRF_CONFIG_TESTS.yml +++ /dev/null @@ -1,81 +0,0 @@ ---- -overlay_routing_protocol: none -default_node_types: - - node_type: l3leaf - match_hostnames: - - ".*bgp.*" - -bgp_as: 65000 - -l3leaf: - defaults: - platform: vEOS-LAB - loopback_ipv4_pool: 192.168.42.0/24 - vtep_loopback_ipv4_pool: 172.16.0.0/24 - virtual_router_mac_address: cafe:cafe:cafe - evpn_role: none - filter: - tenants: [TenantA] - nodes: - - name: new_network_services_bgp_vrf_config_true - id: 1 - - name: new_network_services_bgp_vrf_config_false - id: 2 - -tenants: - - name: TenantA - vrfs: - - name: PROD - vrf_id: 42 - bgp_peers: - - ip_address: 123.1.1.10 - remote_as: "1234" - password: "oBztv71m2uhR7hh58/OCNA==" - description: External IPv4 BGP peer - send_community: standard extended - maximum_routes: 0 - default_originate: - always: false - update_source: Loopback123 - ebgp_multihop: 3 - nodes: [new_network_services_bgp_vrf_config_true, new_network_services_bgp_vrf_config_false] - set_ipv4_next_hop: 123.1.1.1 - route_map_in: RM-123-1-1-10-IN - shutdown: true - # we don't expect this in the output, next_hop takes precedence - route_map_out: RM-123-1-1-10-OUT - local_as: 123 - - ip_address: 123.1.1.11 - remote_as: "65000.100" - password: "oBztv71m2uhR7hh58/OCNA==" - description: External IPv4 BGP peer - send_community: standard extended - maximum_routes: 0 - default_originate: - always: false - update_source: Loopback123 - ebgp_multihop: 3 - nodes: [new_network_services_bgp_vrf_config_true, new_network_services_bgp_vrf_config_false] - route_map_in: RM-123-1-1-11-IN - route_map_out: RM-123-1-1-11-OUT - prefix_list_in: PL-TEST-IN-AF4 - prefix_list_out: PL-TEST-OUT-AF4 - local_as: 123 - bfd: true - - ip_address: fd5a:fe45:8831:06c5::a - remote_as: 12345 - send_community: all - nodes: [new_network_services_bgp_vrf_config_true, new_network_services_bgp_vrf_config_false] - set_ipv6_next_hop: fd5a:fe45:8831:06c5::1 - prefix_list_in: PL-TEST-IN-AF6 - prefix_list_out: PL-TEST-OUT-AF6 - - ip_address: fd5a:fe45:8831:06c5::b - remote_as: 12345 - nodes: [new_network_services_bgp_vrf_config_true, new_network_services_bgp_vrf_config_false] - l3_interfaces: - - interfaces: [Ethernet7, Ethernet7] - ip_addresses: [10.10.10.10/24, 11.11.11.11/24] - nodes: [new_network_services_bgp_vrf_config_true, new_network_services_bgp_vrf_config_false] - mtu: 9000 - enabled: True - description: "test" diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SINGLE_LINK_TO_MLAG_PAIR.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SINGLE_LINK_TO_MLAG_PAIR.yml index 2149866893d..47674a8c03d 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SINGLE_LINK_TO_MLAG_PAIR.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SINGLE_LINK_TO_MLAG_PAIR.yml @@ -1,14 +1,11 @@ --- fabric_name: SINGLE_LINK_TO_MLAG_PAIR -design: - type: l2ls +type: l2leaf -type: leaf +mlag_on_orphan_port_channel_downlink: true -mlag_on_orphan_port_channel_downlink: false - -leaf: +l2leaf: defaults: mlag_peer_ipv4_pool: 10.10.255.0/24 platform: vEOS-LAB diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SVI_PROFILE_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SVI_PROFILE_TESTS.yml index 34137a70d2b..9cc1eb97647 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SVI_PROFILE_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/SVI_PROFILE_TESTS.yml @@ -22,7 +22,7 @@ l3leaf: #### ---- Test inheritance of svi structured_configuration ----- ### # Test logic for network services: vlan-interfaces -# Structured config is not being merged recursively, but will be taken directly from the most specific level +# Structured config is merged recursively # Precedence order: # 1. svi.nodes[inventory_hostname].structured_config # 2. svi_profile.nodes[inventory_hostname].structured_config @@ -35,6 +35,8 @@ svi_profiles: - profile: struct_config_parent_profile_1 structured_config: description: "set from structured_config on svi_parent_profile.structured_config" + mtu: 1200 + no_autostate: true nodes: - node: SVI_PROFILE_NODE_1 structured_config: @@ -46,6 +48,7 @@ svi_profiles: - profile: struct_config_child_profile_1 structured_config: description: "set from structured_config on svi_profile.structured_config" + mtu: 1000 nodes: - node: SVI_PROFILE_NODE_1 structured_config: @@ -192,6 +195,8 @@ tenants: # Set nodes[inventory_hostname].structured_config on all levels # Expected results: # - description: "set from structured_config on svi.nodes[inventory_hostname].structured_config" + # - mtu: 1000 <- inherited from profile (parent profile has 1200) + # - no_autostate: true <- inherited from parent profile - id: 110 name: svi_profile_tests_110_description enabled: true @@ -210,6 +215,8 @@ tenants: # Set nodes[inventory_hostname].structured_config on child_profile and parent_profile # Expected results: # - description: "set from structured_config on svi_profile.nodes[inventory_hostname].structured_config" + # - mtu: 1000 <- inherited from profile (parent profile has 1200) + # - no_autostate: true <- inherited from parent profile - id: 111 name: svi_profile_tests_111_description enabled: true @@ -221,6 +228,8 @@ tenants: # Set nodes[inventory_hostname].structured_config on parent_profile # Expected results: # - description: "set from structured_config on svi_parent_profile.nodes[inventory_hostname].structured_config" + # - mtu: 1200 <- inherited from parent profile + # - no_autostate: true <- inherited from parent profile - id: 112 name: svi_profile_tests_112_description enabled: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_LAN_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_LAN_TESTS.yml index 3ed5411c71a..9d674a98d88 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_LAN_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_LAN_TESTS.yml @@ -16,6 +16,13 @@ fabric_flow_tracking: downlinks: enabled: true +# Test p2p_uplinks_mtu +p2p_uplinks_mtu: 9214 +platform_settings: + - platforms: [ default ] + # platform settings p2p_uplinks_mtu takes precedence + p2p_uplinks_mtu: 9218 + wan_router: # dynamic_key: node_type defaults: bgp_as: 65100 @@ -62,7 +69,7 @@ tenants: # dynamic_key: network_services ip_address: 10.0.10.1/24 enabled: true tags: [wan_router, l2leaf] - mtu: 9214 + mtu: 9218 - id: 100 name: VLAN100 description: "My vlan 100" diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_MLAG_STRUCTURED_CONFIG_L2LEAFS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_MLAG_STRUCTURED_CONFIG_L2LEAFS.yml index 842e468f035..c79f4ddeb7c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_MLAG_STRUCTURED_CONFIG_L2LEAFS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_MLAG_STRUCTURED_CONFIG_L2LEAFS.yml @@ -11,7 +11,9 @@ l2leaf: level: 25 unknown_unicast: level: 25 - native_vlan_tag: true + switchport: + trunk: + native_vlan_tag: true mlag_interfaces: [ Ethernet3, Ethernet4 ] mlag_peer_ipv4_pool: 10.255.252.0/24 mlag_port_channel_structured_config: @@ -20,7 +22,9 @@ l2leaf: level: 25 unknown_unicast: level: 25 - native_vlan_tag: true + switchport: + trunk: + native_vlan_tag: true spanning_tree_mode: mstp spanning_tree_priority: 16384 node_groups: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_P2P_VRFS_TESTS.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_P2P_VRFS_TESTS.yml index 058aac5da76..b4aed76121a 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_P2P_VRFS_TESTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/UPLINK_P2P_VRFS_TESTS.yml @@ -1,8 +1,6 @@ --- # TODO: Add tests for rfc5549, overlay_routing_protocol: none with bgp peers etc under network services (since this uplink type expands bgp support there) overlay_routing_protocol: none -# This is set to true by default on the nodes with uplink_type == p2p-vrfs -# new_network_services_bgp_vrf_config: true node_type_keys: # modify spine to get l3 network_services diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/all.yml index e7e19d60245..c17da49bcc5 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/all.yml @@ -1,2 +1,7 @@ --- root_dir: '{{ playbook_dir }}' + +eos_designs_documentation: + enable: false +eos_cli_config_gen_documentation: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-BL1A.yml index 4f2fa11cf79..8c881a25603 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-BL1A.yml @@ -13,8 +13,8 @@ override_ip_name_servers: # Testing empty key cvp_ingestauth_key: "" -# Testing overlay loopback description override -overlay_loopback_description: "MY_OVERLAY_LOOPBACK" +# Testing router id loopback description override +router_id_loopback_description: "MY_ROUTER_ID_LOOPBACK" vtep_vvtep_ip: 192.168.255.255/32 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-SPINE4.yml new file mode 100644 index 00000000000..dfa57b3c8ee --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/DC1-SPINE4.yml @@ -0,0 +1,21 @@ +--- +# If the device is set to "is_deployed: false" at the host_vars level, then do not shutdown interfaces towards undeployed peers. +shutdown_interfaces_towards_undeployed_peers: false + +# If the device is set to "is_deployed: false" at the host_vars level, then do not shutdown bgp towards undeployed peers. +shutdown_bgp_towards_undeployed_peers: false + +# Testing the suggested method to roll back the change of default platform settings for R3 series. +custom_platform_settings: + - platforms: + - 7280R3 + reload_delay: + mlag: 900 + non_mlag: 1020 + - platforms: + - 7500R3 + - 7800R3 + management_interface: Management0 + reload_delay: + mlag: 900 + non_mlag: 1020 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml index 9548b98c67f..ce6b59243f1 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/RD-RT-ADMIN-SUBFIELD-L3LEAF1.yml @@ -4,7 +4,7 @@ # Expected result: rd 192.168.255.1:* # overlay_rd_type: -# admin_subfield: overlay_loopback_ip +# admin_subfield: router_id # Expected results: # - vlan1: rt 10001:10001 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/connected_endpoints.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/connected_endpoints.yml index fe0bae850bb..13a8ddf0d0f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/connected_endpoints.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/connected_endpoints.yml @@ -10,6 +10,27 @@ l2leaf: enabled: true servers: + # port-channel provide physical and port-channel descriptions as templates with all fields + - name: OLD_SW-1/2 + adapters: + - switches: [connected_endpoints, connected_endpoints] + switch_ports: [Ethernet1, Ethernet2] + endpoint_ports: [Endpoint_port1, ENDPOINT_PORT2] + description: "Interface description {endpoint_type}_{endpoint}{endpoint_port?<_!u}" + port_channel: + mode: "active" + description: "Port channel description {endpoint_type}_{endpoint}_Po{port_channel_id}_{endpoint_port_channel}_{adapter_description!u}" + endpoint_port_channel: ENDPOINT_PORT_CHANNEL + # port-channel and physical port with default descriptions - all fields + - name: OLD_SW-1/3 + adapters: + - switches: [connected_endpoints] + switch_ports: [Ethernet3] + endpoint_ports: [ENDPOINT_PORT] + port_channel: + mode: active + endpoint_port_channel: ENDPOINT_PORT_CHANNEL + # single port override physical port description - name: OLD_SW-1/4 adapters: @@ -33,6 +54,7 @@ servers: port_channel: mode: "active" description: "PORT_CHANNEL_DESCRIPTION" + # Testing of play_vars in eos_designs_structured_config # Single port override physical port description with play_var - name: SERVER_WITH_PLAYVAR_DESCRIPTION @@ -56,7 +78,7 @@ servers: switch_ports: [Ethernet12, Ethernet13] port_channel: mode: "active" - description: "INDIVIDUAL_1" + endpoint_port_channel: "INDIVIDUAL_1" lacp_fallback: mode: individual individual: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge1.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge1.yml index c1632b7fceb..85aa8d95d2c 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge1.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge1.yml @@ -3,10 +3,6 @@ # Make sure to set the cv_token var on the molecule command line like: # molecule converge -s eos_designs_unit_tests -- --limit cv-pathfinder-edge1 -e cv_token=$CV_TOKEN -v -# serial_number: mockZscaler -# cv_server: "www.cv-play.corp.arista.io" -# zscaler_endpoints: null - # Testing multiple pathinfders on one device wan_route_servers: - hostname: cv-pathfinder-pathfinder1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge2B.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge2B.yml index 9c0c6e4e16b..308853126e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge2B.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/cv-pathfinder-edge2B.yml @@ -4,3 +4,14 @@ wan_ha: lan_ha_path_group_name: CUSTOM_LAN_HA + +# Testing having only control_plane ipsec profile and making sure it is used for +# HA path-group. Yes it makes for asymmetric config with 2A but this is a unit +# test. +wan_ipsec_profiles: + control_plane: + profile_name: ONE-PROFILE-TO-CONTROL-THEM-ALL + shared_key: ABCDEF1234567890 + +# Testing vxlan encapsulation +wan_encapsulation: vxlan diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/filter.vrfs.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/filter.vrfs.yml index 0afd8e64566..e34ab340554 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/filter.vrfs.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/filter.vrfs.yml @@ -27,6 +27,9 @@ tenants: - loopback: 2 node: filter.vrfs ip_address: 192.168.1.1/32 + bgp: + # Testing forcefully removing BGP configuration for the VRF. (otherwise it triggers errors for missing VRF_ID since we try to configure EVPN for it) + enabled: false - name: VRF3 description: >- This VRF would have been configured because it is attracted by Loopback, @@ -42,5 +45,8 @@ tenants: description: This VRF would have been configured because of always_include_vrfs_in_tenants, but it is prevented by filter.deny_vrfs - name: VRF5 description: This VRF will be configured because of always_include_vrfs_in_tenants and it is permitted by filter.allow_vrfs + bgp: + # Testing forcefully removing BGP configuration for the VRF. (otherwise it triggers errors for missing VRF_ID since we try to configure EVPN for it) + enabled: false - name: VRF6 description: This VRF will not be configured because it is not permitted by filter.allow_vrfs diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/ignore-custom-keys-in-data-models.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/ignore-custom-keys-in-data-models.yml index fd7dac3f394..71a8a3d0ab6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/ignore-custom-keys-in-data-models.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/ignore-custom-keys-in-data-models.yml @@ -13,6 +13,7 @@ l2leaf: _custom_key2: [custom_value2] ethernet_interfaces: - name: "Ethernet1" - type: switched + switchport: + enabled: true _custom_key3: custom_dict3: custom_value3 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-node-id.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-node-id.yml index 3c2b33efa84..e764f484484 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-node-id.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-node-id.yml @@ -1,5 +1,3 @@ -design: - type: mpls underlay_routing_protocol: isis-sr overlay_routing_protocol: ibgp diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-underlay-loopback.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-underlay-loopback.yml index d83447c5a56..03853c17acb 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-underlay-loopback.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/isis-system-id-format-using-underlay-loopback.yml @@ -1,5 +1,3 @@ -design: - type: mpls underlay_routing_protocol: isis-sr overlay_routing_protocol: ibgp diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/autovpn-edge-no-default-policy.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/legacy-autovpn-edge-no-default-policy.yml similarity index 87% rename from ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/autovpn-edge-no-default-policy.yml rename to ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/legacy-autovpn-edge-no-default-policy.yml index 9c0b58220d7..ae12dd4a4bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/autovpn-edge-no-default-policy.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/legacy-autovpn-edge-no-default-policy.yml @@ -1,7 +1,7 @@ --- -# Testing autovpn edge with no policy in VRF default to make sure the correct +# Testing legacy-autovpn edge with no policy in VRF default to make sure the correct # default policy is auto generated by AVD -wan_mode: autovpn +wan_mode: legacy-autovpn # Disabling underlay for tests underlay_routing_protocol: none @@ -14,7 +14,7 @@ bgp_peer_groups: - 192.168.255.0/24 wan_route_servers: - - hostname: autovpn-rr3 + - hostname: legacy-autovpn-rr3 vtep_ip: 2.2.2.2 path_groups: - name: INET @@ -32,7 +32,7 @@ wan_ipsec_profiles: default_node_types: - node_type: wan_router match_hostnames: - - "autovpn-edge.*" + - "legacy-autovpn-edge.*" wan_router: defaults: @@ -42,7 +42,7 @@ wan_router: # TODO find a way to not need this always_include_vrfs_in_tenants: [TenantA] nodes: - - name: autovpn-edge-no-default-policy + - name: legacy-autovpn-edge-no-default-policy id: 1 l3_interfaces: - name: Ethernet1 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_false.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_false.yml deleted file mode 100644 index 409c753f316..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_false.yml +++ /dev/null @@ -1,2 +0,0 @@ ---- -new_network_services_bgp_vrf_config: false diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_true.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_true.yml deleted file mode 100644 index 683c12c2a7d..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/new_network_services_bgp_vrf_config_true.yml +++ /dev/null @@ -1,2 +0,0 @@ ---- -new_network_services_bgp_vrf_config: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/node-type-l3-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/node-type-l3-interfaces.yml index ebd938fd0d8..c78a00430cc 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/node-type-l3-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/node-type-l3-interfaces.yml @@ -43,3 +43,12 @@ l3_interface_profiles: input: TEST_POLICY raw_eos_cli: | ! TEST RAW_EOS_CLI + +# Test for sflow on l3_interfaces from node_type +sflow_settings: + destinations: + - destination: 10.10.10.12 + vrf: sflow_vrf + port: 1234 +fabric_sflow: + l3_interfaces: true diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/only-connected-endpoints.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/only-connected-endpoints.yml new file mode 100644 index 00000000000..4cedccbc4bd --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/only-connected-endpoints.yml @@ -0,0 +1,52 @@ +--- +# Minimum config to only generate connected endpoints +node_type_keys: + - key: device + type: device + connected_endpoints: true + underlay_router: false + uplink_type: port-channel + +type: device +device: + defaults: + structured_config: + # hostname: null # Hostname is kept to avoid pyavd tests from failing. Uncomment this if you are trying to build connected-endpoints only configs. + is_deployed: null + service_routing_protocols_model: null + vlan_internal_order: null + aaa_root: null + config_end: null + enable_password: null + transceiver_qsfp_default_mode_4x10: null + spanning_tree: null + vrfs: null + management_api_http: null + +port_profiles: + - profile: MY_PROFILE + vlans: 1-100 + mode: trunk + native_vlan: 1000 + enabled: true + +servers: # dynamic_key: connected_endpoints + - name: TEST_SERVER_01 + adapters: + - switches: [only-connected-endpoints] + switch_ports: [Ethernet12] + endpoint_ports: [Nic1] + profile: MY_PROFILE + + - switches: [only-connected-endpoints, only-connected-endpoints] + switch_ports: [Ethernet1, Ethernet2] + endpoint_ports: [Nic1, Nic2] + profile: MY_PROFILE + port_channel: + mode: active + +network_ports: + - switches: ["only-connected-endpoints(-something-showing-this-supports-regex)?"] + switch_ports: [Ethernet20-29] + endpoint: Network Port + profile: MY_PROFILE diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/platform_settings.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/platform_settings.yml index c6216cd8c75..792f33b9d9f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/platform_settings.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/platform_settings.yml @@ -15,5 +15,6 @@ platform_settings: structured_config: ethernet_interfaces: - name: Ethernet12 - type: switched + switchport: + enabled: true description: Interface Created from platform_settings.structured_config diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/vrfs_rd_rt_override.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/vrfs_rd_rt_override.yml index ee9b71ead63..d7c7a20a75f 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/vrfs_rd_rt_override.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/host_vars/vrfs_rd_rt_override.yml @@ -1,6 +1,9 @@ # Testing the rd and rt override for VRFs type: l3leaf +# Testing custom vtep loopback description +vtep_loopback_description: MY_VTEP_LOOPBACK + l3leaf: defaults: loopback_ipv4_pool: 10.10.0.0/24 diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/hosts.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/hosts.yml index 3272c3e5763..f06a89ef7f6 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/hosts.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/inventory/hosts.yml @@ -40,6 +40,7 @@ all: spanning-tree-mode-rapid-pvst: node-type-l3-interfaces: ipv4-acls: + only-connected-endpoints: platform_settings: varpv6: OVERRIDE_UPLINK_TYPE: @@ -164,6 +165,10 @@ all: EVPN_MULTICAST_TESTS_L2LEAFS: hosts: EVPN-MULTICAST-L2LEAF1A: + BGP_FROM_NETWORK_SERVICES: + hosts: + bgp-from-network-services-1: + bgp-from-network-services-2: SVI_PROFILE_TESTS: hosts: SVI_PROFILE_NODE_1: @@ -186,6 +191,10 @@ all: hosts: CUSTOM-TEMPLATES-L3LEAF1A: CUSTOM-TEMPLATES-L3LEAF1B: + CUSTOM_TEMPLATES_L2LEAFS: + hosts: + CUSTOM-TEMPLATES-L2LEAF1A: + CUSTOM-TEMPLATES-L2LEAF1B: CUSTOM_PYTHON_MODULES_TESTS: children: CUSTOM_PYTHON_MODULES_SPINES: @@ -342,11 +351,11 @@ all: TEST-MGMT-GATEWAY-IN-NODE-GROUP: WAN_TESTS: children: - AUTOVPN_TESTS: + LEGACY_AUTOVPN_TESTS: hosts: - autovpn-rr1: - autovpn-rr2: - autovpn-edge: + legacy-autovpn-rr1: + legacy-autovpn-rr2: + legacy-autovpn-edge: CV_PATHFINDER_TESTS: children: SITE_HA_ENABLED: @@ -364,6 +373,10 @@ all: hosts: cv-pathfinder-edge3A: cv-pathfinder-edge3B: + SITE_DIRECT_HA_PORT_CHANNEL: + hosts: + cv-pathfinder-edge4A: + cv-pathfinder-edge4B: SITE_HA_DISABLED: hosts: cv-pathfinder-edge: @@ -388,7 +401,7 @@ all: cv-pathfinder-custom-control-plane-policy-edge-3: WAN_UNIT_TESTS: hosts: - autovpn-edge-no-default-policy: + legacy-autovpn-edge-no-default-policy: cv-pathfinder-edge-no-default-policy: cv-pathfinder-edge-custom-default-policy: UPLINK_P2P_VRFS_TESTS: @@ -402,10 +415,6 @@ all: uplink_lan_l2leaf: uplink_lan_wan_router1: uplink_lan_wan_router2: - NEW_NETWORK_SERVICES_BGP_VRF_CONFIG_TESTS: - hosts: - new_network_services_bgp_vrf_config_true: - new_network_services_bgp_vrf_config_false: DOWNLINK_POOLS_TESTS: hosts: downlink-pools-spine1: diff --git a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/molecule.yml b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/molecule.yml index 823d55751a6..81be3f6c92b 100644 --- a/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_designs_unit_tests/molecule.yml @@ -32,8 +32,6 @@ provisioner: hosts: 'inventory/hosts.yml' group_vars: 'inventory/group_vars/' host_vars: 'inventory/host_vars/' - ansible_args: - - --skip-tags=documentation env: # Custom pythonpath to allow loading custom ip_addressing and descriptions modules. # See CUSTOM_PYTHON_MODULES_TESTS group vars for details. diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1a.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1a.yml index 270712f35bc..c92c36214bf 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1a.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Vlan4093 - ip_address: 10.255.255.0 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -68,12 +68,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' - ip_address: 10.1.1.1 description: External peer @@ -88,7 +88,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.3 rd: 10.255.0.3:10 route_targets: import: @@ -99,13 +98,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3009 - name: VRF11 - router_id: 10.255.0.3 rd: 10.255.0.3:11 route_targets: import: @@ -116,11 +116,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.3 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.97 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -181,6 +183,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -207,7 +215,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.101/24 @@ -221,12 +229,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -236,9 +244,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -247,9 +255,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -262,12 +270,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.96/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -288,7 +296,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.96/31 @@ -308,7 +316,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.96/31 @@ -324,27 +332,32 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1b_Po3 - type: switched + description: MLAG_dc1-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: PortChannel dc1-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -352,8 +365,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -362,8 +374,7 @@ ethernet_interfaces: peer: dc1-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -375,7 +386,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.1/31 - name: Ethernet2 peer: dc1-spine2 @@ -384,7 +396,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.3/31 - name: Ethernet6 peer: dc1-wan1 @@ -393,7 +406,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-WAN1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.0/31 - name: Ethernet7 peer: dc1-wan2 @@ -402,7 +416,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-WAN2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.4/31 - name: Ethernet8 peer: dc1-leaf1c @@ -410,7 +425,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -418,9 +432,8 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf1-server1_PCI1 + description: SERVER_dc1-leaf1-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -429,24 +442,26 @@ ethernet_interfaces: peer_interface: e1 peer_type: workstation port_profile: Workstations - description: dc1-leaf1-workstation1_e1 + description: WORKSTATION_dc1-leaf1-workstation1_e1 shutdown: false validate_state: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge - name: Ethernet32 peer: dc1-leaf1-workstation2 peer_interface: e1 peer_type: workstation port_profile: Workstations - description: dc1-leaf1-workstation2_e1 + description: WORKSTATION_dc1-leaf1-workstation2_e1 shutdown: false validate_state: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge mlag_configuration: domain_id: DC1_L3_LEAF1 @@ -475,11 +490,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.3/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1b.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1b.yml index a30d309475f..395f2c8d6c4 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1b.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Vlan4093 - ip_address: 10.255.255.4 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -68,12 +68,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -85,7 +85,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.0.4 rd: 10.255.0.4:10 route_targets: import: @@ -96,13 +95,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3009 - name: VRF11 - router_id: 10.255.0.4 rd: 10.255.0.4:11 route_targets: import: @@ -113,11 +113,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.4 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.96 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf1a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -178,6 +180,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -204,7 +212,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.102/24 @@ -218,12 +226,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -233,9 +241,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -244,9 +252,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -259,12 +267,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.97/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -285,7 +293,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.97/31 @@ -305,7 +313,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.97/31 @@ -321,27 +329,32 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf1a_Po3 - type: switched + description: MLAG_dc1-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 mlag: 8 - name: Port-Channel5 - description: dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - type: switched + description: PortChannel dc1-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -349,8 +362,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -359,8 +371,7 @@ ethernet_interfaces: peer: dc1-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -372,7 +383,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.5/31 - name: Ethernet2 peer: dc1-spine2 @@ -381,7 +393,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.7/31 - name: Ethernet6 peer: dc1-wan1 @@ -390,7 +403,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-WAN1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.2/31 - name: Ethernet7 peer: dc1-wan2 @@ -399,7 +413,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-WAN2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.6/31 - name: Ethernet8 peer: dc1-leaf1c @@ -407,107 +422,105 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF1C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active - name: Ethernet41 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet42 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet43 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet44 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet45 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet46 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet47 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet48 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet49 - peer: Cameras peer_type: network_port description: Cameras shutdown: false validate_state: false - type: switched - mode: access - vlans: '50' + switchport: + enabled: true + mode: access + access_vlan: '50' spanning_tree_portfast: edge - name: Ethernet5 peer: dc1-leaf1-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf1-server1_PCI2 + description: SERVER_dc1-leaf1-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -538,11 +551,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.4/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.3/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1c.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1c.yml index 60389591da0..9e7ac69c419 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1c.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf1c.yml @@ -13,6 +13,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -42,7 +48,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -52,7 +57,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF1B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -60,19 +64,22 @@ ethernet_interfaces: peer: dc1-leaf1-server1 peer_interface: iLO peer_type: server - description: dc1-leaf1-server1_iLO + description: SERVER_dc1-leaf1-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF1_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2a.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2a.yml index 5ce0f62bede..fe2a8ab0379 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2a.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2a.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Vlan4093 - ip_address: 10.255.255.8 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-CORE peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 192.168.100.1 remote_as: '65202' @@ -94,14 +94,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.0.5 rd: 10.255.0.5:10 route_targets: import: @@ -112,13 +111,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3009 - name: VRF11 - router_id: 10.255.0.5 rd: 10.255.0.5:11 route_targets: import: @@ -129,11 +129,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.5 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.101 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -230,6 +232,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -256,7 +264,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.103/24 @@ -270,12 +278,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -285,9 +293,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -296,9 +304,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -311,12 +319,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.100/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -337,7 +345,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.100/31 @@ -357,7 +365,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.100/31 @@ -373,27 +381,32 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2b_Po3 - type: switched + description: MLAG_dc1-leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1_PortChannel dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -401,8 +414,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -411,8 +423,7 @@ ethernet_interfaces: peer: dc1-leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -424,7 +435,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.9/31 - name: Ethernet2 peer: dc1-spine2 @@ -433,7 +445,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.11/31 - name: Ethernet8 peer: dc1-leaf2c @@ -441,7 +454,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -450,7 +462,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc2-leaf2a_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 192.168.100.0/31 @@ -458,9 +471,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI1 peer_type: server - description: dc1-leaf2-server1_PCI1 + description: SERVER_dc1-leaf2-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -491,11 +503,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2b.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2b.yml index d005ab54cf6..d07f99c06b7 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2b.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2b.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Vlan4093 - ip_address: 10.255.255.12 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-CORE peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' - ip_address: 192.168.100.3 remote_as: '65202' @@ -94,14 +94,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.0.6 rd: 10.255.0.6:10 route_targets: import: @@ -112,13 +111,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3009 - name: VRF11 - router_id: 10.255.0.6 rd: 10.255.0.6:11 route_targets: import: @@ -129,11 +129,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.0.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.1.100 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc1-leaf2a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -230,6 +232,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -256,7 +264,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.104/24 @@ -270,12 +278,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -285,9 +293,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -296,9 +304,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -311,12 +319,12 @@ vlans: name: INBAND_MGMT vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.1.101/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -337,7 +345,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.1.101/31 @@ -357,7 +365,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.1.101/31 @@ -373,27 +381,32 @@ vlan_interfaces: - 172.21.110.1 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-leaf2a_Po3 - type: switched + description: MLAG_dc1-leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC1-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 mlag: 8 - name: Port-Channel5 - description: dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - type: switched + description: SERVER_dc1-leaf2-server1_PortChannel dc1-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -401,8 +414,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -411,8 +423,7 @@ ethernet_interfaces: peer: dc1-leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -424,7 +435,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.13/31 - name: Ethernet2 peer: dc1-spine2 @@ -433,7 +445,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.15/31 - name: Ethernet8 peer: dc1-leaf2c @@ -441,7 +454,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-LEAF2C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -450,7 +462,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc2-leaf2b_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 192.168.100.2/31 @@ -458,9 +471,8 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: PCI2 peer_type: server - description: dc1-leaf2-server1_PCI2 + description: SERVER_dc1-leaf2-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -491,11 +503,11 @@ route_maps: - ip address prefix-list PL-L2LEAF-INBAND-MGMT loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.1.5/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2c.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2c.yml index d05875a07a9..ad187ff867d 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2c.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-leaf2c.yml @@ -13,6 +13,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -42,7 +48,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -52,7 +57,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet8 shutdown: true - type: port-channel-member channel_group: id: 1 mode: active @@ -60,19 +64,22 @@ ethernet_interfaces: peer: dc1-leaf2-server1 peer_interface: iLO peer_type: server - description: dc1-leaf2-server1_iLO + description: SERVER_dc1-leaf2-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC1_L3_LEAF2_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402,4085 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402,4085 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine1.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine1.yml index 052d7aff4d2..7f98dcf47e1 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine1.yml @@ -59,6 +59,7 @@ router_bgp: remote_as: '65102' peer: dc1-leaf2b description: dc1-leaf2b_Ethernet1 + shutdown: true - ip_address: 10.33.255.17 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65133' @@ -72,32 +73,33 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' + shutdown: true - ip_address: 10.33.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-svc-leaf1a - description: dc1-svc-leaf1a + description: dc1-svc-leaf1a_Loopback0 remote_as: '65133' - ip_address: 10.33.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-svc-leaf1b - description: dc1-svc-leaf1b + description: dc1-svc-leaf1b_Loopback0 remote_as: '65133' - ip_address: 123.1.1.10 remote_as: '1234' @@ -153,6 +155,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -169,7 +177,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.11/24 @@ -188,7 +196,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.0/31 - name: Ethernet2 peer: dc1-leaf1b @@ -197,7 +206,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.4/31 - name: Ethernet3 peer: dc1-leaf2a @@ -206,7 +216,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.8/31 - name: Ethernet4 peer: dc1-leaf2b @@ -215,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.12/31 - name: Ethernet5 peer: dc1-svc-leaf1a @@ -224,7 +236,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.16/31 - name: Ethernet6 peer: dc1-svc-leaf1b @@ -233,11 +246,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.20/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine2.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine2.yml index 4d080210011..a5689dc3524 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-spine2.yml @@ -65,6 +65,7 @@ router_bgp: remote_as: '65102' peer: dc1-leaf2b description: dc1-leaf2b_Ethernet2 + shutdown: true - ip_address: 10.33.255.19 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65133' @@ -78,32 +79,33 @@ router_bgp: - ip_address: 10.255.0.3 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Loopback0 remote_as: '65101' - ip_address: 10.255.0.4 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Loopback0 remote_as: '65101' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' + shutdown: true - ip_address: 10.33.0.5 peer_group: EVPN-OVERLAY-PEERS peer: dc1-svc-leaf1a - description: dc1-svc-leaf1a + description: dc1-svc-leaf1a_Loopback0 remote_as: '65133' - ip_address: 10.33.0.6 peer_group: EVPN-OVERLAY-PEERS peer: dc1-svc-leaf1b - description: dc1-svc-leaf1b + description: dc1-svc-leaf1b_Loopback0 remote_as: '65133' - ip_address: 142.112.39.2 peer_group: IPv4-EXTERNAL-PEERS @@ -135,6 +137,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -151,7 +159,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.12/24 @@ -170,7 +178,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.2/31 - name: Ethernet2 peer: dc1-leaf1b @@ -179,7 +188,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.6/31 - name: Ethernet3 peer: dc1-leaf2a @@ -188,7 +198,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.10/31 - name: Ethernet4 peer: dc1-leaf2b @@ -197,7 +208,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: true mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.14/31 - name: Ethernet5 peer: dc1-svc-leaf1a @@ -206,7 +218,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.18/31 - name: Ethernet6 peer: dc1-svc-leaf1b @@ -215,11 +228,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.22/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.0.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1a.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1a.yml index 1b566249389..1cfeaba52df 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1a.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.33.1.105 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-svc-leaf1b - description: dc1-svc-leaf1b + description: dc1-svc-leaf1b_Vlan4093 - ip_address: 10.33.255.16 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -83,6 +83,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -103,7 +109,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.31/24 @@ -117,42 +123,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.33.1.104/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.33.1.72/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-svc-leaf1b_Po3 - type: switched + description: MLAG_dc1-svc-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: dc1-svc-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-svc-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc1-svc-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -161,8 +167,7 @@ ethernet_interfaces: peer: dc1-svc-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-svc-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc1-svc-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -174,7 +179,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.17/31 - name: Ethernet2 peer: dc1-spine2 @@ -183,7 +189,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.19/31 mlag_configuration: domain_id: DC1_SVC_LEAF1 @@ -208,11 +215,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.33.0.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.33.1.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1b.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1b.yml index 36f9e4eaba0..d7d64db5e46 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1b.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-svc-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.33.1.104 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc1-svc-leaf1a - description: dc1-svc-leaf1a + description: dc1-svc-leaf1a_Vlan4093 - ip_address: 10.33.255.20 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65100' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.0.1 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine1 - description: dc1-spine1 + description: dc1-spine1_Loopback0 remote_as: '65100' - ip_address: 10.255.0.2 peer_group: EVPN-OVERLAY-PEERS peer: dc1-spine2 - description: dc1-spine2 + description: dc1-spine2_Loopback0 remote_as: '65100' redistribute_routes: - source_protocol: connected @@ -83,6 +83,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -103,7 +109,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.32/24 @@ -117,42 +123,42 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.33.1.105/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.33.1.73/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc1-svc-leaf1a_Po3 - type: switched + description: MLAG_dc1-svc-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet3 peer: dc1-svc-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc1-svc-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc1-svc-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -161,8 +167,7 @@ ethernet_interfaces: peer: dc1-svc-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc1-svc-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc1-svc-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -174,7 +179,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.21/31 - name: Ethernet2 peer: dc1-spine2 @@ -183,7 +189,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.33.255.23/31 mlag_configuration: domain_id: DC1_SVC_LEAF1 @@ -208,11 +215,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.33.0.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.33.1.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan1.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan1.yml index 43a101fcc9b..762e47ccb21 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan1.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan1.yml @@ -57,11 +57,11 @@ router_bgp: - ip_address: 10.255.255.10 peer_group: WAN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Dps1 - ip_address: 10.255.255.20 peer_group: WAN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Dps1 - ip_address: 10.255.1.2 peer: dc1-wan2 description: dc1-wan2 @@ -75,6 +75,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -83,6 +84,7 @@ router_bgp: neighbors: - ip_address: 10.255.1.2 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -126,6 +128,11 @@ static_routes: gateway: 100.64.3.1 service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -143,7 +150,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.15/24 @@ -162,7 +169,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.1/31 - name: Ethernet2 peer: dc1-leaf1b @@ -171,23 +179,26 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.3/31 - name: Ethernet3 peer_type: l3_interface ip_address: 172.18.3.2/24 shutdown: false - type: routed + switchport: + enabled: false description: mpls-sp-1_DC1-MPLS-3 - name: Ethernet4 peer_type: l3_interface ip_address: 100.64.3.2/24 shutdown: false - type: routed + switchport: + enabled: false description: isp-1_DC1-INET-3 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.2.1/32 as_path: @@ -493,7 +504,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 10.255.1.1/32 flow_tracker: sampled: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan2.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan2.yml index bbec131391c..927596e66f3 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan2.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc1-wan2.yml @@ -57,11 +57,11 @@ router_bgp: - ip_address: 10.255.255.10 peer_group: WAN-OVERLAY-PEERS peer: dc1-leaf1a - description: dc1-leaf1a + description: dc1-leaf1a_Dps1 - ip_address: 10.255.255.20 peer_group: WAN-OVERLAY-PEERS peer: dc1-leaf1b - description: dc1-leaf1b + description: dc1-leaf1b_Dps1 - ip_address: 10.255.1.1 peer: dc1-wan1 description: dc1-wan1 @@ -75,6 +75,7 @@ router_bgp: peer_groups: - name: WAN-OVERLAY-PEERS activate: true + encapsulation: path-selection route_map_in: RM-EVPN-SOO-IN route_map_out: RM-EVPN-SOO-OUT neighbor_default: @@ -83,6 +84,7 @@ router_bgp: neighbors: - ip_address: 10.255.1.1 activate: true + encapsulation: path-selection address_family_ipv4_sr_te: peer_groups: - name: WAN-OVERLAY-PEERS @@ -126,6 +128,11 @@ static_routes: gateway: 100.64.4.1 service_routing_protocols_model: multi-agent ip_routing: true +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true transceiver_qsfp_default_mode_4x10: false spanning_tree: mode: none @@ -143,7 +150,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.16/24 @@ -162,7 +169,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.5/31 - name: Ethernet2 peer: dc1-leaf1b @@ -171,23 +179,26 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1B_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.7/31 - name: Ethernet3 peer_type: l3_interface ip_address: 172.18.4.2/24 shutdown: false - type: routed + switchport: + enabled: false description: mpls-sp-1_DC1-MPLS-4 - name: Ethernet4 peer_type: l3_interface ip_address: 100.64.4.2/24 shutdown: false - type: routed + switchport: + enabled: false description: isp-1_DC1-INET-4 loopback_interfaces: - name: Loopback0 - description: Router_ID + description: ROUTER_ID shutdown: false ip_address: 10.255.2.2/32 as_path: @@ -493,7 +504,7 @@ application_traffic_recognition: dps_interfaces: - name: Dps1 description: DPS Interface - mtu: 9214 + mtu: 9194 ip_address: 10.255.1.2/32 flow_tracker: sampled: FLOW-TRACKER diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1a.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1a.yml index b23c70f53c0..933058fb37e 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1a.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1a.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Vlan4093 - ip_address: 10.255.255.104 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.13 rd: 10.255.128.13:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1b_Vlan3009 - name: VRF11 - router_id: 10.255.128.13 rd: 10.255.128.13:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.117 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.111/24 @@ -207,12 +215,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -222,9 +230,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -233,9 +241,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -245,12 +253,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.116/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -271,7 +279,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.116/31 @@ -291,33 +299,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.116/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf1b_Po3 - type: switched + description: MLAG_dc2-leaf1b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - type: switched + description: PortChannel dc2-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -325,8 +338,7 @@ ethernet_interfaces: peer: dc2-leaf1b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1b_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf1b_Ethernet3 shutdown: false channel_group: id: 3 @@ -335,8 +347,7 @@ ethernet_interfaces: peer: dc2-leaf1b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1b_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf1b_Ethernet4 shutdown: false channel_group: id: 3 @@ -348,7 +359,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.105/31 - name: Ethernet2 peer: dc2-spine2 @@ -357,7 +369,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.107/31 - name: Ethernet8 peer: dc2-leaf1c @@ -365,7 +378,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF1C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -373,9 +385,8 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: PCI1 peer_type: server - description: dc2-leaf1-server1_PCI1 + description: SERVER_dc2-leaf1-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -402,11 +413,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.13/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.13/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1b.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1b.yml index 1cc84c399fd..60c9d515547 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1b.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1b.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Vlan4093 - ip_address: 10.255.255.108 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.14 rd: 10.255.128.14:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.14 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1a_Vlan3009 - name: VRF11 - router_id: 10.255.128.14 rd: 10.255.128.14:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.14 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.116 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf1a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.112/24 @@ -207,12 +215,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -222,9 +230,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -233,9 +241,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -245,12 +253,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.117/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -271,7 +279,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.117/31 @@ -291,33 +299,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.117/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf1a_Po3 - type: switched + description: MLAG_dc2-leaf1a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF1C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - type: switched + description: PortChannel dc2-leaf1-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -325,8 +338,7 @@ ethernet_interfaces: peer: dc2-leaf1a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1a_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf1a_Ethernet3 shutdown: false channel_group: id: 3 @@ -335,8 +347,7 @@ ethernet_interfaces: peer: dc2-leaf1a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf1a_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf1a_Ethernet4 shutdown: false channel_group: id: 3 @@ -348,7 +359,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.109/31 - name: Ethernet2 peer: dc2-spine2 @@ -357,7 +369,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.111/31 - name: Ethernet8 peer: dc2-leaf1c @@ -365,7 +378,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF1C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -373,9 +385,8 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: PCI2 peer_type: server - description: dc2-leaf1-server1_PCI2 + description: SERVER_dc2-leaf1-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -402,11 +413,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.14/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.13/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1c.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1c.yml index fc2464ddb41..e5b7e441043 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1c.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf1c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.161/24 @@ -47,7 +53,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF1A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -57,7 +62,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF1B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -65,19 +69,22 @@ ethernet_interfaces: peer: dc2-leaf1-server1 peer_interface: iLO peer_type: server - description: dc2-leaf1-server1_iLO + description: SERVER_dc2-leaf1-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC2_L3_LEAF1_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2a.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2a.yml index 4854127dca5..4998e3237e9 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2a.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2a.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Vlan4093 - ip_address: 10.255.255.112 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' - ip_address: 10.255.0.5 peer_group: EVPN-OVERLAY-CORE peer: dc1-leaf2a - description: dc1-leaf2a + description: dc1-leaf2a_Loopback0 remote_as: '65102' - ip_address: 192.168.100.0 remote_as: '65102' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.128.15 rd: 10.255.128.15:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.15 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2b_Vlan3009 - name: VRF11 - router_id: 10.255.128.15 rd: 10.255.128.15:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.15 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.121 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2b_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.113/24 @@ -269,12 +277,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -284,9 +292,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -295,9 +303,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -307,12 +315,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.120/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -333,7 +341,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.120/31 @@ -353,33 +361,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.120/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf2b_Po3 - type: switched + description: MLAG_dc2-leaf2b_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - type: switched + description: SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -387,8 +400,7 @@ ethernet_interfaces: peer: dc2-leaf2b peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2b_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf2b_Ethernet3 shutdown: false channel_group: id: 3 @@ -397,8 +409,7 @@ ethernet_interfaces: peer: dc2-leaf2b peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2b_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf2b_Ethernet4 shutdown: false channel_group: id: 3 @@ -410,7 +421,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.113/31 - name: Ethernet2 peer: dc2-spine2 @@ -419,7 +431,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.115/31 - name: Ethernet8 peer: dc2-leaf2c @@ -427,7 +440,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF2C_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -436,7 +448,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc1-leaf2a_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 192.168.100.1/31 @@ -444,9 +457,8 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: PCI1 peer_type: server - description: dc2-leaf2-server1_PCI1 + description: SERVER_dc2-leaf2-server1_PCI1 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -473,11 +485,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.15/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.15/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2b.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2b.yml index 9ae921d516d..13ff5aa3252 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2b.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2b.yml @@ -53,7 +53,7 @@ router_bgp: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Vlan4093 - ip_address: 10.255.255.116 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -67,17 +67,17 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' - ip_address: 10.255.0.6 peer_group: EVPN-OVERLAY-CORE peer: dc1-leaf2b - description: dc1-leaf2b + description: dc1-leaf2b_Loopback0 remote_as: '65102' - ip_address: 192.168.100.2 remote_as: '65102' @@ -93,14 +93,13 @@ router_bgp: enable: true inter_domain: true peer_groups: - - name: EVPN-OVERLAY-PEERS - activate: true - name: EVPN-OVERLAY-CORE domain_remote: true activate: true + - name: EVPN-OVERLAY-PEERS + activate: true vrfs: - name: VRF10 - router_id: 10.255.128.16 rd: 10.255.128.16:10 route_targets: import: @@ -111,13 +110,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.16 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2a_Vlan3009 - name: VRF11 - router_id: 10.255.128.16 rd: 10.255.128.16:11 route_targets: import: @@ -128,11 +128,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.16 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.120 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf2a_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -229,6 +231,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -255,7 +263,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.114/24 @@ -269,12 +277,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -284,9 +292,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -295,9 +303,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -307,12 +315,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.121/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -333,7 +341,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.121/31 @@ -353,33 +361,38 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.121/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf2a_Po3 - type: switched + description: MLAG_dc2-leaf2a_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel8 description: DC2-LEAF2C_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 mlag: 8 - name: Port-Channel5 - description: dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - type: switched + description: SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22 + native_vlan: 4092 spanning_tree_portfast: edge mlag: 5 ethernet_interfaces: @@ -387,8 +400,7 @@ ethernet_interfaces: peer: dc2-leaf2a peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2a_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf2a_Ethernet3 shutdown: false channel_group: id: 3 @@ -397,8 +409,7 @@ ethernet_interfaces: peer: dc2-leaf2a peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf2a_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf2a_Ethernet4 shutdown: false channel_group: id: 3 @@ -410,7 +421,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.117/31 - name: Ethernet2 peer: dc2-spine2 @@ -419,7 +431,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.119/31 - name: Ethernet8 peer: dc2-leaf2c @@ -427,7 +440,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC2-LEAF2C_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 8 mode: active @@ -436,7 +448,8 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: l3leaf description: P2P_LINK_TO_dc1-leaf2b_Ethernet6 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 192.168.100.3/31 @@ -444,9 +457,8 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: PCI2 peer_type: server - description: dc2-leaf2-server1_PCI2 + description: SERVER_dc2-leaf2-server1_PCI2 shutdown: false - type: port-channel-member channel_group: id: 5 mode: active @@ -473,11 +485,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.16/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.15/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2c.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2c.yml index 0cf2f042e9f..23d1f441eb5 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2c.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf2c.yml @@ -10,6 +10,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -29,7 +35,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.162/24 @@ -47,7 +53,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -57,7 +62,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC2-LEAF2B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -65,19 +69,22 @@ ethernet_interfaces: peer: dc2-leaf2-server1 peer_interface: iLO peer_type: server - description: dc2-leaf2-server1_iLO + description: SERVER_dc2-leaf2-server1_iLO shutdown: false - type: switched - mode: access - vlans: '11' + switchport: + enabled: true + mode: access + access_vlan: '11' spanning_tree_portfast: edge port_channel_interfaces: - name: Port-Channel1 description: DC2_L3_LEAF2_Po8 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 11-12,21-22,3401-3402 shutdown: false - mode: trunk - vlans: 11-12,21-22,3401-3402 vlans: - id: 11 name: VRF10_VLAN11 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3a.arista.com.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3a.arista.com.yml index 8bbd55bb994..c84568b8b0c 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3a.arista.com.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3a.arista.com.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.125 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf3b.arista.com - description: dc2-leaf3b.arista.com + description: dc2-leaf3b.arista.com_Vlan4093 - ip_address: 10.255.255.120 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.17 rd: 10.255.128.17:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.17 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.125 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf3b.arista.com_Vlan3009 - name: VRF11 - router_id: 10.255.128.17 rd: 10.255.128.17:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.17 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.125 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf3b.arista.com_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.115/24 @@ -207,12 +215,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -222,9 +230,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -233,9 +241,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -245,12 +253,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.124/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -271,7 +279,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.124/31 @@ -291,19 +299,20 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.124/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf3b.arista.com_Po3 - type: switched + description: MLAG_dc2-leaf3b.arista.com_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel11 description: dc2-leaf3-fw1_PortChannel type: switched @@ -312,13 +321,38 @@ port_channel_interfaces: native_vlan: 4092 spanning_tree_portfast: edge mlag: 11 +- name: Port-Channel12 + description: Test_mode_and_vlans + type: switched + mode: access + vlans: '100' +- name: Port-Channel13 + description: Test_native_vlan_and_trunk_groups + type: switched + native_vlan: 4092 + native_vlan_tag: true + mode: trunk + trunk_groups: + - MLAG +- name: Port-Channel14 + description: Test_phone + type: switched + mode: trunk phone + phone: + vlan: 20 + trunk: tagged +- name: Port-Channel15 + description: Test_type_routed + type: routed + ip_address: 1.1.1.1/24 + peer: dc2-leaf2b + peer_interface: Ethernet2 ethernet_interfaces: - name: Ethernet3 peer: dc2-leaf3b.arista.com peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf3b.arista.com_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf3b.arista.com_Ethernet3 shutdown: false channel_group: id: 3 @@ -327,8 +361,7 @@ ethernet_interfaces: peer: dc2-leaf3b.arista.com peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf3b.arista.com_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf3b.arista.com_Ethernet4 shutdown: false channel_group: id: 3 @@ -340,7 +373,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.121/31 - name: Ethernet2 peer: dc2-spine2 @@ -349,7 +383,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.123/31 - name: Ethernet11 peer: dc2-leaf3-fw1 @@ -360,6 +395,33 @@ ethernet_interfaces: channel_group: id: 11 mode: active +- name: Ethernet12 + description: Test_mode_and_vlans + type: switched + mode: access + vlans: '100' +- name: Ethernet13 + description: Test_native_vlan_and_trunk_groups + type: switched + native_vlan: 4092 + native_vlan_tag: true + mode: trunk + trunk_groups: + - MLAG +- name: Ethernet14 + description: Test_phone + type: switched + mode: trunk phone + phone: + vlan: 20 + trunk: tagged +- name: Ethernet15 + description: Test_type_routed + type: routed + ip_address: 1.1.1.1/24 + peer: dc2-leaf2b + peer_interface: Ethernet2 + shutdown: false mlag_configuration: domain_id: DC2_L3_LEAF3 local_interface: Vlan4094 @@ -383,11 +445,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.17/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.17/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3b.arista.com.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3b.arista.com.yml index 892e9d10864..d660ce237c9 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3b.arista.com.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-leaf3b.arista.com.yml @@ -44,7 +44,7 @@ router_bgp: - ip_address: 10.255.129.124 peer_group: MLAG-IPv4-UNDERLAY-PEER peer: dc2-leaf3a.arista.com - description: dc2-leaf3a.arista.com + description: dc2-leaf3a.arista.com_Vlan4093 - ip_address: 10.255.255.124 peer_group: IPv4-UNDERLAY-PEERS remote_as: '65200' @@ -58,12 +58,12 @@ router_bgp: - ip_address: 10.255.128.11 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine1 - description: dc2-spine1 + description: dc2-spine1_Loopback0 remote_as: '65200' - ip_address: 10.255.128.12 peer_group: EVPN-OVERLAY-PEERS peer: dc2-spine2 - description: dc2-spine2 + description: dc2-spine2_Loopback0 remote_as: '65200' redistribute_routes: - source_protocol: connected @@ -74,7 +74,6 @@ router_bgp: activate: true vrfs: - name: VRF10 - router_id: 10.255.128.18 rd: 10.255.128.18:10 route_targets: import: @@ -85,13 +84,14 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 10.255.128.18 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.124 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf3a.arista.com_Vlan3009 - name: VRF11 - router_id: 10.255.128.18 rd: 10.255.128.18:11 route_targets: import: @@ -102,11 +102,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 10.255.128.18 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.129.124 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: dc2-leaf3a.arista.com_Vlan3010 vlans: - id: 11 tenant: TENANT1 @@ -167,6 +169,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: mstp mst_instances: @@ -193,7 +201,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.116/24 @@ -207,12 +215,12 @@ management_api_http: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 11 @@ -222,9 +230,9 @@ vlans: name: VRF10_VLAN12 tenant: TENANT1 - id: 3009 - name: MLAG_iBGP_VRF10 + name: MLAG_L3_VRF_VRF10 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 21 name: VRF11_VLAN21 @@ -233,9 +241,9 @@ vlans: name: VRF11_VLAN22 tenant: TENANT1 - id: 3010 - name: MLAG_iBGP_VRF11 + name: MLAG_L3_VRF_VRF11 trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: TENANT1 - id: 3401 name: L2_VLAN3401 @@ -245,12 +253,12 @@ vlans: tenant: TENANT1 vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.129.125/31 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -271,7 +279,7 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF10' + description: MLAG_L3_VRF_VRF10 vrf: VRF10 mtu: 1500 ip_address: 10.255.129.125/31 @@ -291,19 +299,20 @@ vlan_interfaces: tenant: TENANT1 type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf VRF11' + description: MLAG_L3_VRF_VRF11 vrf: VRF11 mtu: 1500 ip_address: 10.255.129.125/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_dc2-leaf3a.arista.com_Po3 - type: switched + description: MLAG_dc2-leaf3a.arista.com_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel11 description: dc2-leaf3-fw1_PortChannel type: switched @@ -317,8 +326,7 @@ ethernet_interfaces: peer: dc2-leaf3a.arista.com peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf3a.arista.com_Ethernet3 - type: port-channel-member + description: MLAG_dc2-leaf3a.arista.com_Ethernet3 shutdown: false channel_group: id: 3 @@ -327,8 +335,7 @@ ethernet_interfaces: peer: dc2-leaf3a.arista.com peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_dc2-leaf3a.arista.com_Ethernet4 - type: port-channel-member + description: MLAG_dc2-leaf3a.arista.com_Ethernet4 shutdown: false channel_group: id: 3 @@ -340,7 +347,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.125/31 - name: Ethernet2 peer: dc2-spine2 @@ -349,7 +357,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.127/31 - name: Ethernet11 peer: dc2-leaf3-fw1 @@ -383,11 +392,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.18/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 10.255.129.17/32 - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine1.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine1.yml index 5c846b815cc..3f268216fbc 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine1.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine1.yml @@ -67,32 +67,32 @@ router_bgp: - ip_address: 10.255.128.13 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Loopback0 remote_as: '65201' - ip_address: 10.255.128.14 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Loopback0 remote_as: '65201' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' - ip_address: 10.255.128.17 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf3a.arista.com - description: dc2-leaf3a.arista.com + description: dc2-leaf3a.arista.com_Loopback0 remote_as: '65203' - ip_address: 10.255.128.18 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf3b.arista.com - description: dc2-leaf3b.arista.com + description: dc2-leaf3b.arista.com_Loopback0 remote_as: '65203' address_family_evpn: peer_groups: @@ -109,6 +109,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -125,7 +131,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.21/24 @@ -144,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.104/31 - name: Ethernet2 peer: dc2-leaf1b @@ -153,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.108/31 - name: Ethernet3 peer: dc2-leaf2a @@ -162,7 +170,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.112/31 - name: Ethernet4 peer: dc2-leaf2b @@ -171,7 +180,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.116/31 - name: Ethernet5 peer: dc2-leaf3a.arista.com @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.120/31 - name: Ethernet6 peer: dc2-leaf3b.arista.com @@ -189,11 +200,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.124/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine2.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine2.yml index 5fe37083b21..bcb133afc7a 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine2.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/structured_configs/dc2-spine2.yml @@ -67,32 +67,32 @@ router_bgp: - ip_address: 10.255.128.13 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1a - description: dc2-leaf1a + description: dc2-leaf1a_Loopback0 remote_as: '65201' - ip_address: 10.255.128.14 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf1b - description: dc2-leaf1b + description: dc2-leaf1b_Loopback0 remote_as: '65201' - ip_address: 10.255.128.15 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2a - description: dc2-leaf2a + description: dc2-leaf2a_Loopback0 remote_as: '65202' - ip_address: 10.255.128.16 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf2b - description: dc2-leaf2b + description: dc2-leaf2b_Loopback0 remote_as: '65202' - ip_address: 10.255.128.17 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf3a.arista.com - description: dc2-leaf3a.arista.com + description: dc2-leaf3a.arista.com_Loopback0 remote_as: '65203' - ip_address: 10.255.128.18 peer_group: EVPN-OVERLAY-PEERS peer: dc2-leaf3b.arista.com - description: dc2-leaf3b.arista.com + description: dc2-leaf3b.arista.com_Loopback0 remote_as: '65203' address_family_evpn: peer_groups: @@ -109,6 +109,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true spanning_tree: mode: none local_users: @@ -125,7 +131,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 172.16.1.22/24 @@ -144,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.106/31 - name: Ethernet2 peer: dc2-leaf1b @@ -153,7 +160,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.110/31 - name: Ethernet3 peer: dc2-leaf2a @@ -162,7 +170,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.114/31 - name: Ethernet4 peer: dc2-leaf2b @@ -171,7 +180,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.118/31 - name: Ethernet5 peer: dc2-leaf3a.arista.com @@ -180,7 +190,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.122/31 - name: Ethernet6 peer: dc2-leaf3b.arista.com @@ -189,11 +200,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 10.255.255.126/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 10.255.128.12/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1a-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1a-catalog.yml index c040c743f2c..26216d291e5 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1a-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1a-catalog.yml @@ -340,13 +340,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc1-leaf1b_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc1-leaf1b_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc1-leaf1b_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc1-leaf1b_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -382,13 +382,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc1-leaf1-server1_PCI1 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc1-leaf1b_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc1-leaf1b_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -400,20 +400,19 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - = 'up' + custom_field: Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -431,7 +430,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -449,7 +448,7 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4085 @@ -461,13 +460,13 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1b-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1b-catalog.yml index 9d0f1cb3db9..90002ace0eb 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1b-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1b-catalog.yml @@ -337,13 +337,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc1-leaf1a_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc1-leaf1a_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc1-leaf1a_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc1-leaf1a_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -379,13 +379,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc1-leaf1-server1_PCI2 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI2 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc1-leaf1a_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc1-leaf1a_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -397,20 +397,19 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 - = 'up' + custom_field: Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -428,7 +427,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -446,7 +445,7 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4085 @@ -458,13 +457,13 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1c-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1c-catalog.yml index c7240c189f6..88b30392957 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1c-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf1c-catalog.yml @@ -278,7 +278,7 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc1-leaf1-server1_iLO = 'up' + custom_field: Interface Ethernet5 - SERVER_dc1-leaf1-server1_iLO = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2a-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2a-catalog.yml index edabca76758..d83b2487db8 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2a-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2a-catalog.yml @@ -307,13 +307,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc1-leaf2b_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc1-leaf2b_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc1-leaf2b_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc1-leaf2b_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -343,13 +343,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc1-leaf2-server1_PCI1 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc1-leaf2-server1_PCI1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc1-leaf2b_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc1-leaf2b_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -361,20 +361,20 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc1-leaf2-server1_PortChannel dc1-leaf2-server1 - = 'up' + custom_field: Interface Port-Channel5 - SERVER_dc1-leaf2-server1_PortChannel + dc1-leaf2-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -392,7 +392,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -410,7 +410,7 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4085 @@ -422,13 +422,13 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2c-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2c-catalog.yml index 8bcf622a8d4..64d8435e516 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2c-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-leaf2c-catalog.yml @@ -271,7 +271,7 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc1-leaf2-server1_iLO = 'up' + custom_field: Interface Ethernet5 - SERVER_dc1-leaf2-server1_iLO = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine1-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine1-catalog.yml index 31164284b68..fd7699c639d 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine1-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine1-catalog.yml @@ -236,7 +236,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfaceUtilization: threshold: 70.0 - VerifyInterfaceErrors: null diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine2-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine2-catalog.yml index 55bc5cf4af7..5c3f986bce2 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine2-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-spine2-catalog.yml @@ -236,7 +236,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfaceUtilization: threshold: 70.0 - VerifyInterfaceErrors: null diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1a-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1a-catalog.yml index 5d1fb13d7a9..19b03746fc2 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1a-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1a-catalog.yml @@ -298,13 +298,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1b_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc1-svc-leaf1b_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1b_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc1-svc-leaf1b_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -322,31 +322,32 @@ anta.tests.interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1b_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc1-svc-leaf1b_Port-Channel3 = + 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Vxlan1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1b-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1b-catalog.yml index 8193e1f8b03..786791924d5 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1b-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-svc-leaf1b-catalog.yml @@ -298,13 +298,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1a_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc1-svc-leaf1a_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1a_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc1-svc-leaf1a_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -322,31 +322,32 @@ anta.tests.interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1a_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc1-svc-leaf1a_Port-Channel3 = + 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Vxlan1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan1-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan1-catalog.yml index eec0621d581..57ca347c2c4 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan1-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan1-catalog.yml @@ -84,6 +84,24 @@ anta.tests.connectivity: result_overwrite: custom_field: 'Source: P2P Interface Ethernet2 (IP: 10.255.255.3) - Destination: dc1-leaf1b Ethernet6 (IP: 10.255.255.2)' +- VerifyReachability: + hosts: + - destination: 10.255.1.1 + repeat: 1 + source: 10.255.1.1 + vrf: default + result_overwrite: + custom_field: 'Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan1 Dps1 (IP: + 10.255.1.1)' +- VerifyReachability: + hosts: + - destination: 10.255.1.2 + repeat: 1 + source: 10.255.1.1 + vrf: default + result_overwrite: + custom_field: 'Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan2 Dps1 (IP: + 10.255.1.2)' anta.tests.field_notices: - VerifyFieldNotice44Resolution: null - VerifyFieldNotice72Resolution: null @@ -155,7 +173,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - Router_ID = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan2-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan2-catalog.yml index 24b6eb221d9..135152ecadc 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan2-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc1-wan2-catalog.yml @@ -84,6 +84,24 @@ anta.tests.connectivity: result_overwrite: custom_field: 'Source: P2P Interface Ethernet2 (IP: 10.255.255.7) - Destination: dc1-leaf1b Ethernet7 (IP: 10.255.255.6)' +- VerifyReachability: + hosts: + - destination: 10.255.1.1 + repeat: 1 + source: 10.255.1.2 + vrf: default + result_overwrite: + custom_field: 'Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan1 Dps1 (IP: + 10.255.1.1)' +- VerifyReachability: + hosts: + - destination: 10.255.1.2 + repeat: 1 + source: 10.255.1.2 + vrf: default + result_overwrite: + custom_field: 'Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan2 Dps1 (IP: + 10.255.1.2)' anta.tests.field_notices: - VerifyFieldNotice44Resolution: null - VerifyFieldNotice72Resolution: null @@ -155,7 +173,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - Router_ID = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Dps1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1a-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1a-catalog.yml index 1118e3f938a..b85e1940234 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1a-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1a-catalog.yml @@ -305,13 +305,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf1b_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf1b_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf1b_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf1b_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -335,13 +335,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf1-server1_PCI1 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf1b_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf1b_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -353,20 +353,19 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - = 'up' + custom_field: Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -384,7 +383,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -402,19 +401,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1b-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1b-catalog.yml index 2b7d108dcd9..5747b79166a 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1b-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1b-catalog.yml @@ -305,13 +305,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf1a_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf1a_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf1a_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf1a_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -335,13 +335,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf1-server1_PCI2 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI2 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf1a_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf1a_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -353,20 +353,19 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 - = 'up' + custom_field: Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -384,7 +383,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -402,19 +401,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1c-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1c-catalog.yml index 6fcc964b668..e7af9260fa8 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1c-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf1c-catalog.yml @@ -125,7 +125,7 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf1-server1_iLO = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf1-server1_iLO = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2a-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2a-catalog.yml index 0dd53b6d5b4..d7bd7eaf5ad 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2a-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2a-catalog.yml @@ -321,13 +321,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf2b_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf2b_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf2b_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf2b_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -357,13 +357,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf2-server1_PCI1 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf2b_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf2b_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -375,20 +375,20 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - = 'up' + custom_field: Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel + dc2-leaf2-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -406,7 +406,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -424,19 +424,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2b-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2b-catalog.yml index b0987cb4481..ad7f817273d 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2b-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2b-catalog.yml @@ -305,13 +305,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf2a_Ethernet3 = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf2a_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf2a_Ethernet4 = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf2a_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -341,13 +341,13 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf2-server1_PCI2 = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI2 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf2a_Po3 = 'up' + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf2a_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel8 @@ -359,20 +359,20 @@ anta.tests.interfaces: - name: Port-Channel5 status: up result_overwrite: - custom_field: Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 - = 'up' + custom_field: Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel + dc2-leaf2-server1 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -390,7 +390,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -408,19 +408,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2c-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2c-catalog.yml index 6d586cc673e..678d0d0be12 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2c-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf2c-catalog.yml @@ -125,7 +125,7 @@ anta.tests.interfaces: - name: Ethernet5 status: up result_overwrite: - custom_field: Interface Ethernet5 - dc2-leaf2-server1_iLO = 'up' + custom_field: Interface Ethernet5 - SERVER_dc2-leaf2-server1_iLO = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel1 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3a.arista.com-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3a.arista.com-catalog.yml index db9116173dc..d21efe397f2 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3a.arista.com-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3a.arista.com-catalog.yml @@ -80,6 +80,13 @@ anta.tests.connectivity: port: Ethernet2 result_overwrite: custom_field: 'Local: Ethernet2 - Remote: dc2-spine2 Ethernet5' +- VerifyLLDPNeighbors: + neighbors: + - neighbor_device: dc2-leaf2b + neighbor_port: Ethernet2 + port: Ethernet15 + result_overwrite: + custom_field: 'Local: Ethernet15 - Remote: dc2-leaf2b Ethernet2' - VerifyReachability: hosts: - destination: 10.255.255.120 @@ -98,6 +105,15 @@ anta.tests.connectivity: result_overwrite: custom_field: 'Source: P2P Interface Ethernet2 (IP: 10.255.255.123) - Destination: dc2-spine2 Ethernet5 (IP: 10.255.255.122)' +- VerifyReachability: + hosts: + - destination: 10.255.255.119 + repeat: 1 + source: 1.1.1.1 + vrf: default + result_overwrite: + custom_field: 'Source: P2P Interface Ethernet15 (IP: 1.1.1.1) - Destination: + dc2-leaf2b Ethernet2 (IP: 10.255.255.119)' - VerifyReachability: hosts: - destination: 10.255.0.1 @@ -298,15 +314,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet3 - = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf3b.arista.com_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet4 - = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf3b.arista.com_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -325,12 +339,36 @@ anta.tests.interfaces: status: up result_overwrite: custom_field: Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Ethernet12 + status: up + result_overwrite: + custom_field: Interface Ethernet12 - Test_mode_and_vlans = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Ethernet13 + status: up + result_overwrite: + custom_field: Interface Ethernet13 - Test_native_vlan_and_trunk_groups = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Ethernet14 + status: up + result_overwrite: + custom_field: Interface Ethernet14 - Test_phone = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Ethernet15 + status: up + result_overwrite: + custom_field: Interface Ethernet15 - Test_type_routed = 'up' - VerifyInterfacesStatus: interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf3b.arista.com_Po3 + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf3b.arista.com_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: @@ -338,18 +376,43 @@ anta.tests.interfaces: status: up result_overwrite: custom_field: Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Port-Channel12 + status: up + result_overwrite: + custom_field: Interface Port-Channel12 - Test_mode_and_vlans = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Port-Channel13 + status: up + result_overwrite: + custom_field: Interface Port-Channel13 - Test_native_vlan_and_trunk_groups = + 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Port-Channel14 + status: up + result_overwrite: + custom_field: Interface Port-Channel14 - Test_phone = 'up' +- VerifyInterfacesStatus: + interfaces: + - name: Port-Channel15 + status: up + result_overwrite: + custom_field: Interface Port-Channel15 - Test_type_routed = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -367,7 +430,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -385,19 +448,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3b.arista.com-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3b.arista.com-catalog.yml index 2f7da83e055..96c42a1a21e 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3b.arista.com-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-leaf3b.arista.com-catalog.yml @@ -298,15 +298,13 @@ anta.tests.interfaces: - name: Ethernet3 status: up result_overwrite: - custom_field: Interface Ethernet3 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet3 - = 'up' + custom_field: Interface Ethernet3 - MLAG_dc2-leaf3a.arista.com_Ethernet3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet4 status: up result_overwrite: - custom_field: Interface Ethernet4 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet4 - = 'up' + custom_field: Interface Ethernet4 - MLAG_dc2-leaf3a.arista.com_Ethernet4 = 'up' - VerifyInterfacesStatus: interfaces: - name: Ethernet1 @@ -330,7 +328,7 @@ anta.tests.interfaces: - name: Port-Channel3 status: up result_overwrite: - custom_field: Interface Port-Channel3 - MLAG_PEER_dc2-leaf3a.arista.com_Po3 + custom_field: Interface Port-Channel3 - MLAG_dc2-leaf3a.arista.com_Port-Channel3 = 'up' - VerifyInterfacesStatus: interfaces: @@ -343,13 +341,13 @@ anta.tests.interfaces: - name: Vlan4093 status: up result_overwrite: - custom_field: Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' + custom_field: Interface Vlan4093 - MLAG_L3 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan4094 status: up result_overwrite: - custom_field: Interface Vlan4094 - MLAG_PEER = 'up' + custom_field: Interface Vlan4094 - MLAG = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan11 @@ -367,7 +365,7 @@ anta.tests.interfaces: - name: Vlan3009 status: up result_overwrite: - custom_field: 'Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = ''up''' + custom_field: Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' - VerifyInterfacesStatus: interfaces: - name: Vlan21 @@ -385,19 +383,19 @@ anta.tests.interfaces: - name: Vlan3010 status: up result_overwrite: - custom_field: 'Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = ''up''' + custom_field: Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback1 status: up result_overwrite: - custom_field: Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' + custom_field: Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' - VerifyInterfacesStatus: interfaces: - name: Loopback10 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine1-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine1-catalog.yml index a162a4ef029..312bb242a1e 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine1-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine1-catalog.yml @@ -233,7 +233,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' anta.tests.lanz: - VerifyLANZ: null anta.tests.ptp: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine2-catalog.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine2-catalog.yml index 12486aba496..d65646b6fbf 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine2-catalog.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/intended/test_catalogs/dc2-spine2-catalog.yml @@ -233,7 +233,7 @@ anta.tests.interfaces: - name: Loopback0 status: up result_overwrite: - custom_field: Interface Loopback0 - EVPN_Overlay_Peering = 'up' + custom_field: Interface Loopback0 - ROUTER_ID = 'up' anta.tests.lanz: - VerifyLANZ: null anta.tests.ptp: diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/CONNECTED_ENDPOINTS.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/CONNECTED_ENDPOINTS.yml index 7ff4ebf9578..1314a70f7c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/CONNECTED_ENDPOINTS.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/CONNECTED_ENDPOINTS.yml @@ -53,7 +53,7 @@ servers: mode: trunk spanning_tree_portfast: edge port_channel: - description: PortChannel dc1-leaf2-server1 + endpoint_port_channel: PortChannel dc1-leaf2-server1 mode: active - endpoint_ports: [ iLO ] @@ -107,7 +107,7 @@ servers: mode: trunk spanning_tree_portfast: edge port_channel: - description: PortChannel dc2-leaf2-server1 + endpoint_port_channel: PortChannel dc2-leaf2-server1 mode: active - endpoint_ports: [ iLO ] diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/all.yml new file mode 100644 index 00000000000..4a3975919ee --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/group_vars/all.yml @@ -0,0 +1,5 @@ +--- +eos_designs_documentation: + enable: false +eos_cli_config_gen_documentation: + enable: false diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3a.arista.com.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3a.arista.com.yml index 9d9fb4bf90d..ae915a24208 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3a.arista.com.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3a.arista.com.yml @@ -1,24 +1,89 @@ --- # Custom interface structured_config with shutdown key missing to make sure the defaults are handled properly +# Keeping test for deprecated data-models to ensure that validate_state can still generate the tests for them +# Deprecated keys: type, mode, vlans, native_vlan, native_vlan_tag, trunk_groups, phone custom_structured_configuration_ethernet_interfaces: - - name: Ethernet11 - peer: dc2-leaf3-fw1 - peer_interface: e1 - peer_type: firewall - description: dc2-leaf3-fw1_e1 - # shutdown: false - type: port-channel-member - channel_group: - id: 11 - mode: active + - name: Ethernet11 + peer: dc2-leaf3-fw1 + peer_interface: e1 + peer_type: firewall + description: dc2-leaf3-fw1_e1 + # shutdown: false + type: port-channel-member + channel_group: + id: 11 + mode: active + + - name: Ethernet12 + description: Test_mode_and_vlans + # test for type `switched` + type: switched + mode: access + vlans: 100 + + - name: Ethernet13 + description: Test_native_vlan_and_trunk_groups + type: switched + native_vlan: 4092 + native_vlan_tag: true + mode: trunk + trunk_groups: + - MLAG + + - name: Ethernet14 + description: Test_phone + type: switched + mode: trunk phone + phone: + vlan: 20 + trunk: tagged + + - name: Ethernet15 + description: Test_type_routed + type: routed + ip_address: 1.1.1.1/24 + peer: dc2-leaf2b + peer_interface: Ethernet2 + shutdown: false custom_structured_configuration_port_channel_interfaces: - - name: Port-Channel11 - description: dc2-leaf3-fw1_PortChannel - type: switched - # shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 - spanning_tree_portfast: edge - mlag: 11 + - name: Port-Channel11 + description: dc2-leaf3-fw1_PortChannel + type: switched + # shutdown: false + mode: trunk + vlans: 11-12,21-22 + native_vlan: 4092 + spanning_tree_portfast: edge + mlag: 11 + + - name: Port-Channel12 + description: Test_mode_and_vlans + # test for type `switched` + type: switched + mode: access + vlans: 100 + + - name: Port-Channel13 + description: Test_native_vlan_and_trunk_groups + type: switched + native_vlan: 4092 + native_vlan_tag: true + mode: trunk + trunk_groups: + - MLAG + + - name: Port-Channel14 + description: Test_phone + type: switched + mode: trunk phone + phone: + vlan: 20 + trunk: tagged + + - name: Port-Channel15 + description: Test_type_routed + type: routed + ip_address: 1.1.1.1/24 + peer: dc2-leaf2b + peer_interface: Ethernet2 diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3b.arista.com.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3b.arista.com.yml index 7b76a58b8c7..07d149c54fb 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3b.arista.com.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/inventory/host_vars/dc2-leaf3b.arista.com.yml @@ -1,28 +1,29 @@ --- # Custom interface structured_config with shutdown key missing to make sure the defaults are handled properly +# keeping test for deprecated data-models (type, mode, vlans, native_vlan) to ensure that validate_state can still generate the tests for them. custom_structured_configuration_ethernet_interfaces: - - name: Ethernet11 - peer: dc2-leaf3-fw1 - peer_interface: e1 - peer_type: firewall - description: dc2-leaf3-fw1_e1 - # shutdown: false - type: port-channel-member - channel_group: - id: 11 - mode: active + - name: Ethernet11 + peer: dc2-leaf3-fw1 + peer_interface: e1 + peer_type: firewall + description: dc2-leaf3-fw1_e1 + # shutdown: false + type: port-channel-member + channel_group: + id: 11 + mode: active custom_structured_configuration_port_channel_interfaces: - - name: Port-Channel11 - description: dc2-leaf3-fw1_PortChannel - type: switched - # shutdown: false - mode: trunk - vlans: 11-12,21-22 - native_vlan: 4092 - spanning_tree_portfast: edge - mlag: 11 + - name: Port-Channel11 + description: dc2-leaf3-fw1_PortChannel + # shutdown: false + type: switched + mode: trunk + vlans: 11-12,21-22 + native_vlan: 4092 + spanning_tree_portfast: edge + mlag: 11 custom_structured_configuration_interface_defaults: - ethernet: - shutdown: True + ethernet: + shutdown: True diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/molecule.yml b/ansible_collections/arista/avd/molecule/eos_validate_state/molecule.yml index 889b38ba522..6dc483c5e8f 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/molecule.yml +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/molecule.yml @@ -30,7 +30,6 @@ provisioner: group_vars: 'inventory/group_vars/' host_vars: 'inventory/host_vars/' ansible_args: - - --skip-tags=documentation - --check verifier: name: ansible diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.csv b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.csv index 5edc1dfe7bc..1d71f513fd8 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.csv +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.csv @@ -61,28 +61,28 @@ id,dut,categories,test,description,inputs,result,messages 60,dc1-leaf1a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 61,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet1 = 'up',NOT RUN, 62,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet1 = 'up',NOT RUN, -63,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc1-leaf1b_Ethernet3 = 'up',NOT RUN, -64,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc1-leaf1b_Ethernet4 = 'up',NOT RUN, -65,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc1-leaf1-server1_PCI1 = 'up',NOT RUN, +63,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc1-leaf1b_Ethernet3 = 'up',NOT RUN, +64,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc1-leaf1b_Ethernet4 = 'up',NOT RUN, +65,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI1 = 'up',NOT RUN, 66,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC1-WAN1_Ethernet1 = 'up',NOT RUN, 67,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet7 - P2P_LINK_TO_DC1-WAN2_Ethernet1 = 'up',NOT RUN, 68,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC1-LEAF1C_Ethernet1 = 'up',NOT RUN, -69,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -70,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, +69,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +70,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, 71,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, 72,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -73,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc1-leaf1b_Po3 = 'up',NOT RUN, -74,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up',NOT RUN, +73,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc1-leaf1b_Port-Channel3 = 'up',NOT RUN, +74,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up',NOT RUN, 75,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC1-LEAF1C_Po1 = 'up',NOT RUN, 76,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, 77,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, 78,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, 79,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -80,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -81,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, +80,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +81,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, 82,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4085 - Inband Management = 'up',NOT RUN, -83,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -84,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, +83,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +84,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, 85,dc1-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, 86,dc1-leaf1a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, 87,dc1-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, @@ -220,28 +220,28 @@ id,dut,categories,test,description,inputs,result,messages 219,dc1-leaf1b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 220,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet2 = 'up',NOT RUN, 221,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet2 = 'up',NOT RUN, -222,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc1-leaf1a_Ethernet3 = 'up',NOT RUN, -223,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc1-leaf1a_Ethernet4 = 'up',NOT RUN, -224,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc1-leaf1-server1_PCI2 = 'up',NOT RUN, +222,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc1-leaf1a_Ethernet3 = 'up',NOT RUN, +223,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc1-leaf1a_Ethernet4 = 'up',NOT RUN, +224,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI2 = 'up',NOT RUN, 225,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC1-WAN1_Ethernet2 = 'up',NOT RUN, 226,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet7 - P2P_LINK_TO_DC1-WAN2_Ethernet2 = 'up',NOT RUN, 227,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC1-LEAF1C_Ethernet2 = 'up',NOT RUN, -228,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -229,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, +228,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +229,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, 230,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, 231,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -232,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc1-leaf1a_Po3 = 'up',NOT RUN, -233,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up',NOT RUN, +232,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc1-leaf1a_Port-Channel3 = 'up',NOT RUN, +233,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up',NOT RUN, 234,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC1-LEAF1C_Po1 = 'up',NOT RUN, 235,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, 236,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, 237,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, 238,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -239,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -240,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, +239,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +240,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, 241,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4085 - Inband Management = 'up',NOT RUN, -242,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -243,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, +242,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +243,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, 244,dc1-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, 245,dc1-leaf1b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, 246,dc1-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, @@ -355,7 +355,7 @@ id,dut,categories,test,description,inputs,result,messages 354,dc1-leaf1c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 355,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC1-LEAF1A_Ethernet8 = 'up',NOT RUN, 356,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC1-LEAF1B_Ethernet8 = 'up',NOT RUN, -357,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc1-leaf1-server1_iLO = 'up',NOT RUN, +357,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc1-leaf1-server1_iLO = 'up',NOT RUN, 358,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC1_L3_LEAF1_Po8 = 'up',NOT RUN, 359,dc1-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4085 - L2LEAF_INBAND_MGMT = 'up',NOT RUN, 360,dc1-leaf1c,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, @@ -456,27 +456,27 @@ id,dut,categories,test,description,inputs,result,messages 455,dc1-leaf2a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 456,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet3 = 'up',NOT RUN, 457,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet3 = 'up',NOT RUN, -458,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc1-leaf2b_Ethernet3 = 'up',NOT RUN, -459,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc1-leaf2b_Ethernet4 = 'up',NOT RUN, -460,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc1-leaf2-server1_PCI1 = 'up',NOT RUN, +458,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc1-leaf2b_Ethernet3 = 'up',NOT RUN, +459,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc1-leaf2b_Ethernet4 = 'up',NOT RUN, +460,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc1-leaf2-server1_PCI1 = 'up',NOT RUN, 461,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_dc2-leaf2a_Ethernet6 = 'up',NOT RUN, 462,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC1-LEAF2C_Ethernet1 = 'up',NOT RUN, -463,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -464,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, +463,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +464,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, 465,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, 466,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -467,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc1-leaf2b_Po3 = 'up',NOT RUN, -468,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up',NOT RUN, +467,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc1-leaf2b_Port-Channel3 = 'up',NOT RUN, +468,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - SERVER_dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up',NOT RUN, 469,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC1-LEAF2C_Po1 = 'up',NOT RUN, 470,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, 471,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, 472,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, 473,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -474,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -475,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, +474,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +475,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, 476,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4085 - Inband Management = 'up',NOT RUN, -477,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -478,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, +477,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +478,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, 479,dc1-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, 480,dc1-leaf2a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, 481,dc1-leaf2a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, @@ -592,7 +592,7 @@ id,dut,categories,test,description,inputs,result,messages 591,dc1-leaf2c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 592,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC1-LEAF2A_Ethernet8 = 'up',NOT RUN, 593,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC1-LEAF2B_Ethernet8 = 'adminDown',NOT RUN, -594,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc1-leaf2-server1_iLO = 'up',NOT RUN, +594,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc1-leaf2-server1_iLO = 'up',NOT RUN, 595,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC1_L3_LEAF2_Po8 = 'up',NOT RUN, 596,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4085 - L2LEAF_INBAND_MGMT = 'up',NOT RUN, 597,dc1-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, @@ -720,7 +720,7 @@ id,dut,categories,test,description,inputs,result,messages 719,dc1-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC1-LEAF2B_Ethernet1 = 'adminDown',NOT RUN, 720,dc1-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet1 = 'up',NOT RUN, 721,dc1-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet1 = 'up',NOT RUN, -722,dc1-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, +722,dc1-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, 723,dc1-spine1,Interfaces,VerifyInterfaceUtilization,Verifies that the utilization of interfaces is below a certain threshold.,,NOT RUN, 724,dc1-spine1,Interfaces,VerifyIPProxyARP,Verifies if Proxy ARP is enabled.,,NOT RUN, 725,dc1-spine1,Interfaces,VerifyL2MTU,Verifies the global L2 MTU of all L2 interfaces.,,NOT RUN, @@ -836,7 +836,7 @@ id,dut,categories,test,description,inputs,result,messages 835,dc1-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC1-LEAF2B_Ethernet2 = 'adminDown',NOT RUN, 836,dc1-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet2 = 'up',NOT RUN, 837,dc1-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet2 = 'up',NOT RUN, -838,dc1-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, +838,dc1-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, 839,dc1-spine2,Interfaces,VerifyInterfaceUtilization,Verifies that the utilization of interfaces is below a certain threshold.,,NOT RUN, 840,dc1-spine2,Interfaces,VerifyIPProxyARP,Verifies if Proxy ARP is enabled.,,NOT RUN, 841,dc1-spine2,Interfaces,VerifyL2MTU,Verifies the global L2 MTU of all L2 interfaces.,,NOT RUN, @@ -947,13 +947,13 @@ id,dut,categories,test,description,inputs,result,messages 946,dc1-svc-leaf1a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 947,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet5 = 'up',NOT RUN, 948,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet5 = 'up',NOT RUN, -949,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1b_Ethernet3 = 'up',NOT RUN, -950,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1b_Ethernet4 = 'up',NOT RUN, -951,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -952,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -953,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1b_Po3 = 'up',NOT RUN, -954,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -955,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, +949,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc1-svc-leaf1b_Ethernet3 = 'up',NOT RUN, +950,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc1-svc-leaf1b_Ethernet4 = 'up',NOT RUN, +951,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +952,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +953,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc1-svc-leaf1b_Port-Channel3 = 'up',NOT RUN, +954,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +955,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, 956,dc1-svc-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, 957,dc1-svc-leaf1a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, 958,dc1-svc-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, @@ -1076,13 +1076,13 @@ id,dut,categories,test,description,inputs,result,messages 1075,dc1-svc-leaf1b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, 1076,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet6 = 'up',NOT RUN, 1077,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet6 = 'up',NOT RUN, -1078,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1a_Ethernet3 = 'up',NOT RUN, -1079,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1a_Ethernet4 = 'up',NOT RUN, -1080,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -1081,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -1082,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1a_Po3 = 'up',NOT RUN, -1083,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -1084,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, +1078,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc1-svc-leaf1a_Ethernet3 = 'up',NOT RUN, +1079,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc1-svc-leaf1a_Ethernet4 = 'up',NOT RUN, +1080,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1081,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +1082,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc1-svc-leaf1a_Port-Channel3 = 'up',NOT RUN, +1083,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +1084,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, 1085,dc1-svc-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, 1086,dc1-svc-leaf1b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, 1087,dc1-svc-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, @@ -1173,1481 +1173,1495 @@ id,dut,categories,test,description,inputs,result,messages 1172,dc1-wan1,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, 1173,dc1-wan1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc1-leaf1a Ethernet6,NOT RUN, 1174,dc1-wan1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc1-leaf1b Ethernet6,NOT RUN, -1175,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.1) - Destination: dc1-leaf1a Ethernet6 (IP: 10.255.255.0),NOT RUN, -1176,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.3) - Destination: dc1-leaf1b Ethernet6 (IP: 10.255.255.2),NOT RUN, -1177,dc1-wan1,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1178,dc1-wan1,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1179,dc1-wan1,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1180,dc1-wan1,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1181,dc1-wan1,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1182,dc1-wan1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1183,dc1-wan1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1184,dc1-wan1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1185,dc1-wan1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1186,dc1-wan1,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1187,dc1-wan1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1188,dc1-wan1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1189,dc1-wan1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1190,dc1-wan1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1191,dc1-wan1,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1192,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Dps1 - DPS Interface = 'up',NOT RUN, -1193,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet6 = 'up',NOT RUN, -1194,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet6 = 'up',NOT RUN, -1195,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - mpls-sp-1_DC1-MPLS-3 = 'up',NOT RUN, -1196,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - isp-1_DC1-INET-3 = 'up',NOT RUN, -1197,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - Router_ID = 'up',NOT RUN, -1198,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1199,dc1-wan1,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1200,dc1-wan1,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1201,dc1-wan1,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1202,dc1-wan1,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1203,dc1-wan1,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1204,dc1-wan1,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1205,dc1-wan1,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -1206,dc1-wan1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1207,dc1-wan1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1208,dc1-wan1,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1209,dc1-wan1,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1210,dc1-wan1,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1211,dc1-wan1,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1212,dc1-wan1,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1213,dc1-wan1,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1214,dc1-wan1,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1215,dc1-wan1,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1216,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1217,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.1.2 VRF: default,NOT RUN, -1218,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.10 VRF: default,NOT RUN, -1219,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.20 VRF: default,NOT RUN, -1220,dc1-wan1,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1221,dc1-wan1,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1222,dc1-wan1,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1223,dc1-wan1,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1224,dc1-wan1,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1225,dc1-wan1,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1226,dc1-wan1,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1227,dc1-wan1,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1228,dc1-wan1,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1229,dc1-wan1,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1230,dc1-wan1,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1231,dc1-wan1,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1232,dc1-wan1,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1233,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1234,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 100.64.3.2 Source Port: 4500,NOT RUN, -1235,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 172.18.3.2 Source Port: 4500,NOT RUN, -1236,dc1-wan1,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1237,dc1-wan1,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1238,dc1-wan1,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1239,dc1-wan1,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1240,dc1-wan1,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1241,dc1-wan1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1242,dc1-wan1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1243,dc1-wan1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1244,dc1-wan1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1245,dc1-wan1,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1246,dc1-wan1,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1247,dc1-wan2,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1248,dc1-wan2,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1249,dc1-wan2,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1250,dc1-wan2,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1251,dc1-wan2,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1252,dc1-wan2,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1253,dc1-wan2,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1254,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, -1255,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, -1256,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-wan1 (IP: 10.255.1.1),NOT RUN, -1257,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 SR-TE Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, -1258,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 SR-TE Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, -1259,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf1a (IP: 10.255.255.4),NOT RUN, -1260,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf1b (IP: 10.255.255.6),NOT RUN, -1261,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Link-State Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, -1262,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Link-State Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, -1263,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Path-Selection Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, -1264,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Path-Selection Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, -1265,dc1-wan2,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1266,dc1-wan2,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1267,dc1-wan2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc1-leaf1a Ethernet7,NOT RUN, -1268,dc1-wan2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc1-leaf1b Ethernet7,NOT RUN, -1269,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.5) - Destination: dc1-leaf1a Ethernet7 (IP: 10.255.255.4),NOT RUN, -1270,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.7) - Destination: dc1-leaf1b Ethernet7 (IP: 10.255.255.6),NOT RUN, -1271,dc1-wan2,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1272,dc1-wan2,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1273,dc1-wan2,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1274,dc1-wan2,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1275,dc1-wan2,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1276,dc1-wan2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1277,dc1-wan2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1278,dc1-wan2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1279,dc1-wan2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1280,dc1-wan2,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1281,dc1-wan2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1282,dc1-wan2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1283,dc1-wan2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1284,dc1-wan2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1285,dc1-wan2,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1286,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Dps1 - DPS Interface = 'up',NOT RUN, -1287,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet7 = 'up',NOT RUN, -1288,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet7 = 'up',NOT RUN, -1289,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - mpls-sp-1_DC1-MPLS-4 = 'up',NOT RUN, -1290,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - isp-1_DC1-INET-4 = 'up',NOT RUN, -1291,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - Router_ID = 'up',NOT RUN, -1292,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1293,dc1-wan2,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1294,dc1-wan2,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1295,dc1-wan2,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1296,dc1-wan2,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1297,dc1-wan2,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1298,dc1-wan2,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1299,dc1-wan2,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -1300,dc1-wan2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1301,dc1-wan2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1302,dc1-wan2,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1303,dc1-wan2,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1304,dc1-wan2,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1305,dc1-wan2,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1306,dc1-wan2,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1307,dc1-wan2,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1308,dc1-wan2,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1309,dc1-wan2,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1310,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1311,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.1.1 VRF: default,NOT RUN, -1312,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.10 VRF: default,NOT RUN, -1313,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.20 VRF: default,NOT RUN, -1314,dc1-wan2,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1315,dc1-wan2,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1316,dc1-wan2,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1317,dc1-wan2,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1318,dc1-wan2,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1319,dc1-wan2,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1320,dc1-wan2,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1321,dc1-wan2,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1322,dc1-wan2,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1323,dc1-wan2,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1324,dc1-wan2,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1325,dc1-wan2,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1326,dc1-wan2,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1327,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1328,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 100.64.4.2 Source Port: 4500,NOT RUN, -1329,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 172.18.4.2 Source Port: 4500,NOT RUN, -1330,dc1-wan2,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1331,dc1-wan2,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1332,dc1-wan2,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1333,dc1-wan2,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1334,dc1-wan2,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1335,dc1-wan2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1336,dc1-wan2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1337,dc1-wan2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1338,dc1-wan2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1339,dc1-wan2,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1340,dc1-wan2,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1341,dc2-leaf1a,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1342,dc2-leaf1a,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1343,dc2-leaf1a,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1344,dc2-leaf1a,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1345,dc2-leaf1a,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1346,dc2-leaf1a,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1347,dc2-leaf1a,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1348,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -1349,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -1350,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.129.117),NOT RUN, -1351,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.104),NOT RUN, -1352,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.106),NOT RUN, -1353,dc2-leaf1a,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1354,dc2-leaf1a,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1355,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet1,NOT RUN, -1356,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet1,NOT RUN, -1357,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf1b Ethernet3,NOT RUN, -1358,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf1b Ethernet4,NOT RUN, -1359,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf1c Ethernet1,NOT RUN, -1360,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -1361,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -1362,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -1363,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -1364,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -1365,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -1366,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -1367,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -1368,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -1369,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -1370,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -1371,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -1372,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -1373,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -1374,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -1375,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -1376,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -1377,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.105) - Destination: dc2-spine1 Ethernet1 (IP: 10.255.255.104),NOT RUN, -1378,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.107) - Destination: dc2-spine2 Ethernet1 (IP: 10.255.255.106),NOT RUN, -1379,dc2-leaf1a,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1380,dc2-leaf1a,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1381,dc2-leaf1a,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1382,dc2-leaf1a,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1383,dc2-leaf1a,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1384,dc2-leaf1a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1385,dc2-leaf1a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1386,dc2-leaf1a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1387,dc2-leaf1a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1388,dc2-leaf1a,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1389,dc2-leaf1a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1390,dc2-leaf1a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1391,dc2-leaf1a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1392,dc2-leaf1a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1393,dc2-leaf1a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1394,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet1 = 'up',NOT RUN, -1395,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet1 = 'up',NOT RUN, -1396,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf1b_Ethernet3 = 'up',NOT RUN, -1397,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf1b_Ethernet4 = 'up',NOT RUN, -1398,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf1-server1_PCI1 = 'up',NOT RUN, -1399,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF1C_Ethernet1 = 'up',NOT RUN, -1400,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -1401,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -1402,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1403,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1404,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf1b_Po3 = 'up',NOT RUN, -1405,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up',NOT RUN, -1406,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up',NOT RUN, -1407,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -1408,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -1409,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -1410,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -1411,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -1412,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -1413,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -1414,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -1415,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1416,dc2-leaf1a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1417,dc2-leaf1a,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -1418,dc2-leaf1a,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -1419,dc2-leaf1a,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -1420,dc2-leaf1a,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -1421,dc2-leaf1a,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -1422,dc2-leaf1a,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -1423,dc2-leaf1a,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -1424,dc2-leaf1a,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -1425,dc2-leaf1a,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -1426,dc2-leaf1a,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -1427,dc2-leaf1a,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -1428,dc2-leaf1a,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -1429,dc2-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1430,dc2-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1431,dc2-leaf1a,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -1432,dc2-leaf1a,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -1433,dc2-leaf1a,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1434,dc2-leaf1a,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1435,dc2-leaf1a,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1436,dc2-leaf1a,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1437,dc2-leaf1a,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1438,dc2-leaf1a,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -1439,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -1440,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -1441,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -1442,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -1443,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -1444,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -1445,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -1446,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -1447,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -1448,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -1449,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -1450,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -1451,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -1452,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1453,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -1454,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -1455,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -1456,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1457,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -1458,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -1459,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1460,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -1461,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1462,dc2-leaf1a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1463,dc2-leaf1a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1464,dc2-leaf1a,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1465,dc2-leaf1a,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1466,dc2-leaf1a,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1467,dc2-leaf1a,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1468,dc2-leaf1a,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1469,dc2-leaf1a,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1470,dc2-leaf1a,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1471,dc2-leaf1a,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1472,dc2-leaf1a,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1473,dc2-leaf1a,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1474,dc2-leaf1a,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1475,dc2-leaf1a,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1476,dc2-leaf1a,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1477,dc2-leaf1a,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1478,dc2-leaf1a,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1479,dc2-leaf1a,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1480,dc2-leaf1a,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1481,dc2-leaf1a,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1482,dc2-leaf1a,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1483,dc2-leaf1a,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1484,dc2-leaf1a,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1485,dc2-leaf1a,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1486,dc2-leaf1a,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -1487,dc2-leaf1a,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -1488,dc2-leaf1a,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -1489,dc2-leaf1a,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -1490,dc2-leaf1a,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -1491,dc2-leaf1a,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1492,dc2-leaf1a,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1493,dc2-leaf1a,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1494,dc2-leaf1a,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1495,dc2-leaf1a,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1496,dc2-leaf1a,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1497,dc2-leaf1a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1498,dc2-leaf1a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1499,dc2-leaf1a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1500,dc2-leaf1a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1501,dc2-leaf1a,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1502,dc2-leaf1a,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1503,dc2-leaf1b,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1504,dc2-leaf1b,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1505,dc2-leaf1b,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1506,dc2-leaf1b,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1507,dc2-leaf1b,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1508,dc2-leaf1b,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1509,dc2-leaf1b,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1510,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -1511,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -1512,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.129.116),NOT RUN, -1513,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.108),NOT RUN, -1514,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.110),NOT RUN, -1515,dc2-leaf1b,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1516,dc2-leaf1b,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1517,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet2,NOT RUN, -1518,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet2,NOT RUN, -1519,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf1a Ethernet3,NOT RUN, -1520,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf1a Ethernet4,NOT RUN, -1521,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf1c Ethernet2,NOT RUN, -1522,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -1523,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -1524,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -1525,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -1526,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -1527,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -1528,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -1529,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -1530,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -1531,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -1532,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -1533,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -1534,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -1535,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -1536,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -1537,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -1538,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -1539,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.109) - Destination: dc2-spine1 Ethernet2 (IP: 10.255.255.108),NOT RUN, -1540,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.111) - Destination: dc2-spine2 Ethernet2 (IP: 10.255.255.110),NOT RUN, -1541,dc2-leaf1b,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1542,dc2-leaf1b,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1543,dc2-leaf1b,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1544,dc2-leaf1b,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1545,dc2-leaf1b,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1546,dc2-leaf1b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1547,dc2-leaf1b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1548,dc2-leaf1b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1549,dc2-leaf1b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1550,dc2-leaf1b,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1551,dc2-leaf1b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1552,dc2-leaf1b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1553,dc2-leaf1b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1554,dc2-leaf1b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1555,dc2-leaf1b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1556,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet2 = 'up',NOT RUN, -1557,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet2 = 'up',NOT RUN, -1558,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf1a_Ethernet3 = 'up',NOT RUN, -1559,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf1a_Ethernet4 = 'up',NOT RUN, -1560,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf1-server1_PCI2 = 'up',NOT RUN, -1561,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF1C_Ethernet2 = 'up',NOT RUN, -1562,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -1563,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -1564,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1565,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1566,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf1a_Po3 = 'up',NOT RUN, -1567,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up',NOT RUN, -1568,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up',NOT RUN, -1569,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -1570,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -1571,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -1572,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -1573,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -1574,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -1575,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -1576,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -1577,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1578,dc2-leaf1b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1579,dc2-leaf1b,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -1580,dc2-leaf1b,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -1581,dc2-leaf1b,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -1582,dc2-leaf1b,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -1583,dc2-leaf1b,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -1584,dc2-leaf1b,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -1585,dc2-leaf1b,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -1586,dc2-leaf1b,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -1587,dc2-leaf1b,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -1588,dc2-leaf1b,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -1589,dc2-leaf1b,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -1590,dc2-leaf1b,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -1591,dc2-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1592,dc2-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1593,dc2-leaf1b,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -1594,dc2-leaf1b,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -1595,dc2-leaf1b,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1596,dc2-leaf1b,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1597,dc2-leaf1b,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1598,dc2-leaf1b,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1599,dc2-leaf1b,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1600,dc2-leaf1b,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -1601,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -1602,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -1603,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -1604,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -1605,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -1606,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -1607,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -1608,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -1609,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -1610,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -1611,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -1612,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -1613,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -1614,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1615,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -1616,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -1617,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -1618,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1619,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -1620,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -1621,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1622,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -1623,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1624,dc2-leaf1b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1625,dc2-leaf1b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1626,dc2-leaf1b,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1627,dc2-leaf1b,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1628,dc2-leaf1b,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1629,dc2-leaf1b,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1630,dc2-leaf1b,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1631,dc2-leaf1b,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1632,dc2-leaf1b,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1633,dc2-leaf1b,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1634,dc2-leaf1b,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1635,dc2-leaf1b,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1636,dc2-leaf1b,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1637,dc2-leaf1b,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1638,dc2-leaf1b,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1639,dc2-leaf1b,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1640,dc2-leaf1b,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1641,dc2-leaf1b,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1642,dc2-leaf1b,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1643,dc2-leaf1b,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1644,dc2-leaf1b,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1645,dc2-leaf1b,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1646,dc2-leaf1b,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1647,dc2-leaf1b,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1648,dc2-leaf1b,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -1649,dc2-leaf1b,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -1650,dc2-leaf1b,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -1651,dc2-leaf1b,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -1652,dc2-leaf1b,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -1653,dc2-leaf1b,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1654,dc2-leaf1b,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1655,dc2-leaf1b,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1656,dc2-leaf1b,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1657,dc2-leaf1b,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1658,dc2-leaf1b,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1659,dc2-leaf1b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1660,dc2-leaf1b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1661,dc2-leaf1b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1662,dc2-leaf1b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1663,dc2-leaf1b,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1664,dc2-leaf1b,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1665,dc2-leaf1c,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1666,dc2-leaf1c,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1667,dc2-leaf1c,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1668,dc2-leaf1c,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1669,dc2-leaf1c,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1670,dc2-leaf1c,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1671,dc2-leaf1c,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1672,dc2-leaf1c,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1673,dc2-leaf1c,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1674,dc2-leaf1c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet8,NOT RUN, -1675,dc2-leaf1c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet8,NOT RUN, -1676,dc2-leaf1c,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1677,dc2-leaf1c,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1678,dc2-leaf1c,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1679,dc2-leaf1c,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1680,dc2-leaf1c,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1681,dc2-leaf1c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1682,dc2-leaf1c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1683,dc2-leaf1c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1684,dc2-leaf1c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1685,dc2-leaf1c,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1686,dc2-leaf1c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1687,dc2-leaf1c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1688,dc2-leaf1c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1689,dc2-leaf1c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1690,dc2-leaf1c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1691,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC2-LEAF1A_Ethernet8 = 'up',NOT RUN, -1692,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC2-LEAF1B_Ethernet8 = 'up',NOT RUN, -1693,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf1-server1_iLO = 'up',NOT RUN, -1694,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC2_L3_LEAF1_Po8 = 'up',NOT RUN, -1695,dc2-leaf1c,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1696,dc2-leaf1c,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1697,dc2-leaf1c,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1698,dc2-leaf1c,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1699,dc2-leaf1c,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1700,dc2-leaf1c,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1701,dc2-leaf1c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1702,dc2-leaf1c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1703,dc2-leaf1c,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1704,dc2-leaf1c,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1705,dc2-leaf1c,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1706,dc2-leaf1c,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1707,dc2-leaf1c,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1708,dc2-leaf1c,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1709,dc2-leaf1c,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1710,dc2-leaf1c,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1711,dc2-leaf1c,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1712,dc2-leaf1c,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1713,dc2-leaf1c,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1714,dc2-leaf1c,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1715,dc2-leaf1c,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1716,dc2-leaf1c,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1717,dc2-leaf1c,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1718,dc2-leaf1c,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1719,dc2-leaf1c,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1720,dc2-leaf1c,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1721,dc2-leaf1c,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1722,dc2-leaf1c,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1723,dc2-leaf1c,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1724,dc2-leaf1c,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1725,dc2-leaf1c,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1726,dc2-leaf1c,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1727,dc2-leaf1c,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1728,dc2-leaf1c,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1729,dc2-leaf1c,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1730,dc2-leaf1c,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1731,dc2-leaf1c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1732,dc2-leaf1c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1733,dc2-leaf1c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1734,dc2-leaf1c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1735,dc2-leaf1c,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1736,dc2-leaf1c,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1737,dc2-leaf2a,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1738,dc2-leaf2a,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1739,dc2-leaf2a,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1740,dc2-leaf2a,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1741,dc2-leaf2a,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1742,dc2-leaf2a,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1743,dc2-leaf2a,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1744,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf2a (IP: 10.255.0.5),NOT RUN, -1745,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -1746,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -1747,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf2a (IP: 192.168.100.0),NOT RUN, -1748,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.129.121),NOT RUN, -1749,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.112),NOT RUN, -1750,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.114),NOT RUN, -1751,dc2-leaf2a,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1752,dc2-leaf2a,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1753,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet3,NOT RUN, -1754,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet3,NOT RUN, -1755,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2b Ethernet3,NOT RUN, -1756,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet4,NOT RUN, -1757,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc1-leaf2a Ethernet6,NOT RUN, -1758,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf2c Ethernet1,NOT RUN, -1759,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -1760,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -1761,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -1762,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -1763,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -1764,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -1765,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -1766,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -1767,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -1768,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -1769,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -1770,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -1771,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -1772,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -1773,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -1774,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -1775,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -1776,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.113) - Destination: dc2-spine1 Ethernet3 (IP: 10.255.255.112),NOT RUN, -1777,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.115) - Destination: dc2-spine2 Ethernet3 (IP: 10.255.255.114),NOT RUN, -1778,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 192.168.100.1) - Destination: dc1-leaf2a Ethernet6 (IP: 192.168.100.0),NOT RUN, -1779,dc2-leaf2a,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1780,dc2-leaf2a,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1781,dc2-leaf2a,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1782,dc2-leaf2a,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1783,dc2-leaf2a,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1784,dc2-leaf2a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1785,dc2-leaf2a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1786,dc2-leaf2a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1787,dc2-leaf2a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1788,dc2-leaf2a,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1789,dc2-leaf2a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1790,dc2-leaf2a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1791,dc2-leaf2a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1792,dc2-leaf2a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1793,dc2-leaf2a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1794,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet3 = 'up',NOT RUN, -1795,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet3 = 'up',NOT RUN, -1796,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf2b_Ethernet3 = 'up',NOT RUN, -1797,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf2b_Ethernet4 = 'up',NOT RUN, -1798,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf2-server1_PCI1 = 'up',NOT RUN, -1799,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2a_Ethernet6 = 'up',NOT RUN, -1800,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF2C_Ethernet1 = 'up',NOT RUN, -1801,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -1802,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -1803,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1804,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1805,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf2b_Po3 = 'up',NOT RUN, -1806,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up',NOT RUN, -1807,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up',NOT RUN, -1808,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -1809,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -1810,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -1811,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -1812,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -1813,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -1814,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -1815,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -1816,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1817,dc2-leaf2a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1818,dc2-leaf2a,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -1819,dc2-leaf2a,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -1820,dc2-leaf2a,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -1821,dc2-leaf2a,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -1822,dc2-leaf2a,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -1823,dc2-leaf2a,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -1824,dc2-leaf2a,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -1825,dc2-leaf2a,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -1826,dc2-leaf2a,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -1827,dc2-leaf2a,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -1828,dc2-leaf2a,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -1829,dc2-leaf2a,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -1830,dc2-leaf2a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1831,dc2-leaf2a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1832,dc2-leaf2a,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -1833,dc2-leaf2a,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -1834,dc2-leaf2a,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1835,dc2-leaf2a,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1836,dc2-leaf2a,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -1837,dc2-leaf2a,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -1838,dc2-leaf2a,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -1839,dc2-leaf2a,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -1840,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -1841,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -1842,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -1843,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -1844,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -1845,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -1846,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -1847,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -1848,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -1849,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -1850,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -1851,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -1852,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -1853,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1854,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -1855,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -1856,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -1857,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -1858,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -1859,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -1860,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1861,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -1862,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -1863,dc2-leaf2a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -1864,dc2-leaf2a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -1865,dc2-leaf2a,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -1866,dc2-leaf2a,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -1867,dc2-leaf2a,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -1868,dc2-leaf2a,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -1869,dc2-leaf2a,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -1870,dc2-leaf2a,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -1871,dc2-leaf2a,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -1872,dc2-leaf2a,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -1873,dc2-leaf2a,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -1874,dc2-leaf2a,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -1875,dc2-leaf2a,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -1876,dc2-leaf2a,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -1877,dc2-leaf2a,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -1878,dc2-leaf2a,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -1879,dc2-leaf2a,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -1880,dc2-leaf2a,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -1881,dc2-leaf2a,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -1882,dc2-leaf2a,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -1883,dc2-leaf2a,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -1884,dc2-leaf2a,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -1885,dc2-leaf2a,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -1886,dc2-leaf2a,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -1887,dc2-leaf2a,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -1888,dc2-leaf2a,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -1889,dc2-leaf2a,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -1890,dc2-leaf2a,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -1891,dc2-leaf2a,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -1892,dc2-leaf2a,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -1893,dc2-leaf2a,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -1894,dc2-leaf2a,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -1895,dc2-leaf2a,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -1896,dc2-leaf2a,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -1897,dc2-leaf2a,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -1898,dc2-leaf2a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1899,dc2-leaf2a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -1900,dc2-leaf2a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1901,dc2-leaf2a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -1902,dc2-leaf2a,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -1903,dc2-leaf2a,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -1904,dc2-leaf2b,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1905,dc2-leaf2b,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -1906,dc2-leaf2b,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -1907,dc2-leaf2b,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -1908,dc2-leaf2b,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -1909,dc2-leaf2b,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -1910,dc2-leaf2b,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -1911,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -1912,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -1913,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.129.120),NOT RUN, -1914,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.116),NOT RUN, -1915,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.118),NOT RUN, -1916,dc2-leaf2b,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -1917,dc2-leaf2b,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -1918,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet4,NOT RUN, -1919,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet4,NOT RUN, -1920,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet3,NOT RUN, -1921,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2a Ethernet4,NOT RUN, -1922,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf2c Ethernet2,NOT RUN, -1923,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -1924,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -1925,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -1926,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -1927,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -1928,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -1929,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -1930,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -1931,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -1932,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -1933,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -1934,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -1935,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -1936,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -1937,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -1938,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -1939,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -1940,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.117) - Destination: dc2-spine1 Ethernet4 (IP: 10.255.255.116),NOT RUN, -1941,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.119) - Destination: dc2-spine2 Ethernet4 (IP: 10.255.255.118),NOT RUN, -1942,dc2-leaf2b,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -1943,dc2-leaf2b,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -1944,dc2-leaf2b,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -1945,dc2-leaf2b,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -1946,dc2-leaf2b,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -1947,dc2-leaf2b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -1948,dc2-leaf2b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -1949,dc2-leaf2b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -1950,dc2-leaf2b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -1951,dc2-leaf2b,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -1952,dc2-leaf2b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1953,dc2-leaf2b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -1954,dc2-leaf2b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -1955,dc2-leaf2b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -1956,dc2-leaf2b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -1957,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet4 = 'up',NOT RUN, -1958,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet4 = 'up',NOT RUN, -1959,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf2a_Ethernet3 = 'up',NOT RUN, -1960,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf2a_Ethernet4 = 'up',NOT RUN, -1961,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf2-server1_PCI2 = 'up',NOT RUN, -1962,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2b_Ethernet6 = 'up',NOT RUN, -1963,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF2C_Ethernet2 = 'up',NOT RUN, -1964,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -1965,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -1966,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1967,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -1968,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf2a_Po3 = 'up',NOT RUN, -1969,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up',NOT RUN, -1970,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up',NOT RUN, -1971,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -1972,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -1973,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -1974,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -1975,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -1976,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -1977,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -1978,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -1979,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -1980,dc2-leaf2b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -1981,dc2-leaf2b,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -1982,dc2-leaf2b,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -1983,dc2-leaf2b,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -1984,dc2-leaf2b,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -1985,dc2-leaf2b,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -1986,dc2-leaf2b,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -1987,dc2-leaf2b,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -1988,dc2-leaf2b,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -1989,dc2-leaf2b,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -1990,dc2-leaf2b,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -1991,dc2-leaf2b,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -1992,dc2-leaf2b,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -1993,dc2-leaf2b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1994,dc2-leaf2b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -1995,dc2-leaf2b,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -1996,dc2-leaf2b,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -1997,dc2-leaf2b,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -1998,dc2-leaf2b,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -1999,dc2-leaf2b,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2000,dc2-leaf2b,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2001,dc2-leaf2b,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2002,dc2-leaf2b,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -2003,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -2004,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -2005,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -2006,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -2007,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -2008,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -2009,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -2010,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -2011,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -2012,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -2013,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -2014,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -2015,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -2016,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2017,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -2018,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -2019,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -2020,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2021,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -2022,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -2023,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2024,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -2025,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2026,dc2-leaf2b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2027,dc2-leaf2b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2028,dc2-leaf2b,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2029,dc2-leaf2b,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2030,dc2-leaf2b,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2031,dc2-leaf2b,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2032,dc2-leaf2b,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2033,dc2-leaf2b,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2034,dc2-leaf2b,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2035,dc2-leaf2b,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2036,dc2-leaf2b,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2037,dc2-leaf2b,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2038,dc2-leaf2b,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2039,dc2-leaf2b,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2040,dc2-leaf2b,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2041,dc2-leaf2b,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2042,dc2-leaf2b,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2043,dc2-leaf2b,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2044,dc2-leaf2b,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2045,dc2-leaf2b,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2046,dc2-leaf2b,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2047,dc2-leaf2b,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2048,dc2-leaf2b,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2049,dc2-leaf2b,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2050,dc2-leaf2b,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -2051,dc2-leaf2b,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -2052,dc2-leaf2b,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -2053,dc2-leaf2b,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -2054,dc2-leaf2b,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -2055,dc2-leaf2b,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2056,dc2-leaf2b,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2057,dc2-leaf2b,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2058,dc2-leaf2b,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2059,dc2-leaf2b,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2060,dc2-leaf2b,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2061,dc2-leaf2b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2062,dc2-leaf2b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2063,dc2-leaf2b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2064,dc2-leaf2b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2065,dc2-leaf2b,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2066,dc2-leaf2b,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -2067,dc2-leaf2c,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2068,dc2-leaf2c,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2069,dc2-leaf2c,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -2070,dc2-leaf2c,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -2071,dc2-leaf2c,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -2072,dc2-leaf2c,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -2073,dc2-leaf2c,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -2074,dc2-leaf2c,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -2075,dc2-leaf2c,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -2076,dc2-leaf2c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf2a Ethernet8,NOT RUN, -2077,dc2-leaf2c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf2b Ethernet8,NOT RUN, -2078,dc2-leaf2c,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -2079,dc2-leaf2c,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -2080,dc2-leaf2c,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -2081,dc2-leaf2c,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -2082,dc2-leaf2c,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -2083,dc2-leaf2c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -2084,dc2-leaf2c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -2085,dc2-leaf2c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -2086,dc2-leaf2c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -2087,dc2-leaf2c,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -2088,dc2-leaf2c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2089,dc2-leaf2c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2090,dc2-leaf2c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -2091,dc2-leaf2c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -2092,dc2-leaf2c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -2093,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC2-LEAF2A_Ethernet8 = 'up',NOT RUN, -2094,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC2-LEAF2B_Ethernet8 = 'up',NOT RUN, -2095,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - dc2-leaf2-server1_iLO = 'up',NOT RUN, -2096,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC2_L3_LEAF2_Po8 = 'up',NOT RUN, -2097,dc2-leaf2c,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -2098,dc2-leaf2c,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -2099,dc2-leaf2c,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -2100,dc2-leaf2c,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2101,dc2-leaf2c,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2102,dc2-leaf2c,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2103,dc2-leaf2c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2104,dc2-leaf2c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2105,dc2-leaf2c,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2106,dc2-leaf2c,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2107,dc2-leaf2c,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2108,dc2-leaf2c,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2109,dc2-leaf2c,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2110,dc2-leaf2c,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2111,dc2-leaf2c,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2112,dc2-leaf2c,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2113,dc2-leaf2c,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2114,dc2-leaf2c,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2115,dc2-leaf2c,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2116,dc2-leaf2c,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2117,dc2-leaf2c,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2118,dc2-leaf2c,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2119,dc2-leaf2c,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2120,dc2-leaf2c,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2121,dc2-leaf2c,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2122,dc2-leaf2c,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2123,dc2-leaf2c,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2124,dc2-leaf2c,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2125,dc2-leaf2c,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2126,dc2-leaf2c,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2127,dc2-leaf2c,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2128,dc2-leaf2c,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2129,dc2-leaf2c,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2130,dc2-leaf2c,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2131,dc2-leaf2c,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2132,dc2-leaf2c,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2133,dc2-leaf2c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2134,dc2-leaf2c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2135,dc2-leaf2c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2136,dc2-leaf2c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2137,dc2-leaf2c,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2138,dc2-leaf2c,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -2139,dc2-leaf3a.arista.com,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2140,dc2-leaf3a.arista.com,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2141,dc2-leaf3a.arista.com,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -2142,dc2-leaf3a.arista.com,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -2143,dc2-leaf3a.arista.com,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -2144,dc2-leaf3a.arista.com,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -2145,dc2-leaf3a.arista.com,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -2146,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -2147,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -2148,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.129.125),NOT RUN, -2149,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.120),NOT RUN, -2150,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.122),NOT RUN, -2151,dc2-leaf3a.arista.com,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -2152,dc2-leaf3a.arista.com,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -2153,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet5,NOT RUN, -2154,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet5,NOT RUN, -2155,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf3b.arista.com Ethernet3,NOT RUN, -2156,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf3b.arista.com Ethernet4,NOT RUN, -2157,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -2158,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -2159,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -2160,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -2161,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -2162,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -2163,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -2164,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -2165,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -2166,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -2167,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -2168,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -2169,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -2170,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -2171,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -2172,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -2173,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -2174,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.121) - Destination: dc2-spine1 Ethernet5 (IP: 10.255.255.120),NOT RUN, -2175,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.123) - Destination: dc2-spine2 Ethernet5 (IP: 10.255.255.122),NOT RUN, -2176,dc2-leaf3a.arista.com,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -2177,dc2-leaf3a.arista.com,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -2178,dc2-leaf3a.arista.com,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -2179,dc2-leaf3a.arista.com,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -2180,dc2-leaf3a.arista.com,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -2181,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -2182,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -2183,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -2184,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -2185,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -2186,dc2-leaf3a.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2187,dc2-leaf3a.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2188,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -2189,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -2190,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -2191,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet5 = 'up',NOT RUN, -2192,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up',NOT RUN, -2193,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet5 = 'up',NOT RUN, -2194,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet3 = 'up',NOT RUN, -2195,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet4 = 'up',NOT RUN, -2196,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -2197,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -2198,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -2199,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -2200,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up',NOT RUN, -2201,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf3b.arista.com_Po3 = 'up',NOT RUN, -2202,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -2203,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -2204,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -2205,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -2206,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -2207,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -2208,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -2209,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -2210,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -2211,dc2-leaf3a.arista.com,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -2212,dc2-leaf3a.arista.com,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -2213,dc2-leaf3a.arista.com,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -2214,dc2-leaf3a.arista.com,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -2215,dc2-leaf3a.arista.com,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -2216,dc2-leaf3a.arista.com,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -2217,dc2-leaf3a.arista.com,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -2218,dc2-leaf3a.arista.com,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -2219,dc2-leaf3a.arista.com,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -2220,dc2-leaf3a.arista.com,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -2221,dc2-leaf3a.arista.com,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -2222,dc2-leaf3a.arista.com,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -2223,dc2-leaf3a.arista.com,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -2224,dc2-leaf3a.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -2225,dc2-leaf3a.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -2226,dc2-leaf3a.arista.com,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -2227,dc2-leaf3a.arista.com,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -2228,dc2-leaf3a.arista.com,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -2229,dc2-leaf3a.arista.com,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -2230,dc2-leaf3a.arista.com,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2231,dc2-leaf3a.arista.com,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2232,dc2-leaf3a.arista.com,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2233,dc2-leaf3a.arista.com,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -2234,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -2235,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -2236,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -2237,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -2238,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -2239,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -2240,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -2241,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -2242,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -2243,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -2244,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -2245,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -2246,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -2247,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2248,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -2249,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -2250,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -2251,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2252,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -2253,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -2254,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2255,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -2256,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2257,dc2-leaf3a.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2258,dc2-leaf3a.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2259,dc2-leaf3a.arista.com,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2260,dc2-leaf3a.arista.com,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2261,dc2-leaf3a.arista.com,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2262,dc2-leaf3a.arista.com,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2263,dc2-leaf3a.arista.com,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2264,dc2-leaf3a.arista.com,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2265,dc2-leaf3a.arista.com,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2266,dc2-leaf3a.arista.com,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2267,dc2-leaf3a.arista.com,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2268,dc2-leaf3a.arista.com,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2269,dc2-leaf3a.arista.com,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2270,dc2-leaf3a.arista.com,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2271,dc2-leaf3a.arista.com,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2272,dc2-leaf3a.arista.com,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2273,dc2-leaf3a.arista.com,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2274,dc2-leaf3a.arista.com,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2275,dc2-leaf3a.arista.com,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2276,dc2-leaf3a.arista.com,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2277,dc2-leaf3a.arista.com,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2278,dc2-leaf3a.arista.com,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2279,dc2-leaf3a.arista.com,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2280,dc2-leaf3a.arista.com,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2281,dc2-leaf3a.arista.com,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -2282,dc2-leaf3a.arista.com,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -2283,dc2-leaf3a.arista.com,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -2284,dc2-leaf3a.arista.com,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -2285,dc2-leaf3a.arista.com,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -2286,dc2-leaf3a.arista.com,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2287,dc2-leaf3a.arista.com,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2288,dc2-leaf3a.arista.com,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2289,dc2-leaf3a.arista.com,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2290,dc2-leaf3a.arista.com,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2291,dc2-leaf3a.arista.com,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2292,dc2-leaf3a.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2293,dc2-leaf3a.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2294,dc2-leaf3a.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2295,dc2-leaf3a.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2296,dc2-leaf3a.arista.com,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2297,dc2-leaf3a.arista.com,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -2298,dc2-leaf3b.arista.com,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2299,dc2-leaf3b.arista.com,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2300,dc2-leaf3b.arista.com,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -2301,dc2-leaf3b.arista.com,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -2302,dc2-leaf3b.arista.com,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -2303,dc2-leaf3b.arista.com,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -2304,dc2-leaf3b.arista.com,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -2305,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, -2306,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, -2307,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.129.124),NOT RUN, -2308,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.124),NOT RUN, -2309,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.126),NOT RUN, -2310,dc2-leaf3b.arista.com,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -2311,dc2-leaf3b.arista.com,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -2312,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet6,NOT RUN, -2313,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet6,NOT RUN, -2314,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf3a.arista.com Ethernet3,NOT RUN, -2315,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf3a.arista.com Ethernet4,NOT RUN, -2316,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, -2317,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, -2318,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, -2319,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, -2320,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, -2321,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, -2322,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, -2323,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, -2324,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, -2325,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, -2326,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, -2327,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, -2328,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, -2329,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, -2330,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, -2331,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, -2332,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, -2333,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.125) - Destination: dc2-spine1 Ethernet6 (IP: 10.255.255.124),NOT RUN, -2334,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.127) - Destination: dc2-spine2 Ethernet6 (IP: 10.255.255.126),NOT RUN, -2335,dc2-leaf3b.arista.com,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -2336,dc2-leaf3b.arista.com,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -2337,dc2-leaf3b.arista.com,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -2338,dc2-leaf3b.arista.com,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -2339,dc2-leaf3b.arista.com,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -2340,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -2341,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -2342,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -2343,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -2344,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -2345,dc2-leaf3b.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2346,dc2-leaf3b.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2347,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -2348,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -2349,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -2350,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet6 = 'up',NOT RUN, -2351,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'adminDown',NOT RUN, -2352,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet6 = 'up',NOT RUN, -2353,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet3 = 'up',NOT RUN, -2354,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet4 = 'up',NOT RUN, -2355,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -2356,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up',NOT RUN, -2357,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, -2358,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, -2359,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up',NOT RUN, -2360,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_PEER_dc2-leaf3a.arista.com_Po3 = 'up',NOT RUN, -2361,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, -2362,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, -2363,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, -2364,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, -2365,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up',NOT RUN, -2366,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up',NOT RUN, -2367,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up',NOT RUN, -2368,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG_PEER = 'up',NOT RUN, -2369,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, -2370,dc2-leaf3b.arista.com,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -2371,dc2-leaf3b.arista.com,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, -2372,dc2-leaf3b.arista.com,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, -2373,dc2-leaf3b.arista.com,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, -2374,dc2-leaf3b.arista.com,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, -2375,dc2-leaf3b.arista.com,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, -2376,dc2-leaf3b.arista.com,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, -2377,dc2-leaf3b.arista.com,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, -2378,dc2-leaf3b.arista.com,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, -2379,dc2-leaf3b.arista.com,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, -2380,dc2-leaf3b.arista.com,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, -2381,dc2-leaf3b.arista.com,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, -2382,dc2-leaf3b.arista.com,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, -2383,dc2-leaf3b.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -2384,dc2-leaf3b.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, -2385,dc2-leaf3b.arista.com,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, -2386,dc2-leaf3b.arista.com,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, -2387,dc2-leaf3b.arista.com,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -2388,dc2-leaf3b.arista.com,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -2389,dc2-leaf3b.arista.com,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2390,dc2-leaf3b.arista.com,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2391,dc2-leaf3b.arista.com,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2392,dc2-leaf3b.arista.com,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -2393,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, -2394,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, -2395,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, -2396,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, -2397,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, -2398,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, -2399,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, -2400,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, -2401,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, -2402,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, -2403,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, -2404,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, -2405,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, -2406,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2407,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, -2408,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, -2409,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, -2410,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, -2411,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, -2412,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, -2413,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2414,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, -2415,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, -2416,dc2-leaf3b.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2417,dc2-leaf3b.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2418,dc2-leaf3b.arista.com,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2419,dc2-leaf3b.arista.com,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2420,dc2-leaf3b.arista.com,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2421,dc2-leaf3b.arista.com,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2422,dc2-leaf3b.arista.com,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2423,dc2-leaf3b.arista.com,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2424,dc2-leaf3b.arista.com,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2425,dc2-leaf3b.arista.com,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2426,dc2-leaf3b.arista.com,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2427,dc2-leaf3b.arista.com,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2428,dc2-leaf3b.arista.com,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2429,dc2-leaf3b.arista.com,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2430,dc2-leaf3b.arista.com,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2431,dc2-leaf3b.arista.com,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2432,dc2-leaf3b.arista.com,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2433,dc2-leaf3b.arista.com,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2434,dc2-leaf3b.arista.com,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2435,dc2-leaf3b.arista.com,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2436,dc2-leaf3b.arista.com,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2437,dc2-leaf3b.arista.com,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2438,dc2-leaf3b.arista.com,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2439,dc2-leaf3b.arista.com,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2440,dc2-leaf3b.arista.com,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, -2441,dc2-leaf3b.arista.com,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, -2442,dc2-leaf3b.arista.com,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, -2443,dc2-leaf3b.arista.com,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, -2444,dc2-leaf3b.arista.com,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, -2445,dc2-leaf3b.arista.com,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2446,dc2-leaf3b.arista.com,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2447,dc2-leaf3b.arista.com,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2448,dc2-leaf3b.arista.com,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2449,dc2-leaf3b.arista.com,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2450,dc2-leaf3b.arista.com,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2451,dc2-leaf3b.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2452,dc2-leaf3b.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2453,dc2-leaf3b.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2454,dc2-leaf3b.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2455,dc2-leaf3b.arista.com,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2456,dc2-leaf3b.arista.com,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -2457,dc2-spine1,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2458,dc2-spine1,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2459,dc2-spine1,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -2460,dc2-spine1,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -2461,dc2-spine1,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -2462,dc2-spine1,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -2463,dc2-spine1,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -2464,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13),NOT RUN, -2465,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14),NOT RUN, -2466,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15),NOT RUN, -2467,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16),NOT RUN, -2468,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17),NOT RUN, -2469,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18),NOT RUN, -2470,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.105),NOT RUN, -2471,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.109),NOT RUN, -2472,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.113),NOT RUN, -2473,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.117),NOT RUN, -2474,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.121),NOT RUN, -2475,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.125),NOT RUN, -2476,dc2-spine1,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -2477,dc2-spine1,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -2478,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet1,NOT RUN, -2479,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet1,NOT RUN, -2480,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet1,NOT RUN, -2481,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet1,NOT RUN, -2482,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet1,NOT RUN, -2483,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet1,NOT RUN, -2484,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.104) - Destination: dc2-leaf1a Ethernet1 (IP: 10.255.255.105),NOT RUN, -2485,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.108) - Destination: dc2-leaf1b Ethernet1 (IP: 10.255.255.109),NOT RUN, -2486,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet3 (IP: 10.255.255.112) - Destination: dc2-leaf2a Ethernet1 (IP: 10.255.255.113),NOT RUN, -2487,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet4 (IP: 10.255.255.116) - Destination: dc2-leaf2b Ethernet1 (IP: 10.255.255.117),NOT RUN, -2488,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet5 (IP: 10.255.255.120) - Destination: dc2-leaf3a.arista.com Ethernet1 (IP: 10.255.255.121),NOT RUN, -2489,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 10.255.255.124) - Destination: dc2-leaf3b.arista.com Ethernet1 (IP: 10.255.255.125),NOT RUN, -2490,dc2-spine1,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -2491,dc2-spine1,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -2492,dc2-spine1,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -2493,dc2-spine1,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -2494,dc2-spine1,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -2495,dc2-spine1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -2496,dc2-spine1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -2497,dc2-spine1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -2498,dc2-spine1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -2499,dc2-spine1,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -2500,dc2-spine1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2501,dc2-spine1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2502,dc2-spine1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -2503,dc2-spine1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -2504,dc2-spine1,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -2505,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet1 = 'up',NOT RUN, -2506,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet1 = 'up',NOT RUN, -2507,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet1 = 'up',NOT RUN, -2508,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet1 = 'up',NOT RUN, -2509,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet1 = 'up',NOT RUN, -2510,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet1 = 'up',NOT RUN, -2511,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -2512,dc2-spine1,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -2513,dc2-spine1,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -2514,dc2-spine1,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -2515,dc2-spine1,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2516,dc2-spine1,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2517,dc2-spine1,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2518,dc2-spine1,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -2519,dc2-spine1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2520,dc2-spine1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2521,dc2-spine1,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2522,dc2-spine1,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2523,dc2-spine1,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2524,dc2-spine1,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2525,dc2-spine1,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2526,dc2-spine1,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2527,dc2-spine1,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2528,dc2-spine1,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2529,dc2-spine1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2530,dc2-spine1,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2531,dc2-spine1,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2532,dc2-spine1,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2533,dc2-spine1,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2534,dc2-spine1,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2535,dc2-spine1,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2536,dc2-spine1,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2537,dc2-spine1,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2538,dc2-spine1,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2539,dc2-spine1,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2540,dc2-spine1,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2541,dc2-spine1,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2542,dc2-spine1,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2543,dc2-spine1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2544,dc2-spine1,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2545,dc2-spine1,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2546,dc2-spine1,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2547,dc2-spine1,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2548,dc2-spine1,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2549,dc2-spine1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2550,dc2-spine1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2551,dc2-spine1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2552,dc2-spine1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2553,dc2-spine1,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2554,dc2-spine1,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, -2555,dc2-spine2,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2556,dc2-spine2,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, -2557,dc2-spine2,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, -2558,dc2-spine2,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, -2559,dc2-spine2,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, -2560,dc2-spine2,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, -2561,dc2-spine2,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, -2562,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13),NOT RUN, -2563,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14),NOT RUN, -2564,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15),NOT RUN, -2565,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16),NOT RUN, -2566,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17),NOT RUN, -2567,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18),NOT RUN, -2568,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.107),NOT RUN, -2569,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.111),NOT RUN, -2570,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.115),NOT RUN, -2571,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.119),NOT RUN, -2572,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.123),NOT RUN, -2573,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.127),NOT RUN, -2574,dc2-spine2,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, -2575,dc2-spine2,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, -2576,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet2,NOT RUN, -2577,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet2,NOT RUN, -2578,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet2,NOT RUN, -2579,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet2,NOT RUN, -2580,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet2,NOT RUN, -2581,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet2,NOT RUN, -2582,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.106) - Destination: dc2-leaf1a Ethernet2 (IP: 10.255.255.107),NOT RUN, -2583,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.110) - Destination: dc2-leaf1b Ethernet2 (IP: 10.255.255.111),NOT RUN, -2584,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet3 (IP: 10.255.255.114) - Destination: dc2-leaf2a Ethernet2 (IP: 10.255.255.115),NOT RUN, -2585,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet4 (IP: 10.255.255.118) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119),NOT RUN, -2586,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet5 (IP: 10.255.255.122) - Destination: dc2-leaf3a.arista.com Ethernet2 (IP: 10.255.255.123),NOT RUN, -2587,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 10.255.255.126) - Destination: dc2-leaf3b.arista.com Ethernet2 (IP: 10.255.255.127),NOT RUN, -2588,dc2-spine2,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, -2589,dc2-spine2,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, -2590,dc2-spine2,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, -2591,dc2-spine2,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, -2592,dc2-spine2,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, -2593,dc2-spine2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, -2594,dc2-spine2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, -2595,dc2-spine2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, -2596,dc2-spine2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, -2597,dc2-spine2,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, -2598,dc2-spine2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2599,dc2-spine2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, -2600,dc2-spine2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, -2601,dc2-spine2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, -2602,dc2-spine2,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, -2603,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet2 = 'up',NOT RUN, -2604,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet2 = 'up',NOT RUN, -2605,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet2 = 'up',NOT RUN, -2606,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet2 = 'up',NOT RUN, -2607,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet2 = 'up',NOT RUN, -2608,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet2 = 'up',NOT RUN, -2609,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - EVPN_Overlay_Peering = 'up',NOT RUN, -2610,dc2-spine2,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, -2611,dc2-spine2,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, -2612,dc2-spine2,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, -2613,dc2-spine2,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, -2614,dc2-spine2,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, -2615,dc2-spine2,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, -2616,dc2-spine2,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, -2617,dc2-spine2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, -2618,dc2-spine2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, -2619,dc2-spine2,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, -2620,dc2-spine2,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, -2621,dc2-spine2,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, -2622,dc2-spine2,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, -2623,dc2-spine2,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, -2624,dc2-spine2,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, -2625,dc2-spine2,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, -2626,dc2-spine2,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, -2627,dc2-spine2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, -2628,dc2-spine2,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, -2629,dc2-spine2,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, -2630,dc2-spine2,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, -2631,dc2-spine2,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, -2632,dc2-spine2,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, -2633,dc2-spine2,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, -2634,dc2-spine2,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, -2635,dc2-spine2,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, -2636,dc2-spine2,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, -2637,dc2-spine2,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, -2638,dc2-spine2,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, -2639,dc2-spine2,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, -2640,dc2-spine2,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, -2641,dc2-spine2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, -2642,dc2-spine2,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, -2643,dc2-spine2,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, -2644,dc2-spine2,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, -2645,dc2-spine2,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, -2646,dc2-spine2,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, -2647,dc2-spine2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2648,dc2-spine2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, -2649,dc2-spine2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2650,dc2-spine2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, -2651,dc2-spine2,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, -2652,dc2-spine2,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1175,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1),NOT RUN, +1176,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2),NOT RUN, +1177,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.1) - Destination: dc1-leaf1a Ethernet6 (IP: 10.255.255.0),NOT RUN, +1178,dc1-wan1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.3) - Destination: dc1-leaf1b Ethernet6 (IP: 10.255.255.2),NOT RUN, +1179,dc1-wan1,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1180,dc1-wan1,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1181,dc1-wan1,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1182,dc1-wan1,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1183,dc1-wan1,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1184,dc1-wan1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1185,dc1-wan1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1186,dc1-wan1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1187,dc1-wan1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1188,dc1-wan1,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1189,dc1-wan1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1190,dc1-wan1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1191,dc1-wan1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1192,dc1-wan1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1193,dc1-wan1,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1194,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Dps1 - DPS Interface = 'up',NOT RUN, +1195,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet6 = 'up',NOT RUN, +1196,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet6 = 'up',NOT RUN, +1197,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - mpls-sp-1_DC1-MPLS-3 = 'up',NOT RUN, +1198,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - isp-1_DC1-INET-3 = 'up',NOT RUN, +1199,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1200,dc1-wan1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1201,dc1-wan1,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1202,dc1-wan1,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1203,dc1-wan1,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1204,dc1-wan1,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1205,dc1-wan1,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1206,dc1-wan1,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1207,dc1-wan1,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +1208,dc1-wan1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1209,dc1-wan1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1210,dc1-wan1,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1211,dc1-wan1,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1212,dc1-wan1,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1213,dc1-wan1,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1214,dc1-wan1,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1215,dc1-wan1,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1216,dc1-wan1,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1217,dc1-wan1,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1218,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1219,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.1.2 VRF: default,NOT RUN, +1220,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.10 VRF: default,NOT RUN, +1221,dc1-wan1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.20 VRF: default,NOT RUN, +1222,dc1-wan1,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1223,dc1-wan1,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1224,dc1-wan1,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1225,dc1-wan1,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1226,dc1-wan1,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1227,dc1-wan1,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1228,dc1-wan1,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1229,dc1-wan1,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1230,dc1-wan1,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1231,dc1-wan1,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1232,dc1-wan1,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1233,dc1-wan1,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1234,dc1-wan1,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1235,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1236,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 100.64.3.2 Source Port: 4500,NOT RUN, +1237,dc1-wan1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 172.18.3.2 Source Port: 4500,NOT RUN, +1238,dc1-wan1,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1239,dc1-wan1,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1240,dc1-wan1,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1241,dc1-wan1,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1242,dc1-wan1,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1243,dc1-wan1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1244,dc1-wan1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1245,dc1-wan1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1246,dc1-wan1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1247,dc1-wan1,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1248,dc1-wan1,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1249,dc1-wan2,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1250,dc1-wan2,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1251,dc1-wan2,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1252,dc1-wan2,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1253,dc1-wan2,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1254,dc1-wan2,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1255,dc1-wan2,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1256,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, +1257,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, +1258,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-wan1 (IP: 10.255.1.1),NOT RUN, +1259,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 SR-TE Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, +1260,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 SR-TE Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, +1261,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf1a (IP: 10.255.255.4),NOT RUN, +1262,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf1b (IP: 10.255.255.6),NOT RUN, +1263,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Link-State Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, +1264,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Link-State Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, +1265,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Path-Selection Peer: dc1-leaf1a (IP: 10.255.255.10),NOT RUN, +1266,dc1-wan2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP Path-Selection Peer: dc1-leaf1b (IP: 10.255.255.20),NOT RUN, +1267,dc1-wan2,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1268,dc1-wan2,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1269,dc1-wan2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc1-leaf1a Ethernet7,NOT RUN, +1270,dc1-wan2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc1-leaf1b Ethernet7,NOT RUN, +1271,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1),NOT RUN, +1272,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2),NOT RUN, +1273,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.5) - Destination: dc1-leaf1a Ethernet7 (IP: 10.255.255.4),NOT RUN, +1274,dc1-wan2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.7) - Destination: dc1-leaf1b Ethernet7 (IP: 10.255.255.6),NOT RUN, +1275,dc1-wan2,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1276,dc1-wan2,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1277,dc1-wan2,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1278,dc1-wan2,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1279,dc1-wan2,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1280,dc1-wan2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1281,dc1-wan2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1282,dc1-wan2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1283,dc1-wan2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1284,dc1-wan2,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1285,dc1-wan2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1286,dc1-wan2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1287,dc1-wan2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1288,dc1-wan2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1289,dc1-wan2,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1290,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Dps1 - DPS Interface = 'up',NOT RUN, +1291,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet7 = 'up',NOT RUN, +1292,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet7 = 'up',NOT RUN, +1293,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - mpls-sp-1_DC1-MPLS-4 = 'up',NOT RUN, +1294,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - isp-1_DC1-INET-4 = 'up',NOT RUN, +1295,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1296,dc1-wan2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1297,dc1-wan2,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1298,dc1-wan2,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1299,dc1-wan2,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1300,dc1-wan2,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1301,dc1-wan2,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1302,dc1-wan2,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1303,dc1-wan2,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +1304,dc1-wan2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1305,dc1-wan2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1306,dc1-wan2,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1307,dc1-wan2,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1308,dc1-wan2,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1309,dc1-wan2,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1310,dc1-wan2,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1311,dc1-wan2,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1312,dc1-wan2,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1313,dc1-wan2,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1314,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1315,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.1.1 VRF: default,NOT RUN, +1316,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.10 VRF: default,NOT RUN, +1317,dc1-wan2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,IPv4 Peer: 10.255.255.20 VRF: default,NOT RUN, +1318,dc1-wan2,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1319,dc1-wan2,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1320,dc1-wan2,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1321,dc1-wan2,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1322,dc1-wan2,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1323,dc1-wan2,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1324,dc1-wan2,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1325,dc1-wan2,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1326,dc1-wan2,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1327,dc1-wan2,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1328,dc1-wan2,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1329,dc1-wan2,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1330,dc1-wan2,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1331,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1332,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 100.64.4.2 Source Port: 4500,NOT RUN, +1333,dc1-wan2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,Source IPv4 Address: 172.18.4.2 Source Port: 4500,NOT RUN, +1334,dc1-wan2,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1335,dc1-wan2,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1336,dc1-wan2,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1337,dc1-wan2,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1338,dc1-wan2,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1339,dc1-wan2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1340,dc1-wan2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1341,dc1-wan2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1342,dc1-wan2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1343,dc1-wan2,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1344,dc1-wan2,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1345,dc2-leaf1a,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1346,dc2-leaf1a,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1347,dc2-leaf1a,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1348,dc2-leaf1a,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1349,dc2-leaf1a,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1350,dc2-leaf1a,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1351,dc2-leaf1a,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1352,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +1353,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +1354,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.129.117),NOT RUN, +1355,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.104),NOT RUN, +1356,dc2-leaf1a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.106),NOT RUN, +1357,dc2-leaf1a,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1358,dc2-leaf1a,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1359,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet1,NOT RUN, +1360,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet1,NOT RUN, +1361,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf1b Ethernet3,NOT RUN, +1362,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf1b Ethernet4,NOT RUN, +1363,dc2-leaf1a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf1c Ethernet1,NOT RUN, +1364,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +1365,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +1366,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +1367,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +1368,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +1369,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +1370,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +1371,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +1372,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +1373,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +1374,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +1375,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +1376,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +1377,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +1378,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +1379,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +1380,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +1381,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.105) - Destination: dc2-spine1 Ethernet1 (IP: 10.255.255.104),NOT RUN, +1382,dc2-leaf1a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.107) - Destination: dc2-spine2 Ethernet1 (IP: 10.255.255.106),NOT RUN, +1383,dc2-leaf1a,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1384,dc2-leaf1a,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1385,dc2-leaf1a,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1386,dc2-leaf1a,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1387,dc2-leaf1a,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1388,dc2-leaf1a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1389,dc2-leaf1a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1390,dc2-leaf1a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1391,dc2-leaf1a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1392,dc2-leaf1a,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1393,dc2-leaf1a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1394,dc2-leaf1a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1395,dc2-leaf1a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1396,dc2-leaf1a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1397,dc2-leaf1a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1398,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet1 = 'up',NOT RUN, +1399,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet1 = 'up',NOT RUN, +1400,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf1b_Ethernet3 = 'up',NOT RUN, +1401,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf1b_Ethernet4 = 'up',NOT RUN, +1402,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI1 = 'up',NOT RUN, +1403,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF1C_Ethernet1 = 'up',NOT RUN, +1404,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1405,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +1406,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1407,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1408,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf1b_Port-Channel3 = 'up',NOT RUN, +1409,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up',NOT RUN, +1410,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up',NOT RUN, +1411,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +1412,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +1413,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +1414,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +1415,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +1416,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +1417,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +1418,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +1419,dc2-leaf1a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1420,dc2-leaf1a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1421,dc2-leaf1a,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +1422,dc2-leaf1a,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +1423,dc2-leaf1a,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +1424,dc2-leaf1a,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +1425,dc2-leaf1a,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +1426,dc2-leaf1a,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +1427,dc2-leaf1a,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +1428,dc2-leaf1a,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +1429,dc2-leaf1a,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +1430,dc2-leaf1a,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +1431,dc2-leaf1a,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +1432,dc2-leaf1a,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +1433,dc2-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1434,dc2-leaf1a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1435,dc2-leaf1a,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +1436,dc2-leaf1a,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +1437,dc2-leaf1a,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1438,dc2-leaf1a,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1439,dc2-leaf1a,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1440,dc2-leaf1a,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1441,dc2-leaf1a,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1442,dc2-leaf1a,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +1443,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +1444,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +1445,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +1446,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +1447,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +1448,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +1449,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +1450,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +1451,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +1452,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +1453,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +1454,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +1455,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +1456,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1457,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +1458,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +1459,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +1460,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1461,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +1462,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +1463,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1464,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +1465,dc2-leaf1a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1466,dc2-leaf1a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1467,dc2-leaf1a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1468,dc2-leaf1a,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1469,dc2-leaf1a,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1470,dc2-leaf1a,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1471,dc2-leaf1a,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1472,dc2-leaf1a,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1473,dc2-leaf1a,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1474,dc2-leaf1a,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1475,dc2-leaf1a,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1476,dc2-leaf1a,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1477,dc2-leaf1a,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1478,dc2-leaf1a,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1479,dc2-leaf1a,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1480,dc2-leaf1a,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1481,dc2-leaf1a,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1482,dc2-leaf1a,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1483,dc2-leaf1a,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1484,dc2-leaf1a,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1485,dc2-leaf1a,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1486,dc2-leaf1a,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1487,dc2-leaf1a,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1488,dc2-leaf1a,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1489,dc2-leaf1a,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1490,dc2-leaf1a,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +1491,dc2-leaf1a,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +1492,dc2-leaf1a,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +1493,dc2-leaf1a,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +1494,dc2-leaf1a,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +1495,dc2-leaf1a,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1496,dc2-leaf1a,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1497,dc2-leaf1a,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1498,dc2-leaf1a,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1499,dc2-leaf1a,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1500,dc2-leaf1a,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1501,dc2-leaf1a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1502,dc2-leaf1a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1503,dc2-leaf1a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1504,dc2-leaf1a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1505,dc2-leaf1a,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1506,dc2-leaf1a,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1507,dc2-leaf1b,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1508,dc2-leaf1b,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1509,dc2-leaf1b,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1510,dc2-leaf1b,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1511,dc2-leaf1b,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1512,dc2-leaf1b,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1513,dc2-leaf1b,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1514,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +1515,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +1516,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.129.116),NOT RUN, +1517,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.108),NOT RUN, +1518,dc2-leaf1b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.110),NOT RUN, +1519,dc2-leaf1b,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1520,dc2-leaf1b,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1521,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet2,NOT RUN, +1522,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet2,NOT RUN, +1523,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf1a Ethernet3,NOT RUN, +1524,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf1a Ethernet4,NOT RUN, +1525,dc2-leaf1b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf1c Ethernet2,NOT RUN, +1526,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +1527,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +1528,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +1529,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +1530,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +1531,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +1532,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +1533,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +1534,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +1535,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +1536,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +1537,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +1538,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +1539,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +1540,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +1541,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +1542,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +1543,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.109) - Destination: dc2-spine1 Ethernet2 (IP: 10.255.255.108),NOT RUN, +1544,dc2-leaf1b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.111) - Destination: dc2-spine2 Ethernet2 (IP: 10.255.255.110),NOT RUN, +1545,dc2-leaf1b,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1546,dc2-leaf1b,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1547,dc2-leaf1b,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1548,dc2-leaf1b,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1549,dc2-leaf1b,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1550,dc2-leaf1b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1551,dc2-leaf1b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1552,dc2-leaf1b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1553,dc2-leaf1b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1554,dc2-leaf1b,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1555,dc2-leaf1b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1556,dc2-leaf1b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1557,dc2-leaf1b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1558,dc2-leaf1b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1559,dc2-leaf1b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1560,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet2 = 'up',NOT RUN, +1561,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet2 = 'up',NOT RUN, +1562,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf1a_Ethernet3 = 'up',NOT RUN, +1563,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf1a_Ethernet4 = 'up',NOT RUN, +1564,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI2 = 'up',NOT RUN, +1565,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF1C_Ethernet2 = 'up',NOT RUN, +1566,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1567,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +1568,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1569,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1570,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf1a_Port-Channel3 = 'up',NOT RUN, +1571,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up',NOT RUN, +1572,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up',NOT RUN, +1573,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +1574,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +1575,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +1576,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +1577,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +1578,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +1579,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +1580,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +1581,dc2-leaf1b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1582,dc2-leaf1b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1583,dc2-leaf1b,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +1584,dc2-leaf1b,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +1585,dc2-leaf1b,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +1586,dc2-leaf1b,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +1587,dc2-leaf1b,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +1588,dc2-leaf1b,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +1589,dc2-leaf1b,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +1590,dc2-leaf1b,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +1591,dc2-leaf1b,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +1592,dc2-leaf1b,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +1593,dc2-leaf1b,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +1594,dc2-leaf1b,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +1595,dc2-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1596,dc2-leaf1b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1597,dc2-leaf1b,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +1598,dc2-leaf1b,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +1599,dc2-leaf1b,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1600,dc2-leaf1b,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1601,dc2-leaf1b,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1602,dc2-leaf1b,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1603,dc2-leaf1b,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1604,dc2-leaf1b,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +1605,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +1606,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +1607,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +1608,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +1609,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +1610,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +1611,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +1612,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +1613,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +1614,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +1615,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +1616,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +1617,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +1618,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1619,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +1620,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +1621,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +1622,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1623,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +1624,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +1625,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1626,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +1627,dc2-leaf1b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1628,dc2-leaf1b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1629,dc2-leaf1b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1630,dc2-leaf1b,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1631,dc2-leaf1b,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1632,dc2-leaf1b,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1633,dc2-leaf1b,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1634,dc2-leaf1b,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1635,dc2-leaf1b,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1636,dc2-leaf1b,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1637,dc2-leaf1b,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1638,dc2-leaf1b,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1639,dc2-leaf1b,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1640,dc2-leaf1b,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1641,dc2-leaf1b,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1642,dc2-leaf1b,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1643,dc2-leaf1b,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1644,dc2-leaf1b,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1645,dc2-leaf1b,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1646,dc2-leaf1b,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1647,dc2-leaf1b,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1648,dc2-leaf1b,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1649,dc2-leaf1b,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1650,dc2-leaf1b,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1651,dc2-leaf1b,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1652,dc2-leaf1b,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +1653,dc2-leaf1b,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +1654,dc2-leaf1b,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +1655,dc2-leaf1b,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +1656,dc2-leaf1b,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +1657,dc2-leaf1b,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1658,dc2-leaf1b,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1659,dc2-leaf1b,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1660,dc2-leaf1b,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1661,dc2-leaf1b,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1662,dc2-leaf1b,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1663,dc2-leaf1b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1664,dc2-leaf1b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1665,dc2-leaf1b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1666,dc2-leaf1b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1667,dc2-leaf1b,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1668,dc2-leaf1b,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1669,dc2-leaf1c,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1670,dc2-leaf1c,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1671,dc2-leaf1c,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1672,dc2-leaf1c,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1673,dc2-leaf1c,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1674,dc2-leaf1c,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1675,dc2-leaf1c,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1676,dc2-leaf1c,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1677,dc2-leaf1c,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1678,dc2-leaf1c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet8,NOT RUN, +1679,dc2-leaf1c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet8,NOT RUN, +1680,dc2-leaf1c,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1681,dc2-leaf1c,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1682,dc2-leaf1c,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1683,dc2-leaf1c,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1684,dc2-leaf1c,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1685,dc2-leaf1c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1686,dc2-leaf1c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1687,dc2-leaf1c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1688,dc2-leaf1c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1689,dc2-leaf1c,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1690,dc2-leaf1c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1691,dc2-leaf1c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1692,dc2-leaf1c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1693,dc2-leaf1c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1694,dc2-leaf1c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1695,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC2-LEAF1A_Ethernet8 = 'up',NOT RUN, +1696,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC2-LEAF1B_Ethernet8 = 'up',NOT RUN, +1697,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf1-server1_iLO = 'up',NOT RUN, +1698,dc2-leaf1c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC2_L3_LEAF1_Po8 = 'up',NOT RUN, +1699,dc2-leaf1c,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1700,dc2-leaf1c,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1701,dc2-leaf1c,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1702,dc2-leaf1c,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1703,dc2-leaf1c,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1704,dc2-leaf1c,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1705,dc2-leaf1c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1706,dc2-leaf1c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1707,dc2-leaf1c,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1708,dc2-leaf1c,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1709,dc2-leaf1c,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1710,dc2-leaf1c,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1711,dc2-leaf1c,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1712,dc2-leaf1c,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1713,dc2-leaf1c,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1714,dc2-leaf1c,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1715,dc2-leaf1c,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1716,dc2-leaf1c,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1717,dc2-leaf1c,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1718,dc2-leaf1c,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1719,dc2-leaf1c,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1720,dc2-leaf1c,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1721,dc2-leaf1c,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1722,dc2-leaf1c,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1723,dc2-leaf1c,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1724,dc2-leaf1c,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1725,dc2-leaf1c,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1726,dc2-leaf1c,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1727,dc2-leaf1c,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1728,dc2-leaf1c,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1729,dc2-leaf1c,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1730,dc2-leaf1c,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1731,dc2-leaf1c,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1732,dc2-leaf1c,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1733,dc2-leaf1c,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1734,dc2-leaf1c,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1735,dc2-leaf1c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1736,dc2-leaf1c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1737,dc2-leaf1c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1738,dc2-leaf1c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1739,dc2-leaf1c,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1740,dc2-leaf1c,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1741,dc2-leaf2a,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1742,dc2-leaf2a,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1743,dc2-leaf2a,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1744,dc2-leaf2a,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1745,dc2-leaf2a,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1746,dc2-leaf2a,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1747,dc2-leaf2a,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1748,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc1-leaf2a (IP: 10.255.0.5),NOT RUN, +1749,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +1750,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +1751,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc1-leaf2a (IP: 192.168.100.0),NOT RUN, +1752,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.129.121),NOT RUN, +1753,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.112),NOT RUN, +1754,dc2-leaf2a,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.114),NOT RUN, +1755,dc2-leaf2a,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1756,dc2-leaf2a,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1757,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet3,NOT RUN, +1758,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet3,NOT RUN, +1759,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2b Ethernet3,NOT RUN, +1760,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet4,NOT RUN, +1761,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc1-leaf2a Ethernet6,NOT RUN, +1762,dc2-leaf2a,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf2c Ethernet1,NOT RUN, +1763,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +1764,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +1765,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +1766,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +1767,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +1768,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +1769,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +1770,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +1771,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +1772,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +1773,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +1774,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +1775,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +1776,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +1777,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +1778,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +1779,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +1780,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.113) - Destination: dc2-spine1 Ethernet3 (IP: 10.255.255.112),NOT RUN, +1781,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.115) - Destination: dc2-spine2 Ethernet3 (IP: 10.255.255.114),NOT RUN, +1782,dc2-leaf2a,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 192.168.100.1) - Destination: dc1-leaf2a Ethernet6 (IP: 192.168.100.0),NOT RUN, +1783,dc2-leaf2a,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1784,dc2-leaf2a,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1785,dc2-leaf2a,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1786,dc2-leaf2a,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1787,dc2-leaf2a,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1788,dc2-leaf2a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1789,dc2-leaf2a,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1790,dc2-leaf2a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1791,dc2-leaf2a,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1792,dc2-leaf2a,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1793,dc2-leaf2a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1794,dc2-leaf2a,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1795,dc2-leaf2a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1796,dc2-leaf2a,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1797,dc2-leaf2a,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1798,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet3 = 'up',NOT RUN, +1799,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet3 = 'up',NOT RUN, +1800,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf2b_Ethernet3 = 'up',NOT RUN, +1801,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf2b_Ethernet4 = 'up',NOT RUN, +1802,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI1 = 'up',NOT RUN, +1803,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2a_Ethernet6 = 'up',NOT RUN, +1804,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF2C_Ethernet1 = 'up',NOT RUN, +1805,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1806,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +1807,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1808,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1809,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf2b_Port-Channel3 = 'up',NOT RUN, +1810,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up',NOT RUN, +1811,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up',NOT RUN, +1812,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +1813,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +1814,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +1815,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +1816,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +1817,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +1818,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +1819,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +1820,dc2-leaf2a,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1821,dc2-leaf2a,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1822,dc2-leaf2a,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +1823,dc2-leaf2a,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +1824,dc2-leaf2a,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +1825,dc2-leaf2a,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +1826,dc2-leaf2a,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +1827,dc2-leaf2a,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +1828,dc2-leaf2a,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +1829,dc2-leaf2a,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +1830,dc2-leaf2a,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +1831,dc2-leaf2a,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +1832,dc2-leaf2a,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +1833,dc2-leaf2a,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +1834,dc2-leaf2a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1835,dc2-leaf2a,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1836,dc2-leaf2a,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +1837,dc2-leaf2a,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +1838,dc2-leaf2a,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +1839,dc2-leaf2a,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +1840,dc2-leaf2a,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +1841,dc2-leaf2a,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +1842,dc2-leaf2a,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +1843,dc2-leaf2a,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +1844,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +1845,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +1846,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +1847,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +1848,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +1849,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +1850,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +1851,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +1852,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +1853,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +1854,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +1855,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +1856,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +1857,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1858,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +1859,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +1860,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +1861,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +1862,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +1863,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +1864,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1865,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +1866,dc2-leaf2a,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +1867,dc2-leaf2a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +1868,dc2-leaf2a,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +1869,dc2-leaf2a,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +1870,dc2-leaf2a,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +1871,dc2-leaf2a,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +1872,dc2-leaf2a,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +1873,dc2-leaf2a,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +1874,dc2-leaf2a,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +1875,dc2-leaf2a,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +1876,dc2-leaf2a,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +1877,dc2-leaf2a,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +1878,dc2-leaf2a,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +1879,dc2-leaf2a,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +1880,dc2-leaf2a,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +1881,dc2-leaf2a,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +1882,dc2-leaf2a,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +1883,dc2-leaf2a,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +1884,dc2-leaf2a,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +1885,dc2-leaf2a,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +1886,dc2-leaf2a,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +1887,dc2-leaf2a,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +1888,dc2-leaf2a,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +1889,dc2-leaf2a,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +1890,dc2-leaf2a,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +1891,dc2-leaf2a,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +1892,dc2-leaf2a,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +1893,dc2-leaf2a,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +1894,dc2-leaf2a,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +1895,dc2-leaf2a,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +1896,dc2-leaf2a,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +1897,dc2-leaf2a,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +1898,dc2-leaf2a,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +1899,dc2-leaf2a,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +1900,dc2-leaf2a,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +1901,dc2-leaf2a,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +1902,dc2-leaf2a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1903,dc2-leaf2a,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +1904,dc2-leaf2a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1905,dc2-leaf2a,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +1906,dc2-leaf2a,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +1907,dc2-leaf2a,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +1908,dc2-leaf2b,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1909,dc2-leaf2b,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +1910,dc2-leaf2b,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +1911,dc2-leaf2b,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +1912,dc2-leaf2b,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +1913,dc2-leaf2b,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +1914,dc2-leaf2b,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +1915,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +1916,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +1917,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.129.120),NOT RUN, +1918,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.116),NOT RUN, +1919,dc2-leaf2b,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.118),NOT RUN, +1920,dc2-leaf2b,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +1921,dc2-leaf2b,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +1922,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet4,NOT RUN, +1923,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet4,NOT RUN, +1924,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet3,NOT RUN, +1925,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2a Ethernet4,NOT RUN, +1926,dc2-leaf2b,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet8 - Remote: dc2-leaf2c Ethernet2,NOT RUN, +1927,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +1928,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +1929,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +1930,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +1931,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +1932,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +1933,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +1934,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +1935,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +1936,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +1937,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +1938,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +1939,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +1940,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +1941,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +1942,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +1943,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +1944,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.117) - Destination: dc2-spine1 Ethernet4 (IP: 10.255.255.116),NOT RUN, +1945,dc2-leaf2b,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.119) - Destination: dc2-spine2 Ethernet4 (IP: 10.255.255.118),NOT RUN, +1946,dc2-leaf2b,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +1947,dc2-leaf2b,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +1948,dc2-leaf2b,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +1949,dc2-leaf2b,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +1950,dc2-leaf2b,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +1951,dc2-leaf2b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +1952,dc2-leaf2b,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +1953,dc2-leaf2b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +1954,dc2-leaf2b,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +1955,dc2-leaf2b,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +1956,dc2-leaf2b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1957,dc2-leaf2b,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +1958,dc2-leaf2b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +1959,dc2-leaf2b,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +1960,dc2-leaf2b,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +1961,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet4 = 'up',NOT RUN, +1962,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet4 = 'up',NOT RUN, +1963,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf2a_Ethernet3 = 'up',NOT RUN, +1964,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf2a_Ethernet4 = 'up',NOT RUN, +1965,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI2 = 'up',NOT RUN, +1966,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2b_Ethernet6 = 'up',NOT RUN, +1967,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet8 - DC2-LEAF2C_Ethernet2 = 'up',NOT RUN, +1968,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +1969,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +1970,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1971,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +1972,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf2a_Port-Channel3 = 'up',NOT RUN, +1973,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up',NOT RUN, +1974,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up',NOT RUN, +1975,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +1976,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +1977,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +1978,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +1979,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +1980,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +1981,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +1982,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +1983,dc2-leaf2b,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +1984,dc2-leaf2b,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +1985,dc2-leaf2b,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +1986,dc2-leaf2b,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +1987,dc2-leaf2b,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +1988,dc2-leaf2b,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +1989,dc2-leaf2b,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +1990,dc2-leaf2b,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +1991,dc2-leaf2b,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +1992,dc2-leaf2b,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +1993,dc2-leaf2b,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +1994,dc2-leaf2b,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +1995,dc2-leaf2b,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +1996,dc2-leaf2b,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +1997,dc2-leaf2b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1998,dc2-leaf2b,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +1999,dc2-leaf2b,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +2000,dc2-leaf2b,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +2001,dc2-leaf2b,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2002,dc2-leaf2b,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2003,dc2-leaf2b,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2004,dc2-leaf2b,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2005,dc2-leaf2b,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2006,dc2-leaf2b,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +2007,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +2008,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +2009,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +2010,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +2011,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +2012,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +2013,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +2014,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +2015,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +2016,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +2017,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +2018,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +2019,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +2020,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2021,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +2022,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +2023,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +2024,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2025,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +2026,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +2027,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2028,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +2029,dc2-leaf2b,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2030,dc2-leaf2b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2031,dc2-leaf2b,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2032,dc2-leaf2b,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2033,dc2-leaf2b,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2034,dc2-leaf2b,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2035,dc2-leaf2b,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2036,dc2-leaf2b,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2037,dc2-leaf2b,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2038,dc2-leaf2b,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2039,dc2-leaf2b,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2040,dc2-leaf2b,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2041,dc2-leaf2b,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2042,dc2-leaf2b,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2043,dc2-leaf2b,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2044,dc2-leaf2b,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2045,dc2-leaf2b,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2046,dc2-leaf2b,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2047,dc2-leaf2b,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2048,dc2-leaf2b,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2049,dc2-leaf2b,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2050,dc2-leaf2b,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2051,dc2-leaf2b,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2052,dc2-leaf2b,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2053,dc2-leaf2b,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2054,dc2-leaf2b,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +2055,dc2-leaf2b,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +2056,dc2-leaf2b,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +2057,dc2-leaf2b,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +2058,dc2-leaf2b,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +2059,dc2-leaf2b,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2060,dc2-leaf2b,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2061,dc2-leaf2b,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2062,dc2-leaf2b,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2063,dc2-leaf2b,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2064,dc2-leaf2b,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2065,dc2-leaf2b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2066,dc2-leaf2b,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2067,dc2-leaf2b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2068,dc2-leaf2b,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2069,dc2-leaf2b,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2070,dc2-leaf2b,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +2071,dc2-leaf2c,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2072,dc2-leaf2c,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2073,dc2-leaf2c,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +2074,dc2-leaf2c,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +2075,dc2-leaf2c,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +2076,dc2-leaf2c,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +2077,dc2-leaf2c,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +2078,dc2-leaf2c,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +2079,dc2-leaf2c,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +2080,dc2-leaf2c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf2a Ethernet8,NOT RUN, +2081,dc2-leaf2c,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf2b Ethernet8,NOT RUN, +2082,dc2-leaf2c,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +2083,dc2-leaf2c,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +2084,dc2-leaf2c,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +2085,dc2-leaf2c,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +2086,dc2-leaf2c,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +2087,dc2-leaf2c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +2088,dc2-leaf2c,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +2089,dc2-leaf2c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +2090,dc2-leaf2c,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +2091,dc2-leaf2c,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +2092,dc2-leaf2c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2093,dc2-leaf2c,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2094,dc2-leaf2c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +2095,dc2-leaf2c,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +2096,dc2-leaf2c,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +2097,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - DC2-LEAF2A_Ethernet8 = 'up',NOT RUN, +2098,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - DC2-LEAF2B_Ethernet8 = 'up',NOT RUN, +2099,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - SERVER_dc2-leaf2-server1_iLO = 'up',NOT RUN, +2100,dc2-leaf2c,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel1 - DC2_L3_LEAF2_Po8 = 'up',NOT RUN, +2101,dc2-leaf2c,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +2102,dc2-leaf2c,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2103,dc2-leaf2c,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2104,dc2-leaf2c,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2105,dc2-leaf2c,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2106,dc2-leaf2c,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2107,dc2-leaf2c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2108,dc2-leaf2c,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2109,dc2-leaf2c,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2110,dc2-leaf2c,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2111,dc2-leaf2c,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2112,dc2-leaf2c,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2113,dc2-leaf2c,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2114,dc2-leaf2c,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2115,dc2-leaf2c,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2116,dc2-leaf2c,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2117,dc2-leaf2c,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2118,dc2-leaf2c,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2119,dc2-leaf2c,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2120,dc2-leaf2c,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2121,dc2-leaf2c,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2122,dc2-leaf2c,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2123,dc2-leaf2c,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2124,dc2-leaf2c,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2125,dc2-leaf2c,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2126,dc2-leaf2c,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2127,dc2-leaf2c,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2128,dc2-leaf2c,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2129,dc2-leaf2c,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2130,dc2-leaf2c,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2131,dc2-leaf2c,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2132,dc2-leaf2c,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2133,dc2-leaf2c,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2134,dc2-leaf2c,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2135,dc2-leaf2c,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2136,dc2-leaf2c,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2137,dc2-leaf2c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2138,dc2-leaf2c,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2139,dc2-leaf2c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2140,dc2-leaf2c,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2141,dc2-leaf2c,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2142,dc2-leaf2c,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +2143,dc2-leaf3a.arista.com,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2144,dc2-leaf3a.arista.com,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2145,dc2-leaf3a.arista.com,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +2146,dc2-leaf3a.arista.com,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +2147,dc2-leaf3a.arista.com,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +2148,dc2-leaf3a.arista.com,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +2149,dc2-leaf3a.arista.com,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +2150,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +2151,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +2152,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.129.125),NOT RUN, +2153,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.120),NOT RUN, +2154,dc2-leaf3a.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.122),NOT RUN, +2155,dc2-leaf3a.arista.com,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +2156,dc2-leaf3a.arista.com,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +2157,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet5,NOT RUN, +2158,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet15 - Remote: dc2-leaf2b Ethernet2,NOT RUN, +2159,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet5,NOT RUN, +2160,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf3b.arista.com Ethernet3,NOT RUN, +2161,dc2-leaf3a.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf3b.arista.com Ethernet4,NOT RUN, +2162,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +2163,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +2164,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +2165,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +2166,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +2167,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +2168,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +2169,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +2170,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +2171,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +2172,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +2173,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +2174,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +2175,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +2176,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +2177,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +2178,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +2179,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.121) - Destination: dc2-spine1 Ethernet5 (IP: 10.255.255.120),NOT RUN, +2180,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet15 (IP: 1.1.1.1) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119),NOT RUN, +2181,dc2-leaf3a.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.123) - Destination: dc2-spine2 Ethernet5 (IP: 10.255.255.122),NOT RUN, +2182,dc2-leaf3a.arista.com,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +2183,dc2-leaf3a.arista.com,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +2184,dc2-leaf3a.arista.com,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +2185,dc2-leaf3a.arista.com,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +2186,dc2-leaf3a.arista.com,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +2187,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +2188,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +2189,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +2190,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +2191,dc2-leaf3a.arista.com,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +2192,dc2-leaf3a.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2193,dc2-leaf3a.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2194,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +2195,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +2196,dc2-leaf3a.arista.com,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +2197,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet5 = 'up',NOT RUN, +2198,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up',NOT RUN, +2199,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet12 - Test_mode_and_vlans = 'up',NOT RUN, +2200,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet13 - Test_native_vlan_and_trunk_groups = 'up',NOT RUN, +2201,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet14 - Test_phone = 'up',NOT RUN, +2202,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet15 - Test_type_routed = 'up',NOT RUN, +2203,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet5 = 'up',NOT RUN, +2204,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf3b.arista.com_Ethernet3 = 'up',NOT RUN, +2205,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf3b.arista.com_Ethernet4 = 'up',NOT RUN, +2206,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +2207,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +2208,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +2209,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +2210,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up',NOT RUN, +2211,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel12 - Test_mode_and_vlans = 'up',NOT RUN, +2212,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel13 - Test_native_vlan_and_trunk_groups = 'up',NOT RUN, +2213,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel14 - Test_phone = 'up',NOT RUN, +2214,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel15 - Test_type_routed = 'up',NOT RUN, +2215,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf3b.arista.com_Port-Channel3 = 'up',NOT RUN, +2216,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +2217,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +2218,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +2219,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +2220,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +2221,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +2222,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +2223,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +2224,dc2-leaf3a.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +2225,dc2-leaf3a.arista.com,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +2226,dc2-leaf3a.arista.com,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +2227,dc2-leaf3a.arista.com,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +2228,dc2-leaf3a.arista.com,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +2229,dc2-leaf3a.arista.com,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +2230,dc2-leaf3a.arista.com,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +2231,dc2-leaf3a.arista.com,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +2232,dc2-leaf3a.arista.com,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +2233,dc2-leaf3a.arista.com,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +2234,dc2-leaf3a.arista.com,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +2235,dc2-leaf3a.arista.com,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +2236,dc2-leaf3a.arista.com,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +2237,dc2-leaf3a.arista.com,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +2238,dc2-leaf3a.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +2239,dc2-leaf3a.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +2240,dc2-leaf3a.arista.com,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +2241,dc2-leaf3a.arista.com,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +2242,dc2-leaf3a.arista.com,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2243,dc2-leaf3a.arista.com,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2244,dc2-leaf3a.arista.com,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2245,dc2-leaf3a.arista.com,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2246,dc2-leaf3a.arista.com,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2247,dc2-leaf3a.arista.com,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +2248,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +2249,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +2250,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +2251,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +2252,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +2253,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +2254,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +2255,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +2256,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +2257,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +2258,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +2259,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +2260,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +2261,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2262,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +2263,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +2264,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +2265,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2266,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +2267,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +2268,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2269,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +2270,dc2-leaf3a.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2271,dc2-leaf3a.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2272,dc2-leaf3a.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2273,dc2-leaf3a.arista.com,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2274,dc2-leaf3a.arista.com,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2275,dc2-leaf3a.arista.com,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2276,dc2-leaf3a.arista.com,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2277,dc2-leaf3a.arista.com,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2278,dc2-leaf3a.arista.com,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2279,dc2-leaf3a.arista.com,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2280,dc2-leaf3a.arista.com,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2281,dc2-leaf3a.arista.com,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2282,dc2-leaf3a.arista.com,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2283,dc2-leaf3a.arista.com,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2284,dc2-leaf3a.arista.com,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2285,dc2-leaf3a.arista.com,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2286,dc2-leaf3a.arista.com,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2287,dc2-leaf3a.arista.com,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2288,dc2-leaf3a.arista.com,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2289,dc2-leaf3a.arista.com,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2290,dc2-leaf3a.arista.com,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2291,dc2-leaf3a.arista.com,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2292,dc2-leaf3a.arista.com,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2293,dc2-leaf3a.arista.com,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2294,dc2-leaf3a.arista.com,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2295,dc2-leaf3a.arista.com,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +2296,dc2-leaf3a.arista.com,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +2297,dc2-leaf3a.arista.com,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +2298,dc2-leaf3a.arista.com,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +2299,dc2-leaf3a.arista.com,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +2300,dc2-leaf3a.arista.com,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2301,dc2-leaf3a.arista.com,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2302,dc2-leaf3a.arista.com,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2303,dc2-leaf3a.arista.com,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2304,dc2-leaf3a.arista.com,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2305,dc2-leaf3a.arista.com,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2306,dc2-leaf3a.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2307,dc2-leaf3a.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2308,dc2-leaf3a.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2309,dc2-leaf3a.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2310,dc2-leaf3a.arista.com,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2311,dc2-leaf3a.arista.com,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +2312,dc2-leaf3b.arista.com,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2313,dc2-leaf3b.arista.com,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2314,dc2-leaf3b.arista.com,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +2315,dc2-leaf3b.arista.com,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +2316,dc2-leaf3b.arista.com,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +2317,dc2-leaf3b.arista.com,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +2318,dc2-leaf3b.arista.com,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +2319,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11),NOT RUN, +2320,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12),NOT RUN, +2321,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.129.124),NOT RUN, +2322,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.124),NOT RUN, +2323,dc2-leaf3b.arista.com,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.126),NOT RUN, +2324,dc2-leaf3b.arista.com,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +2325,dc2-leaf3b.arista.com,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +2326,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-spine1 Ethernet6,NOT RUN, +2327,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-spine2 Ethernet6,NOT RUN, +2328,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf3a.arista.com Ethernet3,NOT RUN, +2329,dc2-leaf3b.arista.com,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf3a.arista.com Ethernet4,NOT RUN, +2330,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3),NOT RUN, +2331,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4),NOT RUN, +2332,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5),NOT RUN, +2333,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1),NOT RUN, +2334,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2),NOT RUN, +2335,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5),NOT RUN, +2336,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6),NOT RUN, +2337,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1),NOT RUN, +2338,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2),NOT RUN, +2339,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13),NOT RUN, +2340,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14),NOT RUN, +2341,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15),NOT RUN, +2342,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16),NOT RUN, +2343,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17),NOT RUN, +2344,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18),NOT RUN, +2345,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11),NOT RUN, +2346,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12),NOT RUN, +2347,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.125) - Destination: dc2-spine1 Ethernet6 (IP: 10.255.255.124),NOT RUN, +2348,dc2-leaf3b.arista.com,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.127) - Destination: dc2-spine2 Ethernet6 (IP: 10.255.255.126),NOT RUN, +2349,dc2-leaf3b.arista.com,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +2350,dc2-leaf3b.arista.com,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +2351,dc2-leaf3b.arista.com,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +2352,dc2-leaf3b.arista.com,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +2353,dc2-leaf3b.arista.com,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +2354,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +2355,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +2356,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +2357,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +2358,dc2-leaf3b.arista.com,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +2359,dc2-leaf3b.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2360,dc2-leaf3b.arista.com,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2361,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +2362,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +2363,dc2-leaf3b.arista.com,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +2364,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet6 = 'up',NOT RUN, +2365,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'adminDown',NOT RUN, +2366,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet6 = 'up',NOT RUN, +2367,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - MLAG_dc2-leaf3a.arista.com_Ethernet3 = 'up',NOT RUN, +2368,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - MLAG_dc2-leaf3a.arista.com_Ethernet4 = 'up',NOT RUN, +2369,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +2370,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up',NOT RUN, +2371,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up',NOT RUN, +2372,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up',NOT RUN, +2373,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up',NOT RUN, +2374,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Port-Channel3 - MLAG_dc2-leaf3a.arista.com_Port-Channel3 = 'up',NOT RUN, +2375,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan11 - VRF10_VLAN11 = 'up',NOT RUN, +2376,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan12 - VRF10_VLAN12 = 'up',NOT RUN, +2377,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan21 - VRF11_VLAN21 = 'up',NOT RUN, +2378,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan22 - VRF11_VLAN22 = 'up',NOT RUN, +2379,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up',NOT RUN, +2380,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up',NOT RUN, +2381,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4093 - MLAG_L3 = 'up',NOT RUN, +2382,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vlan4094 - MLAG = 'up',NOT RUN, +2383,dc2-leaf3b.arista.com,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Vxlan1 = 'up',NOT RUN, +2384,dc2-leaf3b.arista.com,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +2385,dc2-leaf3b.arista.com,Logging,VerifyLoggingAccounting,Verifies if AAA accounting logs are generated.,,NOT RUN, +2386,dc2-leaf3b.arista.com,Logging,VerifyLoggingErrors,Verifies there are no syslog messages with a severity of ERRORS or higher.,,NOT RUN, +2387,dc2-leaf3b.arista.com,Logging,VerifyLoggingHostname,Verifies if logs are generated with the device FQDN.,,NOT RUN, +2388,dc2-leaf3b.arista.com,Logging,VerifyLoggingHosts,Verifies logging hosts (syslog servers) for a specified VRF.,,NOT RUN, +2389,dc2-leaf3b.arista.com,Logging,VerifyLoggingLogsGeneration,Verifies if logs are generated.,,NOT RUN, +2390,dc2-leaf3b.arista.com,Logging,VerifyLoggingPersistent,Verifies if logging persistent is enabled and logs are saved in flash.,,NOT RUN, +2391,dc2-leaf3b.arista.com,Logging,VerifyLoggingSourceInt,Verifies logging source-interface for a specified VRF.,,NOT RUN, +2392,dc2-leaf3b.arista.com,Logging,VerifyLoggingTimestamp,Verifies if logs are generated with the riate timestamp.,,NOT RUN, +2393,dc2-leaf3b.arista.com,MLAG,VerifyMlagConfigSanity,Verifies there are no MLAG config-sanity inconsistencies.,,NOT RUN, +2394,dc2-leaf3b.arista.com,MLAG,VerifyMlagDualPrimary,Verifies the MLAG dual-primary detection parameters.,,NOT RUN, +2395,dc2-leaf3b.arista.com,MLAG,VerifyMlagInterfaces,Verifies there are no inactive or active-partial MLAG ports.,,NOT RUN, +2396,dc2-leaf3b.arista.com,MLAG,VerifyMlagReloadDelay,Verifies the MLAG reload-delay parameters.,,NOT RUN, +2397,dc2-leaf3b.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +2398,dc2-leaf3b.arista.com,MLAG,VerifyMlagStatus,Verifies the health status of the MLAG configuration.,,NOT RUN, +2399,dc2-leaf3b.arista.com,Multicast,VerifyIGMPSnoopingGlobal,Verifies the IGMP snooping global configuration.,,NOT RUN, +2400,dc2-leaf3b.arista.com,Multicast,VerifyIGMPSnoopingVlans,Verifies the IGMP snooping status for the provided VLANs.,,NOT RUN, +2401,dc2-leaf3b.arista.com,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2402,dc2-leaf3b.arista.com,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2403,dc2-leaf3b.arista.com,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2404,dc2-leaf3b.arista.com,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2405,dc2-leaf3b.arista.com,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2406,dc2-leaf3b.arista.com,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +2407,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.1 - Peer: dc1-spine1,NOT RUN, +2408,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.2 - Peer: dc1-spine2,NOT RUN, +2409,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.3 - Peer: dc1-leaf1a,NOT RUN, +2410,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.4 - Peer: dc1-leaf1b,NOT RUN, +2411,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.0.5 - Peer: dc1-leaf2a,NOT RUN, +2412,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.3 - Peer: dc1-leaf1a,NOT RUN, +2413,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.1.5 - Peer: dc1-leaf2a,NOT RUN, +2414,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.11 - Peer: dc2-spine1,NOT RUN, +2415,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.12 - Peer: dc2-spine2,NOT RUN, +2416,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.13 - Peer: dc2-leaf1a,NOT RUN, +2417,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.14 - Peer: dc2-leaf1b,NOT RUN, +2418,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.15 - Peer: dc2-leaf2a,NOT RUN, +2419,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.16 - Peer: dc2-leaf2b,NOT RUN, +2420,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2421,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com,NOT RUN, +2422,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.13 - Peer: dc2-leaf1a,NOT RUN, +2423,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.15 - Peer: dc2-leaf2a,NOT RUN, +2424,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com,NOT RUN, +2425,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.1 - Peer: dc1-wan1,NOT RUN, +2426,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.255.2.2 - Peer: dc1-wan2,NOT RUN, +2427,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2428,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.0.6 - Peer: dc1-svc-leaf1b,NOT RUN, +2429,dc2-leaf3b.arista.com,Routing,VerifyRoutingTableEntry,Verifies that the provided routes are present in the routing table of a specified VRF.,Route: 10.33.1.5 - Peer: dc1-svc-leaf1a,NOT RUN, +2430,dc2-leaf3b.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2431,dc2-leaf3b.arista.com,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2432,dc2-leaf3b.arista.com,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2433,dc2-leaf3b.arista.com,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2434,dc2-leaf3b.arista.com,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2435,dc2-leaf3b.arista.com,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2436,dc2-leaf3b.arista.com,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2437,dc2-leaf3b.arista.com,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2438,dc2-leaf3b.arista.com,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2439,dc2-leaf3b.arista.com,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2440,dc2-leaf3b.arista.com,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2441,dc2-leaf3b.arista.com,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2442,dc2-leaf3b.arista.com,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2443,dc2-leaf3b.arista.com,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2444,dc2-leaf3b.arista.com,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2445,dc2-leaf3b.arista.com,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2446,dc2-leaf3b.arista.com,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2447,dc2-leaf3b.arista.com,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2448,dc2-leaf3b.arista.com,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2449,dc2-leaf3b.arista.com,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2450,dc2-leaf3b.arista.com,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2451,dc2-leaf3b.arista.com,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2452,dc2-leaf3b.arista.com,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2453,dc2-leaf3b.arista.com,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2454,dc2-leaf3b.arista.com,STP,VerifySTPBlockedPorts,Verifies there is no STP blocked ports.,,NOT RUN, +2455,dc2-leaf3b.arista.com,STP,VerifySTPCounters,Verifies there is no errors in STP BPDU packets.,,NOT RUN, +2456,dc2-leaf3b.arista.com,STP,VerifySTPForwardingPorts,Verifies that all interfaces are forwarding for a provided list of VLAN(s).,,NOT RUN, +2457,dc2-leaf3b.arista.com,STP,VerifySTPMode,Verifies the configured STP mode for a provided list of VLAN(s).,,NOT RUN, +2458,dc2-leaf3b.arista.com,STP,VerifySTPRootPriority,Verifies the STP root priority for a provided list of VLAN or MST instance ID(s).,,NOT RUN, +2459,dc2-leaf3b.arista.com,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2460,dc2-leaf3b.arista.com,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2461,dc2-leaf3b.arista.com,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2462,dc2-leaf3b.arista.com,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2463,dc2-leaf3b.arista.com,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2464,dc2-leaf3b.arista.com,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2465,dc2-leaf3b.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2466,dc2-leaf3b.arista.com,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2467,dc2-leaf3b.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2468,dc2-leaf3b.arista.com,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2469,dc2-leaf3b.arista.com,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2470,dc2-leaf3b.arista.com,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +2471,dc2-spine1,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2472,dc2-spine1,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2473,dc2-spine1,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +2474,dc2-spine1,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +2475,dc2-spine1,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +2476,dc2-spine1,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +2477,dc2-spine1,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +2478,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13),NOT RUN, +2479,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14),NOT RUN, +2480,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15),NOT RUN, +2481,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16),NOT RUN, +2482,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17),NOT RUN, +2483,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18),NOT RUN, +2484,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.105),NOT RUN, +2485,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.109),NOT RUN, +2486,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.113),NOT RUN, +2487,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.117),NOT RUN, +2488,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.121),NOT RUN, +2489,dc2-spine1,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.125),NOT RUN, +2490,dc2-spine1,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +2491,dc2-spine1,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +2492,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet1,NOT RUN, +2493,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet1,NOT RUN, +2494,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet1,NOT RUN, +2495,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet1,NOT RUN, +2496,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet1,NOT RUN, +2497,dc2-spine1,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet1,NOT RUN, +2498,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.104) - Destination: dc2-leaf1a Ethernet1 (IP: 10.255.255.105),NOT RUN, +2499,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.108) - Destination: dc2-leaf1b Ethernet1 (IP: 10.255.255.109),NOT RUN, +2500,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet3 (IP: 10.255.255.112) - Destination: dc2-leaf2a Ethernet1 (IP: 10.255.255.113),NOT RUN, +2501,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet4 (IP: 10.255.255.116) - Destination: dc2-leaf2b Ethernet1 (IP: 10.255.255.117),NOT RUN, +2502,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet5 (IP: 10.255.255.120) - Destination: dc2-leaf3a.arista.com Ethernet1 (IP: 10.255.255.121),NOT RUN, +2503,dc2-spine1,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 10.255.255.124) - Destination: dc2-leaf3b.arista.com Ethernet1 (IP: 10.255.255.125),NOT RUN, +2504,dc2-spine1,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +2505,dc2-spine1,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +2506,dc2-spine1,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +2507,dc2-spine1,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +2508,dc2-spine1,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +2509,dc2-spine1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +2510,dc2-spine1,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +2511,dc2-spine1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +2512,dc2-spine1,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +2513,dc2-spine1,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +2514,dc2-spine1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2515,dc2-spine1,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2516,dc2-spine1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +2517,dc2-spine1,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +2518,dc2-spine1,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +2519,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet1 = 'up',NOT RUN, +2520,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet1 = 'up',NOT RUN, +2521,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet1 = 'up',NOT RUN, +2522,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet1 = 'up',NOT RUN, +2523,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet1 = 'up',NOT RUN, +2524,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet1 = 'up',NOT RUN, +2525,dc2-spine1,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +2526,dc2-spine1,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +2527,dc2-spine1,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2528,dc2-spine1,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2529,dc2-spine1,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2530,dc2-spine1,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2531,dc2-spine1,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2532,dc2-spine1,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +2533,dc2-spine1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2534,dc2-spine1,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2535,dc2-spine1,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2536,dc2-spine1,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2537,dc2-spine1,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2538,dc2-spine1,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2539,dc2-spine1,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2540,dc2-spine1,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2541,dc2-spine1,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2542,dc2-spine1,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2543,dc2-spine1,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2544,dc2-spine1,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2545,dc2-spine1,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2546,dc2-spine1,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2547,dc2-spine1,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2548,dc2-spine1,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2549,dc2-spine1,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2550,dc2-spine1,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2551,dc2-spine1,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2552,dc2-spine1,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2553,dc2-spine1,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2554,dc2-spine1,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2555,dc2-spine1,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2556,dc2-spine1,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2557,dc2-spine1,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2558,dc2-spine1,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2559,dc2-spine1,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2560,dc2-spine1,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2561,dc2-spine1,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2562,dc2-spine1,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2563,dc2-spine1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2564,dc2-spine1,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2565,dc2-spine1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2566,dc2-spine1,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2567,dc2-spine1,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2568,dc2-spine1,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, +2569,dc2-spine2,AAA,VerifyAcctConsoleMethods,"Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2570,dc2-spine2,AAA,VerifyAcctDefaultMethods,"Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x).",,NOT RUN, +2571,dc2-spine2,AAA,VerifyAuthenMethods,"Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x).",,NOT RUN, +2572,dc2-spine2,AAA,VerifyAuthzMethods,"Verifies the AAA authorization method lists for different authorization types (commands, exec).",,NOT RUN, +2573,dc2-spine2,AAA,VerifyTacacsServerGroups,Verifies if the provided TACACS server group(s) are configured.,,NOT RUN, +2574,dc2-spine2,AAA,VerifyTacacsServers,Verifies TACACS servers are configured for a specified VRF.,,NOT RUN, +2575,dc2-spine2,AAA,VerifyTacacsSourceIntf,Verifies TACACS source-interface for a specified VRF.,,NOT RUN, +2576,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13),NOT RUN, +2577,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14),NOT RUN, +2578,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15),NOT RUN, +2579,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16),NOT RUN, +2580,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17),NOT RUN, +2581,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18),NOT RUN, +2582,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.107),NOT RUN, +2583,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.111),NOT RUN, +2584,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.115),NOT RUN, +2585,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.119),NOT RUN, +2586,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.123),NOT RUN, +2587,dc2-spine2,BGP,VerifyBGPSpecificPeers,Verifies the health of specific BGP peer(s).,BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.127),NOT RUN, +2588,dc2-spine2,Configuration,VerifyRunningConfigDiffs,Verifies there is no difference between the running-config and the startup-config,,NOT RUN, +2589,dc2-spine2,Configuration,VerifyZeroTouch,Verifies ZeroTouch is disabled,,NOT RUN, +2590,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet1 - Remote: dc2-leaf1a Ethernet2,NOT RUN, +2591,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet2 - Remote: dc2-leaf1b Ethernet2,NOT RUN, +2592,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet3 - Remote: dc2-leaf2a Ethernet2,NOT RUN, +2593,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet4 - Remote: dc2-leaf2b Ethernet2,NOT RUN, +2594,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet2,NOT RUN, +2595,dc2-spine2,Connectivity,VerifyLLDPNeighbors,Verifies that the provided LLDP neighbors are connected properly.,Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet2,NOT RUN, +2596,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet1 (IP: 10.255.255.106) - Destination: dc2-leaf1a Ethernet2 (IP: 10.255.255.107),NOT RUN, +2597,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet2 (IP: 10.255.255.110) - Destination: dc2-leaf1b Ethernet2 (IP: 10.255.255.111),NOT RUN, +2598,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet3 (IP: 10.255.255.114) - Destination: dc2-leaf2a Ethernet2 (IP: 10.255.255.115),NOT RUN, +2599,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet4 (IP: 10.255.255.118) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119),NOT RUN, +2600,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet5 (IP: 10.255.255.122) - Destination: dc2-leaf3a.arista.com Ethernet2 (IP: 10.255.255.123),NOT RUN, +2601,dc2-spine2,Connectivity,VerifyReachability,Test the network reachability to one or many destination IP(s).,Source: P2P Interface Ethernet6 (IP: 10.255.255.126) - Destination: dc2-leaf3b.arista.com Ethernet2 (IP: 10.255.255.127),NOT RUN, +2602,dc2-spine2,Field Notices,VerifyFieldNotice44Resolution,Verifies that the device is using the correct Aboot version per FN0044.,,NOT RUN, +2603,dc2-spine2,Field Notices,VerifyFieldNotice72Resolution,"Verifies if the device is exposed to FN0072, and if the issue has been mitigated.",,NOT RUN, +2604,dc2-spine2,Greent,VerifyGreenT,Verifies if a GreenT policy is created.,,NOT RUN, +2605,dc2-spine2,Greent,VerifyGreenTCounters,Verifies if the GreenT counters are incremented.,,NOT RUN, +2606,dc2-spine2,Hardware,VerifyAdverseDrops,Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches.,,NOT RUN, +2607,dc2-spine2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,,NOT RUN, +2608,dc2-spine2,Hardware,VerifyEnvironmentCooling,Verifies the status of power supply fans and all fan trays.,Accepted States: 'ok',NOT RUN, +2609,dc2-spine2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,,NOT RUN, +2610,dc2-spine2,Hardware,VerifyEnvironmentPower,Verifies the power supplies status.,Accepted States: 'ok',NOT RUN, +2611,dc2-spine2,Hardware,VerifyEnvironmentSystemCooling,Verifies the system cooling status.,,NOT RUN, +2612,dc2-spine2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2613,dc2-spine2,Hardware,VerifyTemperature,Verifies the device temperature.,,NOT RUN, +2614,dc2-spine2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,,NOT RUN, +2615,dc2-spine2,Hardware,VerifyTransceiversManufacturers,Verifies if all transceivers come from approved manufacturers.,"Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present'",NOT RUN, +2616,dc2-spine2,Hardware,VerifyTransceiversTemperature,Verifies the transceivers temperature.,,NOT RUN, +2617,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet2 = 'up',NOT RUN, +2618,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet2 = 'up',NOT RUN, +2619,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet2 = 'up',NOT RUN, +2620,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet2 = 'up',NOT RUN, +2621,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet2 = 'up',NOT RUN, +2622,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet2 = 'up',NOT RUN, +2623,dc2-spine2,Interfaces,VerifyInterfacesStatus,Verifies the status of the provided interfaces.,Interface Loopback0 - ROUTER_ID = 'up',NOT RUN, +2624,dc2-spine2,LANZ,VerifyLANZ,Verifies if LANZ is enabled.,,NOT RUN, +2625,dc2-spine2,PTP,VerifyPtpGMStatus,Verifies that the device is locked to a valid PTP Grandmaster.,,NOT RUN, +2626,dc2-spine2,PTP,VerifyPtpLockStatus,Verifies that the device was locked to the upstream PTP GM in the last minute.,,NOT RUN, +2627,dc2-spine2,PTP,VerifyPtpModeStatus,Verifies that the device is configured as a PTP Boundary Clock.,,NOT RUN, +2628,dc2-spine2,PTP,VerifyPtpOffset,Verifies that the PTP timing offset is within +/- 1000ns from the master clock.,,NOT RUN, +2629,dc2-spine2,PTP,VerifyPtpPortModeStatus,Verifies the PTP interfaces state.,,NOT RUN, +2630,dc2-spine2,Routing,VerifyRoutingProtocolModel,Verifies the configured routing protocol model.,Routing protocol model: multi-agent,NOT RUN, +2631,dc2-spine2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,,NOT RUN, +2632,dc2-spine2,Security,VerifyAPIHttpsSSL,Verifies if the eAPI has a valid SSL profile.,eAPI HTTPS SSL Profile: eAPI_SSL_Profile,NOT RUN, +2633,dc2-spine2,Security,VerifyAPIHttpStatus,Verifies if eAPI HTTP server is disabled globally.,,NOT RUN, +2634,dc2-spine2,Security,VerifyAPIIPv4Acl,Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF.,,NOT RUN, +2635,dc2-spine2,Security,VerifyAPIIPv6Acl,Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF.,,NOT RUN, +2636,dc2-spine2,Security,VerifyAPISSLCertificate,"Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size.",,NOT RUN, +2637,dc2-spine2,Security,VerifyBannerLogin,Verifies the login banner of a device.,,NOT RUN, +2638,dc2-spine2,Security,VerifyBannerMotd,Verifies the motd banner of a device.,,NOT RUN, +2639,dc2-spine2,Security,VerifyIPSecConnHealth,Verifies all IPv4 security connections.,,NOT RUN, +2640,dc2-spine2,Security,VerifyIPv4ACL,Verifies the configuration of IPv4 ACLs.,,NOT RUN, +2641,dc2-spine2,Security,VerifySpecificIPSecConn,Verifies IPv4 security connections for a peer.,,NOT RUN, +2642,dc2-spine2,Security,VerifySSHIPv4Acl,Verifies if the SSHD agent has IPv4 ACL(s) configured.,,NOT RUN, +2643,dc2-spine2,Security,VerifySSHIPv6Acl,Verifies if the SSHD agent has IPv6 ACL(s) configured.,,NOT RUN, +2644,dc2-spine2,Security,VerifySSHStatus,Verifies if the SSHD agent is disabled in the default VRF.,,NOT RUN, +2645,dc2-spine2,Security,VerifyTelnetStatus,Verifies if Telnet is disabled in the default VRF.,,NOT RUN, +2646,dc2-spine2,Services,VerifyDNSLookup,Verifies the DNS name to IP address resolution.,,NOT RUN, +2647,dc2-spine2,Services,VerifyDNSServers,Verifies if the DNS servers are correctly configured.,,NOT RUN, +2648,dc2-spine2,Services,VerifyErrdisableRecovery,"Verifies the errdisable recovery reason, status, and interval.",,NOT RUN, +2649,dc2-spine2,Services,VerifyHostname,Verifies the hostname of a device.,,NOT RUN, +2650,dc2-spine2,SNMP,VerifySnmpIPv4Acl,Verifies if the SNMP agent has IPv4 ACL(s) configured.,,NOT RUN, +2651,dc2-spine2,SNMP,VerifySnmpIPv6Acl,Verifies if the SNMP agent has IPv6 ACL(s) configured.,,NOT RUN, +2652,dc2-spine2,SNMP,VerifySnmpStatus,Verifies if the SNMP agent is enabled.,,NOT RUN, +2653,dc2-spine2,Software,VerifyEOSVersion,Verifies the EOS version of the device.,,NOT RUN, +2654,dc2-spine2,Software,VerifyTerminAttrVersion,Verifies the TerminAttr version of the device.,,NOT RUN, +2655,dc2-spine2,STUN,VerifyStunClient,Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided.,,NOT RUN, +2656,dc2-spine2,System,VerifyAgentLogs,Verifies there are no agent crash reports.,,NOT RUN, +2657,dc2-spine2,System,VerifyCoredump,Verifies there are no core dump files.,,NOT RUN, +2658,dc2-spine2,System,VerifyCPUUtilization,Verifies whether the CPU utilization is below 75%.,,NOT RUN, +2659,dc2-spine2,System,VerifyFileSystemUtilization,Verifies that no partition is utilizing more than 75% of its disk space.,,NOT RUN, +2660,dc2-spine2,System,VerifyMemoryUtilization,Verifies whether the memory utilization is below 75%.,,NOT RUN, +2661,dc2-spine2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2662,dc2-spine2,System,VerifyNTP,Verifies if NTP is synchronised.,,NOT RUN, +2663,dc2-spine2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2664,dc2-spine2,System,VerifyReloadCause,Verifies the last reload cause of the device.,,NOT RUN, +2665,dc2-spine2,System,VerifyUptime,Verifies the device uptime.,,NOT RUN, +2666,dc2-spine2,VLAN,VerifyVlanInternalPolicy,Verifies the VLAN internal allocation policy and the range of VLANs.,,NOT RUN, diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.md b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.md index 7999b4c84c7..a326046e56e 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.md +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/FABRIC-state.md @@ -13,7 +13,7 @@ | Total Tests | Total Tests Passed | Total Tests Failed | Total Tests Skipped | | ----------- | ------------------ | ------------------ | ------------------- | -| 2652 | 0 | 0 | 0 | +| 2666 | 0 | 0 | 0 | ### Summary Totals Device Under Test @@ -28,15 +28,15 @@ | dc1-spine2 | 116 | 0 | 0 | 0 | - | - | | dc1-svc-leaf1a | 129 | 0 | 0 | 0 | - | - | | dc1-svc-leaf1b | 129 | 0 | 0 | 0 | - | - | -| dc1-wan1 | 94 | 0 | 0 | 0 | - | - | -| dc1-wan2 | 94 | 0 | 0 | 0 | - | - | +| dc1-wan1 | 96 | 0 | 0 | 0 | - | - | +| dc1-wan2 | 96 | 0 | 0 | 0 | - | - | | dc2-leaf1a | 162 | 0 | 0 | 0 | - | - | | dc2-leaf1b | 162 | 0 | 0 | 0 | - | - | | dc2-leaf1c | 72 | 0 | 0 | 0 | - | - | | dc2-leaf2a | 167 | 0 | 0 | 0 | - | - | | dc2-leaf2b | 163 | 0 | 0 | 0 | - | - | | dc2-leaf2c | 72 | 0 | 0 | 0 | - | - | -| dc2-leaf3a.arista.com | 159 | 0 | 0 | 0 | - | - | +| dc2-leaf3a.arista.com | 169 | 0 | 0 | 0 | - | - | | dc2-leaf3b.arista.com | 159 | 0 | 0 | 0 | - | - | | dc2-spine1 | 98 | 0 | 0 | 0 | - | - | | dc2-spine2 | 98 | 0 | 0 | 0 | - | - | @@ -49,11 +49,11 @@ | BFD | 6 | 0 | 0 | 0 | | BGP | 131 | 0 | 0 | 0 | | Configuration | 42 | 0 | 0 | 0 | -| Connectivity | 363 | 0 | 0 | 0 | +| Connectivity | 369 | 0 | 0 | 0 | | Field Notices | 42 | 0 | 0 | 0 | | Greent | 42 | 0 | 0 | 0 | | Hardware | 231 | 0 | 0 | 0 | -| Interfaces | 311 | 0 | 0 | 0 | +| Interfaces | 319 | 0 | 0 | 0 | | LANZ | 21 | 0 | 0 | 0 | | Logging | 48 | 0 | 0 | 0 | | MLAG | 41 | 0 | 0 | 0 | @@ -143,28 +143,28 @@ | 60 | dc1-leaf1a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 61 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet1 = 'up' | NOT RUN | - | | 62 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet1 = 'up' | NOT RUN | - | -| 63 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc1-leaf1b_Ethernet3 = 'up' | NOT RUN | - | -| 64 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc1-leaf1b_Ethernet4 = 'up' | NOT RUN | - | -| 65 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc1-leaf1-server1_PCI1 = 'up' | NOT RUN | - | +| 63 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc1-leaf1b_Ethernet3 = 'up' | NOT RUN | - | +| 64 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc1-leaf1b_Ethernet4 = 'up' | NOT RUN | - | +| 65 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI1 = 'up' | NOT RUN | - | | 66 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC1-WAN1_Ethernet1 = 'up' | NOT RUN | - | | 67 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet7 - P2P_LINK_TO_DC1-WAN2_Ethernet1 = 'up' | NOT RUN | - | | 68 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC1-LEAF1C_Ethernet1 = 'up' | NOT RUN | - | -| 69 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 70 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | +| 69 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 70 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | | 71 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | | 72 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 73 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc1-leaf1b_Po3 = 'up' | NOT RUN | - | -| 74 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up' | NOT RUN | - | +| 73 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc1-leaf1b_Port-Channel3 = 'up' | NOT RUN | - | +| 74 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up' | NOT RUN | - | | 75 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC1-LEAF1C_Po1 = 'up' | NOT RUN | - | | 76 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | | 77 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | | 78 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | | 79 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 80 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 81 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | +| 80 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 81 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | | 82 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4085 - Inband Management = 'up' | NOT RUN | - | -| 83 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 84 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | +| 83 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 84 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | | 85 | dc1-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | | 86 | dc1-leaf1a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | | 87 | dc1-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | @@ -302,28 +302,28 @@ | 219 | dc1-leaf1b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 220 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet2 = 'up' | NOT RUN | - | | 221 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet2 = 'up' | NOT RUN | - | -| 222 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc1-leaf1a_Ethernet3 = 'up' | NOT RUN | - | -| 223 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc1-leaf1a_Ethernet4 = 'up' | NOT RUN | - | -| 224 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc1-leaf1-server1_PCI2 = 'up' | NOT RUN | - | +| 222 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc1-leaf1a_Ethernet3 = 'up' | NOT RUN | - | +| 223 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc1-leaf1a_Ethernet4 = 'up' | NOT RUN | - | +| 224 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI2 = 'up' | NOT RUN | - | | 225 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC1-WAN1_Ethernet2 = 'up' | NOT RUN | - | | 226 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet7 - P2P_LINK_TO_DC1-WAN2_Ethernet2 = 'up' | NOT RUN | - | | 227 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC1-LEAF1C_Ethernet2 = 'up' | NOT RUN | - | -| 228 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 229 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | +| 228 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 229 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | | 230 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | | 231 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 232 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc1-leaf1a_Po3 = 'up' | NOT RUN | - | -| 233 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up' | NOT RUN | - | +| 232 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc1-leaf1a_Port-Channel3 = 'up' | NOT RUN | - | +| 233 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up' | NOT RUN | - | | 234 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC1-LEAF1C_Po1 = 'up' | NOT RUN | - | | 235 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | | 236 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | | 237 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | | 238 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 239 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 240 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | +| 239 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 240 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | | 241 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4085 - Inband Management = 'up' | NOT RUN | - | -| 242 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 243 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | +| 242 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 243 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | | 244 | dc1-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | | 245 | dc1-leaf1b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | | 246 | dc1-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | @@ -437,7 +437,7 @@ | 354 | dc1-leaf1c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 355 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC1-LEAF1A_Ethernet8 = 'up' | NOT RUN | - | | 356 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC1-LEAF1B_Ethernet8 = 'up' | NOT RUN | - | -| 357 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc1-leaf1-server1_iLO = 'up' | NOT RUN | - | +| 357 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc1-leaf1-server1_iLO = 'up' | NOT RUN | - | | 358 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC1_L3_LEAF1_Po8 = 'up' | NOT RUN | - | | 359 | dc1-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4085 - L2LEAF_INBAND_MGMT = 'up' | NOT RUN | - | | 360 | dc1-leaf1c | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | @@ -538,27 +538,27 @@ | 455 | dc1-leaf2a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 456 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet3 = 'up' | NOT RUN | - | | 457 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet3 = 'up' | NOT RUN | - | -| 458 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc1-leaf2b_Ethernet3 = 'up' | NOT RUN | - | -| 459 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc1-leaf2b_Ethernet4 = 'up' | NOT RUN | - | -| 460 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc1-leaf2-server1_PCI1 = 'up' | NOT RUN | - | +| 458 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc1-leaf2b_Ethernet3 = 'up' | NOT RUN | - | +| 459 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc1-leaf2b_Ethernet4 = 'up' | NOT RUN | - | +| 460 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc1-leaf2-server1_PCI1 = 'up' | NOT RUN | - | | 461 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_dc2-leaf2a_Ethernet6 = 'up' | NOT RUN | - | | 462 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC1-LEAF2C_Ethernet1 = 'up' | NOT RUN | - | -| 463 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 464 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | +| 463 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 464 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | | 465 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | | 466 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 467 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc1-leaf2b_Po3 = 'up' | NOT RUN | - | -| 468 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up' | NOT RUN | - | +| 467 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc1-leaf2b_Port-Channel3 = 'up' | NOT RUN | - | +| 468 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - SERVER_dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up' | NOT RUN | - | | 469 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC1-LEAF2C_Po1 = 'up' | NOT RUN | - | | 470 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | | 471 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | | 472 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | | 473 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 474 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 475 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | +| 474 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 475 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | | 476 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4085 - Inband Management = 'up' | NOT RUN | - | -| 477 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 478 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | +| 477 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 478 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | | 479 | dc1-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | | 480 | dc1-leaf2a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | | 481 | dc1-leaf2a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | @@ -674,7 +674,7 @@ | 591 | dc1-leaf2c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 592 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC1-LEAF2A_Ethernet8 = 'up' | NOT RUN | - | | 593 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC1-LEAF2B_Ethernet8 = 'adminDown' | NOT RUN | - | -| 594 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc1-leaf2-server1_iLO = 'up' | NOT RUN | - | +| 594 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc1-leaf2-server1_iLO = 'up' | NOT RUN | - | | 595 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC1_L3_LEAF2_Po8 = 'up' | NOT RUN | - | | 596 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4085 - L2LEAF_INBAND_MGMT = 'up' | NOT RUN | - | | 597 | dc1-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | @@ -802,7 +802,7 @@ | 719 | dc1-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC1-LEAF2B_Ethernet1 = 'adminDown' | NOT RUN | - | | 720 | dc1-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet1 = 'up' | NOT RUN | - | | 721 | dc1-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet1 = 'up' | NOT RUN | - | -| 722 | dc1-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | +| 722 | dc1-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | | 723 | dc1-spine1 | Interfaces | VerifyInterfaceUtilization | Verifies that the utilization of interfaces is below a certain threshold. | - | NOT RUN | - | | 724 | dc1-spine1 | Interfaces | VerifyIPProxyARP | Verifies if Proxy ARP is enabled. | - | NOT RUN | - | | 725 | dc1-spine1 | Interfaces | VerifyL2MTU | Verifies the global L2 MTU of all L2 interfaces. | - | NOT RUN | - | @@ -918,7 +918,7 @@ | 835 | dc1-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC1-LEAF2B_Ethernet2 = 'adminDown' | NOT RUN | - | | 836 | dc1-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC1-SVC-LEAF1A_Ethernet2 = 'up' | NOT RUN | - | | 837 | dc1-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC1-SVC-LEAF1B_Ethernet2 = 'up' | NOT RUN | - | -| 838 | dc1-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | +| 838 | dc1-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | | 839 | dc1-spine2 | Interfaces | VerifyInterfaceUtilization | Verifies that the utilization of interfaces is below a certain threshold. | - | NOT RUN | - | | 840 | dc1-spine2 | Interfaces | VerifyIPProxyARP | Verifies if Proxy ARP is enabled. | - | NOT RUN | - | | 841 | dc1-spine2 | Interfaces | VerifyL2MTU | Verifies the global L2 MTU of all L2 interfaces. | - | NOT RUN | - | @@ -1029,13 +1029,13 @@ | 946 | dc1-svc-leaf1a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 947 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet5 = 'up' | NOT RUN | - | | 948 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet5 = 'up' | NOT RUN | - | -| 949 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1b_Ethernet3 = 'up' | NOT RUN | - | -| 950 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1b_Ethernet4 = 'up' | NOT RUN | - | -| 951 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 952 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 953 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1b_Po3 = 'up' | NOT RUN | - | -| 954 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 955 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | +| 949 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc1-svc-leaf1b_Ethernet3 = 'up' | NOT RUN | - | +| 950 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc1-svc-leaf1b_Ethernet4 = 'up' | NOT RUN | - | +| 951 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 952 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 953 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc1-svc-leaf1b_Port-Channel3 = 'up' | NOT RUN | - | +| 954 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 955 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | | 956 | dc1-svc-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | | 957 | dc1-svc-leaf1a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | | 958 | dc1-svc-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | @@ -1158,13 +1158,13 @@ | 1075 | dc1-svc-leaf1b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | | 1076 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-SPINE1_Ethernet6 = 'up' | NOT RUN | - | | 1077 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-SPINE2_Ethernet6 = 'up' | NOT RUN | - | -| 1078 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1a_Ethernet3 = 'up' | NOT RUN | - | -| 1079 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1a_Ethernet4 = 'up' | NOT RUN | - | -| 1080 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 1081 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 1082 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1a_Po3 = 'up' | NOT RUN | - | -| 1083 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 1084 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | +| 1078 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc1-svc-leaf1a_Ethernet3 = 'up' | NOT RUN | - | +| 1079 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc1-svc-leaf1a_Ethernet4 = 'up' | NOT RUN | - | +| 1080 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1081 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 1082 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc1-svc-leaf1a_Port-Channel3 = 'up' | NOT RUN | - | +| 1083 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 1084 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | | 1085 | dc1-svc-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | | 1086 | dc1-svc-leaf1b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | | 1087 | dc1-svc-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | @@ -1255,1481 +1255,1495 @@ | 1172 | dc1-wan1 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | | 1173 | dc1-wan1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc1-leaf1a Ethernet6 | NOT RUN | - | | 1174 | dc1-wan1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc1-leaf1b Ethernet6 | NOT RUN | - | -| 1175 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.1) - Destination: dc1-leaf1a Ethernet6 (IP: 10.255.255.0) | NOT RUN | - | -| 1176 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.3) - Destination: dc1-leaf1b Ethernet6 (IP: 10.255.255.2) | NOT RUN | - | -| 1177 | dc1-wan1 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1178 | dc1-wan1 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1179 | dc1-wan1 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1180 | dc1-wan1 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1181 | dc1-wan1 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1182 | dc1-wan1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1183 | dc1-wan1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1184 | dc1-wan1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1185 | dc1-wan1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1186 | dc1-wan1 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1187 | dc1-wan1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1188 | dc1-wan1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1189 | dc1-wan1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1190 | dc1-wan1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1191 | dc1-wan1 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1192 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Dps1 - DPS Interface = 'up' | NOT RUN | - | -| 1193 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet6 = 'up' | NOT RUN | - | -| 1194 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet6 = 'up' | NOT RUN | - | -| 1195 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - mpls-sp-1_DC1-MPLS-3 = 'up' | NOT RUN | - | -| 1196 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - isp-1_DC1-INET-3 = 'up' | NOT RUN | - | -| 1197 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - Router_ID = 'up' | NOT RUN | - | -| 1198 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1199 | dc1-wan1 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1200 | dc1-wan1 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1201 | dc1-wan1 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1202 | dc1-wan1 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1203 | dc1-wan1 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1204 | dc1-wan1 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1205 | dc1-wan1 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 1206 | dc1-wan1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1207 | dc1-wan1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1208 | dc1-wan1 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1209 | dc1-wan1 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1210 | dc1-wan1 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1211 | dc1-wan1 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1212 | dc1-wan1 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1213 | dc1-wan1 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1214 | dc1-wan1 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1215 | dc1-wan1 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1216 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1217 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.1.2 VRF: default | NOT RUN | - | -| 1218 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.10 VRF: default | NOT RUN | - | -| 1219 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.20 VRF: default | NOT RUN | - | -| 1220 | dc1-wan1 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1221 | dc1-wan1 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1222 | dc1-wan1 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1223 | dc1-wan1 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1224 | dc1-wan1 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1225 | dc1-wan1 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1226 | dc1-wan1 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1227 | dc1-wan1 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1228 | dc1-wan1 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1229 | dc1-wan1 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1230 | dc1-wan1 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1231 | dc1-wan1 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1232 | dc1-wan1 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1233 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1234 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 100.64.3.2 Source Port: 4500 | NOT RUN | - | -| 1235 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 172.18.3.2 Source Port: 4500 | NOT RUN | - | -| 1236 | dc1-wan1 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1237 | dc1-wan1 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1238 | dc1-wan1 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1239 | dc1-wan1 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1240 | dc1-wan1 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1241 | dc1-wan1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1242 | dc1-wan1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1243 | dc1-wan1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1244 | dc1-wan1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1245 | dc1-wan1 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1246 | dc1-wan1 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1247 | dc1-wan2 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1248 | dc1-wan2 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1249 | dc1-wan2 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1250 | dc1-wan2 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1251 | dc1-wan2 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1252 | dc1-wan2 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1253 | dc1-wan2 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1254 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | -| 1255 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | -| 1256 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-wan1 (IP: 10.255.1.1) | NOT RUN | - | -| 1257 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 SR-TE Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | -| 1258 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 SR-TE Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | -| 1259 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf1a (IP: 10.255.255.4) | NOT RUN | - | -| 1260 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf1b (IP: 10.255.255.6) | NOT RUN | - | -| 1261 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Link-State Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | -| 1262 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Link-State Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | -| 1263 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Path-Selection Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | -| 1264 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Path-Selection Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | -| 1265 | dc1-wan2 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1266 | dc1-wan2 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1267 | dc1-wan2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc1-leaf1a Ethernet7 | NOT RUN | - | -| 1268 | dc1-wan2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc1-leaf1b Ethernet7 | NOT RUN | - | -| 1269 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.5) - Destination: dc1-leaf1a Ethernet7 (IP: 10.255.255.4) | NOT RUN | - | -| 1270 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.7) - Destination: dc1-leaf1b Ethernet7 (IP: 10.255.255.6) | NOT RUN | - | -| 1271 | dc1-wan2 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1272 | dc1-wan2 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1273 | dc1-wan2 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1274 | dc1-wan2 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1275 | dc1-wan2 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1276 | dc1-wan2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1277 | dc1-wan2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1278 | dc1-wan2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1279 | dc1-wan2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1280 | dc1-wan2 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1281 | dc1-wan2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1282 | dc1-wan2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1283 | dc1-wan2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1284 | dc1-wan2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1285 | dc1-wan2 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1286 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Dps1 - DPS Interface = 'up' | NOT RUN | - | -| 1287 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet7 = 'up' | NOT RUN | - | -| 1288 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet7 = 'up' | NOT RUN | - | -| 1289 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - mpls-sp-1_DC1-MPLS-4 = 'up' | NOT RUN | - | -| 1290 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - isp-1_DC1-INET-4 = 'up' | NOT RUN | - | -| 1291 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - Router_ID = 'up' | NOT RUN | - | -| 1292 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1293 | dc1-wan2 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1294 | dc1-wan2 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1295 | dc1-wan2 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1296 | dc1-wan2 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1297 | dc1-wan2 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1298 | dc1-wan2 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1299 | dc1-wan2 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 1300 | dc1-wan2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1301 | dc1-wan2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1302 | dc1-wan2 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1303 | dc1-wan2 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1304 | dc1-wan2 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1305 | dc1-wan2 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1306 | dc1-wan2 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1307 | dc1-wan2 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1308 | dc1-wan2 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1309 | dc1-wan2 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1310 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1311 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.1.1 VRF: default | NOT RUN | - | -| 1312 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.10 VRF: default | NOT RUN | - | -| 1313 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.20 VRF: default | NOT RUN | - | -| 1314 | dc1-wan2 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1315 | dc1-wan2 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1316 | dc1-wan2 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1317 | dc1-wan2 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1318 | dc1-wan2 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1319 | dc1-wan2 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1320 | dc1-wan2 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1321 | dc1-wan2 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1322 | dc1-wan2 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1323 | dc1-wan2 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1324 | dc1-wan2 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1325 | dc1-wan2 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1326 | dc1-wan2 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1327 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1328 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 100.64.4.2 Source Port: 4500 | NOT RUN | - | -| 1329 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 172.18.4.2 Source Port: 4500 | NOT RUN | - | -| 1330 | dc1-wan2 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1331 | dc1-wan2 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1332 | dc1-wan2 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1333 | dc1-wan2 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1334 | dc1-wan2 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1335 | dc1-wan2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1336 | dc1-wan2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1337 | dc1-wan2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1338 | dc1-wan2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1339 | dc1-wan2 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1340 | dc1-wan2 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1341 | dc2-leaf1a | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1342 | dc2-leaf1a | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1343 | dc2-leaf1a | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1344 | dc2-leaf1a | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1345 | dc2-leaf1a | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1346 | dc2-leaf1a | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1347 | dc2-leaf1a | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1348 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 1349 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 1350 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.129.117) | NOT RUN | - | -| 1351 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.104) | NOT RUN | - | -| 1352 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.106) | NOT RUN | - | -| 1353 | dc2-leaf1a | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1354 | dc2-leaf1a | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1355 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet1 | NOT RUN | - | -| 1356 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet1 | NOT RUN | - | -| 1357 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf1b Ethernet3 | NOT RUN | - | -| 1358 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf1b Ethernet4 | NOT RUN | - | -| 1359 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf1c Ethernet1 | NOT RUN | - | -| 1360 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 1361 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 1362 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 1363 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 1364 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 1365 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 1366 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 1367 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 1368 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 1369 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 1370 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 1371 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 1372 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 1373 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 1374 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 1375 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 1376 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 1377 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.105) - Destination: dc2-spine1 Ethernet1 (IP: 10.255.255.104) | NOT RUN | - | -| 1378 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.107) - Destination: dc2-spine2 Ethernet1 (IP: 10.255.255.106) | NOT RUN | - | -| 1379 | dc2-leaf1a | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1380 | dc2-leaf1a | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1381 | dc2-leaf1a | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1382 | dc2-leaf1a | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1383 | dc2-leaf1a | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1384 | dc2-leaf1a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1385 | dc2-leaf1a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1386 | dc2-leaf1a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1387 | dc2-leaf1a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1388 | dc2-leaf1a | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1389 | dc2-leaf1a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1390 | dc2-leaf1a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1391 | dc2-leaf1a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1392 | dc2-leaf1a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1393 | dc2-leaf1a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1394 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet1 = 'up' | NOT RUN | - | -| 1395 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet1 = 'up' | NOT RUN | - | -| 1396 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf1b_Ethernet3 = 'up' | NOT RUN | - | -| 1397 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf1b_Ethernet4 = 'up' | NOT RUN | - | -| 1398 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf1-server1_PCI1 = 'up' | NOT RUN | - | -| 1399 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF1C_Ethernet1 = 'up' | NOT RUN | - | -| 1400 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 1401 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 1402 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1403 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1404 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf1b_Po3 = 'up' | NOT RUN | - | -| 1405 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up' | NOT RUN | - | -| 1406 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up' | NOT RUN | - | -| 1407 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 1408 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 1409 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 1410 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 1411 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 1412 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 1413 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 1414 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 1415 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1416 | dc2-leaf1a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1417 | dc2-leaf1a | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 1418 | dc2-leaf1a | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 1419 | dc2-leaf1a | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 1420 | dc2-leaf1a | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 1421 | dc2-leaf1a | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 1422 | dc2-leaf1a | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 1423 | dc2-leaf1a | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 1424 | dc2-leaf1a | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 1425 | dc2-leaf1a | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 1426 | dc2-leaf1a | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 1427 | dc2-leaf1a | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 1428 | dc2-leaf1a | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 1429 | dc2-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1430 | dc2-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1431 | dc2-leaf1a | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 1432 | dc2-leaf1a | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 1433 | dc2-leaf1a | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1434 | dc2-leaf1a | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1435 | dc2-leaf1a | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1436 | dc2-leaf1a | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1437 | dc2-leaf1a | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1438 | dc2-leaf1a | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 1439 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 1440 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 1441 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1442 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 1443 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1444 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1445 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1446 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 1447 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 1448 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1449 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 1450 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1451 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 1452 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1453 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 1454 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1455 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1456 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1457 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 1458 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 1459 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1460 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 1461 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1462 | dc2-leaf1a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1463 | dc2-leaf1a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1464 | dc2-leaf1a | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1465 | dc2-leaf1a | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1466 | dc2-leaf1a | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1467 | dc2-leaf1a | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1468 | dc2-leaf1a | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1469 | dc2-leaf1a | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1470 | dc2-leaf1a | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1471 | dc2-leaf1a | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1472 | dc2-leaf1a | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1473 | dc2-leaf1a | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1474 | dc2-leaf1a | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1475 | dc2-leaf1a | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1476 | dc2-leaf1a | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1477 | dc2-leaf1a | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1478 | dc2-leaf1a | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1479 | dc2-leaf1a | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1480 | dc2-leaf1a | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1481 | dc2-leaf1a | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1482 | dc2-leaf1a | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1483 | dc2-leaf1a | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1484 | dc2-leaf1a | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1485 | dc2-leaf1a | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1486 | dc2-leaf1a | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 1487 | dc2-leaf1a | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 1488 | dc2-leaf1a | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 1489 | dc2-leaf1a | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 1490 | dc2-leaf1a | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 1491 | dc2-leaf1a | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1492 | dc2-leaf1a | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1493 | dc2-leaf1a | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1494 | dc2-leaf1a | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1495 | dc2-leaf1a | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1496 | dc2-leaf1a | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1497 | dc2-leaf1a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1498 | dc2-leaf1a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1499 | dc2-leaf1a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1500 | dc2-leaf1a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1501 | dc2-leaf1a | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1502 | dc2-leaf1a | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1503 | dc2-leaf1b | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1504 | dc2-leaf1b | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1505 | dc2-leaf1b | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1506 | dc2-leaf1b | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1507 | dc2-leaf1b | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1508 | dc2-leaf1b | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1509 | dc2-leaf1b | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1510 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 1511 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 1512 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.129.116) | NOT RUN | - | -| 1513 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.108) | NOT RUN | - | -| 1514 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.110) | NOT RUN | - | -| 1515 | dc2-leaf1b | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1516 | dc2-leaf1b | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1517 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet2 | NOT RUN | - | -| 1518 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet2 | NOT RUN | - | -| 1519 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf1a Ethernet3 | NOT RUN | - | -| 1520 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf1a Ethernet4 | NOT RUN | - | -| 1521 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf1c Ethernet2 | NOT RUN | - | -| 1522 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 1523 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 1524 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 1525 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 1526 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 1527 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 1528 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 1529 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 1530 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 1531 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 1532 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 1533 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 1534 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 1535 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 1536 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 1537 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 1538 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 1539 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.109) - Destination: dc2-spine1 Ethernet2 (IP: 10.255.255.108) | NOT RUN | - | -| 1540 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.111) - Destination: dc2-spine2 Ethernet2 (IP: 10.255.255.110) | NOT RUN | - | -| 1541 | dc2-leaf1b | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1542 | dc2-leaf1b | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1543 | dc2-leaf1b | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1544 | dc2-leaf1b | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1545 | dc2-leaf1b | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1546 | dc2-leaf1b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1547 | dc2-leaf1b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1548 | dc2-leaf1b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1549 | dc2-leaf1b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1550 | dc2-leaf1b | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1551 | dc2-leaf1b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1552 | dc2-leaf1b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1553 | dc2-leaf1b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1554 | dc2-leaf1b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1555 | dc2-leaf1b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1556 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet2 = 'up' | NOT RUN | - | -| 1557 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet2 = 'up' | NOT RUN | - | -| 1558 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf1a_Ethernet3 = 'up' | NOT RUN | - | -| 1559 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf1a_Ethernet4 = 'up' | NOT RUN | - | -| 1560 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf1-server1_PCI2 = 'up' | NOT RUN | - | -| 1561 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF1C_Ethernet2 = 'up' | NOT RUN | - | -| 1562 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 1563 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 1564 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1565 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1566 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf1a_Po3 = 'up' | NOT RUN | - | -| 1567 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up' | NOT RUN | - | -| 1568 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up' | NOT RUN | - | -| 1569 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 1570 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 1571 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 1572 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 1573 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 1574 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 1575 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 1576 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 1577 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1578 | dc2-leaf1b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1579 | dc2-leaf1b | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 1580 | dc2-leaf1b | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 1581 | dc2-leaf1b | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 1582 | dc2-leaf1b | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 1583 | dc2-leaf1b | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 1584 | dc2-leaf1b | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 1585 | dc2-leaf1b | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 1586 | dc2-leaf1b | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 1587 | dc2-leaf1b | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 1588 | dc2-leaf1b | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 1589 | dc2-leaf1b | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 1590 | dc2-leaf1b | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 1591 | dc2-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1592 | dc2-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1593 | dc2-leaf1b | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 1594 | dc2-leaf1b | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 1595 | dc2-leaf1b | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1596 | dc2-leaf1b | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1597 | dc2-leaf1b | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1598 | dc2-leaf1b | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1599 | dc2-leaf1b | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1600 | dc2-leaf1b | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 1601 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 1602 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 1603 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1604 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 1605 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1606 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1607 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1608 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 1609 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 1610 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1611 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 1612 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1613 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 1614 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1615 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 1616 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1617 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1618 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1619 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 1620 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 1621 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1622 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 1623 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1624 | dc2-leaf1b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1625 | dc2-leaf1b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1626 | dc2-leaf1b | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1627 | dc2-leaf1b | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1628 | dc2-leaf1b | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1629 | dc2-leaf1b | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1630 | dc2-leaf1b | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1631 | dc2-leaf1b | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1632 | dc2-leaf1b | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1633 | dc2-leaf1b | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1634 | dc2-leaf1b | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1635 | dc2-leaf1b | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1636 | dc2-leaf1b | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1637 | dc2-leaf1b | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1638 | dc2-leaf1b | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1639 | dc2-leaf1b | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1640 | dc2-leaf1b | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1641 | dc2-leaf1b | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1642 | dc2-leaf1b | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1643 | dc2-leaf1b | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1644 | dc2-leaf1b | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1645 | dc2-leaf1b | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1646 | dc2-leaf1b | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1647 | dc2-leaf1b | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1648 | dc2-leaf1b | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 1649 | dc2-leaf1b | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 1650 | dc2-leaf1b | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 1651 | dc2-leaf1b | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 1652 | dc2-leaf1b | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 1653 | dc2-leaf1b | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1654 | dc2-leaf1b | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1655 | dc2-leaf1b | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1656 | dc2-leaf1b | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1657 | dc2-leaf1b | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1658 | dc2-leaf1b | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1659 | dc2-leaf1b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1660 | dc2-leaf1b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1661 | dc2-leaf1b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1662 | dc2-leaf1b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1663 | dc2-leaf1b | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1664 | dc2-leaf1b | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1665 | dc2-leaf1c | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1666 | dc2-leaf1c | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1667 | dc2-leaf1c | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1668 | dc2-leaf1c | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1669 | dc2-leaf1c | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1670 | dc2-leaf1c | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1671 | dc2-leaf1c | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1672 | dc2-leaf1c | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1673 | dc2-leaf1c | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1674 | dc2-leaf1c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet8 | NOT RUN | - | -| 1675 | dc2-leaf1c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet8 | NOT RUN | - | -| 1676 | dc2-leaf1c | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1677 | dc2-leaf1c | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1678 | dc2-leaf1c | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1679 | dc2-leaf1c | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1680 | dc2-leaf1c | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1681 | dc2-leaf1c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1682 | dc2-leaf1c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1683 | dc2-leaf1c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1684 | dc2-leaf1c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1685 | dc2-leaf1c | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1686 | dc2-leaf1c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1687 | dc2-leaf1c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1688 | dc2-leaf1c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1689 | dc2-leaf1c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1690 | dc2-leaf1c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1691 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC2-LEAF1A_Ethernet8 = 'up' | NOT RUN | - | -| 1692 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC2-LEAF1B_Ethernet8 = 'up' | NOT RUN | - | -| 1693 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf1-server1_iLO = 'up' | NOT RUN | - | -| 1694 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC2_L3_LEAF1_Po8 = 'up' | NOT RUN | - | -| 1695 | dc2-leaf1c | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1696 | dc2-leaf1c | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1697 | dc2-leaf1c | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1698 | dc2-leaf1c | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1699 | dc2-leaf1c | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1700 | dc2-leaf1c | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1701 | dc2-leaf1c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1702 | dc2-leaf1c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1703 | dc2-leaf1c | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1704 | dc2-leaf1c | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1705 | dc2-leaf1c | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1706 | dc2-leaf1c | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1707 | dc2-leaf1c | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1708 | dc2-leaf1c | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1709 | dc2-leaf1c | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1710 | dc2-leaf1c | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1711 | dc2-leaf1c | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1712 | dc2-leaf1c | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1713 | dc2-leaf1c | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1714 | dc2-leaf1c | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1715 | dc2-leaf1c | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1716 | dc2-leaf1c | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1717 | dc2-leaf1c | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1718 | dc2-leaf1c | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1719 | dc2-leaf1c | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1720 | dc2-leaf1c | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1721 | dc2-leaf1c | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1722 | dc2-leaf1c | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1723 | dc2-leaf1c | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1724 | dc2-leaf1c | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1725 | dc2-leaf1c | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1726 | dc2-leaf1c | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1727 | dc2-leaf1c | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1728 | dc2-leaf1c | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1729 | dc2-leaf1c | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1730 | dc2-leaf1c | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1731 | dc2-leaf1c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1732 | dc2-leaf1c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1733 | dc2-leaf1c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1734 | dc2-leaf1c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1735 | dc2-leaf1c | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1736 | dc2-leaf1c | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1737 | dc2-leaf2a | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1738 | dc2-leaf2a | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1739 | dc2-leaf2a | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1740 | dc2-leaf2a | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1741 | dc2-leaf2a | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1742 | dc2-leaf2a | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1743 | dc2-leaf2a | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1744 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf2a (IP: 10.255.0.5) | NOT RUN | - | -| 1745 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 1746 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 1747 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf2a (IP: 192.168.100.0) | NOT RUN | - | -| 1748 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.129.121) | NOT RUN | - | -| 1749 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.112) | NOT RUN | - | -| 1750 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.114) | NOT RUN | - | -| 1751 | dc2-leaf2a | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1752 | dc2-leaf2a | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1753 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet3 | NOT RUN | - | -| 1754 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet3 | NOT RUN | - | -| 1755 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2b Ethernet3 | NOT RUN | - | -| 1756 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet4 | NOT RUN | - | -| 1757 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc1-leaf2a Ethernet6 | NOT RUN | - | -| 1758 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf2c Ethernet1 | NOT RUN | - | -| 1759 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 1760 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 1761 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 1762 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 1763 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 1764 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 1765 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 1766 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 1767 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 1768 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 1769 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 1770 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 1771 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 1772 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 1773 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 1774 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 1775 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 1776 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.113) - Destination: dc2-spine1 Ethernet3 (IP: 10.255.255.112) | NOT RUN | - | -| 1777 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.115) - Destination: dc2-spine2 Ethernet3 (IP: 10.255.255.114) | NOT RUN | - | -| 1778 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 192.168.100.1) - Destination: dc1-leaf2a Ethernet6 (IP: 192.168.100.0) | NOT RUN | - | -| 1779 | dc2-leaf2a | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1780 | dc2-leaf2a | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1781 | dc2-leaf2a | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1782 | dc2-leaf2a | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1783 | dc2-leaf2a | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1784 | dc2-leaf2a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1785 | dc2-leaf2a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1786 | dc2-leaf2a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1787 | dc2-leaf2a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1788 | dc2-leaf2a | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1789 | dc2-leaf2a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1790 | dc2-leaf2a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1791 | dc2-leaf2a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1792 | dc2-leaf2a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1793 | dc2-leaf2a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1794 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet3 = 'up' | NOT RUN | - | -| 1795 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet3 = 'up' | NOT RUN | - | -| 1796 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf2b_Ethernet3 = 'up' | NOT RUN | - | -| 1797 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf2b_Ethernet4 = 'up' | NOT RUN | - | -| 1798 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf2-server1_PCI1 = 'up' | NOT RUN | - | -| 1799 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2a_Ethernet6 = 'up' | NOT RUN | - | -| 1800 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF2C_Ethernet1 = 'up' | NOT RUN | - | -| 1801 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 1802 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 1803 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1804 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1805 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf2b_Po3 = 'up' | NOT RUN | - | -| 1806 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up' | NOT RUN | - | -| 1807 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up' | NOT RUN | - | -| 1808 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 1809 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 1810 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 1811 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 1812 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 1813 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 1814 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 1815 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 1816 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1817 | dc2-leaf2a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1818 | dc2-leaf2a | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 1819 | dc2-leaf2a | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 1820 | dc2-leaf2a | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 1821 | dc2-leaf2a | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 1822 | dc2-leaf2a | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 1823 | dc2-leaf2a | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 1824 | dc2-leaf2a | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 1825 | dc2-leaf2a | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 1826 | dc2-leaf2a | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 1827 | dc2-leaf2a | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 1828 | dc2-leaf2a | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 1829 | dc2-leaf2a | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 1830 | dc2-leaf2a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1831 | dc2-leaf2a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1832 | dc2-leaf2a | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 1833 | dc2-leaf2a | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 1834 | dc2-leaf2a | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1835 | dc2-leaf2a | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1836 | dc2-leaf2a | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 1837 | dc2-leaf2a | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 1838 | dc2-leaf2a | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 1839 | dc2-leaf2a | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 1840 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 1841 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 1842 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1843 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 1844 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1845 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 1846 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 1847 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 1848 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 1849 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1850 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 1851 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1852 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 1853 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1854 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 1855 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 1856 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 1857 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 1858 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 1859 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 1860 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1861 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 1862 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 1863 | dc2-leaf2a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 1864 | dc2-leaf2a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 1865 | dc2-leaf2a | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 1866 | dc2-leaf2a | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1867 | dc2-leaf2a | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 1868 | dc2-leaf2a | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 1869 | dc2-leaf2a | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 1870 | dc2-leaf2a | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 1871 | dc2-leaf2a | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 1872 | dc2-leaf2a | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 1873 | dc2-leaf2a | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 1874 | dc2-leaf2a | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1875 | dc2-leaf2a | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1876 | dc2-leaf2a | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 1877 | dc2-leaf2a | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 1878 | dc2-leaf2a | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 1879 | dc2-leaf2a | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 1880 | dc2-leaf2a | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 1881 | dc2-leaf2a | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 1882 | dc2-leaf2a | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 1883 | dc2-leaf2a | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 1884 | dc2-leaf2a | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 1885 | dc2-leaf2a | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 1886 | dc2-leaf2a | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 1887 | dc2-leaf2a | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 1888 | dc2-leaf2a | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 1889 | dc2-leaf2a | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 1890 | dc2-leaf2a | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 1891 | dc2-leaf2a | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 1892 | dc2-leaf2a | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 1893 | dc2-leaf2a | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 1894 | dc2-leaf2a | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 1895 | dc2-leaf2a | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 1896 | dc2-leaf2a | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 1897 | dc2-leaf2a | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 1898 | dc2-leaf2a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1899 | dc2-leaf2a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 1900 | dc2-leaf2a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1901 | dc2-leaf2a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 1902 | dc2-leaf2a | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 1903 | dc2-leaf2a | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 1904 | dc2-leaf2b | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1905 | dc2-leaf2b | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 1906 | dc2-leaf2b | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 1907 | dc2-leaf2b | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 1908 | dc2-leaf2b | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 1909 | dc2-leaf2b | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 1910 | dc2-leaf2b | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 1911 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 1912 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 1913 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.129.120) | NOT RUN | - | -| 1914 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.116) | NOT RUN | - | -| 1915 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.118) | NOT RUN | - | -| 1916 | dc2-leaf2b | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 1917 | dc2-leaf2b | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 1918 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet4 | NOT RUN | - | -| 1919 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet4 | NOT RUN | - | -| 1920 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet3 | NOT RUN | - | -| 1921 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2a Ethernet4 | NOT RUN | - | -| 1922 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf2c Ethernet2 | NOT RUN | - | -| 1923 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 1924 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 1925 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 1926 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 1927 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 1928 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 1929 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 1930 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 1931 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 1932 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 1933 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 1934 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 1935 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 1936 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 1937 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 1938 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 1939 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 1940 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.117) - Destination: dc2-spine1 Ethernet4 (IP: 10.255.255.116) | NOT RUN | - | -| 1941 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.119) - Destination: dc2-spine2 Ethernet4 (IP: 10.255.255.118) | NOT RUN | - | -| 1942 | dc2-leaf2b | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 1943 | dc2-leaf2b | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 1944 | dc2-leaf2b | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 1945 | dc2-leaf2b | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 1946 | dc2-leaf2b | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 1947 | dc2-leaf2b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 1948 | dc2-leaf2b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 1949 | dc2-leaf2b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 1950 | dc2-leaf2b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 1951 | dc2-leaf2b | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 1952 | dc2-leaf2b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1953 | dc2-leaf2b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 1954 | dc2-leaf2b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 1955 | dc2-leaf2b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 1956 | dc2-leaf2b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 1957 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet4 = 'up' | NOT RUN | - | -| 1958 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet4 = 'up' | NOT RUN | - | -| 1959 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf2a_Ethernet3 = 'up' | NOT RUN | - | -| 1960 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf2a_Ethernet4 = 'up' | NOT RUN | - | -| 1961 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf2-server1_PCI2 = 'up' | NOT RUN | - | -| 1962 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2b_Ethernet6 = 'up' | NOT RUN | - | -| 1963 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF2C_Ethernet2 = 'up' | NOT RUN | - | -| 1964 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 1965 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 1966 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1967 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 1968 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf2a_Po3 = 'up' | NOT RUN | - | -| 1969 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up' | NOT RUN | - | -| 1970 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up' | NOT RUN | - | -| 1971 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 1972 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 1973 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 1974 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 1975 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 1976 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 1977 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 1978 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 1979 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 1980 | dc2-leaf2b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 1981 | dc2-leaf2b | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 1982 | dc2-leaf2b | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 1983 | dc2-leaf2b | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 1984 | dc2-leaf2b | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 1985 | dc2-leaf2b | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 1986 | dc2-leaf2b | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 1987 | dc2-leaf2b | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 1988 | dc2-leaf2b | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 1989 | dc2-leaf2b | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 1990 | dc2-leaf2b | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 1991 | dc2-leaf2b | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 1992 | dc2-leaf2b | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 1993 | dc2-leaf2b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1994 | dc2-leaf2b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 1995 | dc2-leaf2b | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 1996 | dc2-leaf2b | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 1997 | dc2-leaf2b | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 1998 | dc2-leaf2b | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 1999 | dc2-leaf2b | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2000 | dc2-leaf2b | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2001 | dc2-leaf2b | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2002 | dc2-leaf2b | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 2003 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 2004 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 2005 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2006 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 2007 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2008 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2009 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2010 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 2011 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 2012 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2013 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 2014 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2015 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 2016 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2017 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 2018 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2019 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2020 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2021 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 2022 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 2023 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2024 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 2025 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2026 | dc2-leaf2b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2027 | dc2-leaf2b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2028 | dc2-leaf2b | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2029 | dc2-leaf2b | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2030 | dc2-leaf2b | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2031 | dc2-leaf2b | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2032 | dc2-leaf2b | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2033 | dc2-leaf2b | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2034 | dc2-leaf2b | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2035 | dc2-leaf2b | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2036 | dc2-leaf2b | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2037 | dc2-leaf2b | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2038 | dc2-leaf2b | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2039 | dc2-leaf2b | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2040 | dc2-leaf2b | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2041 | dc2-leaf2b | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2042 | dc2-leaf2b | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2043 | dc2-leaf2b | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2044 | dc2-leaf2b | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2045 | dc2-leaf2b | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2046 | dc2-leaf2b | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2047 | dc2-leaf2b | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2048 | dc2-leaf2b | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2049 | dc2-leaf2b | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2050 | dc2-leaf2b | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 2051 | dc2-leaf2b | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 2052 | dc2-leaf2b | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 2053 | dc2-leaf2b | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 2054 | dc2-leaf2b | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 2055 | dc2-leaf2b | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2056 | dc2-leaf2b | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2057 | dc2-leaf2b | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2058 | dc2-leaf2b | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2059 | dc2-leaf2b | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2060 | dc2-leaf2b | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2061 | dc2-leaf2b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2062 | dc2-leaf2b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2063 | dc2-leaf2b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2064 | dc2-leaf2b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2065 | dc2-leaf2b | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2066 | dc2-leaf2b | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 2067 | dc2-leaf2c | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2068 | dc2-leaf2c | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2069 | dc2-leaf2c | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 2070 | dc2-leaf2c | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 2071 | dc2-leaf2c | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 2072 | dc2-leaf2c | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 2073 | dc2-leaf2c | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 2074 | dc2-leaf2c | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 2075 | dc2-leaf2c | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 2076 | dc2-leaf2c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf2a Ethernet8 | NOT RUN | - | -| 2077 | dc2-leaf2c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf2b Ethernet8 | NOT RUN | - | -| 2078 | dc2-leaf2c | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 2079 | dc2-leaf2c | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 2080 | dc2-leaf2c | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 2081 | dc2-leaf2c | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 2082 | dc2-leaf2c | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 2083 | dc2-leaf2c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 2084 | dc2-leaf2c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 2085 | dc2-leaf2c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 2086 | dc2-leaf2c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 2087 | dc2-leaf2c | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 2088 | dc2-leaf2c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2089 | dc2-leaf2c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2090 | dc2-leaf2c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 2091 | dc2-leaf2c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 2092 | dc2-leaf2c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 2093 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC2-LEAF2A_Ethernet8 = 'up' | NOT RUN | - | -| 2094 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC2-LEAF2B_Ethernet8 = 'up' | NOT RUN | - | -| 2095 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - dc2-leaf2-server1_iLO = 'up' | NOT RUN | - | -| 2096 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC2_L3_LEAF2_Po8 = 'up' | NOT RUN | - | -| 2097 | dc2-leaf2c | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 2098 | dc2-leaf2c | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 2099 | dc2-leaf2c | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 2100 | dc2-leaf2c | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2101 | dc2-leaf2c | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2102 | dc2-leaf2c | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2103 | dc2-leaf2c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2104 | dc2-leaf2c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2105 | dc2-leaf2c | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2106 | dc2-leaf2c | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2107 | dc2-leaf2c | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2108 | dc2-leaf2c | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2109 | dc2-leaf2c | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2110 | dc2-leaf2c | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2111 | dc2-leaf2c | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2112 | dc2-leaf2c | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2113 | dc2-leaf2c | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2114 | dc2-leaf2c | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2115 | dc2-leaf2c | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2116 | dc2-leaf2c | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2117 | dc2-leaf2c | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2118 | dc2-leaf2c | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2119 | dc2-leaf2c | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2120 | dc2-leaf2c | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2121 | dc2-leaf2c | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2122 | dc2-leaf2c | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2123 | dc2-leaf2c | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2124 | dc2-leaf2c | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2125 | dc2-leaf2c | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2126 | dc2-leaf2c | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2127 | dc2-leaf2c | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2128 | dc2-leaf2c | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2129 | dc2-leaf2c | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2130 | dc2-leaf2c | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2131 | dc2-leaf2c | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2132 | dc2-leaf2c | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2133 | dc2-leaf2c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2134 | dc2-leaf2c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2135 | dc2-leaf2c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2136 | dc2-leaf2c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2137 | dc2-leaf2c | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2138 | dc2-leaf2c | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 2139 | dc2-leaf3a.arista.com | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2140 | dc2-leaf3a.arista.com | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2141 | dc2-leaf3a.arista.com | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 2142 | dc2-leaf3a.arista.com | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 2143 | dc2-leaf3a.arista.com | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 2144 | dc2-leaf3a.arista.com | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 2145 | dc2-leaf3a.arista.com | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 2146 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 2147 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 2148 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.129.125) | NOT RUN | - | -| 2149 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.120) | NOT RUN | - | -| 2150 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.122) | NOT RUN | - | -| 2151 | dc2-leaf3a.arista.com | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 2152 | dc2-leaf3a.arista.com | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 2153 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet5 | NOT RUN | - | -| 2154 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet5 | NOT RUN | - | -| 2155 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf3b.arista.com Ethernet3 | NOT RUN | - | -| 2156 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf3b.arista.com Ethernet4 | NOT RUN | - | -| 2157 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 2158 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 2159 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 2160 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 2161 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 2162 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 2163 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 2164 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 2165 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 2166 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 2167 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 2168 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 2169 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 2170 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 2171 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 2172 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 2173 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 2174 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.121) - Destination: dc2-spine1 Ethernet5 (IP: 10.255.255.120) | NOT RUN | - | -| 2175 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.123) - Destination: dc2-spine2 Ethernet5 (IP: 10.255.255.122) | NOT RUN | - | -| 2176 | dc2-leaf3a.arista.com | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 2177 | dc2-leaf3a.arista.com | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 2178 | dc2-leaf3a.arista.com | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 2179 | dc2-leaf3a.arista.com | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 2180 | dc2-leaf3a.arista.com | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 2181 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 2182 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 2183 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 2184 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 2185 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 2186 | dc2-leaf3a.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2187 | dc2-leaf3a.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2188 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 2189 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 2190 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 2191 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet5 = 'up' | NOT RUN | - | -| 2192 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up' | NOT RUN | - | -| 2193 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet5 = 'up' | NOT RUN | - | -| 2194 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet3 = 'up' | NOT RUN | - | -| 2195 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet4 = 'up' | NOT RUN | - | -| 2196 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 2197 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 2198 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 2199 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 2200 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up' | NOT RUN | - | -| 2201 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf3b.arista.com_Po3 = 'up' | NOT RUN | - | -| 2202 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 2203 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 2204 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 2205 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 2206 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 2207 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 2208 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 2209 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 2210 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 2211 | dc2-leaf3a.arista.com | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 2212 | dc2-leaf3a.arista.com | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 2213 | dc2-leaf3a.arista.com | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 2214 | dc2-leaf3a.arista.com | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 2215 | dc2-leaf3a.arista.com | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 2216 | dc2-leaf3a.arista.com | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 2217 | dc2-leaf3a.arista.com | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 2218 | dc2-leaf3a.arista.com | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 2219 | dc2-leaf3a.arista.com | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 2220 | dc2-leaf3a.arista.com | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 2221 | dc2-leaf3a.arista.com | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 2222 | dc2-leaf3a.arista.com | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 2223 | dc2-leaf3a.arista.com | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 2224 | dc2-leaf3a.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 2225 | dc2-leaf3a.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 2226 | dc2-leaf3a.arista.com | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 2227 | dc2-leaf3a.arista.com | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 2228 | dc2-leaf3a.arista.com | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 2229 | dc2-leaf3a.arista.com | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 2230 | dc2-leaf3a.arista.com | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2231 | dc2-leaf3a.arista.com | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2232 | dc2-leaf3a.arista.com | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2233 | dc2-leaf3a.arista.com | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 2234 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 2235 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 2236 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2237 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 2238 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2239 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2240 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2241 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 2242 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 2243 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2244 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 2245 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2246 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 2247 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2248 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 2249 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2250 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2251 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2252 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 2253 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 2254 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2255 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 2256 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2257 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2258 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2259 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2260 | dc2-leaf3a.arista.com | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2261 | dc2-leaf3a.arista.com | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2262 | dc2-leaf3a.arista.com | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2263 | dc2-leaf3a.arista.com | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2264 | dc2-leaf3a.arista.com | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2265 | dc2-leaf3a.arista.com | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2266 | dc2-leaf3a.arista.com | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2267 | dc2-leaf3a.arista.com | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2268 | dc2-leaf3a.arista.com | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2269 | dc2-leaf3a.arista.com | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2270 | dc2-leaf3a.arista.com | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2271 | dc2-leaf3a.arista.com | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2272 | dc2-leaf3a.arista.com | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2273 | dc2-leaf3a.arista.com | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2274 | dc2-leaf3a.arista.com | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2275 | dc2-leaf3a.arista.com | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2276 | dc2-leaf3a.arista.com | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2277 | dc2-leaf3a.arista.com | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2278 | dc2-leaf3a.arista.com | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2279 | dc2-leaf3a.arista.com | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2280 | dc2-leaf3a.arista.com | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2281 | dc2-leaf3a.arista.com | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 2282 | dc2-leaf3a.arista.com | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 2283 | dc2-leaf3a.arista.com | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 2284 | dc2-leaf3a.arista.com | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 2285 | dc2-leaf3a.arista.com | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 2286 | dc2-leaf3a.arista.com | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2287 | dc2-leaf3a.arista.com | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2288 | dc2-leaf3a.arista.com | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2289 | dc2-leaf3a.arista.com | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2290 | dc2-leaf3a.arista.com | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2291 | dc2-leaf3a.arista.com | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2292 | dc2-leaf3a.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2293 | dc2-leaf3a.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2294 | dc2-leaf3a.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2295 | dc2-leaf3a.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2296 | dc2-leaf3a.arista.com | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2297 | dc2-leaf3a.arista.com | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 2298 | dc2-leaf3b.arista.com | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2299 | dc2-leaf3b.arista.com | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2300 | dc2-leaf3b.arista.com | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 2301 | dc2-leaf3b.arista.com | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 2302 | dc2-leaf3b.arista.com | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 2303 | dc2-leaf3b.arista.com | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 2304 | dc2-leaf3b.arista.com | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 2305 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | -| 2306 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | -| 2307 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.129.124) | NOT RUN | - | -| 2308 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.124) | NOT RUN | - | -| 2309 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.126) | NOT RUN | - | -| 2310 | dc2-leaf3b.arista.com | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 2311 | dc2-leaf3b.arista.com | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 2312 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet6 | NOT RUN | - | -| 2313 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet6 | NOT RUN | - | -| 2314 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf3a.arista.com Ethernet3 | NOT RUN | - | -| 2315 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf3a.arista.com Ethernet4 | NOT RUN | - | -| 2316 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | -| 2317 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | -| 2318 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | -| 2319 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | -| 2320 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | -| 2321 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | -| 2322 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | -| 2323 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | -| 2324 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | -| 2325 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | -| 2326 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | -| 2327 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | -| 2328 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | -| 2329 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | -| 2330 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | -| 2331 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | -| 2332 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | -| 2333 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.125) - Destination: dc2-spine1 Ethernet6 (IP: 10.255.255.124) | NOT RUN | - | -| 2334 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.127) - Destination: dc2-spine2 Ethernet6 (IP: 10.255.255.126) | NOT RUN | - | -| 2335 | dc2-leaf3b.arista.com | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 2336 | dc2-leaf3b.arista.com | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 2337 | dc2-leaf3b.arista.com | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 2338 | dc2-leaf3b.arista.com | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 2339 | dc2-leaf3b.arista.com | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 2340 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 2341 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 2342 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 2343 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 2344 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 2345 | dc2-leaf3b.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2346 | dc2-leaf3b.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2347 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 2348 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 2349 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 2350 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet6 = 'up' | NOT RUN | - | -| 2351 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'adminDown' | NOT RUN | - | -| 2352 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet6 = 'up' | NOT RUN | - | -| 2353 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet3 = 'up' | NOT RUN | - | -| 2354 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet4 = 'up' | NOT RUN | - | -| 2355 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 2356 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up' | NOT RUN | - | -| 2357 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 2358 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | -| 2359 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up' | NOT RUN | - | -| 2360 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_PEER_dc2-leaf3a.arista.com_Po3 = 'up' | NOT RUN | - | -| 2361 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | -| 2362 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | -| 2363 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | -| 2364 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | -| 2365 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up' | NOT RUN | - | -| 2366 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up' | NOT RUN | - | -| 2367 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up' | NOT RUN | - | -| 2368 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG_PEER = 'up' | NOT RUN | - | -| 2369 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | -| 2370 | dc2-leaf3b.arista.com | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 2371 | dc2-leaf3b.arista.com | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | -| 2372 | dc2-leaf3b.arista.com | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | -| 2373 | dc2-leaf3b.arista.com | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | -| 2374 | dc2-leaf3b.arista.com | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | -| 2375 | dc2-leaf3b.arista.com | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | -| 2376 | dc2-leaf3b.arista.com | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | -| 2377 | dc2-leaf3b.arista.com | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | -| 2378 | dc2-leaf3b.arista.com | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | -| 2379 | dc2-leaf3b.arista.com | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | -| 2380 | dc2-leaf3b.arista.com | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | -| 2381 | dc2-leaf3b.arista.com | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | -| 2382 | dc2-leaf3b.arista.com | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | -| 2383 | dc2-leaf3b.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 2384 | dc2-leaf3b.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | -| 2385 | dc2-leaf3b.arista.com | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | -| 2386 | dc2-leaf3b.arista.com | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | -| 2387 | dc2-leaf3b.arista.com | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 2388 | dc2-leaf3b.arista.com | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 2389 | dc2-leaf3b.arista.com | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2390 | dc2-leaf3b.arista.com | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2391 | dc2-leaf3b.arista.com | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2392 | dc2-leaf3b.arista.com | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 2393 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | -| 2394 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | -| 2395 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2396 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | -| 2397 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2398 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | -| 2399 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | -| 2400 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | -| 2401 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | -| 2402 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2403 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | -| 2404 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2405 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | -| 2406 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2407 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | -| 2408 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | -| 2409 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | -| 2410 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | -| 2411 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | -| 2412 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | -| 2413 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2414 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | -| 2415 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | -| 2416 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2417 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2418 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2419 | dc2-leaf3b.arista.com | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2420 | dc2-leaf3b.arista.com | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2421 | dc2-leaf3b.arista.com | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2422 | dc2-leaf3b.arista.com | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2423 | dc2-leaf3b.arista.com | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2424 | dc2-leaf3b.arista.com | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2425 | dc2-leaf3b.arista.com | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2426 | dc2-leaf3b.arista.com | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2427 | dc2-leaf3b.arista.com | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2428 | dc2-leaf3b.arista.com | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2429 | dc2-leaf3b.arista.com | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2430 | dc2-leaf3b.arista.com | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2431 | dc2-leaf3b.arista.com | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2432 | dc2-leaf3b.arista.com | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2433 | dc2-leaf3b.arista.com | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2434 | dc2-leaf3b.arista.com | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2435 | dc2-leaf3b.arista.com | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2436 | dc2-leaf3b.arista.com | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2437 | dc2-leaf3b.arista.com | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2438 | dc2-leaf3b.arista.com | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2439 | dc2-leaf3b.arista.com | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2440 | dc2-leaf3b.arista.com | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | -| 2441 | dc2-leaf3b.arista.com | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | -| 2442 | dc2-leaf3b.arista.com | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | -| 2443 | dc2-leaf3b.arista.com | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | -| 2444 | dc2-leaf3b.arista.com | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | -| 2445 | dc2-leaf3b.arista.com | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2446 | dc2-leaf3b.arista.com | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2447 | dc2-leaf3b.arista.com | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2448 | dc2-leaf3b.arista.com | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2449 | dc2-leaf3b.arista.com | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2450 | dc2-leaf3b.arista.com | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2451 | dc2-leaf3b.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2452 | dc2-leaf3b.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2453 | dc2-leaf3b.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2454 | dc2-leaf3b.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2455 | dc2-leaf3b.arista.com | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2456 | dc2-leaf3b.arista.com | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 2457 | dc2-spine1 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2458 | dc2-spine1 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2459 | dc2-spine1 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 2460 | dc2-spine1 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 2461 | dc2-spine1 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 2462 | dc2-spine1 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 2463 | dc2-spine1 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 2464 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13) | NOT RUN | - | -| 2465 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14) | NOT RUN | - | -| 2466 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15) | NOT RUN | - | -| 2467 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16) | NOT RUN | - | -| 2468 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17) | NOT RUN | - | -| 2469 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18) | NOT RUN | - | -| 2470 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.105) | NOT RUN | - | -| 2471 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.109) | NOT RUN | - | -| 2472 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.113) | NOT RUN | - | -| 2473 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.117) | NOT RUN | - | -| 2474 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.121) | NOT RUN | - | -| 2475 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.125) | NOT RUN | - | -| 2476 | dc2-spine1 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 2477 | dc2-spine1 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 2478 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet1 | NOT RUN | - | -| 2479 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet1 | NOT RUN | - | -| 2480 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet1 | NOT RUN | - | -| 2481 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet1 | NOT RUN | - | -| 2482 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet1 | NOT RUN | - | -| 2483 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet1 | NOT RUN | - | -| 2484 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.104) - Destination: dc2-leaf1a Ethernet1 (IP: 10.255.255.105) | NOT RUN | - | -| 2485 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.108) - Destination: dc2-leaf1b Ethernet1 (IP: 10.255.255.109) | NOT RUN | - | -| 2486 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet3 (IP: 10.255.255.112) - Destination: dc2-leaf2a Ethernet1 (IP: 10.255.255.113) | NOT RUN | - | -| 2487 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet4 (IP: 10.255.255.116) - Destination: dc2-leaf2b Ethernet1 (IP: 10.255.255.117) | NOT RUN | - | -| 2488 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet5 (IP: 10.255.255.120) - Destination: dc2-leaf3a.arista.com Ethernet1 (IP: 10.255.255.121) | NOT RUN | - | -| 2489 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 10.255.255.124) - Destination: dc2-leaf3b.arista.com Ethernet1 (IP: 10.255.255.125) | NOT RUN | - | -| 2490 | dc2-spine1 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 2491 | dc2-spine1 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 2492 | dc2-spine1 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 2493 | dc2-spine1 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 2494 | dc2-spine1 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 2495 | dc2-spine1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 2496 | dc2-spine1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 2497 | dc2-spine1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 2498 | dc2-spine1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 2499 | dc2-spine1 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 2500 | dc2-spine1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2501 | dc2-spine1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2502 | dc2-spine1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 2503 | dc2-spine1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 2504 | dc2-spine1 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 2505 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet1 = 'up' | NOT RUN | - | -| 2506 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet1 = 'up' | NOT RUN | - | -| 2507 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet1 = 'up' | NOT RUN | - | -| 2508 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet1 = 'up' | NOT RUN | - | -| 2509 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet1 = 'up' | NOT RUN | - | -| 2510 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet1 = 'up' | NOT RUN | - | -| 2511 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 2512 | dc2-spine1 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 2513 | dc2-spine1 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 2514 | dc2-spine1 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 2515 | dc2-spine1 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2516 | dc2-spine1 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2517 | dc2-spine1 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2518 | dc2-spine1 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 2519 | dc2-spine1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2520 | dc2-spine1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2521 | dc2-spine1 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2522 | dc2-spine1 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2523 | dc2-spine1 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2524 | dc2-spine1 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2525 | dc2-spine1 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2526 | dc2-spine1 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2527 | dc2-spine1 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2528 | dc2-spine1 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2529 | dc2-spine1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2530 | dc2-spine1 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2531 | dc2-spine1 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2532 | dc2-spine1 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2533 | dc2-spine1 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2534 | dc2-spine1 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2535 | dc2-spine1 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2536 | dc2-spine1 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2537 | dc2-spine1 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2538 | dc2-spine1 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2539 | dc2-spine1 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2540 | dc2-spine1 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2541 | dc2-spine1 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2542 | dc2-spine1 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2543 | dc2-spine1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2544 | dc2-spine1 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2545 | dc2-spine1 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2546 | dc2-spine1 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2547 | dc2-spine1 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2548 | dc2-spine1 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2549 | dc2-spine1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2550 | dc2-spine1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2551 | dc2-spine1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2552 | dc2-spine1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2553 | dc2-spine1 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2554 | dc2-spine1 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | -| 2555 | dc2-spine2 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2556 | dc2-spine2 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | -| 2557 | dc2-spine2 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | -| 2558 | dc2-spine2 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | -| 2559 | dc2-spine2 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | -| 2560 | dc2-spine2 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | -| 2561 | dc2-spine2 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | -| 2562 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13) | NOT RUN | - | -| 2563 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14) | NOT RUN | - | -| 2564 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15) | NOT RUN | - | -| 2565 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16) | NOT RUN | - | -| 2566 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17) | NOT RUN | - | -| 2567 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18) | NOT RUN | - | -| 2568 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.107) | NOT RUN | - | -| 2569 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.111) | NOT RUN | - | -| 2570 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.115) | NOT RUN | - | -| 2571 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.119) | NOT RUN | - | -| 2572 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.123) | NOT RUN | - | -| 2573 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.127) | NOT RUN | - | -| 2574 | dc2-spine2 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | -| 2575 | dc2-spine2 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | -| 2576 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet2 | NOT RUN | - | -| 2577 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet2 | NOT RUN | - | -| 2578 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet2 | NOT RUN | - | -| 2579 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet2 | NOT RUN | - | -| 2580 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet2 | NOT RUN | - | -| 2581 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet2 | NOT RUN | - | -| 2582 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.106) - Destination: dc2-leaf1a Ethernet2 (IP: 10.255.255.107) | NOT RUN | - | -| 2583 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.110) - Destination: dc2-leaf1b Ethernet2 (IP: 10.255.255.111) | NOT RUN | - | -| 2584 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet3 (IP: 10.255.255.114) - Destination: dc2-leaf2a Ethernet2 (IP: 10.255.255.115) | NOT RUN | - | -| 2585 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet4 (IP: 10.255.255.118) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119) | NOT RUN | - | -| 2586 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet5 (IP: 10.255.255.122) - Destination: dc2-leaf3a.arista.com Ethernet2 (IP: 10.255.255.123) | NOT RUN | - | -| 2587 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 10.255.255.126) - Destination: dc2-leaf3b.arista.com Ethernet2 (IP: 10.255.255.127) | NOT RUN | - | -| 2588 | dc2-spine2 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | -| 2589 | dc2-spine2 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | -| 2590 | dc2-spine2 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | -| 2591 | dc2-spine2 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | -| 2592 | dc2-spine2 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | -| 2593 | dc2-spine2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | -| 2594 | dc2-spine2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | -| 2595 | dc2-spine2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | -| 2596 | dc2-spine2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | -| 2597 | dc2-spine2 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | -| 2598 | dc2-spine2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2599 | dc2-spine2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | -| 2600 | dc2-spine2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | -| 2601 | dc2-spine2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | -| 2602 | dc2-spine2 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | -| 2603 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet2 = 'up' | NOT RUN | - | -| 2604 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet2 = 'up' | NOT RUN | - | -| 2605 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet2 = 'up' | NOT RUN | - | -| 2606 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet2 = 'up' | NOT RUN | - | -| 2607 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet2 = 'up' | NOT RUN | - | -| 2608 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet2 = 'up' | NOT RUN | - | -| 2609 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - EVPN_Overlay_Peering = 'up' | NOT RUN | - | -| 2610 | dc2-spine2 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | -| 2611 | dc2-spine2 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | -| 2612 | dc2-spine2 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | -| 2613 | dc2-spine2 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | -| 2614 | dc2-spine2 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | -| 2615 | dc2-spine2 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | -| 2616 | dc2-spine2 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | -| 2617 | dc2-spine2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | -| 2618 | dc2-spine2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | -| 2619 | dc2-spine2 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | -| 2620 | dc2-spine2 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2621 | dc2-spine2 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | -| 2622 | dc2-spine2 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | -| 2623 | dc2-spine2 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | -| 2624 | dc2-spine2 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | -| 2625 | dc2-spine2 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | -| 2626 | dc2-spine2 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | -| 2627 | dc2-spine2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | -| 2628 | dc2-spine2 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2629 | dc2-spine2 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2630 | dc2-spine2 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | -| 2631 | dc2-spine2 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | -| 2632 | dc2-spine2 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | -| 2633 | dc2-spine2 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | -| 2634 | dc2-spine2 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | -| 2635 | dc2-spine2 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | -| 2636 | dc2-spine2 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | -| 2637 | dc2-spine2 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | -| 2638 | dc2-spine2 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | -| 2639 | dc2-spine2 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | -| 2640 | dc2-spine2 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | -| 2641 | dc2-spine2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | -| 2642 | dc2-spine2 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | -| 2643 | dc2-spine2 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | -| 2644 | dc2-spine2 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | -| 2645 | dc2-spine2 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | -| 2646 | dc2-spine2 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | -| 2647 | dc2-spine2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2648 | dc2-spine2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | -| 2649 | dc2-spine2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2650 | dc2-spine2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | -| 2651 | dc2-spine2 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | -| 2652 | dc2-spine2 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1175 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1) | NOT RUN | - | +| 1176 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2) | NOT RUN | - | +| 1177 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.1) - Destination: dc1-leaf1a Ethernet6 (IP: 10.255.255.0) | NOT RUN | - | +| 1178 | dc1-wan1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.3) - Destination: dc1-leaf1b Ethernet6 (IP: 10.255.255.2) | NOT RUN | - | +| 1179 | dc1-wan1 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1180 | dc1-wan1 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1181 | dc1-wan1 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1182 | dc1-wan1 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1183 | dc1-wan1 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1184 | dc1-wan1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1185 | dc1-wan1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1186 | dc1-wan1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1187 | dc1-wan1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1188 | dc1-wan1 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1189 | dc1-wan1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1190 | dc1-wan1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1191 | dc1-wan1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1192 | dc1-wan1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1193 | dc1-wan1 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1194 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Dps1 - DPS Interface = 'up' | NOT RUN | - | +| 1195 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet6 = 'up' | NOT RUN | - | +| 1196 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet6 = 'up' | NOT RUN | - | +| 1197 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - mpls-sp-1_DC1-MPLS-3 = 'up' | NOT RUN | - | +| 1198 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - isp-1_DC1-INET-3 = 'up' | NOT RUN | - | +| 1199 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1200 | dc1-wan1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1201 | dc1-wan1 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1202 | dc1-wan1 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1203 | dc1-wan1 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1204 | dc1-wan1 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1205 | dc1-wan1 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1206 | dc1-wan1 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1207 | dc1-wan1 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 1208 | dc1-wan1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1209 | dc1-wan1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1210 | dc1-wan1 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1211 | dc1-wan1 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1212 | dc1-wan1 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1213 | dc1-wan1 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1214 | dc1-wan1 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1215 | dc1-wan1 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1216 | dc1-wan1 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1217 | dc1-wan1 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1218 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1219 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.1.2 VRF: default | NOT RUN | - | +| 1220 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.10 VRF: default | NOT RUN | - | +| 1221 | dc1-wan1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.20 VRF: default | NOT RUN | - | +| 1222 | dc1-wan1 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1223 | dc1-wan1 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1224 | dc1-wan1 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1225 | dc1-wan1 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1226 | dc1-wan1 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1227 | dc1-wan1 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1228 | dc1-wan1 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1229 | dc1-wan1 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1230 | dc1-wan1 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1231 | dc1-wan1 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1232 | dc1-wan1 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1233 | dc1-wan1 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1234 | dc1-wan1 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1235 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1236 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 100.64.3.2 Source Port: 4500 | NOT RUN | - | +| 1237 | dc1-wan1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 172.18.3.2 Source Port: 4500 | NOT RUN | - | +| 1238 | dc1-wan1 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1239 | dc1-wan1 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1240 | dc1-wan1 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1241 | dc1-wan1 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1242 | dc1-wan1 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1243 | dc1-wan1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1244 | dc1-wan1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1245 | dc1-wan1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1246 | dc1-wan1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1247 | dc1-wan1 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1248 | dc1-wan1 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1249 | dc1-wan2 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1250 | dc1-wan2 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1251 | dc1-wan2 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1252 | dc1-wan2 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1253 | dc1-wan2 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1254 | dc1-wan2 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1255 | dc1-wan2 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1256 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | +| 1257 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | +| 1258 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-wan1 (IP: 10.255.1.1) | NOT RUN | - | +| 1259 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 SR-TE Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | +| 1260 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 SR-TE Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | +| 1261 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf1a (IP: 10.255.255.4) | NOT RUN | - | +| 1262 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf1b (IP: 10.255.255.6) | NOT RUN | - | +| 1263 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Link-State Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | +| 1264 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Link-State Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | +| 1265 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Path-Selection Peer: dc1-leaf1a (IP: 10.255.255.10) | NOT RUN | - | +| 1266 | dc1-wan2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP Path-Selection Peer: dc1-leaf1b (IP: 10.255.255.20) | NOT RUN | - | +| 1267 | dc1-wan2 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1268 | dc1-wan2 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1269 | dc1-wan2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc1-leaf1a Ethernet7 | NOT RUN | - | +| 1270 | dc1-wan2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc1-leaf1b Ethernet7 | NOT RUN | - | +| 1271 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1) | NOT RUN | - | +| 1272 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2) | NOT RUN | - | +| 1273 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.5) - Destination: dc1-leaf1a Ethernet7 (IP: 10.255.255.4) | NOT RUN | - | +| 1274 | dc1-wan2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.7) - Destination: dc1-leaf1b Ethernet7 (IP: 10.255.255.6) | NOT RUN | - | +| 1275 | dc1-wan2 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1276 | dc1-wan2 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1277 | dc1-wan2 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1278 | dc1-wan2 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1279 | dc1-wan2 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1280 | dc1-wan2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1281 | dc1-wan2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1282 | dc1-wan2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1283 | dc1-wan2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1284 | dc1-wan2 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1285 | dc1-wan2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1286 | dc1-wan2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1287 | dc1-wan2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1288 | dc1-wan2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1289 | dc1-wan2 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1290 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Dps1 - DPS Interface = 'up' | NOT RUN | - | +| 1291 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC1-LEAF1A_Ethernet7 = 'up' | NOT RUN | - | +| 1292 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC1-LEAF1B_Ethernet7 = 'up' | NOT RUN | - | +| 1293 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - mpls-sp-1_DC1-MPLS-4 = 'up' | NOT RUN | - | +| 1294 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - isp-1_DC1-INET-4 = 'up' | NOT RUN | - | +| 1295 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1296 | dc1-wan2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1297 | dc1-wan2 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1298 | dc1-wan2 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1299 | dc1-wan2 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1300 | dc1-wan2 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1301 | dc1-wan2 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1302 | dc1-wan2 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1303 | dc1-wan2 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 1304 | dc1-wan2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1305 | dc1-wan2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1306 | dc1-wan2 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1307 | dc1-wan2 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1308 | dc1-wan2 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1309 | dc1-wan2 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1310 | dc1-wan2 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1311 | dc1-wan2 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1312 | dc1-wan2 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1313 | dc1-wan2 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1314 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1315 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.1.1 VRF: default | NOT RUN | - | +| 1316 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.10 VRF: default | NOT RUN | - | +| 1317 | dc1-wan2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | IPv4 Peer: 10.255.255.20 VRF: default | NOT RUN | - | +| 1318 | dc1-wan2 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1319 | dc1-wan2 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1320 | dc1-wan2 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1321 | dc1-wan2 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1322 | dc1-wan2 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1323 | dc1-wan2 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1324 | dc1-wan2 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1325 | dc1-wan2 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1326 | dc1-wan2 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1327 | dc1-wan2 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1328 | dc1-wan2 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1329 | dc1-wan2 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1330 | dc1-wan2 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1331 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1332 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 100.64.4.2 Source Port: 4500 | NOT RUN | - | +| 1333 | dc1-wan2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | Source IPv4 Address: 172.18.4.2 Source Port: 4500 | NOT RUN | - | +| 1334 | dc1-wan2 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1335 | dc1-wan2 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1336 | dc1-wan2 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1337 | dc1-wan2 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1338 | dc1-wan2 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1339 | dc1-wan2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1340 | dc1-wan2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1341 | dc1-wan2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1342 | dc1-wan2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1343 | dc1-wan2 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1344 | dc1-wan2 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1345 | dc2-leaf1a | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1346 | dc2-leaf1a | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1347 | dc2-leaf1a | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1348 | dc2-leaf1a | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1349 | dc2-leaf1a | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1350 | dc2-leaf1a | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1351 | dc2-leaf1a | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1352 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 1353 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 1354 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.129.117) | NOT RUN | - | +| 1355 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.104) | NOT RUN | - | +| 1356 | dc2-leaf1a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.106) | NOT RUN | - | +| 1357 | dc2-leaf1a | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1358 | dc2-leaf1a | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1359 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet1 | NOT RUN | - | +| 1360 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet1 | NOT RUN | - | +| 1361 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf1b Ethernet3 | NOT RUN | - | +| 1362 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf1b Ethernet4 | NOT RUN | - | +| 1363 | dc2-leaf1a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf1c Ethernet1 | NOT RUN | - | +| 1364 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 1365 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 1366 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 1367 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 1368 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 1369 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 1370 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 1371 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 1372 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 1373 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 1374 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 1375 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 1376 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 1377 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 1378 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 1379 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 1380 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.13) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 1381 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.105) - Destination: dc2-spine1 Ethernet1 (IP: 10.255.255.104) | NOT RUN | - | +| 1382 | dc2-leaf1a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.107) - Destination: dc2-spine2 Ethernet1 (IP: 10.255.255.106) | NOT RUN | - | +| 1383 | dc2-leaf1a | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1384 | dc2-leaf1a | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1385 | dc2-leaf1a | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1386 | dc2-leaf1a | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1387 | dc2-leaf1a | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1388 | dc2-leaf1a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1389 | dc2-leaf1a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1390 | dc2-leaf1a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1391 | dc2-leaf1a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1392 | dc2-leaf1a | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1393 | dc2-leaf1a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1394 | dc2-leaf1a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1395 | dc2-leaf1a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1396 | dc2-leaf1a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1397 | dc2-leaf1a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1398 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet1 = 'up' | NOT RUN | - | +| 1399 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet1 = 'up' | NOT RUN | - | +| 1400 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf1b_Ethernet3 = 'up' | NOT RUN | - | +| 1401 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf1b_Ethernet4 = 'up' | NOT RUN | - | +| 1402 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI1 = 'up' | NOT RUN | - | +| 1403 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF1C_Ethernet1 = 'up' | NOT RUN | - | +| 1404 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1405 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 1406 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1407 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1408 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf1b_Port-Channel3 = 'up' | NOT RUN | - | +| 1409 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up' | NOT RUN | - | +| 1410 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up' | NOT RUN | - | +| 1411 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 1412 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 1413 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 1414 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 1415 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 1416 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 1417 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 1418 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 1419 | dc2-leaf1a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1420 | dc2-leaf1a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1421 | dc2-leaf1a | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 1422 | dc2-leaf1a | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 1423 | dc2-leaf1a | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 1424 | dc2-leaf1a | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 1425 | dc2-leaf1a | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 1426 | dc2-leaf1a | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 1427 | dc2-leaf1a | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 1428 | dc2-leaf1a | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 1429 | dc2-leaf1a | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 1430 | dc2-leaf1a | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 1431 | dc2-leaf1a | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 1432 | dc2-leaf1a | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 1433 | dc2-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1434 | dc2-leaf1a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1435 | dc2-leaf1a | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 1436 | dc2-leaf1a | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 1437 | dc2-leaf1a | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1438 | dc2-leaf1a | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1439 | dc2-leaf1a | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1440 | dc2-leaf1a | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1441 | dc2-leaf1a | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1442 | dc2-leaf1a | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 1443 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 1444 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 1445 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1446 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 1447 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1448 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1449 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1450 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 1451 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 1452 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1453 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 1454 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1455 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 1456 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1457 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 1458 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1459 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1460 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1461 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 1462 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 1463 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1464 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 1465 | dc2-leaf1a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1466 | dc2-leaf1a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1467 | dc2-leaf1a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1468 | dc2-leaf1a | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1469 | dc2-leaf1a | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1470 | dc2-leaf1a | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1471 | dc2-leaf1a | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1472 | dc2-leaf1a | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1473 | dc2-leaf1a | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1474 | dc2-leaf1a | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1475 | dc2-leaf1a | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1476 | dc2-leaf1a | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1477 | dc2-leaf1a | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1478 | dc2-leaf1a | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1479 | dc2-leaf1a | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1480 | dc2-leaf1a | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1481 | dc2-leaf1a | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1482 | dc2-leaf1a | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1483 | dc2-leaf1a | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1484 | dc2-leaf1a | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1485 | dc2-leaf1a | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1486 | dc2-leaf1a | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1487 | dc2-leaf1a | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1488 | dc2-leaf1a | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1489 | dc2-leaf1a | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1490 | dc2-leaf1a | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 1491 | dc2-leaf1a | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 1492 | dc2-leaf1a | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 1493 | dc2-leaf1a | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 1494 | dc2-leaf1a | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 1495 | dc2-leaf1a | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1496 | dc2-leaf1a | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1497 | dc2-leaf1a | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1498 | dc2-leaf1a | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1499 | dc2-leaf1a | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1500 | dc2-leaf1a | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1501 | dc2-leaf1a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1502 | dc2-leaf1a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1503 | dc2-leaf1a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1504 | dc2-leaf1a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1505 | dc2-leaf1a | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1506 | dc2-leaf1a | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1507 | dc2-leaf1b | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1508 | dc2-leaf1b | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1509 | dc2-leaf1b | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1510 | dc2-leaf1b | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1511 | dc2-leaf1b | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1512 | dc2-leaf1b | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1513 | dc2-leaf1b | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1514 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 1515 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 1516 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.129.116) | NOT RUN | - | +| 1517 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.108) | NOT RUN | - | +| 1518 | dc2-leaf1b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.110) | NOT RUN | - | +| 1519 | dc2-leaf1b | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1520 | dc2-leaf1b | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1521 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet2 | NOT RUN | - | +| 1522 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet2 | NOT RUN | - | +| 1523 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf1a Ethernet3 | NOT RUN | - | +| 1524 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf1a Ethernet4 | NOT RUN | - | +| 1525 | dc2-leaf1b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf1c Ethernet2 | NOT RUN | - | +| 1526 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 1527 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 1528 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 1529 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 1530 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 1531 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 1532 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 1533 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 1534 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 1535 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 1536 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 1537 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 1538 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 1539 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 1540 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 1541 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 1542 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.14) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 1543 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.109) - Destination: dc2-spine1 Ethernet2 (IP: 10.255.255.108) | NOT RUN | - | +| 1544 | dc2-leaf1b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.111) - Destination: dc2-spine2 Ethernet2 (IP: 10.255.255.110) | NOT RUN | - | +| 1545 | dc2-leaf1b | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1546 | dc2-leaf1b | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1547 | dc2-leaf1b | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1548 | dc2-leaf1b | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1549 | dc2-leaf1b | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1550 | dc2-leaf1b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1551 | dc2-leaf1b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1552 | dc2-leaf1b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1553 | dc2-leaf1b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1554 | dc2-leaf1b | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1555 | dc2-leaf1b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1556 | dc2-leaf1b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1557 | dc2-leaf1b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1558 | dc2-leaf1b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1559 | dc2-leaf1b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1560 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet2 = 'up' | NOT RUN | - | +| 1561 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet2 = 'up' | NOT RUN | - | +| 1562 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf1a_Ethernet3 = 'up' | NOT RUN | - | +| 1563 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf1a_Ethernet4 = 'up' | NOT RUN | - | +| 1564 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI2 = 'up' | NOT RUN | - | +| 1565 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF1C_Ethernet2 = 'up' | NOT RUN | - | +| 1566 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1567 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 1568 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1569 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1570 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf1a_Port-Channel3 = 'up' | NOT RUN | - | +| 1571 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up' | NOT RUN | - | +| 1572 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF1C_Po1 = 'up' | NOT RUN | - | +| 1573 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 1574 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 1575 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 1576 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 1577 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 1578 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 1579 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 1580 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 1581 | dc2-leaf1b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1582 | dc2-leaf1b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1583 | dc2-leaf1b | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 1584 | dc2-leaf1b | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 1585 | dc2-leaf1b | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 1586 | dc2-leaf1b | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 1587 | dc2-leaf1b | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 1588 | dc2-leaf1b | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 1589 | dc2-leaf1b | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 1590 | dc2-leaf1b | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 1591 | dc2-leaf1b | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 1592 | dc2-leaf1b | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 1593 | dc2-leaf1b | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 1594 | dc2-leaf1b | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 1595 | dc2-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1596 | dc2-leaf1b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1597 | dc2-leaf1b | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 1598 | dc2-leaf1b | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 1599 | dc2-leaf1b | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1600 | dc2-leaf1b | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1601 | dc2-leaf1b | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1602 | dc2-leaf1b | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1603 | dc2-leaf1b | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1604 | dc2-leaf1b | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 1605 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 1606 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 1607 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1608 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 1609 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1610 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1611 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1612 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 1613 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 1614 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1615 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 1616 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1617 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 1618 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1619 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 1620 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1621 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1622 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1623 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 1624 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 1625 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1626 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 1627 | dc2-leaf1b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1628 | dc2-leaf1b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1629 | dc2-leaf1b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1630 | dc2-leaf1b | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1631 | dc2-leaf1b | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1632 | dc2-leaf1b | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1633 | dc2-leaf1b | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1634 | dc2-leaf1b | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1635 | dc2-leaf1b | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1636 | dc2-leaf1b | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1637 | dc2-leaf1b | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1638 | dc2-leaf1b | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1639 | dc2-leaf1b | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1640 | dc2-leaf1b | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1641 | dc2-leaf1b | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1642 | dc2-leaf1b | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1643 | dc2-leaf1b | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1644 | dc2-leaf1b | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1645 | dc2-leaf1b | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1646 | dc2-leaf1b | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1647 | dc2-leaf1b | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1648 | dc2-leaf1b | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1649 | dc2-leaf1b | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1650 | dc2-leaf1b | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1651 | dc2-leaf1b | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1652 | dc2-leaf1b | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 1653 | dc2-leaf1b | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 1654 | dc2-leaf1b | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 1655 | dc2-leaf1b | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 1656 | dc2-leaf1b | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 1657 | dc2-leaf1b | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1658 | dc2-leaf1b | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1659 | dc2-leaf1b | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1660 | dc2-leaf1b | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1661 | dc2-leaf1b | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1662 | dc2-leaf1b | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1663 | dc2-leaf1b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1664 | dc2-leaf1b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1665 | dc2-leaf1b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1666 | dc2-leaf1b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1667 | dc2-leaf1b | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1668 | dc2-leaf1b | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1669 | dc2-leaf1c | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1670 | dc2-leaf1c | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1671 | dc2-leaf1c | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1672 | dc2-leaf1c | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1673 | dc2-leaf1c | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1674 | dc2-leaf1c | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1675 | dc2-leaf1c | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1676 | dc2-leaf1c | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1677 | dc2-leaf1c | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1678 | dc2-leaf1c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet8 | NOT RUN | - | +| 1679 | dc2-leaf1c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet8 | NOT RUN | - | +| 1680 | dc2-leaf1c | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1681 | dc2-leaf1c | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1682 | dc2-leaf1c | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1683 | dc2-leaf1c | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1684 | dc2-leaf1c | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1685 | dc2-leaf1c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1686 | dc2-leaf1c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1687 | dc2-leaf1c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1688 | dc2-leaf1c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1689 | dc2-leaf1c | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1690 | dc2-leaf1c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1691 | dc2-leaf1c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1692 | dc2-leaf1c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1693 | dc2-leaf1c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1694 | dc2-leaf1c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1695 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC2-LEAF1A_Ethernet8 = 'up' | NOT RUN | - | +| 1696 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC2-LEAF1B_Ethernet8 = 'up' | NOT RUN | - | +| 1697 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf1-server1_iLO = 'up' | NOT RUN | - | +| 1698 | dc2-leaf1c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC2_L3_LEAF1_Po8 = 'up' | NOT RUN | - | +| 1699 | dc2-leaf1c | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1700 | dc2-leaf1c | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1701 | dc2-leaf1c | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1702 | dc2-leaf1c | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1703 | dc2-leaf1c | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1704 | dc2-leaf1c | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1705 | dc2-leaf1c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1706 | dc2-leaf1c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1707 | dc2-leaf1c | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1708 | dc2-leaf1c | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1709 | dc2-leaf1c | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1710 | dc2-leaf1c | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1711 | dc2-leaf1c | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1712 | dc2-leaf1c | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1713 | dc2-leaf1c | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1714 | dc2-leaf1c | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1715 | dc2-leaf1c | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1716 | dc2-leaf1c | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1717 | dc2-leaf1c | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1718 | dc2-leaf1c | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1719 | dc2-leaf1c | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1720 | dc2-leaf1c | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1721 | dc2-leaf1c | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1722 | dc2-leaf1c | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1723 | dc2-leaf1c | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1724 | dc2-leaf1c | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1725 | dc2-leaf1c | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1726 | dc2-leaf1c | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1727 | dc2-leaf1c | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1728 | dc2-leaf1c | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1729 | dc2-leaf1c | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1730 | dc2-leaf1c | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1731 | dc2-leaf1c | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1732 | dc2-leaf1c | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1733 | dc2-leaf1c | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1734 | dc2-leaf1c | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1735 | dc2-leaf1c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1736 | dc2-leaf1c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1737 | dc2-leaf1c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1738 | dc2-leaf1c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1739 | dc2-leaf1c | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1740 | dc2-leaf1c | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1741 | dc2-leaf2a | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1742 | dc2-leaf2a | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1743 | dc2-leaf2a | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1744 | dc2-leaf2a | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1745 | dc2-leaf2a | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1746 | dc2-leaf2a | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1747 | dc2-leaf2a | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1748 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc1-leaf2a (IP: 10.255.0.5) | NOT RUN | - | +| 1749 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 1750 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 1751 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc1-leaf2a (IP: 192.168.100.0) | NOT RUN | - | +| 1752 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.129.121) | NOT RUN | - | +| 1753 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.112) | NOT RUN | - | +| 1754 | dc2-leaf2a | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.114) | NOT RUN | - | +| 1755 | dc2-leaf2a | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1756 | dc2-leaf2a | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1757 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet3 | NOT RUN | - | +| 1758 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet3 | NOT RUN | - | +| 1759 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2b Ethernet3 | NOT RUN | - | +| 1760 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet4 | NOT RUN | - | +| 1761 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc1-leaf2a Ethernet6 | NOT RUN | - | +| 1762 | dc2-leaf2a | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf2c Ethernet1 | NOT RUN | - | +| 1763 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 1764 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 1765 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 1766 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 1767 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 1768 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 1769 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 1770 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 1771 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 1772 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 1773 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 1774 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 1775 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 1776 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 1777 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 1778 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 1779 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.15) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 1780 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.113) - Destination: dc2-spine1 Ethernet3 (IP: 10.255.255.112) | NOT RUN | - | +| 1781 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.115) - Destination: dc2-spine2 Ethernet3 (IP: 10.255.255.114) | NOT RUN | - | +| 1782 | dc2-leaf2a | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 192.168.100.1) - Destination: dc1-leaf2a Ethernet6 (IP: 192.168.100.0) | NOT RUN | - | +| 1783 | dc2-leaf2a | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1784 | dc2-leaf2a | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1785 | dc2-leaf2a | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1786 | dc2-leaf2a | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1787 | dc2-leaf2a | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1788 | dc2-leaf2a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1789 | dc2-leaf2a | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1790 | dc2-leaf2a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1791 | dc2-leaf2a | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1792 | dc2-leaf2a | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1793 | dc2-leaf2a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1794 | dc2-leaf2a | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1795 | dc2-leaf2a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1796 | dc2-leaf2a | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1797 | dc2-leaf2a | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1798 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet3 = 'up' | NOT RUN | - | +| 1799 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet3 = 'up' | NOT RUN | - | +| 1800 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf2b_Ethernet3 = 'up' | NOT RUN | - | +| 1801 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf2b_Ethernet4 = 'up' | NOT RUN | - | +| 1802 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI1 = 'up' | NOT RUN | - | +| 1803 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2a_Ethernet6 = 'up' | NOT RUN | - | +| 1804 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF2C_Ethernet1 = 'up' | NOT RUN | - | +| 1805 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1806 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 1807 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1808 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1809 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf2b_Port-Channel3 = 'up' | NOT RUN | - | +| 1810 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up' | NOT RUN | - | +| 1811 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up' | NOT RUN | - | +| 1812 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 1813 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 1814 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 1815 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 1816 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 1817 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 1818 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 1819 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 1820 | dc2-leaf2a | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1821 | dc2-leaf2a | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1822 | dc2-leaf2a | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 1823 | dc2-leaf2a | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 1824 | dc2-leaf2a | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 1825 | dc2-leaf2a | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 1826 | dc2-leaf2a | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 1827 | dc2-leaf2a | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 1828 | dc2-leaf2a | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 1829 | dc2-leaf2a | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 1830 | dc2-leaf2a | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 1831 | dc2-leaf2a | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 1832 | dc2-leaf2a | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 1833 | dc2-leaf2a | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 1834 | dc2-leaf2a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1835 | dc2-leaf2a | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1836 | dc2-leaf2a | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 1837 | dc2-leaf2a | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 1838 | dc2-leaf2a | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 1839 | dc2-leaf2a | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 1840 | dc2-leaf2a | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 1841 | dc2-leaf2a | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 1842 | dc2-leaf2a | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 1843 | dc2-leaf2a | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 1844 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 1845 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 1846 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1847 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 1848 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1849 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 1850 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 1851 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 1852 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 1853 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1854 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 1855 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1856 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 1857 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1858 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 1859 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 1860 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 1861 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 1862 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 1863 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 1864 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1865 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 1866 | dc2-leaf2a | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 1867 | dc2-leaf2a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 1868 | dc2-leaf2a | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 1869 | dc2-leaf2a | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 1870 | dc2-leaf2a | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1871 | dc2-leaf2a | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 1872 | dc2-leaf2a | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 1873 | dc2-leaf2a | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 1874 | dc2-leaf2a | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 1875 | dc2-leaf2a | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 1876 | dc2-leaf2a | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 1877 | dc2-leaf2a | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 1878 | dc2-leaf2a | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1879 | dc2-leaf2a | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1880 | dc2-leaf2a | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 1881 | dc2-leaf2a | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 1882 | dc2-leaf2a | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 1883 | dc2-leaf2a | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 1884 | dc2-leaf2a | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 1885 | dc2-leaf2a | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 1886 | dc2-leaf2a | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 1887 | dc2-leaf2a | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 1888 | dc2-leaf2a | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 1889 | dc2-leaf2a | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 1890 | dc2-leaf2a | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 1891 | dc2-leaf2a | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 1892 | dc2-leaf2a | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 1893 | dc2-leaf2a | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 1894 | dc2-leaf2a | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 1895 | dc2-leaf2a | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 1896 | dc2-leaf2a | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 1897 | dc2-leaf2a | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 1898 | dc2-leaf2a | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 1899 | dc2-leaf2a | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 1900 | dc2-leaf2a | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 1901 | dc2-leaf2a | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 1902 | dc2-leaf2a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1903 | dc2-leaf2a | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 1904 | dc2-leaf2a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1905 | dc2-leaf2a | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 1906 | dc2-leaf2a | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 1907 | dc2-leaf2a | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 1908 | dc2-leaf2b | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1909 | dc2-leaf2b | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 1910 | dc2-leaf2b | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 1911 | dc2-leaf2b | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 1912 | dc2-leaf2b | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 1913 | dc2-leaf2b | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 1914 | dc2-leaf2b | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 1915 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 1916 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 1917 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.129.120) | NOT RUN | - | +| 1918 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.116) | NOT RUN | - | +| 1919 | dc2-leaf2b | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.118) | NOT RUN | - | +| 1920 | dc2-leaf2b | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 1921 | dc2-leaf2b | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 1922 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet4 | NOT RUN | - | +| 1923 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet4 | NOT RUN | - | +| 1924 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet3 | NOT RUN | - | +| 1925 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2a Ethernet4 | NOT RUN | - | +| 1926 | dc2-leaf2b | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet8 - Remote: dc2-leaf2c Ethernet2 | NOT RUN | - | +| 1927 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 1928 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 1929 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 1930 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 1931 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 1932 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 1933 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 1934 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 1935 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 1936 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 1937 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 1938 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 1939 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 1940 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 1941 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 1942 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 1943 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.16) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 1944 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.117) - Destination: dc2-spine1 Ethernet4 (IP: 10.255.255.116) | NOT RUN | - | +| 1945 | dc2-leaf2b | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.119) - Destination: dc2-spine2 Ethernet4 (IP: 10.255.255.118) | NOT RUN | - | +| 1946 | dc2-leaf2b | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 1947 | dc2-leaf2b | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 1948 | dc2-leaf2b | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 1949 | dc2-leaf2b | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 1950 | dc2-leaf2b | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 1951 | dc2-leaf2b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 1952 | dc2-leaf2b | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 1953 | dc2-leaf2b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 1954 | dc2-leaf2b | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 1955 | dc2-leaf2b | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 1956 | dc2-leaf2b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1957 | dc2-leaf2b | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 1958 | dc2-leaf2b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 1959 | dc2-leaf2b | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 1960 | dc2-leaf2b | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 1961 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet4 = 'up' | NOT RUN | - | +| 1962 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet4 = 'up' | NOT RUN | - | +| 1963 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf2a_Ethernet3 = 'up' | NOT RUN | - | +| 1964 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf2a_Ethernet4 = 'up' | NOT RUN | - | +| 1965 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI2 = 'up' | NOT RUN | - | +| 1966 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_dc1-leaf2b_Ethernet6 = 'up' | NOT RUN | - | +| 1967 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet8 - DC2-LEAF2C_Ethernet2 = 'up' | NOT RUN | - | +| 1968 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 1969 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 1970 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1971 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 1972 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf2a_Port-Channel3 = 'up' | NOT RUN | - | +| 1973 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up' | NOT RUN | - | +| 1974 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel8 - DC2-LEAF2C_Po1 = 'up' | NOT RUN | - | +| 1975 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 1976 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 1977 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 1978 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 1979 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 1980 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 1981 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 1982 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 1983 | dc2-leaf2b | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 1984 | dc2-leaf2b | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 1985 | dc2-leaf2b | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 1986 | dc2-leaf2b | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 1987 | dc2-leaf2b | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 1988 | dc2-leaf2b | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 1989 | dc2-leaf2b | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 1990 | dc2-leaf2b | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 1991 | dc2-leaf2b | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 1992 | dc2-leaf2b | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 1993 | dc2-leaf2b | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 1994 | dc2-leaf2b | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 1995 | dc2-leaf2b | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 1996 | dc2-leaf2b | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 1997 | dc2-leaf2b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1998 | dc2-leaf2b | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 1999 | dc2-leaf2b | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 2000 | dc2-leaf2b | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 2001 | dc2-leaf2b | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2002 | dc2-leaf2b | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2003 | dc2-leaf2b | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2004 | dc2-leaf2b | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2005 | dc2-leaf2b | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2006 | dc2-leaf2b | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 2007 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 2008 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 2009 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2010 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 2011 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2012 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2013 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2014 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 2015 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 2016 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2017 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 2018 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2019 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 2020 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2021 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 2022 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2023 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2024 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2025 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 2026 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 2027 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2028 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 2029 | dc2-leaf2b | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2030 | dc2-leaf2b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2031 | dc2-leaf2b | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2032 | dc2-leaf2b | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2033 | dc2-leaf2b | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2034 | dc2-leaf2b | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2035 | dc2-leaf2b | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2036 | dc2-leaf2b | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2037 | dc2-leaf2b | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2038 | dc2-leaf2b | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2039 | dc2-leaf2b | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2040 | dc2-leaf2b | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2041 | dc2-leaf2b | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2042 | dc2-leaf2b | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2043 | dc2-leaf2b | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2044 | dc2-leaf2b | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2045 | dc2-leaf2b | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2046 | dc2-leaf2b | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2047 | dc2-leaf2b | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2048 | dc2-leaf2b | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2049 | dc2-leaf2b | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2050 | dc2-leaf2b | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2051 | dc2-leaf2b | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2052 | dc2-leaf2b | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2053 | dc2-leaf2b | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2054 | dc2-leaf2b | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 2055 | dc2-leaf2b | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 2056 | dc2-leaf2b | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 2057 | dc2-leaf2b | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 2058 | dc2-leaf2b | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 2059 | dc2-leaf2b | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2060 | dc2-leaf2b | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2061 | dc2-leaf2b | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2062 | dc2-leaf2b | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2063 | dc2-leaf2b | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2064 | dc2-leaf2b | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2065 | dc2-leaf2b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2066 | dc2-leaf2b | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2067 | dc2-leaf2b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2068 | dc2-leaf2b | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2069 | dc2-leaf2b | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2070 | dc2-leaf2b | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 2071 | dc2-leaf2c | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2072 | dc2-leaf2c | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2073 | dc2-leaf2c | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 2074 | dc2-leaf2c | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 2075 | dc2-leaf2c | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 2076 | dc2-leaf2c | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 2077 | dc2-leaf2c | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 2078 | dc2-leaf2c | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 2079 | dc2-leaf2c | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 2080 | dc2-leaf2c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf2a Ethernet8 | NOT RUN | - | +| 2081 | dc2-leaf2c | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf2b Ethernet8 | NOT RUN | - | +| 2082 | dc2-leaf2c | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 2083 | dc2-leaf2c | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 2084 | dc2-leaf2c | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 2085 | dc2-leaf2c | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 2086 | dc2-leaf2c | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 2087 | dc2-leaf2c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 2088 | dc2-leaf2c | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 2089 | dc2-leaf2c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 2090 | dc2-leaf2c | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 2091 | dc2-leaf2c | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 2092 | dc2-leaf2c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2093 | dc2-leaf2c | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2094 | dc2-leaf2c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 2095 | dc2-leaf2c | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 2096 | dc2-leaf2c | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 2097 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - DC2-LEAF2A_Ethernet8 = 'up' | NOT RUN | - | +| 2098 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - DC2-LEAF2B_Ethernet8 = 'up' | NOT RUN | - | +| 2099 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - SERVER_dc2-leaf2-server1_iLO = 'up' | NOT RUN | - | +| 2100 | dc2-leaf2c | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel1 - DC2_L3_LEAF2_Po8 = 'up' | NOT RUN | - | +| 2101 | dc2-leaf2c | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 2102 | dc2-leaf2c | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2103 | dc2-leaf2c | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2104 | dc2-leaf2c | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2105 | dc2-leaf2c | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2106 | dc2-leaf2c | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2107 | dc2-leaf2c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2108 | dc2-leaf2c | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2109 | dc2-leaf2c | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2110 | dc2-leaf2c | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2111 | dc2-leaf2c | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2112 | dc2-leaf2c | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2113 | dc2-leaf2c | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2114 | dc2-leaf2c | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2115 | dc2-leaf2c | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2116 | dc2-leaf2c | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2117 | dc2-leaf2c | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2118 | dc2-leaf2c | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2119 | dc2-leaf2c | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2120 | dc2-leaf2c | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2121 | dc2-leaf2c | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2122 | dc2-leaf2c | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2123 | dc2-leaf2c | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2124 | dc2-leaf2c | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2125 | dc2-leaf2c | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2126 | dc2-leaf2c | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2127 | dc2-leaf2c | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2128 | dc2-leaf2c | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2129 | dc2-leaf2c | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2130 | dc2-leaf2c | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2131 | dc2-leaf2c | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2132 | dc2-leaf2c | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2133 | dc2-leaf2c | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2134 | dc2-leaf2c | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2135 | dc2-leaf2c | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2136 | dc2-leaf2c | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2137 | dc2-leaf2c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2138 | dc2-leaf2c | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2139 | dc2-leaf2c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2140 | dc2-leaf2c | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2141 | dc2-leaf2c | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2142 | dc2-leaf2c | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 2143 | dc2-leaf3a.arista.com | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2144 | dc2-leaf3a.arista.com | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2145 | dc2-leaf3a.arista.com | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 2146 | dc2-leaf3a.arista.com | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 2147 | dc2-leaf3a.arista.com | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 2148 | dc2-leaf3a.arista.com | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 2149 | dc2-leaf3a.arista.com | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 2150 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 2151 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 2152 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.129.125) | NOT RUN | - | +| 2153 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.120) | NOT RUN | - | +| 2154 | dc2-leaf3a.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.122) | NOT RUN | - | +| 2155 | dc2-leaf3a.arista.com | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 2156 | dc2-leaf3a.arista.com | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 2157 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet5 | NOT RUN | - | +| 2158 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet15 - Remote: dc2-leaf2b Ethernet2 | NOT RUN | - | +| 2159 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet5 | NOT RUN | - | +| 2160 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf3b.arista.com Ethernet3 | NOT RUN | - | +| 2161 | dc2-leaf3a.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf3b.arista.com Ethernet4 | NOT RUN | - | +| 2162 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 2163 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 2164 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 2165 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 2166 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 2167 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 2168 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 2169 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 2170 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 2171 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 2172 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 2173 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 2174 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 2175 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 2176 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 2177 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 2178 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.17) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 2179 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.121) - Destination: dc2-spine1 Ethernet5 (IP: 10.255.255.120) | NOT RUN | - | +| 2180 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet15 (IP: 1.1.1.1) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119) | NOT RUN | - | +| 2181 | dc2-leaf3a.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.123) - Destination: dc2-spine2 Ethernet5 (IP: 10.255.255.122) | NOT RUN | - | +| 2182 | dc2-leaf3a.arista.com | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 2183 | dc2-leaf3a.arista.com | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 2184 | dc2-leaf3a.arista.com | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 2185 | dc2-leaf3a.arista.com | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 2186 | dc2-leaf3a.arista.com | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 2187 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 2188 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 2189 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 2190 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 2191 | dc2-leaf3a.arista.com | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 2192 | dc2-leaf3a.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2193 | dc2-leaf3a.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2194 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 2195 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 2196 | dc2-leaf3a.arista.com | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 2197 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet5 = 'up' | NOT RUN | - | +| 2198 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up' | NOT RUN | - | +| 2199 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet12 - Test_mode_and_vlans = 'up' | NOT RUN | - | +| 2200 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet13 - Test_native_vlan_and_trunk_groups = 'up' | NOT RUN | - | +| 2201 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet14 - Test_phone = 'up' | NOT RUN | - | +| 2202 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet15 - Test_type_routed = 'up' | NOT RUN | - | +| 2203 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet5 = 'up' | NOT RUN | - | +| 2204 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf3b.arista.com_Ethernet3 = 'up' | NOT RUN | - | +| 2205 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf3b.arista.com_Ethernet4 = 'up' | NOT RUN | - | +| 2206 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 2207 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 2208 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 2209 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 2210 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up' | NOT RUN | - | +| 2211 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel12 - Test_mode_and_vlans = 'up' | NOT RUN | - | +| 2212 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel13 - Test_native_vlan_and_trunk_groups = 'up' | NOT RUN | - | +| 2213 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel14 - Test_phone = 'up' | NOT RUN | - | +| 2214 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel15 - Test_type_routed = 'up' | NOT RUN | - | +| 2215 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf3b.arista.com_Port-Channel3 = 'up' | NOT RUN | - | +| 2216 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 2217 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 2218 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 2219 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 2220 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 2221 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 2222 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 2223 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 2224 | dc2-leaf3a.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 2225 | dc2-leaf3a.arista.com | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 2226 | dc2-leaf3a.arista.com | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 2227 | dc2-leaf3a.arista.com | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 2228 | dc2-leaf3a.arista.com | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 2229 | dc2-leaf3a.arista.com | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 2230 | dc2-leaf3a.arista.com | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 2231 | dc2-leaf3a.arista.com | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 2232 | dc2-leaf3a.arista.com | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 2233 | dc2-leaf3a.arista.com | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 2234 | dc2-leaf3a.arista.com | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 2235 | dc2-leaf3a.arista.com | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 2236 | dc2-leaf3a.arista.com | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 2237 | dc2-leaf3a.arista.com | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 2238 | dc2-leaf3a.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 2239 | dc2-leaf3a.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 2240 | dc2-leaf3a.arista.com | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 2241 | dc2-leaf3a.arista.com | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 2242 | dc2-leaf3a.arista.com | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2243 | dc2-leaf3a.arista.com | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2244 | dc2-leaf3a.arista.com | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2245 | dc2-leaf3a.arista.com | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2246 | dc2-leaf3a.arista.com | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2247 | dc2-leaf3a.arista.com | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 2248 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 2249 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 2250 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2251 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 2252 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2253 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2254 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2255 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 2256 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 2257 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2258 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 2259 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2260 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 2261 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2262 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 2263 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2264 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2265 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2266 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 2267 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 2268 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2269 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 2270 | dc2-leaf3a.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2271 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2272 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2273 | dc2-leaf3a.arista.com | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2274 | dc2-leaf3a.arista.com | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2275 | dc2-leaf3a.arista.com | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2276 | dc2-leaf3a.arista.com | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2277 | dc2-leaf3a.arista.com | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2278 | dc2-leaf3a.arista.com | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2279 | dc2-leaf3a.arista.com | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2280 | dc2-leaf3a.arista.com | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2281 | dc2-leaf3a.arista.com | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2282 | dc2-leaf3a.arista.com | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2283 | dc2-leaf3a.arista.com | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2284 | dc2-leaf3a.arista.com | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2285 | dc2-leaf3a.arista.com | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2286 | dc2-leaf3a.arista.com | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2287 | dc2-leaf3a.arista.com | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2288 | dc2-leaf3a.arista.com | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2289 | dc2-leaf3a.arista.com | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2290 | dc2-leaf3a.arista.com | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2291 | dc2-leaf3a.arista.com | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2292 | dc2-leaf3a.arista.com | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2293 | dc2-leaf3a.arista.com | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2294 | dc2-leaf3a.arista.com | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2295 | dc2-leaf3a.arista.com | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 2296 | dc2-leaf3a.arista.com | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 2297 | dc2-leaf3a.arista.com | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 2298 | dc2-leaf3a.arista.com | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 2299 | dc2-leaf3a.arista.com | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 2300 | dc2-leaf3a.arista.com | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2301 | dc2-leaf3a.arista.com | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2302 | dc2-leaf3a.arista.com | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2303 | dc2-leaf3a.arista.com | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2304 | dc2-leaf3a.arista.com | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2305 | dc2-leaf3a.arista.com | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2306 | dc2-leaf3a.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2307 | dc2-leaf3a.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2308 | dc2-leaf3a.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2309 | dc2-leaf3a.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2310 | dc2-leaf3a.arista.com | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2311 | dc2-leaf3a.arista.com | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 2312 | dc2-leaf3b.arista.com | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2313 | dc2-leaf3b.arista.com | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2314 | dc2-leaf3b.arista.com | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 2315 | dc2-leaf3b.arista.com | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 2316 | dc2-leaf3b.arista.com | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 2317 | dc2-leaf3b.arista.com | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 2318 | dc2-leaf3b.arista.com | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 2319 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine1 (IP: 10.255.128.11) | NOT RUN | - | +| 2320 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-spine2 (IP: 10.255.128.12) | NOT RUN | - | +| 2321 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.129.124) | NOT RUN | - | +| 2322 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine1 (IP: 10.255.255.124) | NOT RUN | - | +| 2323 | dc2-leaf3b.arista.com | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-spine2 (IP: 10.255.255.126) | NOT RUN | - | +| 2324 | dc2-leaf3b.arista.com | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 2325 | dc2-leaf3b.arista.com | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 2326 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-spine1 Ethernet6 | NOT RUN | - | +| 2327 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-spine2 Ethernet6 | NOT RUN | - | +| 2328 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf3a.arista.com Ethernet3 | NOT RUN | - | +| 2329 | dc2-leaf3b.arista.com | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf3a.arista.com Ethernet4 | NOT RUN | - | +| 2330 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1a Loopback0 (IP: 10.255.0.3) | NOT RUN | - | +| 2331 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf1b Loopback0 (IP: 10.255.0.4) | NOT RUN | - | +| 2332 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-leaf2a Loopback0 (IP: 10.255.0.5) | NOT RUN | - | +| 2333 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine1 Loopback0 (IP: 10.255.0.1) | NOT RUN | - | +| 2334 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-spine2 Loopback0 (IP: 10.255.0.2) | NOT RUN | - | +| 2335 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1a Loopback0 (IP: 10.33.0.5) | NOT RUN | - | +| 2336 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-svc-leaf1b Loopback0 (IP: 10.33.0.6) | NOT RUN | - | +| 2337 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan1 Loopback0 (IP: 10.255.2.1) | NOT RUN | - | +| 2338 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc1-wan2 Loopback0 (IP: 10.255.2.2) | NOT RUN | - | +| 2339 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1a Loopback0 (IP: 10.255.128.13) | NOT RUN | - | +| 2340 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf1b Loopback0 (IP: 10.255.128.14) | NOT RUN | - | +| 2341 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2a Loopback0 (IP: 10.255.128.15) | NOT RUN | - | +| 2342 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf2b Loopback0 (IP: 10.255.128.16) | NOT RUN | - | +| 2343 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3a.arista.com Loopback0 (IP: 10.255.128.17) | NOT RUN | - | +| 2344 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-leaf3b.arista.com Loopback0 (IP: 10.255.128.18) | NOT RUN | - | +| 2345 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine1 Loopback0 (IP: 10.255.128.11) | NOT RUN | - | +| 2346 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: Loopback0 (IP: 10.255.128.18) - Destination: dc2-spine2 Loopback0 (IP: 10.255.128.12) | NOT RUN | - | +| 2347 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.125) - Destination: dc2-spine1 Ethernet6 (IP: 10.255.255.124) | NOT RUN | - | +| 2348 | dc2-leaf3b.arista.com | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.127) - Destination: dc2-spine2 Ethernet6 (IP: 10.255.255.126) | NOT RUN | - | +| 2349 | dc2-leaf3b.arista.com | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 2350 | dc2-leaf3b.arista.com | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 2351 | dc2-leaf3b.arista.com | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 2352 | dc2-leaf3b.arista.com | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 2353 | dc2-leaf3b.arista.com | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 2354 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 2355 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 2356 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 2357 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 2358 | dc2-leaf3b.arista.com | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 2359 | dc2-leaf3b.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2360 | dc2-leaf3b.arista.com | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2361 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 2362 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 2363 | dc2-leaf3b.arista.com | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 2364 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-SPINE1_Ethernet6 = 'up' | NOT RUN | - | +| 2365 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'adminDown' | NOT RUN | - | +| 2366 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-SPINE2_Ethernet6 = 'up' | NOT RUN | - | +| 2367 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - MLAG_dc2-leaf3a.arista.com_Ethernet3 = 'up' | NOT RUN | - | +| 2368 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - MLAG_dc2-leaf3a.arista.com_Ethernet4 = 'up' | NOT RUN | - | +| 2369 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 2370 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up' | NOT RUN | - | +| 2371 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback10 - VRF10_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 2372 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback11 - VRF11_VTEP_DIAGNOSTICS = 'up' | NOT RUN | - | +| 2373 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel11 - dc2-leaf3-fw1_PortChannel = 'up' | NOT RUN | - | +| 2374 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Port-Channel3 - MLAG_dc2-leaf3a.arista.com_Port-Channel3 = 'up' | NOT RUN | - | +| 2375 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan11 - VRF10_VLAN11 = 'up' | NOT RUN | - | +| 2376 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan12 - VRF10_VLAN12 = 'up' | NOT RUN | - | +| 2377 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan21 - VRF11_VLAN21 = 'up' | NOT RUN | - | +| 2378 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan22 - VRF11_VLAN22 = 'up' | NOT RUN | - | +| 2379 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up' | NOT RUN | - | +| 2380 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up' | NOT RUN | - | +| 2381 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4093 - MLAG_L3 = 'up' | NOT RUN | - | +| 2382 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vlan4094 - MLAG = 'up' | NOT RUN | - | +| 2383 | dc2-leaf3b.arista.com | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Vxlan1 = 'up' | NOT RUN | - | +| 2384 | dc2-leaf3b.arista.com | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 2385 | dc2-leaf3b.arista.com | Logging | VerifyLoggingAccounting | Verifies if AAA accounting logs are generated. | - | NOT RUN | - | +| 2386 | dc2-leaf3b.arista.com | Logging | VerifyLoggingErrors | Verifies there are no syslog messages with a severity of ERRORS or higher. | - | NOT RUN | - | +| 2387 | dc2-leaf3b.arista.com | Logging | VerifyLoggingHostname | Verifies if logs are generated with the device FQDN. | - | NOT RUN | - | +| 2388 | dc2-leaf3b.arista.com | Logging | VerifyLoggingHosts | Verifies logging hosts (syslog servers) for a specified VRF. | - | NOT RUN | - | +| 2389 | dc2-leaf3b.arista.com | Logging | VerifyLoggingLogsGeneration | Verifies if logs are generated. | - | NOT RUN | - | +| 2390 | dc2-leaf3b.arista.com | Logging | VerifyLoggingPersistent | Verifies if logging persistent is enabled and logs are saved in flash. | - | NOT RUN | - | +| 2391 | dc2-leaf3b.arista.com | Logging | VerifyLoggingSourceInt | Verifies logging source-interface for a specified VRF. | - | NOT RUN | - | +| 2392 | dc2-leaf3b.arista.com | Logging | VerifyLoggingTimestamp | Verifies if logs are generated with the riate timestamp. | - | NOT RUN | - | +| 2393 | dc2-leaf3b.arista.com | MLAG | VerifyMlagConfigSanity | Verifies there are no MLAG config-sanity inconsistencies. | - | NOT RUN | - | +| 2394 | dc2-leaf3b.arista.com | MLAG | VerifyMlagDualPrimary | Verifies the MLAG dual-primary detection parameters. | - | NOT RUN | - | +| 2395 | dc2-leaf3b.arista.com | MLAG | VerifyMlagInterfaces | Verifies there are no inactive or active-partial MLAG ports. | - | NOT RUN | - | +| 2396 | dc2-leaf3b.arista.com | MLAG | VerifyMlagReloadDelay | Verifies the MLAG reload-delay parameters. | - | NOT RUN | - | +| 2397 | dc2-leaf3b.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 2398 | dc2-leaf3b.arista.com | MLAG | VerifyMlagStatus | Verifies the health status of the MLAG configuration. | - | NOT RUN | - | +| 2399 | dc2-leaf3b.arista.com | Multicast | VerifyIGMPSnoopingGlobal | Verifies the IGMP snooping global configuration. | - | NOT RUN | - | +| 2400 | dc2-leaf3b.arista.com | Multicast | VerifyIGMPSnoopingVlans | Verifies the IGMP snooping status for the provided VLANs. | - | NOT RUN | - | +| 2401 | dc2-leaf3b.arista.com | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2402 | dc2-leaf3b.arista.com | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2403 | dc2-leaf3b.arista.com | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2404 | dc2-leaf3b.arista.com | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2405 | dc2-leaf3b.arista.com | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2406 | dc2-leaf3b.arista.com | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 2407 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.1 - Peer: dc1-spine1 | NOT RUN | - | +| 2408 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.2 - Peer: dc1-spine2 | NOT RUN | - | +| 2409 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2410 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.4 - Peer: dc1-leaf1b | NOT RUN | - | +| 2411 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.0.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2412 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.3 - Peer: dc1-leaf1a | NOT RUN | - | +| 2413 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.1.5 - Peer: dc1-leaf2a | NOT RUN | - | +| 2414 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.11 - Peer: dc2-spine1 | NOT RUN | - | +| 2415 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.12 - Peer: dc2-spine2 | NOT RUN | - | +| 2416 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2417 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.14 - Peer: dc2-leaf1b | NOT RUN | - | +| 2418 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2419 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.16 - Peer: dc2-leaf2b | NOT RUN | - | +| 2420 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2421 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.128.18 - Peer: dc2-leaf3b.arista.com | NOT RUN | - | +| 2422 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.13 - Peer: dc2-leaf1a | NOT RUN | - | +| 2423 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.15 - Peer: dc2-leaf2a | NOT RUN | - | +| 2424 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.129.17 - Peer: dc2-leaf3a.arista.com | NOT RUN | - | +| 2425 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.1 - Peer: dc1-wan1 | NOT RUN | - | +| 2426 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.255.2.2 - Peer: dc1-wan2 | NOT RUN | - | +| 2427 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2428 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.0.6 - Peer: dc1-svc-leaf1b | NOT RUN | - | +| 2429 | dc2-leaf3b.arista.com | Routing | VerifyRoutingTableEntry | Verifies that the provided routes are present in the routing table of a specified VRF. | Route: 10.33.1.5 - Peer: dc1-svc-leaf1a | NOT RUN | - | +| 2430 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2431 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2432 | dc2-leaf3b.arista.com | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2433 | dc2-leaf3b.arista.com | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2434 | dc2-leaf3b.arista.com | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2435 | dc2-leaf3b.arista.com | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2436 | dc2-leaf3b.arista.com | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2437 | dc2-leaf3b.arista.com | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2438 | dc2-leaf3b.arista.com | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2439 | dc2-leaf3b.arista.com | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2440 | dc2-leaf3b.arista.com | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2441 | dc2-leaf3b.arista.com | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2442 | dc2-leaf3b.arista.com | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2443 | dc2-leaf3b.arista.com | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2444 | dc2-leaf3b.arista.com | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2445 | dc2-leaf3b.arista.com | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2446 | dc2-leaf3b.arista.com | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2447 | dc2-leaf3b.arista.com | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2448 | dc2-leaf3b.arista.com | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2449 | dc2-leaf3b.arista.com | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2450 | dc2-leaf3b.arista.com | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2451 | dc2-leaf3b.arista.com | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2452 | dc2-leaf3b.arista.com | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2453 | dc2-leaf3b.arista.com | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2454 | dc2-leaf3b.arista.com | STP | VerifySTPBlockedPorts | Verifies there is no STP blocked ports. | - | NOT RUN | - | +| 2455 | dc2-leaf3b.arista.com | STP | VerifySTPCounters | Verifies there is no errors in STP BPDU packets. | - | NOT RUN | - | +| 2456 | dc2-leaf3b.arista.com | STP | VerifySTPForwardingPorts | Verifies that all interfaces are forwarding for a provided list of VLAN(s). | - | NOT RUN | - | +| 2457 | dc2-leaf3b.arista.com | STP | VerifySTPMode | Verifies the configured STP mode for a provided list of VLAN(s). | - | NOT RUN | - | +| 2458 | dc2-leaf3b.arista.com | STP | VerifySTPRootPriority | Verifies the STP root priority for a provided list of VLAN or MST instance ID(s). | - | NOT RUN | - | +| 2459 | dc2-leaf3b.arista.com | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2460 | dc2-leaf3b.arista.com | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2461 | dc2-leaf3b.arista.com | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2462 | dc2-leaf3b.arista.com | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2463 | dc2-leaf3b.arista.com | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2464 | dc2-leaf3b.arista.com | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2465 | dc2-leaf3b.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2466 | dc2-leaf3b.arista.com | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2467 | dc2-leaf3b.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2468 | dc2-leaf3b.arista.com | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2469 | dc2-leaf3b.arista.com | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2470 | dc2-leaf3b.arista.com | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 2471 | dc2-spine1 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2472 | dc2-spine1 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2473 | dc2-spine1 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 2474 | dc2-spine1 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 2475 | dc2-spine1 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 2476 | dc2-spine1 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 2477 | dc2-spine1 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 2478 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13) | NOT RUN | - | +| 2479 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14) | NOT RUN | - | +| 2480 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15) | NOT RUN | - | +| 2481 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16) | NOT RUN | - | +| 2482 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17) | NOT RUN | - | +| 2483 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18) | NOT RUN | - | +| 2484 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.105) | NOT RUN | - | +| 2485 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.109) | NOT RUN | - | +| 2486 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.113) | NOT RUN | - | +| 2487 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.117) | NOT RUN | - | +| 2488 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.121) | NOT RUN | - | +| 2489 | dc2-spine1 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.125) | NOT RUN | - | +| 2490 | dc2-spine1 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 2491 | dc2-spine1 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 2492 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet1 | NOT RUN | - | +| 2493 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet1 | NOT RUN | - | +| 2494 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet1 | NOT RUN | - | +| 2495 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet1 | NOT RUN | - | +| 2496 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet1 | NOT RUN | - | +| 2497 | dc2-spine1 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet1 | NOT RUN | - | +| 2498 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.104) - Destination: dc2-leaf1a Ethernet1 (IP: 10.255.255.105) | NOT RUN | - | +| 2499 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.108) - Destination: dc2-leaf1b Ethernet1 (IP: 10.255.255.109) | NOT RUN | - | +| 2500 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet3 (IP: 10.255.255.112) - Destination: dc2-leaf2a Ethernet1 (IP: 10.255.255.113) | NOT RUN | - | +| 2501 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet4 (IP: 10.255.255.116) - Destination: dc2-leaf2b Ethernet1 (IP: 10.255.255.117) | NOT RUN | - | +| 2502 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet5 (IP: 10.255.255.120) - Destination: dc2-leaf3a.arista.com Ethernet1 (IP: 10.255.255.121) | NOT RUN | - | +| 2503 | dc2-spine1 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 10.255.255.124) - Destination: dc2-leaf3b.arista.com Ethernet1 (IP: 10.255.255.125) | NOT RUN | - | +| 2504 | dc2-spine1 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 2505 | dc2-spine1 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 2506 | dc2-spine1 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 2507 | dc2-spine1 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 2508 | dc2-spine1 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 2509 | dc2-spine1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 2510 | dc2-spine1 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 2511 | dc2-spine1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 2512 | dc2-spine1 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 2513 | dc2-spine1 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 2514 | dc2-spine1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2515 | dc2-spine1 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2516 | dc2-spine1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 2517 | dc2-spine1 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 2518 | dc2-spine1 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 2519 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet1 = 'up' | NOT RUN | - | +| 2520 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet1 = 'up' | NOT RUN | - | +| 2521 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet1 = 'up' | NOT RUN | - | +| 2522 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet1 = 'up' | NOT RUN | - | +| 2523 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet1 = 'up' | NOT RUN | - | +| 2524 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet1 = 'up' | NOT RUN | - | +| 2525 | dc2-spine1 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 2526 | dc2-spine1 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 2527 | dc2-spine1 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2528 | dc2-spine1 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2529 | dc2-spine1 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2530 | dc2-spine1 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2531 | dc2-spine1 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2532 | dc2-spine1 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 2533 | dc2-spine1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2534 | dc2-spine1 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2535 | dc2-spine1 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2536 | dc2-spine1 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2537 | dc2-spine1 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2538 | dc2-spine1 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2539 | dc2-spine1 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2540 | dc2-spine1 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2541 | dc2-spine1 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2542 | dc2-spine1 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2543 | dc2-spine1 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2544 | dc2-spine1 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2545 | dc2-spine1 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2546 | dc2-spine1 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2547 | dc2-spine1 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2548 | dc2-spine1 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2549 | dc2-spine1 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2550 | dc2-spine1 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2551 | dc2-spine1 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2552 | dc2-spine1 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2553 | dc2-spine1 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2554 | dc2-spine1 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2555 | dc2-spine1 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2556 | dc2-spine1 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2557 | dc2-spine1 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2558 | dc2-spine1 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2559 | dc2-spine1 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2560 | dc2-spine1 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2561 | dc2-spine1 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2562 | dc2-spine1 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2563 | dc2-spine1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2564 | dc2-spine1 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2565 | dc2-spine1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2566 | dc2-spine1 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2567 | dc2-spine1 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2568 | dc2-spine1 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | +| 2569 | dc2-spine2 | AAA | VerifyAcctConsoleMethods | Verifies the AAA accounting console method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2570 | dc2-spine2 | AAA | VerifyAcctDefaultMethods | Verifies the AAA accounting default method lists for different accounting types (system, exec, commands, dot1x). | - | NOT RUN | - | +| 2571 | dc2-spine2 | AAA | VerifyAuthenMethods | Verifies the AAA authentication method lists for different authentication types (login, enable, dot1x). | - | NOT RUN | - | +| 2572 | dc2-spine2 | AAA | VerifyAuthzMethods | Verifies the AAA authorization method lists for different authorization types (commands, exec). | - | NOT RUN | - | +| 2573 | dc2-spine2 | AAA | VerifyTacacsServerGroups | Verifies if the provided TACACS server group(s) are configured. | - | NOT RUN | - | +| 2574 | dc2-spine2 | AAA | VerifyTacacsServers | Verifies TACACS servers are configured for a specified VRF. | - | NOT RUN | - | +| 2575 | dc2-spine2 | AAA | VerifyTacacsSourceIntf | Verifies TACACS source-interface for a specified VRF. | - | NOT RUN | - | +| 2576 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1a (IP: 10.255.128.13) | NOT RUN | - | +| 2577 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf1b (IP: 10.255.128.14) | NOT RUN | - | +| 2578 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2a (IP: 10.255.128.15) | NOT RUN | - | +| 2579 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf2b (IP: 10.255.128.16) | NOT RUN | - | +| 2580 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3a.arista.com (IP: 10.255.128.17) | NOT RUN | - | +| 2581 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP EVPN Peer: dc2-leaf3b.arista.com (IP: 10.255.128.18) | NOT RUN | - | +| 2582 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1a (IP: 10.255.255.107) | NOT RUN | - | +| 2583 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf1b (IP: 10.255.255.111) | NOT RUN | - | +| 2584 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2a (IP: 10.255.255.115) | NOT RUN | - | +| 2585 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf2b (IP: 10.255.255.119) | NOT RUN | - | +| 2586 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3a.arista.com (IP: 10.255.255.123) | NOT RUN | - | +| 2587 | dc2-spine2 | BGP | VerifyBGPSpecificPeers | Verifies the health of specific BGP peer(s). | BGP IPv4 Unicast Peer: dc2-leaf3b.arista.com (IP: 10.255.255.127) | NOT RUN | - | +| 2588 | dc2-spine2 | Configuration | VerifyRunningConfigDiffs | Verifies there is no difference between the running-config and the startup-config | - | NOT RUN | - | +| 2589 | dc2-spine2 | Configuration | VerifyZeroTouch | Verifies ZeroTouch is disabled | - | NOT RUN | - | +| 2590 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet1 - Remote: dc2-leaf1a Ethernet2 | NOT RUN | - | +| 2591 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet2 - Remote: dc2-leaf1b Ethernet2 | NOT RUN | - | +| 2592 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet3 - Remote: dc2-leaf2a Ethernet2 | NOT RUN | - | +| 2593 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet4 - Remote: dc2-leaf2b Ethernet2 | NOT RUN | - | +| 2594 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet5 - Remote: dc2-leaf3a.arista.com Ethernet2 | NOT RUN | - | +| 2595 | dc2-spine2 | Connectivity | VerifyLLDPNeighbors | Verifies that the provided LLDP neighbors are connected properly. | Local: Ethernet6 - Remote: dc2-leaf3b.arista.com Ethernet2 | NOT RUN | - | +| 2596 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet1 (IP: 10.255.255.106) - Destination: dc2-leaf1a Ethernet2 (IP: 10.255.255.107) | NOT RUN | - | +| 2597 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet2 (IP: 10.255.255.110) - Destination: dc2-leaf1b Ethernet2 (IP: 10.255.255.111) | NOT RUN | - | +| 2598 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet3 (IP: 10.255.255.114) - Destination: dc2-leaf2a Ethernet2 (IP: 10.255.255.115) | NOT RUN | - | +| 2599 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet4 (IP: 10.255.255.118) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119) | NOT RUN | - | +| 2600 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet5 (IP: 10.255.255.122) - Destination: dc2-leaf3a.arista.com Ethernet2 (IP: 10.255.255.123) | NOT RUN | - | +| 2601 | dc2-spine2 | Connectivity | VerifyReachability | Test the network reachability to one or many destination IP(s). | Source: P2P Interface Ethernet6 (IP: 10.255.255.126) - Destination: dc2-leaf3b.arista.com Ethernet2 (IP: 10.255.255.127) | NOT RUN | - | +| 2602 | dc2-spine2 | Field Notices | VerifyFieldNotice44Resolution | Verifies that the device is using the correct Aboot version per FN0044. | - | NOT RUN | - | +| 2603 | dc2-spine2 | Field Notices | VerifyFieldNotice72Resolution | Verifies if the device is exposed to FN0072, and if the issue has been mitigated. | - | NOT RUN | - | +| 2604 | dc2-spine2 | Greent | VerifyGreenT | Verifies if a GreenT policy is created. | - | NOT RUN | - | +| 2605 | dc2-spine2 | Greent | VerifyGreenTCounters | Verifies if the GreenT counters are incremented. | - | NOT RUN | - | +| 2606 | dc2-spine2 | Hardware | VerifyAdverseDrops | Verifies there are no adverse drops on DCS-7280 and DCS-7500 family switches. | - | NOT RUN | - | +| 2607 | dc2-spine2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | - | NOT RUN | - | +| 2608 | dc2-spine2 | Hardware | VerifyEnvironmentCooling | Verifies the status of power supply fans and all fan trays. | Accepted States: 'ok' | NOT RUN | - | +| 2609 | dc2-spine2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | - | NOT RUN | - | +| 2610 | dc2-spine2 | Hardware | VerifyEnvironmentPower | Verifies the power supplies status. | Accepted States: 'ok' | NOT RUN | - | +| 2611 | dc2-spine2 | Hardware | VerifyEnvironmentSystemCooling | Verifies the system cooling status. | - | NOT RUN | - | +| 2612 | dc2-spine2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2613 | dc2-spine2 | Hardware | VerifyTemperature | Verifies the device temperature. | - | NOT RUN | - | +| 2614 | dc2-spine2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | - | NOT RUN | - | +| 2615 | dc2-spine2 | Hardware | VerifyTransceiversManufacturers | Verifies if all transceivers come from approved manufacturers. | Accepted Manufacturers: 'Arista Networks', 'Arastra, Inc.', 'Not Present' | NOT RUN | - | +| 2616 | dc2-spine2 | Hardware | VerifyTransceiversTemperature | Verifies the transceivers temperature. | - | NOT RUN | - | +| 2617 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet1 - P2P_LINK_TO_DC2-LEAF1A_Ethernet2 = 'up' | NOT RUN | - | +| 2618 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet2 - P2P_LINK_TO_DC2-LEAF1B_Ethernet2 = 'up' | NOT RUN | - | +| 2619 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet3 - P2P_LINK_TO_DC2-LEAF2A_Ethernet2 = 'up' | NOT RUN | - | +| 2620 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet4 - P2P_LINK_TO_DC2-LEAF2B_Ethernet2 = 'up' | NOT RUN | - | +| 2621 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet5 - P2P_LINK_TO_DC2-LEAF3A.ARISTA.COM_Ethernet2 = 'up' | NOT RUN | - | +| 2622 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Ethernet6 - P2P_LINK_TO_DC2-LEAF3B.ARISTA.COM_Ethernet2 = 'up' | NOT RUN | - | +| 2623 | dc2-spine2 | Interfaces | VerifyInterfacesStatus | Verifies the status of the provided interfaces. | Interface Loopback0 - ROUTER_ID = 'up' | NOT RUN | - | +| 2624 | dc2-spine2 | LANZ | VerifyLANZ | Verifies if LANZ is enabled. | - | NOT RUN | - | +| 2625 | dc2-spine2 | PTP | VerifyPtpGMStatus | Verifies that the device is locked to a valid PTP Grandmaster. | - | NOT RUN | - | +| 2626 | dc2-spine2 | PTP | VerifyPtpLockStatus | Verifies that the device was locked to the upstream PTP GM in the last minute. | - | NOT RUN | - | +| 2627 | dc2-spine2 | PTP | VerifyPtpModeStatus | Verifies that the device is configured as a PTP Boundary Clock. | - | NOT RUN | - | +| 2628 | dc2-spine2 | PTP | VerifyPtpOffset | Verifies that the PTP timing offset is within +/- 1000ns from the master clock. | - | NOT RUN | - | +| 2629 | dc2-spine2 | PTP | VerifyPtpPortModeStatus | Verifies the PTP interfaces state. | - | NOT RUN | - | +| 2630 | dc2-spine2 | Routing | VerifyRoutingProtocolModel | Verifies the configured routing protocol model. | Routing protocol model: multi-agent | NOT RUN | - | +| 2631 | dc2-spine2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | - | NOT RUN | - | +| 2632 | dc2-spine2 | Security | VerifyAPIHttpsSSL | Verifies if the eAPI has a valid SSL profile. | eAPI HTTPS SSL Profile: eAPI_SSL_Profile | NOT RUN | - | +| 2633 | dc2-spine2 | Security | VerifyAPIHttpStatus | Verifies if eAPI HTTP server is disabled globally. | - | NOT RUN | - | +| 2634 | dc2-spine2 | Security | VerifyAPIIPv4Acl | Verifies if eAPI has the right number IPv4 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2635 | dc2-spine2 | Security | VerifyAPIIPv6Acl | Verifies if eAPI has the right number IPv6 ACL(s) configured for a specified VRF. | - | NOT RUN | - | +| 2636 | dc2-spine2 | Security | VerifyAPISSLCertificate | Verifies the eAPI SSL certificate expiry, common subject name, encryption algorithm and key size. | - | NOT RUN | - | +| 2637 | dc2-spine2 | Security | VerifyBannerLogin | Verifies the login banner of a device. | - | NOT RUN | - | +| 2638 | dc2-spine2 | Security | VerifyBannerMotd | Verifies the motd banner of a device. | - | NOT RUN | - | +| 2639 | dc2-spine2 | Security | VerifyIPSecConnHealth | Verifies all IPv4 security connections. | - | NOT RUN | - | +| 2640 | dc2-spine2 | Security | VerifyIPv4ACL | Verifies the configuration of IPv4 ACLs. | - | NOT RUN | - | +| 2641 | dc2-spine2 | Security | VerifySpecificIPSecConn | Verifies IPv4 security connections for a peer. | - | NOT RUN | - | +| 2642 | dc2-spine2 | Security | VerifySSHIPv4Acl | Verifies if the SSHD agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2643 | dc2-spine2 | Security | VerifySSHIPv6Acl | Verifies if the SSHD agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2644 | dc2-spine2 | Security | VerifySSHStatus | Verifies if the SSHD agent is disabled in the default VRF. | - | NOT RUN | - | +| 2645 | dc2-spine2 | Security | VerifyTelnetStatus | Verifies if Telnet is disabled in the default VRF. | - | NOT RUN | - | +| 2646 | dc2-spine2 | Services | VerifyDNSLookup | Verifies the DNS name to IP address resolution. | - | NOT RUN | - | +| 2647 | dc2-spine2 | Services | VerifyDNSServers | Verifies if the DNS servers are correctly configured. | - | NOT RUN | - | +| 2648 | dc2-spine2 | Services | VerifyErrdisableRecovery | Verifies the errdisable recovery reason, status, and interval. | - | NOT RUN | - | +| 2649 | dc2-spine2 | Services | VerifyHostname | Verifies the hostname of a device. | - | NOT RUN | - | +| 2650 | dc2-spine2 | SNMP | VerifySnmpIPv4Acl | Verifies if the SNMP agent has IPv4 ACL(s) configured. | - | NOT RUN | - | +| 2651 | dc2-spine2 | SNMP | VerifySnmpIPv6Acl | Verifies if the SNMP agent has IPv6 ACL(s) configured. | - | NOT RUN | - | +| 2652 | dc2-spine2 | SNMP | VerifySnmpStatus | Verifies if the SNMP agent is enabled. | - | NOT RUN | - | +| 2653 | dc2-spine2 | Software | VerifyEOSVersion | Verifies the EOS version of the device. | - | NOT RUN | - | +| 2654 | dc2-spine2 | Software | VerifyTerminAttrVersion | Verifies the TerminAttr version of the device. | - | NOT RUN | - | +| 2655 | dc2-spine2 | STUN | VerifyStunClient | Verifies the STUN client is configured with the specified IPv4 source address and port. Validate the public IP and port if provided. | - | NOT RUN | - | +| 2656 | dc2-spine2 | System | VerifyAgentLogs | Verifies there are no agent crash reports. | - | NOT RUN | - | +| 2657 | dc2-spine2 | System | VerifyCoredump | Verifies there are no core dump files. | - | NOT RUN | - | +| 2658 | dc2-spine2 | System | VerifyCPUUtilization | Verifies whether the CPU utilization is below 75%. | - | NOT RUN | - | +| 2659 | dc2-spine2 | System | VerifyFileSystemUtilization | Verifies that no partition is utilizing more than 75% of its disk space. | - | NOT RUN | - | +| 2660 | dc2-spine2 | System | VerifyMemoryUtilization | Verifies whether the memory utilization is below 75%. | - | NOT RUN | - | +| 2661 | dc2-spine2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2662 | dc2-spine2 | System | VerifyNTP | Verifies if NTP is synchronised. | - | NOT RUN | - | +| 2663 | dc2-spine2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2664 | dc2-spine2 | System | VerifyReloadCause | Verifies the last reload cause of the device. | - | NOT RUN | - | +| 2665 | dc2-spine2 | System | VerifyUptime | Verifies the device uptime. | - | NOT RUN | - | +| 2666 | dc2-spine2 | VLAN | VerifyVlanInternalPolicy | Verifies the VLAN internal allocation policy and the range of VLANs. | - | NOT RUN | - | diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1a-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1a-results.json index e7d81f7935f..9236029b609 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1a-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1a-results.json @@ -543,7 +543,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc1-leaf1b_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc1-leaf1b_Ethernet3 = 'up'" }, { "name": "dc1-leaf1a", @@ -552,7 +552,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc1-leaf1b_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc1-leaf1b_Ethernet4 = 'up'" }, { "name": "dc1-leaf1a", @@ -561,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc1-leaf1-server1_PCI1 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI1 = 'up'" }, { "name": "dc1-leaf1a", @@ -597,7 +597,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-leaf1a", @@ -606,7 +606,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc1-leaf1a", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc1-leaf1b_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc1-leaf1b_Port-Channel3 = 'up'" }, { "name": "dc1-leaf1a", @@ -642,7 +642,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up'" }, { "name": "dc1-leaf1a", @@ -696,7 +696,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc1-leaf1a", @@ -705,7 +705,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc1-leaf1a", @@ -723,7 +723,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc1-leaf1a", @@ -732,7 +732,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc1-leaf1a", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1b-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1b-results.json index 24e78b49268..b45308682ce 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1b-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1b-results.json @@ -534,7 +534,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc1-leaf1a_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc1-leaf1a_Ethernet3 = 'up'" }, { "name": "dc1-leaf1b", @@ -543,7 +543,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc1-leaf1a_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc1-leaf1a_Ethernet4 = 'up'" }, { "name": "dc1-leaf1b", @@ -552,7 +552,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc1-leaf1-server1_PCI2 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc1-leaf1-server1_PCI2 = 'up'" }, { "name": "dc1-leaf1b", @@ -588,7 +588,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-leaf1b", @@ -597,7 +597,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc1-leaf1b", @@ -624,7 +624,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc1-leaf1a_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc1-leaf1a_Port-Channel3 = 'up'" }, { "name": "dc1-leaf1b", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc1-leaf1-server1_PortChannel dc1-leaf1-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - PortChannel dc1-leaf1-server1 = 'up'" }, { "name": "dc1-leaf1b", @@ -687,7 +687,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc1-leaf1b", @@ -696,7 +696,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc1-leaf1b", @@ -714,7 +714,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc1-leaf1b", @@ -723,7 +723,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc1-leaf1b", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1c-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1c-results.json index 041fe220c72..75ae3dcd1e7 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1c-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf1c-results.json @@ -390,7 +390,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc1-leaf1-server1_iLO = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc1-leaf1-server1_iLO = 'up'" }, { "name": "dc1-leaf1c", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2a-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2a-results.json index c422d7010c2..0bb98ba4c0e 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2a-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2a-results.json @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc1-leaf2b_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc1-leaf2b_Ethernet3 = 'up'" }, { "name": "dc1-leaf2a", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc1-leaf2b_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc1-leaf2b_Ethernet4 = 'up'" }, { "name": "dc1-leaf2a", @@ -507,7 +507,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc1-leaf2-server1_PCI1 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc1-leaf2-server1_PCI1 = 'up'" }, { "name": "dc1-leaf2a", @@ -534,7 +534,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-leaf2a", @@ -543,7 +543,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc1-leaf2a", @@ -570,7 +570,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc1-leaf2b_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc1-leaf2b_Port-Channel3 = 'up'" }, { "name": "dc1-leaf2a", @@ -579,7 +579,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - SERVER_dc1-leaf2-server1_PortChannel dc1-leaf2-server1 = 'up'" }, { "name": "dc1-leaf2a", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc1-leaf2a", @@ -642,7 +642,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc1-leaf2a", @@ -660,7 +660,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc1-leaf2a", @@ -669,7 +669,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc1-leaf2a", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2c-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2c-results.json index c9103045ee7..34852d1b267 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2c-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-leaf2c-results.json @@ -381,7 +381,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc1-leaf2-server1_iLO = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc1-leaf2-server1_iLO = 'up'" }, { "name": "dc1-leaf2c", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine1-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine1-results.json index c2cb2f258ab..f58193d31fc 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine1-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine1-results.json @@ -497,7 +497,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-spine1", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine2-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine2-results.json index 0e3adf92562..72a509118ca 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine2-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-spine2-results.json @@ -497,7 +497,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-spine2", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1a-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1a-results.json index b096ebfb5e1..4fca2e81a0c 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1a-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1a-results.json @@ -471,7 +471,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1b_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc1-svc-leaf1b_Ethernet3 = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1b_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc1-svc-leaf1b_Ethernet4 = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -507,7 +507,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1b_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc1-svc-leaf1b_Port-Channel3 = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -516,7 +516,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc1-svc-leaf1a", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc1-svc-leaf1a", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1b-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1b-results.json index 8458f2e9243..a3e52204bcb 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1b-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-svc-leaf1b-results.json @@ -471,7 +471,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc1-svc-leaf1a_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc1-svc-leaf1a_Ethernet3 = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc1-svc-leaf1a_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc1-svc-leaf1a_Ethernet4 = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -507,7 +507,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc1-svc-leaf1a_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc1-svc-leaf1a_Port-Channel3 = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -516,7 +516,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc1-svc-leaf1b", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc1-svc-leaf1b", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan1-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan1-results.json index 73508779318..f2b3987fa79 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan1-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan1-results.json @@ -188,6 +188,24 @@ "description": "Verifies that the provided LLDP neighbors are connected properly.", "custom_field": "Local: Ethernet2 - Remote: dc1-leaf1b Ethernet6" }, + { + "name": "dc1-wan1", + "test": "VerifyReachability", + "categories": [ + "connectivity" + ], + "description": "Test the network reachability to one or many destination IP(s).", + "custom_field": "Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1)" + }, + { + "name": "dc1-wan1", + "test": "VerifyReachability", + "categories": [ + "connectivity" + ], + "description": "Test the network reachability to one or many destination IP(s).", + "custom_field": "Source: Dps1 (IP: 10.255.1.1) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2)" + }, { "name": "dc1-wan1", "test": "VerifyReachability", @@ -381,7 +399,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - Router_ID = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-wan1", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan2-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan2-results.json index 5bf53a16d3a..ee34df2593a 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan2-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc1-wan2-results.json @@ -188,6 +188,24 @@ "description": "Verifies that the provided LLDP neighbors are connected properly.", "custom_field": "Local: Ethernet2 - Remote: dc1-leaf1b Ethernet7" }, + { + "name": "dc1-wan2", + "test": "VerifyReachability", + "categories": [ + "connectivity" + ], + "description": "Test the network reachability to one or many destination IP(s).", + "custom_field": "Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan1 Dps1 (IP: 10.255.1.1)" + }, + { + "name": "dc1-wan2", + "test": "VerifyReachability", + "categories": [ + "connectivity" + ], + "description": "Test the network reachability to one or many destination IP(s).", + "custom_field": "Source: Dps1 (IP: 10.255.1.2) - Destination: dc1-wan2 Dps1 (IP: 10.255.1.2)" + }, { "name": "dc1-wan2", "test": "VerifyReachability", @@ -381,7 +399,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - Router_ID = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc1-wan2", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1a-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1a-results.json index 492683ffa59..a14e9d00824 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1a-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1a-results.json @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf1b_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf1b_Ethernet3 = 'up'" }, { "name": "dc2-leaf1a", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf1b_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf1b_Ethernet4 = 'up'" }, { "name": "dc2-leaf1a", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf1-server1_PCI1 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI1 = 'up'" }, { "name": "dc2-leaf1a", @@ -516,7 +516,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf1a", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf1a", @@ -552,7 +552,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf1b_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf1b_Port-Channel3 = 'up'" }, { "name": "dc2-leaf1a", @@ -561,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up'" }, { "name": "dc2-leaf1a", @@ -615,7 +615,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf1a", @@ -624,7 +624,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf1a", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf1a", @@ -642,7 +642,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf1a", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1b-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1b-results.json index 20c9e7ff31d..d1ca82d56c0 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1b-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1b-results.json @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf1a_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf1a_Ethernet3 = 'up'" }, { "name": "dc2-leaf1b", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf1a_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf1a_Ethernet4 = 'up'" }, { "name": "dc2-leaf1b", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf1-server1_PCI2 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf1-server1_PCI2 = 'up'" }, { "name": "dc2-leaf1b", @@ -516,7 +516,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf1b", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf1b", @@ -552,7 +552,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf1a_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf1a_Port-Channel3 = 'up'" }, { "name": "dc2-leaf1b", @@ -561,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc2-leaf1-server1_PortChannel dc2-leaf1-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - PortChannel dc2-leaf1-server1 = 'up'" }, { "name": "dc2-leaf1b", @@ -615,7 +615,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf1b", @@ -624,7 +624,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf1b", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf1b", @@ -642,7 +642,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf1b", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1c-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1c-results.json index 21c7d4a9c1b..915e85e83b7 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1c-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf1c-results.json @@ -237,7 +237,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf1-server1_iLO = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf1-server1_iLO = 'up'" }, { "name": "dc2-leaf1c", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2a-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2a-results.json index 0ad5865931e..7d829678c07 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2a-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2a-results.json @@ -516,7 +516,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf2b_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf2b_Ethernet3 = 'up'" }, { "name": "dc2-leaf2a", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf2b_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf2b_Ethernet4 = 'up'" }, { "name": "dc2-leaf2a", @@ -534,7 +534,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf2-server1_PCI1 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI1 = 'up'" }, { "name": "dc2-leaf2a", @@ -561,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf2a", @@ -570,7 +570,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf2a", @@ -597,7 +597,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf2b_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf2b_Port-Channel3 = 'up'" }, { "name": "dc2-leaf2a", @@ -606,7 +606,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up'" }, { "name": "dc2-leaf2a", @@ -660,7 +660,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf2a", @@ -669,7 +669,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf2a", @@ -678,7 +678,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf2a", @@ -687,7 +687,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf2a", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2b-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2b-results.json index 9d0385409d5..15fc9efff23 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2b-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2b-results.json @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf2a_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf2a_Ethernet3 = 'up'" }, { "name": "dc2-leaf2b", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf2a_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf2a_Ethernet4 = 'up'" }, { "name": "dc2-leaf2b", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf2-server1_PCI2 = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf2-server1_PCI2 = 'up'" }, { "name": "dc2-leaf2b", @@ -525,7 +525,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf2b", @@ -534,7 +534,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf2b", @@ -561,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf2a_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf2a_Port-Channel3 = 'up'" }, { "name": "dc2-leaf2b", @@ -570,7 +570,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel5 - dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up'" + "custom_field": "Interface Port-Channel5 - SERVER_dc2-leaf2-server1_PortChannel dc2-leaf2-server1 = 'up'" }, { "name": "dc2-leaf2b", @@ -624,7 +624,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf2b", @@ -633,7 +633,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf2b", @@ -642,7 +642,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf2b", @@ -651,7 +651,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf2b", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2c-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2c-results.json index 7681ff21f72..ddba2eda30f 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2c-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf2c-results.json @@ -237,7 +237,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet5 - dc2-leaf2-server1_iLO = 'up'" + "custom_field": "Interface Ethernet5 - SERVER_dc2-leaf2-server1_iLO = 'up'" }, { "name": "dc2-leaf2c", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3a.arista.com-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3a.arista.com-results.json index a226f0f35d4..bc3bde0b530 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3a.arista.com-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3a.arista.com-results.json @@ -125,6 +125,15 @@ "description": "Verifies that the provided LLDP neighbors are connected properly.", "custom_field": "Local: Ethernet1 - Remote: dc2-spine1 Ethernet5" }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyLLDPNeighbors", + "categories": [ + "connectivity" + ], + "description": "Verifies that the provided LLDP neighbors are connected properly.", + "custom_field": "Local: Ethernet15 - Remote: dc2-leaf2b Ethernet2" + }, { "name": "dc2-leaf3a.arista.com", "test": "VerifyLLDPNeighbors", @@ -314,6 +323,15 @@ "description": "Test the network reachability to one or many destination IP(s).", "custom_field": "Source: P2P Interface Ethernet1 (IP: 10.255.255.121) - Destination: dc2-spine1 Ethernet5 (IP: 10.255.255.120)" }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyReachability", + "categories": [ + "connectivity" + ], + "description": "Test the network reachability to one or many destination IP(s).", + "custom_field": "Source: P2P Interface Ethernet15 (IP: 1.1.1.1) - Destination: dc2-leaf2b Ethernet2 (IP: 10.255.255.119)" + }, { "name": "dc2-leaf3a.arista.com", "test": "VerifyReachability", @@ -464,6 +482,42 @@ "description": "Verifies the status of the provided interfaces.", "custom_field": "Interface Ethernet11 - dc2-leaf3-fw1_e1 = 'up'" }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Ethernet12 - Test_mode_and_vlans = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Ethernet13 - Test_native_vlan_and_trunk_groups = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Ethernet14 - Test_phone = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Ethernet15 - Test_type_routed = 'up'" + }, { "name": "dc2-leaf3a.arista.com", "test": "VerifyInterfacesStatus", @@ -480,7 +534,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf3b.arista.com_Ethernet3 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -489,7 +543,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf3b.arista.com_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf3b.arista.com_Ethernet4 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -498,7 +552,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -507,7 +561,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -543,7 +597,43 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf3b.arista.com_Po3 = 'up'" + "custom_field": "Interface Port-Channel12 - Test_mode_and_vlans = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Port-Channel13 - Test_native_vlan_and_trunk_groups = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Port-Channel14 - Test_phone = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Port-Channel15 - Test_type_routed = 'up'" + }, + { + "name": "dc2-leaf3a.arista.com", + "test": "VerifyInterfacesStatus", + "categories": [ + "interfaces" + ], + "description": "Verifies the status of the provided interfaces.", + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf3b.arista.com_Port-Channel3 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -588,7 +678,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -597,7 +687,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -606,7 +696,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf3a.arista.com", @@ -615,7 +705,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf3a.arista.com", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3b.arista.com-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3b.arista.com-results.json index 5c5994e48c8..6105f1a049c 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3b.arista.com-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-leaf3b.arista.com-results.json @@ -480,7 +480,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet3 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet3 = 'up'" + "custom_field": "Interface Ethernet3 - MLAG_dc2-leaf3a.arista.com_Ethernet3 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -489,7 +489,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Ethernet4 - MLAG_PEER_dc2-leaf3a.arista.com_Ethernet4 = 'up'" + "custom_field": "Interface Ethernet4 - MLAG_dc2-leaf3a.arista.com_Ethernet4 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -498,7 +498,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -507,7 +507,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback1 - VTEP_VXLAN_Tunnel_Source = 'up'" + "custom_field": "Interface Loopback1 - VXLAN_TUNNEL_SOURCE = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -543,7 +543,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Port-Channel3 - MLAG_PEER_dc2-leaf3a.arista.com_Po3 = 'up'" + "custom_field": "Interface Port-Channel3 - MLAG_dc2-leaf3a.arista.com_Port-Channel3 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -588,7 +588,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3009 - MLAG_PEER_L3_iBGP: vrf VRF10 = 'up'" + "custom_field": "Interface Vlan3009 - MLAG_L3_VRF_VRF10 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -597,7 +597,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan3010 - MLAG_PEER_L3_iBGP: vrf VRF11 = 'up'" + "custom_field": "Interface Vlan3010 - MLAG_L3_VRF_VRF11 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -606,7 +606,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4093 - MLAG_PEER_L3_PEERING = 'up'" + "custom_field": "Interface Vlan4093 - MLAG_L3 = 'up'" }, { "name": "dc2-leaf3b.arista.com", @@ -615,7 +615,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Vlan4094 - MLAG_PEER = 'up'" + "custom_field": "Interface Vlan4094 - MLAG = 'up'" }, { "name": "dc2-leaf3b.arista.com", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine1-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine1-results.json index 8b00ad708dd..acaa3653b09 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine1-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine1-results.json @@ -471,7 +471,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-spine1", diff --git a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine2-results.json b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine2-results.json index ee01d573d2c..a182e7a863b 100644 --- a/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine2-results.json +++ b/ansible_collections/arista/avd/molecule/eos_validate_state/reports/test_results/dc2-spine2-results.json @@ -471,7 +471,7 @@ "interfaces" ], "description": "Verifies the status of the provided interfaces.", - "custom_field": "Interface Loopback0 - EVPN_Overlay_Peering = 'up'" + "custom_field": "Interface Loopback0 - ROUTER_ID = 'up'" }, { "name": "dc2-spine2", diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1A.md index 628f9062855..9ef2e1bca6e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1A.md @@ -8,6 +8,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -61,20 +62,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -143,6 +144,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -208,8 +213,8 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -267,25 +272,25 @@ vlan 350 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet10.100 | subinterface test | l3dot1q | - | 100 | -| Ethernet10.200 | subinterface test with vlan override | l3dot1q | - | 121 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet10.100 | subinterface test | - | 100 | - | +| Ethernet10.200 | subinterface test with vlan override | - | 121 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet7 | test | routed | - | 10.10.10.10/24 | Tenant_A_WAN_Zone | 9000 | False | - | - | -| Ethernet8 | test | routed | - | 10.10.10.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet9 | test | routed | - | 10.10.20.20/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet10.100 | subinterface test | l3dot1q | - | 10.10.11.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet10.200 | subinterface test with vlan override | l3dot1q | - | 10.10.21.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.81/31 | default | 1500 | False | - | - | -| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet6 | routed | - | 172.31.255.83/31 | default | 1500 | False | - | - | -| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet6 | routed | - | 172.31.255.85/31 | default | 1500 | False | - | - | -| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet6 | routed | - | 172.31.255.87/31 | default | 1500 | False | - | - | -| Ethernet4000 | My test | routed | - | 10.3.2.1/21 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet7 | test | - | 10.10.10.10/24 | Tenant_A_WAN_Zone | 9000 | False | - | - | +| Ethernet8 | test | - | 10.10.10.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet9 | test | - | 10.10.20.20/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet10.100 | subinterface test | - | 10.10.11.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet10.200 | subinterface test with vlan override | - | 10.10.21.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.81/31 | default | 1500 | False | - | - | +| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet6 | - | 172.31.255.83/31 | default | 1500 | False | - | - | +| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet6 | - | 172.31.255.85/31 | default | 1500 | False | - | - | +| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet6 | - | 172.31.255.87/31 | default | 1500 | False | - | - | +| Ethernet4000 | My test | - | 10.3.2.1/21 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -701,16 +706,16 @@ router bgp 65104 neighbor 172.31.255.86 description DC1-SPINE4_Ethernet6 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -840,8 +845,9 @@ router bfd ```eos ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying +! +queue-monitor length log 5 ``` ## Multicast diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1B.md index 10fb72589df..f0a26bc742d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-BL1B.md @@ -8,6 +8,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -61,20 +62,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -141,6 +142,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -206,8 +211,8 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -265,25 +270,25 @@ vlan 350 ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | -| Ethernet10.100 | subinterface test | l3dot1q | - | 100 | -| Ethernet10.200 | subinterface test with vlan override | l3dot1q | - | 141 | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | +| Ethernet10.100 | subinterface test | - | 100 | - | +| Ethernet10.200 | subinterface test with vlan override | - | 141 | - | ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet7 | test | routed | - | 10.10.20.20/24 | Tenant_A_WAN_Zone | 9000 | False | - | - | -| Ethernet8 | test | routed | - | 10.10.30.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet9 | test | routed | - | 10.10.40.20/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet10.100 | subinterface test | l3dot1q | - | 10.10.31.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet10.200 | subinterface test with vlan override | l3dot1q | - | 10.10.41.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | -| Ethernet45 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet7 | routed | - | 172.31.255.97/31 | default | 1500 | False | - | - | -| Ethernet46 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet7 | routed | - | 172.31.255.99/31 | default | 1500 | False | - | - | -| Ethernet47 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet7 | routed | - | 172.31.255.101/31 | default | 1500 | False | - | - | -| Ethernet48 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet7 | routed | - | 172.31.255.103/31 | default | 1500 | False | - | - | -| Ethernet4000 | My second test | routed | - | 10.1.2.3/12 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet7 | test | - | 10.10.20.20/24 | Tenant_A_WAN_Zone | 9000 | False | - | - | +| Ethernet8 | test | - | 10.10.30.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet9 | test | - | 10.10.40.20/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet10.100 | subinterface test | - | 10.10.31.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet10.200 | subinterface test with vlan override | - | 10.10.41.10/24 | Tenant_L3_VRF_Zone | 9000 | False | - | - | +| Ethernet45 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet7 | - | 172.31.255.97/31 | default | 1500 | False | - | - | +| Ethernet46 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet7 | - | 172.31.255.99/31 | default | 1500 | False | - | - | +| Ethernet47 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet7 | - | 172.31.255.101/31 | default | 1500 | False | - | - | +| Ethernet48 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet7 | - | 172.31.255.103/31 | default | 1500 | False | - | - | +| Ethernet4000 | My second test | - | 10.1.2.3/12 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -699,16 +704,16 @@ router bgp 65105 neighbor 172.31.255.102 description DC1-SPINE4_Ethernet7 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -838,8 +843,9 @@ router bfd ```eos ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying +! +queue-monitor length log 5 ``` ## Multicast diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md index 1e6fcdf4cb3..e9fdab6a929 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -52,20 +53,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -156,6 +157,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -272,7 +277,7 @@ vlan internal order ascending range 1006 1199 | 160 | Tenant_A_VMOTION | - | | 161 | Tenant_A_NFS | - | | 162 | Tenant_A_FTP | - | -| 4091 | MLAG_PEER | MLAG | +| 4091 | MLAG | MLAG | ### VLANs Device Configuration @@ -315,7 +320,7 @@ vlan 162 name Tenant_A_FTP ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -331,8 +336,8 @@ vlan 4091 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | CUSTOM_DC1-LEAF2A_Ethernet7 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 1 | | Ethernet2 | CUSTOM_DC1-LEAF2B_Ethernet7 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF1B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF1B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF1B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF1B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -351,12 +356,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF1B_Ethernet3 + description MLAG_DC1-L2LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF1B_Ethernet4 + description MLAG_DC1-L2LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -367,10 +372,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | CUSTOM_DC1_LEAF2_Po7 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF1B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | CUSTOM_DC1_LEAF2_Po7 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF1B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -379,17 +384,17 @@ interface Ethernet4 interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF1B_Po3 + description MLAG_DC1-L2LEAF1B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -398,7 +403,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4091 | MLAG_PEER | default | 1500 | False | +| Vlan4091 | MLAG | default | 1500 | False | ##### IPv4 @@ -411,7 +416,7 @@ interface Port-Channel3 ```eos ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -481,6 +486,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1B.md index cd90240ab0d..8e2ba50a6cb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -52,20 +53,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.115/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.115/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.115/24 @@ -156,6 +157,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -272,7 +277,7 @@ vlan internal order ascending range 1006 1199 | 160 | Tenant_A_VMOTION | - | | 161 | Tenant_A_NFS | - | | 162 | Tenant_A_FTP | - | -| 4091 | MLAG_PEER | MLAG | +| 4091 | MLAG | MLAG | ### VLANs Device Configuration @@ -315,7 +320,7 @@ vlan 162 name Tenant_A_FTP ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -331,8 +336,8 @@ vlan 4091 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | CUSTOM_DC1-LEAF2A_Ethernet8 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 1 | | Ethernet2 | CUSTOM_DC1-LEAF2B_Ethernet8 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF1A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF1A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF1A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF1A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -351,12 +356,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF1A_Ethernet3 + description MLAG_DC1-L2LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF1A_Ethernet4 + description MLAG_DC1-L2LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -367,10 +372,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | CUSTOM_DC1_LEAF2_Po7 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF1A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | CUSTOM_DC1_LEAF2_Po7 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF1A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -379,17 +384,17 @@ interface Ethernet4 interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF1A_Po3 + description MLAG_DC1-L2LEAF1A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -398,7 +403,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4091 | MLAG_PEER | default | 1500 | False | +| Vlan4091 | MLAG | default | 1500 | False | ##### IPv4 @@ -411,7 +416,7 @@ interface Port-Channel3 ```eos ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -481,6 +486,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md index c75c333acf2..1969606837c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -52,20 +53,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -156,6 +157,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -283,7 +288,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4091 | MLAG_PEER | MLAG | +| 4091 | MLAG | MLAG | ### VLANs Device Configuration @@ -353,7 +358,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -369,8 +374,8 @@ vlan 4091 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | CUSTOM_DC1-SVC3A_Ethernet7 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | CUSTOM_DC1-SVC3B_Ethernet7 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -389,12 +394,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -405,10 +410,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | CUSTOM_DC1_SVC3_Po7 | switched | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | CUSTOM_DC1_SVC3_Po7 | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -417,17 +422,17 @@ interface Ethernet4 interface Port-Channel1 description CUSTOM_DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -436,7 +441,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4091 | MLAG_PEER | default | 1500 | False | +| Vlan4091 | MLAG | default | 1500 | False | ##### IPv4 @@ -449,7 +454,7 @@ interface Port-Channel3 ```eos ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -519,6 +524,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md index 64df2abc2f9..b489813f5ce 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -52,20 +53,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -156,6 +157,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -283,7 +288,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4091 | MLAG_PEER | MLAG | +| 4091 | MLAG | MLAG | ### VLANs Device Configuration @@ -353,7 +358,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -369,8 +374,8 @@ vlan 4091 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | CUSTOM_DC1-SVC3A_Ethernet8 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | CUSTOM_DC1-SVC3B_Ethernet8 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -389,12 +394,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -405,10 +410,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | CUSTOM_DC1_SVC3_Po7 | switched | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | CUSTOM_DC1_SVC3_Po7 | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -417,17 +422,17 @@ interface Ethernet4 interface Port-Channel1 description CUSTOM_DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -436,7 +441,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4091 | MLAG_PEER | default | 1500 | False | +| Vlan4091 | MLAG | default | 1500 | False | ##### IPv4 @@ -449,7 +454,7 @@ interface Port-Channel3 ```eos ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -519,6 +524,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF3A.md index f7cc0d23100..1110ecccfc0 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-L2LEAF3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.116/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.116/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.116/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -318,9 +323,9 @@ interface Ethernet2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | CUSTOM_DC1_LEAF2_Po9 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | CUSTOM_DC1_LEAF2_Po9 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -329,9 +334,9 @@ interface Ethernet2 interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po9 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport ``` ## Routing @@ -397,6 +402,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF1A.md index dfc804d7a4f..c9a422f9b1e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -214,8 +219,8 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -284,19 +289,19 @@ vlan 131 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet6 | CUSTOM_server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet7 | CUSTOM_server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | +| Ethernet6 | CUSTOM_server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet7 | CUSTOM_server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet1 | routed | - | 172.31.255.5/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet1 | routed | - | 172.31.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet1 | - | 172.31.255.5/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet1 | - | 172.31.255.7/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -690,16 +695,16 @@ router bgp 65101 neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -768,6 +773,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2A.md index 750b4268bb6..7dbc7dbbe57 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -235,8 +240,8 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -354,21 +359,21 @@ vlan 311 | Ethernet9 | CUSTOM_DC1-L2LEAF3A_Ethernet1 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 9 | | Ethernet10 | CUSTOM_server01_MLAG_Eth2 | *trunk | *210-211 | *- | *- | 10 | | Ethernet11 | CUSTOM_server01_MTU_PROFILE_MLAG_Eth4 | *access | *110 | *- | *- | 11 | -| Ethernet12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth6 | *access | *- | *- | *- | 12 | -| Ethernet13 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth8 | *access | *- | *- | *- | 12 | +| Ethernet12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth6 | *- | *- | *- | *- | 12 | +| Ethernet13 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth8 | *- | *- | *- | *- | 12 | | Ethernet20 | CUSTOM_FIREWALL01_E0 | *trunk | *110-111,210-211 | *- | *- | 20 | -| Ethernet21 | CUSTOM_ROUTER01_Eth0 | access | 110 | - | - | - | +| Ethernet21 | CUSTOM_ROUTER01_Eth0 | access | 110 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 172.31.255.17/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 172.31.255.19/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet2 | routed | - | 172.31.255.21/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet2 | routed | - | 172.31.255.23/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 172.31.255.17/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 172.31.255.19/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet2 | - | 172.31.255.21/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet2 | - | 172.31.255.23/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -460,14 +465,14 @@ interface Ethernet21 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel7 | CUSTOM_DC1_L2LEAF1_Po1 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0808:0707:0606 | -| Port-Channel9 | CUSTOM_DC1-L2LEAF3A_Po1 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0606:0707:0808 | -| Port-Channel10 | CUSTOM_server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | - | - | -| Port-Channel11 | CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 | switched | access | 110 | - | - | - | - | - | - | -| Port-Channel12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 | switched | access | - | - | - | - | - | - | - | -| Port-Channel20 | CUSTOM_FIREWALL01_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel7 | CUSTOM_DC1_L2LEAF1_Po1 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0808:0707:0606 | +| Port-Channel9 | CUSTOM_DC1-L2LEAF3A_Po1 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0606:0707:0808 | +| Port-Channel10 | CUSTOM_server01_MLAG_PortChanne1 | trunk | 210-211 | - | - | - | - | - | - | +| Port-Channel11 | CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 | access | 110 | - | - | - | - | - | - | +| Port-Channel12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 | - | - | - | - | - | - | - | - | +| Port-Channel20 | CUSTOM_FIREWALL01_PortChanne1 | trunk | 110-111,210-211 | - | - | - | - | - | - | ##### EVPN Multihoming @@ -485,9 +490,9 @@ interface Ethernet21 interface Port-Channel7 description CUSTOM_DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -496,9 +501,9 @@ interface Port-Channel7 interface Port-Channel9 description CUSTOM_DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -507,16 +512,17 @@ interface Port-Channel9 interface Port-Channel10 description CUSTOM_server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport ! interface Port-Channel11 description CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport ! interface Port-Channel12 description CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 @@ -527,9 +533,9 @@ interface Port-Channel12 interface Port-Channel20 description CUSTOM_FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ``` ### Loopback Interfaces @@ -1000,16 +1006,16 @@ router bgp 65102 neighbor 172.31.255.22 description DC1-SPINE4_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1148,8 +1154,9 @@ router bfd ```eos ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying +! +queue-monitor length log 5 ``` ## Multicast diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2B.md index e5d827a36ce..0f4a8aff81f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -235,8 +240,8 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -354,21 +359,21 @@ vlan 311 | Ethernet9 | CUSTOM_DC1-L2LEAF3A_Ethernet2 | *trunk | *110-111,120-124,130-131,160-162 | *- | *- | 9 | | Ethernet10 | CUSTOM_server01_MLAG_Eth3 | *trunk | *210-211 | *- | *- | 10 | | Ethernet11 | CUSTOM_server01_MTU_PROFILE_MLAG_Eth5 | *access | *110 | *- | *- | 11 | -| Ethernet12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth7 | *access | *- | *- | *- | 12 | -| Ethernet13 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth9 | *access | *- | *- | *- | 12 | +| Ethernet12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth7 | *- | *- | *- | *- | 12 | +| Ethernet13 | CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth9 | *- | *- | *- | *- | 12 | | Ethernet20 | CUSTOM_FIREWALL01_E1 | *trunk | *110-111,210-211 | *- | *- | 20 | -| Ethernet21 | CUSTOM_ROUTER01_Eth1 | access | 110 | - | - | - | +| Ethernet21 | CUSTOM_ROUTER01_Eth1 | access | 110 | - | - | - | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 172.31.255.33/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 172.31.255.35/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet3 | routed | - | 172.31.255.37/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet3 | routed | - | 172.31.255.39/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 172.31.255.33/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 172.31.255.35/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet3 | - | 172.31.255.37/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet3 | - | 172.31.255.39/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -460,14 +465,14 @@ interface Ethernet21 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel7 | CUSTOM_DC1_L2LEAF1_Po1 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0808:0707:0606 | -| Port-Channel9 | CUSTOM_DC1-L2LEAF3A_Po1 | switched | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0606:0707:0808 | -| Port-Channel10 | CUSTOM_server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | - | - | -| Port-Channel11 | CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 | switched | access | 110 | - | - | - | - | - | - | -| Port-Channel12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 | switched | access | - | - | - | - | - | - | - | -| Port-Channel20 | CUSTOM_FIREWALL01_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel7 | CUSTOM_DC1_L2LEAF1_Po1 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0808:0707:0606 | +| Port-Channel9 | CUSTOM_DC1-L2LEAF3A_Po1 | trunk | 110-111,120-124,130-131,160-162 | - | - | - | - | - | 0000:1234:0606:0707:0808 | +| Port-Channel10 | CUSTOM_server01_MLAG_PortChanne1 | trunk | 210-211 | - | - | - | - | - | - | +| Port-Channel11 | CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 | access | 110 | - | - | - | - | - | - | +| Port-Channel12 | CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 | - | - | - | - | - | - | - | - | +| Port-Channel20 | CUSTOM_FIREWALL01_PortChanne1 | trunk | 110-111,210-211 | - | - | - | - | - | - | ##### EVPN Multihoming @@ -485,9 +490,9 @@ interface Ethernet21 interface Port-Channel7 description CUSTOM_DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -496,9 +501,9 @@ interface Port-Channel7 interface Port-Channel9 description CUSTOM_DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -507,16 +512,17 @@ interface Port-Channel9 interface Port-Channel10 description CUSTOM_server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport ! interface Port-Channel11 description CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport ! interface Port-Channel12 description CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 @@ -527,9 +533,9 @@ interface Port-Channel12 interface Port-Channel20 description CUSTOM_FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ``` ### Loopback Interfaces @@ -1000,16 +1006,16 @@ router bgp 65102 neighbor 172.31.255.38 description DC1-SPINE4_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1148,8 +1154,9 @@ router bfd ```eos ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying +! +queue-monitor length log 5 ``` ## Multicast diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE1.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE1.md index 544b5d82b58..2233031dc7c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -153,6 +154,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -231,15 +236,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 172.31.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 172.31.255.16/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 172.31.255.32/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet41 | routed | - | 172.31.255.48/31 | default | 1500 | False | - | - | -| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet41 | routed | - | 172.31.255.64/31 | default | 1500 | False | - | - | -| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet41 | routed | - | 172.31.255.80/31 | default | 1500 | False | - | - | -| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet45 | routed | - | 172.31.255.96/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 172.31.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 172.31.255.16/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 172.31.255.32/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet41 | - | 172.31.255.48/31 | default | 1500 | False | - | - | +| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet41 | - | 172.31.255.64/31 | default | 1500 | False | - | - | +| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet41 | - | 172.31.255.80/31 | default | 1500 | False | - | - | +| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet45 | - | 172.31.255.96/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -310,20 +315,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ``` @@ -491,25 +496,25 @@ router bgp 65001 neighbor 172.31.255.97 description DC1-BL1B_Ethernet45 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -551,6 +556,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE2.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE2.md index d4d46fbe237..b2d013463c1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -153,6 +154,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -231,15 +236,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 172.31.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 172.31.255.18/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 172.31.255.34/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet42 | routed | - | 172.31.255.50/31 | default | 1500 | False | - | - | -| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet42 | routed | - | 172.31.255.66/31 | default | 1500 | False | - | - | -| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet42 | routed | - | 172.31.255.82/31 | default | 1500 | False | - | - | -| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet46 | routed | - | 172.31.255.98/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 172.31.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 172.31.255.18/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 172.31.255.34/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet42 | - | 172.31.255.50/31 | default | 1500 | False | - | - | +| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet42 | - | 172.31.255.66/31 | default | 1500 | False | - | - | +| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet42 | - | 172.31.255.82/31 | default | 1500 | False | - | - | +| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet46 | - | 172.31.255.98/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -310,20 +315,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ``` @@ -491,25 +496,25 @@ router bgp 65001 neighbor 172.31.255.99 description DC1-BL1B_Ethernet46 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -551,6 +556,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE3.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE3.md index c67325b2aca..d4fa76dfeb4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE3.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -153,6 +154,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -231,15 +236,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | routed | - | 172.31.255.4/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | routed | - | 172.31.255.20/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | routed | - | 172.31.255.36/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet43 | routed | - | 172.31.255.52/31 | default | 1500 | False | - | - | -| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet43 | routed | - | 172.31.255.68/31 | default | 1500 | False | - | - | -| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet43 | routed | - | 172.31.255.84/31 | default | 1500 | False | - | - | -| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet47 | routed | - | 172.31.255.100/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | - | 172.31.255.4/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | - | 172.31.255.20/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | - | 172.31.255.36/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet43 | - | 172.31.255.52/31 | default | 1500 | False | - | - | +| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet43 | - | 172.31.255.68/31 | default | 1500 | False | - | - | +| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet43 | - | 172.31.255.84/31 | default | 1500 | False | - | - | +| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet47 | - | 172.31.255.100/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -310,20 +315,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ``` @@ -491,25 +496,25 @@ router bgp 65001 neighbor 172.31.255.101 description DC1-BL1B_Ethernet47 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -551,6 +556,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE4.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE4.md index dfda93bf49c..4126423a236 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE4.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SPINE4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -49,20 +50,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -153,6 +154,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -231,15 +236,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | routed | - | 172.31.255.6/31 | default | 1500 | False | - | - | -| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | routed | - | 172.31.255.22/31 | default | 1500 | False | - | - | -| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | routed | - | 172.31.255.38/31 | default | 1500 | False | - | - | -| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet44 | routed | - | 172.31.255.54/31 | default | 1500 | False | - | - | -| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet44 | routed | - | 172.31.255.70/31 | default | 1500 | False | - | - | -| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet44 | routed | - | 172.31.255.86/31 | default | 1500 | False | - | - | -| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet48 | routed | - | 172.31.255.102/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | CUSTOM_P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | - | 172.31.255.6/31 | default | 1500 | False | - | - | +| Ethernet2 | CUSTOM_P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | - | 172.31.255.22/31 | default | 1500 | False | - | - | +| Ethernet3 | CUSTOM_P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | - | 172.31.255.38/31 | default | 1500 | False | - | - | +| Ethernet4 | CUSTOM_P2P_LINK_TO_DC1-SVC3A_Ethernet44 | - | 172.31.255.54/31 | default | 1500 | False | - | - | +| Ethernet5 | CUSTOM_P2P_LINK_TO_DC1-SVC3B_Ethernet44 | - | 172.31.255.70/31 | default | 1500 | False | - | - | +| Ethernet6 | CUSTOM_P2P_LINK_TO_DC1-BL1A_Ethernet44 | - | 172.31.255.86/31 | default | 1500 | False | - | - | +| Ethernet7 | CUSTOM_P2P_LINK_TO_DC1-BL1B_Ethernet48 | - | 172.31.255.102/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -310,20 +315,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ``` @@ -491,25 +496,25 @@ router bgp 65001 neighbor 172.31.255.103 description DC1-BL1B_Ethernet48 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -551,6 +556,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3A.md index 061c8c6d9e2..7c673dd94a1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -64,20 +65,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -168,6 +169,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -248,9 +253,9 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -275,7 +280,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -297,23 +302,23 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4092 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4092 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -379,39 +384,39 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4092 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -425,34 +430,34 @@ vlan 4092 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | CUSTOM_DC1-L2LEAF2A_Ethernet1 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | CUSTOM_DC1-L2LEAF2B_Ethernet1 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet10 | CUSTOM_server03_ESI_Eth1 | *trunk | *110-111,210-211 | *- | *- | 10 | -| Ethernet11 | CUSTOM_server04_inherit_all_from_profile_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet12 | CUSTOM_server05_no_profile_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet13 | CUSTOM_server06_override_profile_Eth1 | access | 210 | - | - | - | +| Ethernet11 | CUSTOM_server04_inherit_all_from_profile_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet12 | CUSTOM_server05_no_profile_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet13 | CUSTOM_server06_override_profile_Eth1 | access | 210 | - | - | - | | Ethernet14 | CUSTOM_server07_inherit_all_from_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 14 | | Ethernet15 | CUSTOM_server08_no_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 15 | -| Ethernet16 | CUSTOM_server09_override_profile_no_port_channel_Eth1 | access | 210 | - | - | - | +| Ethernet16 | CUSTOM_server09_override_profile_no_port_channel_Eth1 | access | 210 | - | - | - | | Ethernet17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_Eth1 | *trunk | *1-4094 | *- | *- | 17 | | Ethernet18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_Eth1 | *trunk | *1-4094 | *- | *- | 18 | | Ethernet19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_Eth1 | *trunk | *1-4094 | *- | *- | 19 | -| Ethernet20 | CUSTOM_server13_disabled_interfaces_Eth1 | access | 110 | - | - | - | -| Ethernet21 | CUSTOM_server14_explicitly_enabled_interfaces_Eth1 | access | 110 | - | - | - | +| Ethernet20 | CUSTOM_server13_disabled_interfaces_Eth1 | access | 110 | - | - | - | +| Ethernet21 | CUSTOM_server14_explicitly_enabled_interfaces_Eth1 | access | 110 | - | - | - | | Ethernet22 | CUSTOM_server15_port_channel_disabled_interfaces_Eth1 | *access | *110 | *- | *- | 22 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 172.31.255.49/31 | default | 1500 | False | - | - | -| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 172.31.255.51/31 | default | 1500 | False | - | - | -| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet4 | routed | - | 172.31.255.53/31 | default | 1500 | False | - | - | -| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet4 | routed | - | 172.31.255.55/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 172.31.255.49/31 | default | 1500 | False | - | - | +| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 172.31.255.51/31 | default | 1500 | False | - | - | +| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet4 | - | 172.31.255.53/31 | default | 1500 | False | - | - | +| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet4 | - | 172.31.255.55/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -624,17 +629,17 @@ interface Ethernet44 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | CUSTOM_MLAG_PEER_DC1-SVC3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | CUSTOM_DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 7 | - | -| Port-Channel10 | CUSTOM_server03_ESI_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | 0000:1234:0303:0202:0101 | -| Port-Channel14 | CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | - | - | 14 | - | -| Port-Channel15 | CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel | switched | trunk | 1-4094 | - | - | - | - | 15 | - | -| Port-Channel17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback | switched | trunk | 1-4094 | - | - | 90 | static | 17 | - | -| Port-Channel18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | 10 | static | 18 | - | -| Port-Channel19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | 10 | static | 19 | - | -| Port-Channel22 | CUSTOM_server15_port_channel_disabled_interfaces_ | switched | access | 110 | - | - | - | - | 22 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | CUSTOM_MLAG_PEER_DC1-SVC3B_Po5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | CUSTOM_DC1_L2LEAF2_Po1 | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Port-Channel10 | CUSTOM_server03_ESI_PortChanne1 | trunk | 110-111,210-211 | - | - | - | - | - | 0000:1234:0303:0202:0101 | +| Port-Channel14 | CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | - | - | 14 | - | +| Port-Channel15 | CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel | trunk | 1-4094 | - | - | - | - | 15 | - | +| Port-Channel17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback | trunk | 1-4094 | - | - | 90 | static | 17 | - | +| Port-Channel18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | 10 | static | 18 | - | +| Port-Channel19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | 10 | static | 19 | - | +| Port-Channel22 | CUSTOM_server15_port_channel_disabled_interfaces_ | access | 110 | - | - | - | - | 22 | - | ##### EVPN Multihoming @@ -651,25 +656,24 @@ interface Ethernet44 interface Port-Channel5 description CUSTOM_MLAG_PEER_DC1-SVC3B_Po5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description CUSTOM_DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 description CUSTOM_server03_ESI_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -678,9 +682,9 @@ interface Port-Channel10 interface Port-Channel14 description CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 mlag 14 spanning-tree portfast @@ -693,9 +697,9 @@ interface Port-Channel14 interface Port-Channel15 description CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -707,9 +711,9 @@ interface Port-Channel15 interface Port-Channel17 description CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -723,9 +727,9 @@ interface Port-Channel17 interface Port-Channel18 description CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -740,9 +744,9 @@ interface Port-Channel18 interface Port-Channel19 description CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -757,8 +761,9 @@ interface Port-Channel19 interface Port-Channel22 description CUSTOM_server15_port_channel_disabled_interfaces_ no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ``` @@ -809,7 +814,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | SVI 110 CUSTOM DESCRIPTION | Tenant_A_OP_Zone | - | False | | Vlan111 | SVI 111 CUSTOM DESCRIPTION | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -828,15 +833,15 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4092 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4092 | MLAG | default | 1500 | False | ##### IPv4 @@ -876,7 +881,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -998,63 +1003,63 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.252.6/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.252.6/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.252.6/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.252.6/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.6/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan4092 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1387,7 +1392,7 @@ router bgp 65103 neighbor UNDERLAY-PEERS send-community neighbor UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.252.7 peer group MLAG-PEERS - neighbor 10.255.252.7 description DC1-SVC3B + neighbor 10.255.252.7 description DC1-SVC3B_Vlan4092 neighbor 172.31.255.48 peer group UNDERLAY-PEERS neighbor 172.31.255.48 remote-as 65001 neighbor 172.31.255.48 description DC1-SPINE1_Ethernet4 @@ -1402,16 +1407,16 @@ router bgp 65103 neighbor 172.31.255.54 description DC1-SPINE4_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1496,6 +1501,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1505,6 +1511,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1514,6 +1521,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1525,6 +1533,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3013 redistribute connected redistribute static ! @@ -1535,6 +1544,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1544,6 +1554,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1553,6 +1564,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1562,6 +1574,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan2 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1571,6 +1584,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3030 redistribute connected ``` @@ -1605,6 +1619,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3B.md index 642a780b6b7..e38cbe365aa 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/devices/DC1-SVC3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [SNMP](#snmp) @@ -64,20 +65,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -168,6 +169,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -248,9 +253,9 @@ STP Root Super: **True** ```eos ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ``` @@ -275,7 +280,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -297,23 +302,23 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4092 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4092 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -379,39 +384,39 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4092 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -425,34 +430,34 @@ vlan 4092 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | CUSTOM_DC1-L2LEAF2A_Ethernet2 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | CUSTOM_DC1-L2LEAF2B_Ethernet2 | *trunk | *110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet10 | CUSTOM_server03_ESI_Eth2 | *trunk | *110-111,210-211 | *- | *- | 10 | -| Ethernet11 | CUSTOM_server04_inherit_all_from_profile_Eth2 | trunk | 1-4094 | - | - | - | -| Ethernet12 | CUSTOM_server05_no_profile_Eth2 | trunk | 1-4094 | - | - | - | -| Ethernet13 | CUSTOM_server06_override_profile_Eth2 | access | 210 | - | - | - | +| Ethernet11 | CUSTOM_server04_inherit_all_from_profile_Eth2 | trunk | 1-4094 | - | - | - | +| Ethernet12 | CUSTOM_server05_no_profile_Eth2 | trunk | 1-4094 | - | - | - | +| Ethernet13 | CUSTOM_server06_override_profile_Eth2 | access | 210 | - | - | - | | Ethernet14 | CUSTOM_server07_inherit_all_from_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 14 | | Ethernet15 | CUSTOM_server08_no_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 15 | -| Ethernet16 | CUSTOM_server09_override_profile_no_port_channel_Eth2 | access | 210 | - | - | - | +| Ethernet16 | CUSTOM_server09_override_profile_no_port_channel_Eth2 | access | 210 | - | - | - | | Ethernet17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_Eth2 | *trunk | *1-4094 | *- | *- | 17 | | Ethernet18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_Eth2 | *trunk | *1-4094 | *- | *- | 18 | | Ethernet19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_Eth2 | *trunk | *1-4094 | *- | *- | 19 | -| Ethernet20 | CUSTOM_server13_disabled_interfaces_Eth2 | access | 110 | - | - | - | -| Ethernet21 | CUSTOM_server14_explicitly_enabled_interfaces_Eth2 | access | 110 | - | - | - | +| Ethernet20 | CUSTOM_server13_disabled_interfaces_Eth2 | access | 110 | - | - | - | +| Ethernet21 | CUSTOM_server14_explicitly_enabled_interfaces_Eth2 | access | 110 | - | - | - | | Ethernet22 | CUSTOM_server15_port_channel_disabled_interfaces_Eth2 | *access | *110 | *- | *- | 22 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet5 | routed | - | 172.31.255.65/31 | default | 1500 | False | - | - | -| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet5 | routed | - | 172.31.255.67/31 | default | 1500 | False | - | - | -| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet5 | routed | - | 172.31.255.69/31 | default | 1500 | False | - | - | -| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet5 | routed | - | 172.31.255.71/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet41 | CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet5 | - | 172.31.255.65/31 | default | 1500 | False | - | - | +| Ethernet42 | CUSTOM_P2P_LINK_TO_DC1-SPINE2_Ethernet5 | - | 172.31.255.67/31 | default | 1500 | False | - | - | +| Ethernet43 | CUSTOM_P2P_LINK_TO_DC1-SPINE3_Ethernet5 | - | 172.31.255.69/31 | default | 1500 | False | - | - | +| Ethernet44 | CUSTOM_P2P_LINK_TO_DC1-SPINE4_Ethernet5 | - | 172.31.255.71/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -624,17 +629,17 @@ interface Ethernet44 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | CUSTOM_MLAG_PEER_DC1-SVC3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | CUSTOM_DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 7 | - | -| Port-Channel10 | CUSTOM_server03_ESI_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | 0000:1234:0303:0202:0101 | -| Port-Channel14 | CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | - | - | 14 | - | -| Port-Channel15 | CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel | switched | trunk | 1-4094 | - | - | - | - | 15 | - | -| Port-Channel17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback | switched | trunk | 1-4094 | - | - | 90 | static | 17 | - | -| Port-Channel18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | 10 | static | 18 | - | -| Port-Channel19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | 10 | static | 19 | - | -| Port-Channel22 | CUSTOM_server15_port_channel_disabled_interfaces_ | switched | access | 110 | - | - | - | - | 22 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | CUSTOM_MLAG_PEER_DC1-SVC3A_Po5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | CUSTOM_DC1_L2LEAF2_Po1 | trunk | 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Port-Channel10 | CUSTOM_server03_ESI_PortChanne1 | trunk | 110-111,210-211 | - | - | - | - | - | 0000:1234:0303:0202:0101 | +| Port-Channel14 | CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | - | - | 14 | - | +| Port-Channel15 | CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel | trunk | 1-4094 | - | - | - | - | 15 | - | +| Port-Channel17 | CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback | trunk | 1-4094 | - | - | 90 | static | 17 | - | +| Port-Channel18 | CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | 10 | static | 18 | - | +| Port-Channel19 | CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | 10 | static | 19 | - | +| Port-Channel22 | CUSTOM_server15_port_channel_disabled_interfaces_ | access | 110 | - | - | - | - | 22 | - | ##### EVPN Multihoming @@ -651,25 +656,24 @@ interface Ethernet44 interface Port-Channel5 description CUSTOM_MLAG_PEER_DC1-SVC3A_Po5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description CUSTOM_DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 description CUSTOM_server03_ESI_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -678,9 +682,9 @@ interface Port-Channel10 interface Port-Channel14 description CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 mlag 14 spanning-tree portfast @@ -693,9 +697,9 @@ interface Port-Channel14 interface Port-Channel15 description CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -707,9 +711,9 @@ interface Port-Channel15 interface Port-Channel17 description CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -723,9 +727,9 @@ interface Port-Channel17 interface Port-Channel18 description CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -740,9 +744,9 @@ interface Port-Channel18 interface Port-Channel19 description CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -757,8 +761,9 @@ interface Port-Channel19 interface Port-Channel22 description CUSTOM_server15_port_channel_disabled_interfaces_ no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ``` @@ -809,7 +814,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | SVI 110 CUSTOM DESCRIPTION | Tenant_A_OP_Zone | - | False | | Vlan111 | SVI 111 CUSTOM DESCRIPTION | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -828,15 +833,15 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4092 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4092 | MLAG | default | 1500 | False | ##### IPv4 @@ -876,7 +881,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -998,63 +1003,63 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.252.7/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.252.7/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.252.7/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.252.7/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.7/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan4092 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1387,7 +1392,7 @@ router bgp 65103 neighbor UNDERLAY-PEERS send-community neighbor UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.252.6 peer group MLAG-PEERS - neighbor 10.255.252.6 description DC1-SVC3A + neighbor 10.255.252.6 description DC1-SVC3A_Vlan4092 neighbor 172.31.255.64 peer group UNDERLAY-PEERS neighbor 172.31.255.64 remote-as 65001 neighbor 172.31.255.64 description DC1-SPINE1_Ethernet5 @@ -1402,16 +1407,16 @@ router bgp 65103 neighbor 172.31.255.70 description DC1-SPINE4_Ethernet5 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1496,6 +1501,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -1505,6 +1511,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -1514,6 +1521,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -1525,6 +1533,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3013 redistribute connected redistribute static ! @@ -1535,6 +1544,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -1544,6 +1554,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -1553,6 +1564,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -1562,6 +1574,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan2 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -1571,6 +1584,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3030 redistribute connected ``` @@ -1605,6 +1619,7 @@ router bfd ```eos ! queue-monitor length +! queue-monitor length log 5 ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md index 54780967bc5..9d2c9952292 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md @@ -156,7 +156,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 192.168.254.0/24 | 256 | 4 | 1.57 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1A.cfg index 0434a1c7f09..0690bd766c5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -6,39 +18,34 @@ daemon TerminAttr ! vlan internal order ascending range 1006 1199 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying ! +queue-monitor length log 5 +! hostname DC1-BL1A ip name-server vrf MGMT 1.1.1.1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! +platform sand lag hardware-only +! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-BL1A ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -154,7 +161,7 @@ interface Loopback1 ip address 192.168.254.14/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -255,16 +262,16 @@ router bgp 65104 neighbor 172.31.255.86 description DC1-SPINE4_Ethernet6 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -362,11 +369,4 @@ router bgp 65104 router-id 192.168.255.14 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1B.cfg index 0308df7d72b..08bbb592914 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-BL1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -6,38 +18,33 @@ daemon TerminAttr ! vlan internal order ascending range 1006 1199 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying ! +queue-monitor length log 5 +! hostname DC1-BL1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! +platform sand lag hardware-only +! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-BL1B ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -153,7 +160,7 @@ interface Loopback1 ip address 192.168.254.15/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -254,16 +261,16 @@ router bgp 65105 neighbor 172.31.255.102 description DC1-SPINE4_Ethernet7 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -361,11 +368,4 @@ router bgp 65105 router-id 192.168.255.15 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg index ceece5afd83..b10fd0fd08f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,15 +27,13 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackE DC1-L2LEAF1A ! @@ -31,12 +41,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -74,7 +78,7 @@ vlan 162 name Tenant_A_FTP ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -82,17 +86,17 @@ vrf instance MGMT interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF1B_Po3 + description MLAG_DC1-L2LEAF1B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description CUSTOM_DC1-LEAF2A_Ethernet7 @@ -105,23 +109,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF1B_Ethernet3 + description MLAG_DC1-L2LEAF1B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF1B_Ethernet4 + description MLAG_DC1-L2LEAF1B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -138,11 +142,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1B.cfg index 3d26530d04b..ade3de4d123 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,15 +27,13 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-L2LEAF1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackE DC1-L2LEAF1B ! @@ -31,12 +41,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -74,7 +78,7 @@ vlan 162 name Tenant_A_FTP ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -82,17 +86,17 @@ vrf instance MGMT interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF1A_Po3 + description MLAG_DC1-L2LEAF1A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description CUSTOM_DC1-LEAF2A_Ethernet8 @@ -105,23 +109,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF1A_Ethernet3 + description MLAG_DC1-L2LEAF1A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF1A_Ethernet4 + description MLAG_DC1-L2LEAF1A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.115/24 ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -138,11 +142,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg index 607e0e94be4..574831bfd96 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,15 +27,13 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-L2LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackE DC1-L2LEAF2A ! @@ -31,12 +41,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -101,7 +105,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -109,17 +113,17 @@ vrf instance MGMT interface Port-Channel1 description CUSTOM_DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description CUSTOM_DC1-SVC3A_Ethernet7 @@ -132,23 +136,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -167,11 +171,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg index 75a273b5569..9653e3accbf 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,15 +27,13 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-L2LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackE DC1-L2LEAF2B ! @@ -31,12 +41,6 @@ spanning-tree mode mstp no spanning-tree vlan-id 4091 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -101,7 +105,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4091 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -109,17 +113,17 @@ vrf instance MGMT interface Port-Channel1 description CUSTOM_DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description CUSTOM_DC1-SVC3A_Ethernet8 @@ -132,23 +136,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 ! interface Vlan4091 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -167,11 +171,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF3A.cfg index 5909b2b714f..09cba3f8458 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-L2LEAF3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,27 +27,19 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-L2LEAF3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackE DC1-L2LEAF3A ! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -77,9 +81,9 @@ vrf instance MGMT interface Port-Channel1 description CUSTOM_DC1_LEAF2_Po9 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport ! interface Ethernet1 description CUSTOM_DC1-LEAF2A_Ethernet9 @@ -92,7 +96,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.116/24 @@ -100,11 +104,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg index f6140587a28..331d7f531c7 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -13,28 +25,20 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackA DC1-LEAF1A ! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 120 name Tenant_A_WEB_Zone_1 ! @@ -121,7 +125,7 @@ interface Loopback0 ip address 192.168.255.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -198,6 +202,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -235,16 +242,16 @@ router bgp 65101 neighbor 172.31.255.6 description DC1-SPINE4_Ethernet1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -281,11 +288,4 @@ router bgp 65101 router-id 192.168.255.9 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg index b0ed1e7ca9f..b0f42dc1c0a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -10,41 +22,33 @@ no ip igmp snooping vlan 120 ip igmp snooping vlan 160 no ip igmp snooping vlan 161 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying ! +queue-monitor length log 5 +! hostname DC1-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackC DC1-LEAF2A ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -116,9 +120,9 @@ vrf instance Tenant_C_OP_Zone interface Port-Channel7 description CUSTOM_DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -127,9 +131,9 @@ interface Port-Channel7 interface Port-Channel9 description CUSTOM_DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -138,16 +142,17 @@ interface Port-Channel9 interface Port-Channel10 description CUSTOM_server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport ! interface Port-Channel11 description CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport ! interface Port-Channel12 description CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 @@ -158,9 +163,9 @@ interface Port-Channel12 interface Port-Channel20 description CUSTOM_FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ! interface Ethernet1 description CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet2 @@ -258,7 +263,7 @@ interface Loopback100 ip address 10.255.1.10/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -410,6 +415,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -447,16 +455,16 @@ router bgp 65102 neighbor 172.31.255.22 description DC1-SPINE4_Ethernet2 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -563,11 +571,4 @@ router bgp 65102 router-id 192.168.255.10 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg index 187dd5c7d14..bc94fde3743 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -10,41 +22,33 @@ no ip igmp snooping vlan 120 ip igmp snooping vlan 160 no ip igmp snooping vlan 161 ! +hardware speed-group 1 serdes 10G +hardware speed-group 2 serdes 25G +hardware speed-group 3 serdes 25G +hardware speed-group 4 serdes 10G +! transceiver qsfp default-mode 4x10G ! service routing protocols model multi-agent ! queue-monitor length -queue-monitor length log 5 queue-monitor length notifying ! +queue-monitor length log 5 +! hostname DC1-LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! snmp-server contact example@example.com snmp-server location DC1_FABRIC rackD DC1-LEAF2B ! -hardware speed-group 1 serdes 10G -hardware speed-group 2 serdes 25G -hardware speed-group 3 serdes 25G -hardware speed-group 4 serdes 10G -! -spanning-tree root super spanning-tree mode mstp +spanning-tree root super spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -116,9 +120,9 @@ vrf instance Tenant_C_OP_Zone interface Port-Channel7 description CUSTOM_DC1_L2LEAF1_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0808:0707:0606 route-target import 08:08:07:07:06:06 @@ -127,9 +131,9 @@ interface Port-Channel7 interface Port-Channel9 description CUSTOM_DC1-L2LEAF3A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,160-162 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0606:0707:0808 route-target import 06:06:07:07:08:08 @@ -138,16 +142,17 @@ interface Port-Channel9 interface Port-Channel10 description CUSTOM_server01_MLAG_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport ! interface Port-Channel11 description CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport ! interface Port-Channel12 description CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 @@ -158,9 +163,9 @@ interface Port-Channel12 interface Port-Channel20 description CUSTOM_FIREWALL01_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport ! interface Ethernet1 description CUSTOM_P2P_LINK_TO_DC1-SPINE1_Ethernet3 @@ -258,7 +263,7 @@ interface Loopback100 ip address 10.255.1.11/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -410,6 +415,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -447,16 +455,16 @@ router bgp 65102 neighbor 172.31.255.38 description DC1-SPINE4_Ethernet3 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -563,11 +571,4 @@ router bgp 65102 router-id 192.168.255.11 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE1.cfg index 855d383f3d9..747725cb584 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -11,26 +23,18 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SPINE1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SPINE1 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -90,12 +94,12 @@ interface Ethernet7 ip address 172.31.255.96/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -108,6 +112,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -155,25 +162,25 @@ router bgp 65001 neighbor 172.31.255.97 description DC1-BL1B_Ethernet45 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -183,11 +190,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE2.cfg index add4fc7a394..bf62f46a9ab 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -11,26 +23,18 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SPINE2 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SPINE2 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -90,12 +94,12 @@ interface Ethernet7 ip address 172.31.255.98/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -108,6 +112,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -155,25 +162,25 @@ router bgp 65001 neighbor 172.31.255.99 description DC1-BL1B_Ethernet46 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -183,11 +190,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE3.cfg index bc97d706831..37f1588a481 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -11,26 +23,18 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SPINE3 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SPINE3 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -90,12 +94,12 @@ interface Ethernet7 ip address 172.31.255.100/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -108,6 +112,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -155,25 +162,25 @@ router bgp 65001 neighbor 172.31.255.101 description DC1-BL1B_Ethernet47 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -183,11 +190,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE4.cfg index bc2cb322a59..9b38191566d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SPINE4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -11,26 +23,18 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SPINE4 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SPINE4 ! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -90,12 +94,12 @@ interface Ethernet7 ip address 172.31.255.102/31 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -108,6 +112,9 @@ ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -155,25 +162,25 @@ router bgp 65001 neighbor 172.31.255.103 description DC1-BL1B_Ethernet48 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65101 - neighbor 192.168.255.9 description DC1-LEAF1A + neighbor 192.168.255.9 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65102 - neighbor 192.168.255.10 description DC1-LEAF2A + neighbor 192.168.255.10 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65102 - neighbor 192.168.255.11 description DC1-LEAF2B + neighbor 192.168.255.11 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.12 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.12 remote-as 65103 - neighbor 192.168.255.12 description DC1-SVC3A + neighbor 192.168.255.12 description DC1-SVC3A_Loopback0 neighbor 192.168.255.13 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.13 remote-as 65103 - neighbor 192.168.255.13 description DC1-SVC3B + neighbor 192.168.255.13 description DC1-SVC3B_Loopback0 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65104 - neighbor 192.168.255.14 description DC1-BL1A + neighbor 192.168.255.14 description DC1-BL1A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65105 - neighbor 192.168.255.15 description DC1-BL1B + neighbor 192.168.255.15 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -183,11 +190,4 @@ router bgp 65001 no neighbor EVPN-OVERLAY-PEERS activate neighbor UNDERLAY-PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3A.cfg index 2e79f6f817d..cf5de8d3054 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,32 +27,24 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SVC3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SVC3A ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -106,39 +110,39 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4092 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -164,25 +168,24 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel5 description CUSTOM_MLAG_PEER_DC1-SVC3B_Po5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description CUSTOM_DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 description CUSTOM_server03_ESI_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -191,9 +194,9 @@ interface Port-Channel10 interface Port-Channel14 description CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 mlag 14 spanning-tree portfast @@ -206,9 +209,9 @@ interface Port-Channel14 interface Port-Channel15 description CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -220,9 +223,9 @@ interface Port-Channel15 interface Port-Channel17 description CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -236,9 +239,9 @@ interface Port-Channel17 interface Port-Channel18 description CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -253,9 +256,9 @@ interface Port-Channel18 interface Port-Channel19 description CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -270,8 +273,9 @@ interface Port-Channel19 interface Port-Channel22 description CUSTOM_server15_port_channel_disabled_interfaces_ no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ! interface Ethernet5 @@ -450,13 +454,13 @@ interface Loopback100 ip address 10.255.1.12/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -578,63 +582,63 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.252.6/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.252.6/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.252.6/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.252.6/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.6/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.252.6/31 ! interface Vlan4092 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -705,6 +709,9 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_A_WAN_Zone 10.3.5.0/24 Null0 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -741,7 +748,7 @@ router bgp 65103 neighbor UNDERLAY-PEERS send-community neighbor UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.252.7 peer group MLAG-PEERS - neighbor 10.255.252.7 description DC1-SVC3B + neighbor 10.255.252.7 description DC1-SVC3B_Vlan4092 neighbor 172.31.255.48 peer group UNDERLAY-PEERS neighbor 172.31.255.48 remote-as 65001 neighbor 172.31.255.48 description DC1-SPINE1_Ethernet4 @@ -756,16 +763,16 @@ router bgp 65103 neighbor 172.31.255.54 description DC1-SPINE4_Ethernet4 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -850,6 +857,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -859,6 +867,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -868,6 +877,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -879,6 +889,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3013 redistribute connected redistribute static ! @@ -889,6 +900,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -898,6 +910,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -907,6 +920,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -916,6 +930,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan2 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -925,13 +940,7 @@ router bgp 65103 router-id 192.168.255.12 update wait-install neighbor 10.255.252.7 peer group MLAG-PEERS + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3B.cfg index d8332788ad5..e1e18ac205f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/configs/DC1-SVC3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -15,32 +27,24 @@ transceiver qsfp default-mode 4x10G service routing protocols model multi-agent ! queue-monitor length +! queue-monitor length log 5 ! hostname DC1-SVC3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! snmp-server contact example@example.com snmp-server location DC1_FABRIC DC1-SVC3B ! -spanning-tree root super spanning-tree mode mstp no spanning-tree vlan-id 4092 +spanning-tree root super spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -106,39 +110,39 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4092 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -164,25 +168,24 @@ vrf instance Tenant_C_WAN_Zone interface Port-Channel5 description CUSTOM_MLAG_PEER_DC1-SVC3A_Po5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description CUSTOM_DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 description CUSTOM_server03_ESI_PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:1234:0303:0202:0101 route-target import 03:03:02:02:01:01 @@ -191,9 +194,9 @@ interface Port-Channel10 interface Port-Channel14 description CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 mlag 14 spanning-tree portfast @@ -206,9 +209,9 @@ interface Port-Channel14 interface Port-Channel15 description CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -220,9 +223,9 @@ interface Port-Channel15 interface Port-Channel17 description CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport port-channel lacp fallback timeout 90 port-channel lacp fallback static mlag 17 @@ -236,9 +239,9 @@ interface Port-Channel17 interface Port-Channel18 description CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -253,9 +256,9 @@ interface Port-Channel18 interface Port-Channel19 description CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport l2 mtu 8000 port-channel lacp fallback timeout 10 port-channel lacp fallback static @@ -270,8 +273,9 @@ interface Port-Channel19 interface Port-Channel22 description CUSTOM_server15_port_channel_disabled_interfaces_ no shutdown - switchport switchport access vlan 110 + switchport mode access + switchport mlag 22 ! interface Ethernet5 @@ -450,13 +454,13 @@ interface Loopback100 ip address 10.255.1.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -578,63 +582,63 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.252.7/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.252.7/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.252.7/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.252.7/31 ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.7/31 ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ip address 10.255.252.7/31 ! interface Vlan4092 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -705,6 +709,9 @@ mlag configuration ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_A_WAN_Zone 10.3.5.0/24 Null0 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -741,7 +748,7 @@ router bgp 65103 neighbor UNDERLAY-PEERS send-community neighbor UNDERLAY-PEERS maximum-routes 12000 neighbor 10.255.252.6 peer group MLAG-PEERS - neighbor 10.255.252.6 description DC1-SVC3A + neighbor 10.255.252.6 description DC1-SVC3A_Vlan4092 neighbor 172.31.255.64 peer group UNDERLAY-PEERS neighbor 172.31.255.64 remote-as 65001 neighbor 172.31.255.64 description DC1-SPINE1_Ethernet5 @@ -756,16 +763,16 @@ router bgp 65103 neighbor 172.31.255.70 description DC1-SPINE4_Ethernet5 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -850,6 +857,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3011 redistribute connected ! vrf Tenant_A_DB_Zone @@ -859,6 +867,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3012 redistribute connected ! vrf Tenant_A_OP_Zone @@ -868,6 +877,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3009 redistribute connected ! vrf Tenant_A_WAN_Zone @@ -879,6 +889,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3013 redistribute connected redistribute static ! @@ -889,6 +900,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3010 redistribute connected ! vrf Tenant_B_OP_Zone @@ -898,6 +910,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3019 redistribute connected ! vrf Tenant_B_WAN_Zone @@ -907,6 +920,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3020 redistribute connected ! vrf Tenant_C_OP_Zone @@ -916,6 +930,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan2 redistribute connected ! vrf Tenant_C_WAN_Zone @@ -925,13 +940,7 @@ router bgp 65103 router-id 192.168.255.13 update wait-install neighbor 10.255.252.6 peer group MLAG-PEERS + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3030 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml index f10f67d7cc3..07d6576b282 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -87,7 +87,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:14 route_targets: import: @@ -106,6 +105,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -158,7 +158,6 @@ router_bgp: updates: wait_install: true - name: Tenant_L3_VRF_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:15 route_targets: import: @@ -169,10 +168,10 @@ router_bgp: - address_family: evpn route_targets: - '15:15' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:20 route_targets: import: @@ -183,10 +182,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:21 route_targets: import: @@ -197,10 +196,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:31 route_targets: import: @@ -211,6 +210,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -278,6 +278,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true notifying: true @@ -324,7 +330,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -353,7 +359,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.81/31 - name: Ethernet42 peer: DC1-SPINE2 @@ -363,7 +370,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.83/31 - name: Ethernet43 peer: DC1-SPINE3 @@ -373,7 +381,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.85/31 - name: Ethernet44 peer: DC1-SPINE4 @@ -383,7 +392,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.87/31 - name: Ethernet7 peer_type: l3_interface @@ -391,7 +401,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_WAN_Zone - name: Ethernet8 peer_type: l3_interface @@ -399,7 +410,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_L3_VRF_Zone - name: Ethernet9 peer_type: l3_interface @@ -407,7 +419,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_L3_VRF_Zone - name: Ethernet10.100 peer_type: l3_interface @@ -415,8 +428,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: subinterface test - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: Tenant_L3_VRF_Zone - name: Ethernet10.200 peer_type: l3_interface @@ -424,18 +437,20 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: subinterface test with vlan override - type: l3dot1q - encapsulation_dot1q_vlan: 121 + encapsulation_dot1q: + vlan: 121 vrf: Tenant_L3_VRF_Zone - name: Ethernet10 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet4000 description: My test ip_address: 10.3.2.1/21 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml index 79b5e607f44..5ccdc328925 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -87,7 +87,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:14 route_targets: import: @@ -106,6 +105,7 @@ router_bgp: - address_family: vpn-ipv4 route_targets: - 65000:123 + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -158,7 +158,6 @@ router_bgp: updates: wait_install: true - name: Tenant_L3_VRF_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:15 route_targets: import: @@ -169,10 +168,10 @@ router_bgp: - address_family: evpn route_targets: - '15:15' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:20 route_targets: import: @@ -183,10 +182,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_B_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:21 route_targets: import: @@ -197,10 +196,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:31 route_targets: import: @@ -211,6 +210,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -278,6 +278,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true notifying: true @@ -322,7 +328,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -351,7 +357,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.97/31 - name: Ethernet46 peer: DC1-SPINE2 @@ -361,7 +368,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.99/31 - name: Ethernet47 peer: DC1-SPINE3 @@ -371,7 +379,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.101/31 - name: Ethernet48 peer: DC1-SPINE4 @@ -381,7 +390,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.103/31 - name: Ethernet7 peer_type: l3_interface @@ -389,7 +399,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_A_WAN_Zone - name: Ethernet8 peer_type: l3_interface @@ -397,7 +408,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_L3_VRF_Zone - name: Ethernet9 peer_type: l3_interface @@ -405,7 +417,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: test - type: routed + switchport: + enabled: false vrf: Tenant_L3_VRF_Zone - name: Ethernet10.100 peer_type: l3_interface @@ -413,8 +426,8 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: subinterface test - type: l3dot1q - encapsulation_dot1q_vlan: 100 + encapsulation_dot1q: + vlan: 100 vrf: Tenant_L3_VRF_Zone - name: Ethernet10.200 peer_type: l3_interface @@ -422,18 +435,20 @@ ethernet_interfaces: mtu: 9000 shutdown: false description: subinterface test with vlan override - type: l3dot1q - encapsulation_dot1q_vlan: 141 + encapsulation_dot1q: + vlan: 141 vrf: Tenant_L3_VRF_Zone - name: Ethernet10 - type: routed + switchport: + enabled: false peer_type: l3_interface shutdown: false - name: Ethernet4000 description: My second test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml index d55f255991b..6a3caaee2af 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -72,7 +78,7 @@ snmp_server: vlans: - id: 4091 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -113,33 +119,36 @@ vlans: tenant: Tenant_A vlan_interfaces: - name: Vlan4091 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.247.14/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF1B_Po3 - type: switched + description: MLAG_DC1-L2LEAF1B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: CUSTOM_DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF1B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF1B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF1B_Ethernet3 shutdown: false channel_group: id: 3 @@ -148,8 +157,7 @@ ethernet_interfaces: peer: DC1-L2LEAF1B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF1B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF1B_Ethernet4 shutdown: false channel_group: id: 3 @@ -160,7 +168,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -170,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1B.yml index d474ac35f52..24610f63f87 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.115/24 @@ -72,7 +78,7 @@ snmp_server: vlans: - id: 4091 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -113,33 +119,36 @@ vlans: tenant: Tenant_A vlan_interfaces: - name: Vlan4091 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.247.15/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF1A_Po3 - type: switched + description: MLAG_DC1-L2LEAF1A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: CUSTOM_DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF1A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF1A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF1A_Ethernet3 shutdown: false channel_group: id: 3 @@ -148,8 +157,7 @@ ethernet_interfaces: peer: DC1-L2LEAF1A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF1A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF1A_Ethernet4 shutdown: false channel_group: id: 3 @@ -160,7 +168,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -170,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml index 358ec98203b..774fc386252 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -72,7 +78,7 @@ snmp_server: vlans: - id: 4091 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -140,33 +146,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4091 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.249.16/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: CUSTOM_DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -175,8 +184,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -187,7 +195,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-SVC3A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -197,7 +204,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-SVC3B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml index 6e3cffcf553..788949d6a6f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -48,7 +54,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -72,7 +78,7 @@ snmp_server: vlans: - id: 4091 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -140,33 +146,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4091 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.249.17/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: CUSTOM_DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -175,8 +184,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -187,7 +195,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-SVC3A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -197,7 +204,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-SVC3B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF3A.yml index e7beb0d2192..2d12c348c53 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-L2LEAF3A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -47,7 +53,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.116/24 @@ -75,7 +81,6 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2A_Ethernet9 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -85,17 +90,18 @@ ethernet_interfaces: peer_type: l3leaf description: CUSTOM_DC1-LEAF2B_Ethernet9 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: CUSTOM_DC1_LEAF2_Po9 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 vlans: - id: 130 name: Tenant_A_APP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml index 86d57670b66..654b3fe174e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -87,7 +87,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:12 route_targets: import: @@ -98,10 +97,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:11 route_targets: import: @@ -112,6 +111,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -152,6 +152,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -186,7 +192,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -216,7 +222,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -226,7 +233,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -236,7 +244,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -246,7 +255,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 - name: Ethernet6 peer: server02_SINGLE_NODE_TRUNK @@ -255,10 +265,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: CUSTOM_server02_SINGLE_NODE_TRUNK_Eth1 shutdown: false - type: switched l2_mtu: 8000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -282,9 +294,10 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server02_SINGLE_NODE_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' loopback_interfaces: - name: Loopback0 description: CUSTOM_EVPN_Overlay_Peering_L3LEAF diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml index ea5c0cb743a..a9f1a62cc9f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -87,7 +87,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:12 route_targets: import: @@ -98,10 +97,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_DB_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:13 route_targets: import: @@ -112,10 +111,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:10 route_targets: import: @@ -126,10 +125,10 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:11 route_targets: import: @@ -140,10 +139,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:20 route_targets: import: @@ -154,10 +153,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_C_OP_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:30 route_targets: import: @@ -168,6 +167,7 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -277,6 +277,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true notifying: true @@ -324,7 +330,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -360,7 +366,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.17/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -370,7 +377,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.19/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -380,7 +388,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -390,7 +399,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 - name: Ethernet7 peer: DC1-L2LEAF1A @@ -398,7 +408,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -408,7 +417,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF1B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -418,7 +426,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF3A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 9 mode: active @@ -429,7 +436,6 @@ ethernet_interfaces: port_profile: TENANT_B description: CUSTOM_server01_MLAG_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -440,7 +446,6 @@ ethernet_interfaces: port_profile: TENANT_A_MTU description: CUSTOM_server01_MTU_PROFILE_MLAG_Eth4 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -450,7 +455,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth6 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -460,7 +464,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth8 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -471,7 +474,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: CUSTOM_FIREWALL01_E0 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -482,54 +484,65 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_ROUTER01_Eth0 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' port_channel_interfaces: - name: Port-Channel7 description: CUSTOM_DC1_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 evpn_ethernet_segment: identifier: 0000:1234:0808:0707:0606 route_target: 08:08:07:07:06:06 lacp_id: 0808.0707.0606 - name: Port-Channel9 description: CUSTOM_DC1-L2LEAF3A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 evpn_ethernet_segment: identifier: 0000:1234:0606:0707:0808 route_target: 06:06:07:07:08:08 lacp_id: 0606.0707.0808 - name: Port-Channel10 description: CUSTOM_server01_MLAG_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 - name: Port-Channel11 description: CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Port-Channel12 description: CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1601 + switchport: + enabled: true - name: Port-Channel20 description: CUSTOM_FIREWALL01_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 loopback_interfaces: - name: Loopback0 description: CUSTOM_EVPN_Overlay_Peering_L3LEAF diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml index 586590dd5c2..982f5fa77a3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml @@ -60,22 +60,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' address_family_evpn: peer_groups: @@ -87,7 +87,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:12 route_targets: import: @@ -98,10 +97,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_DB_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:13 route_targets: import: @@ -112,10 +111,10 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_OP_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:10 route_targets: import: @@ -126,10 +125,10 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:11 route_targets: import: @@ -140,10 +139,10 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_B_OP_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:20 route_targets: import: @@ -154,10 +153,10 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_C_OP_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:30 route_targets: import: @@ -168,6 +167,7 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -277,6 +277,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true notifying: true @@ -324,7 +330,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -360,7 +366,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.33/31 - name: Ethernet2 peer: DC1-SPINE2 @@ -370,7 +377,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.35/31 - name: Ethernet3 peer: DC1-SPINE3 @@ -380,7 +388,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.37/31 - name: Ethernet4 peer: DC1-SPINE4 @@ -390,7 +399,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.39/31 - name: Ethernet7 peer: DC1-L2LEAF1A @@ -398,7 +408,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -408,7 +417,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF1B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -418,7 +426,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF3A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 9 mode: active @@ -429,7 +436,6 @@ ethernet_interfaces: port_profile: TENANT_B description: CUSTOM_server01_MLAG_Eth3 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -440,7 +446,6 @@ ethernet_interfaces: port_profile: TENANT_A_MTU description: CUSTOM_server01_MTU_PROFILE_MLAG_Eth5 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -450,7 +455,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth7 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -460,7 +464,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server01_MTU_ADAPTOR_MLAG_Eth9 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -471,7 +474,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: CUSTOM_FIREWALL01_E1 shutdown: false - type: port-channel-member channel_group: id: 20 mode: active @@ -482,54 +484,65 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_ROUTER01_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' port_channel_interfaces: - name: Port-Channel7 description: CUSTOM_DC1_L2LEAF1_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 evpn_ethernet_segment: identifier: 0000:1234:0808:0707:0606 route_target: 08:08:07:07:06:06 lacp_id: 0808.0707.0606 - name: Port-Channel9 description: CUSTOM_DC1-L2LEAF3A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,160-162 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,160-162 evpn_ethernet_segment: identifier: 0000:1234:0606:0707:0808 route_target: 06:06:07:07:08:08 lacp_id: 0606.0707.0808 - name: Port-Channel10 description: CUSTOM_server01_MLAG_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 - name: Port-Channel11 description: CUSTOM_server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Port-Channel12 description: CUSTOM_server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched shutdown: false mtu: 1601 + switchport: + enabled: true - name: Port-Channel20 description: CUSTOM_FIREWALL01_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 loopback_interfaces: - name: Loopback0 description: CUSTOM_EVPN_Overlay_Peering_L3LEAF diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml index 6f94403c75e..ad904a6952a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml @@ -76,37 +76,37 @@ router_bgp: - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.15 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.12 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.13 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' address_family_evpn: peer_groups: @@ -133,6 +133,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -157,7 +163,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -187,7 +193,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -197,7 +204,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.16/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -207,7 +215,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.32/31 - name: Ethernet4 peer: DC1-SVC3A @@ -217,7 +226,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.48/31 - name: Ethernet5 peer: DC1-SVC3B @@ -227,7 +237,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.64/31 - name: Ethernet6 peer: DC1-BL1A @@ -237,7 +248,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.80/31 - name: Ethernet7 peer: DC1-BL1B @@ -247,11 +259,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.96/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml index 2a028cb8af2..4f57f30c1fd 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml @@ -76,37 +76,37 @@ router_bgp: - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.15 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.12 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.13 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' address_family_evpn: peer_groups: @@ -133,6 +133,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -157,7 +163,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -187,7 +193,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -197,7 +204,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.18/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -207,7 +215,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.34/31 - name: Ethernet4 peer: DC1-SVC3A @@ -217,7 +226,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.50/31 - name: Ethernet5 peer: DC1-SVC3B @@ -227,7 +237,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.66/31 - name: Ethernet6 peer: DC1-BL1A @@ -237,7 +248,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.82/31 - name: Ethernet7 peer: DC1-BL1B @@ -247,11 +259,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.98/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml index 9a91cb7cc8a..8203766534c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml @@ -76,37 +76,37 @@ router_bgp: - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.15 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.12 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.13 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' address_family_evpn: peer_groups: @@ -133,6 +133,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -157,7 +163,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -187,7 +193,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -197,7 +204,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -207,7 +215,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.36/31 - name: Ethernet4 peer: DC1-SVC3A @@ -217,7 +226,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.52/31 - name: Ethernet5 peer: DC1-SVC3B @@ -227,7 +237,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.68/31 - name: Ethernet6 peer: DC1-BL1A @@ -237,7 +248,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.84/31 - name: Ethernet7 peer: DC1-BL1B @@ -247,11 +259,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.100/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml index a5c0f16e207..42d1f4c7dc2 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml @@ -76,37 +76,37 @@ router_bgp: - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.15 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.12 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.13 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' address_family_evpn: peer_groups: @@ -133,6 +133,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -157,7 +163,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -187,7 +193,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 - name: Ethernet2 peer: DC1-LEAF2A @@ -197,7 +204,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 - name: Ethernet3 peer: DC1-LEAF2B @@ -207,7 +215,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.38/31 - name: Ethernet4 peer: DC1-SVC3A @@ -217,7 +226,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.54/31 - name: Ethernet5 peer: DC1-SVC3B @@ -227,7 +237,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.70/31 - name: Ethernet6 peer: DC1-BL1A @@ -237,7 +248,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.86/31 - name: Ethernet7 peer: DC1-BL1B @@ -247,11 +259,12 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.102/31 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml index 3da3f7bf9f9..1b255efe92e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Vlan4092 - ip_address: 172.31.255.48 peer_group: UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -102,7 +102,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:12 route_targets: import: @@ -113,15 +112,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:13 route_targets: import: @@ -132,15 +132,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:10 route_targets: import: @@ -151,15 +152,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3009 updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:14 route_targets: import: @@ -172,16 +174,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected - source_protocol: static neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3013 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:11 route_targets: import: @@ -192,15 +195,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:20 route_targets: import: @@ -211,15 +215,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3019 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:21 route_targets: import: @@ -230,15 +235,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3020 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:30 route_targets: import: @@ -249,15 +255,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan2 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:31 route_targets: import: @@ -268,11 +275,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-PEERS + description: DC1-SVC3B_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -391,6 +400,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -447,7 +462,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -471,7 +486,7 @@ snmp_server: vlans: - id: 4092 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -481,9 +496,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -492,9 +507,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -503,17 +518,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -531,9 +546,9 @@ vlans: name: Tenant_a_WEB_DHCP_vrf_no_source_int tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -551,17 +566,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -570,21 +585,21 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4092 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -610,7 +625,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -635,7 +650,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -665,7 +680,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -681,7 +696,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -743,7 +758,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -767,7 +782,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -783,7 +798,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -807,7 +822,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.252.6/31 @@ -823,43 +838,50 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.252.6/31 port_channel_interfaces: - name: Port-Channel5 description: CUSTOM_MLAG_PEER_DC1-SVC3B_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: CUSTOM_DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 mlag: 7 - name: Port-Channel10 description: CUSTOM_server03_ESI_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 evpn_ethernet_segment: identifier: 0000:1234:0303:0202:0101 route_target: 03:03:02:02:01:01 lacp_id: 0303.0202.0101 - name: Port-Channel14 description: CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -879,10 +901,12 @@ port_channel_interfaces: mlag: 14 - name: Port-Channel15 description: CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -902,10 +926,12 @@ port_channel_interfaces: mlag: 15 - name: Port-Channel17 description: CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -927,11 +953,13 @@ port_channel_interfaces: lacp_fallback_timeout: 90 - name: Port-Channel18 description: CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -953,11 +981,13 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel19 description: CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -979,10 +1009,11 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel22 description: CUSTOM_server15_port_channel_disabled_interfaces_ - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 22 ethernet_interfaces: - name: Ethernet5 @@ -990,7 +1021,6 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: mlag_peer description: CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet5 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -1000,7 +1030,6 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: mlag_peer description: CUSTOM_MLAG_PEER_DC1-SVC3B_Ethernet6 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -1011,7 +1040,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -1021,7 +1049,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -1033,7 +1060,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.49/31 - name: Ethernet42 peer: DC1-SPINE2 @@ -1043,7 +1071,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.51/31 - name: Ethernet43 peer: DC1-SPINE3 @@ -1053,7 +1082,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.53/31 - name: Ethernet44 peer: DC1-SPINE4 @@ -1063,7 +1093,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.55/31 - name: Ethernet10 peer: server03_ESI @@ -1072,7 +1103,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: CUSTOM_server03_ESI_Eth1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -1083,10 +1113,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: CUSTOM_server04_inherit_all_from_profile_Eth1 shutdown: false - type: switched l2_mtu: 8000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -1109,9 +1141,11 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server05_no_profile_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -1135,10 +1169,11 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: CUSTOM_server06_override_profile_Eth1 shutdown: false - type: switched l2_mtu: 8000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1162,7 +1197,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: CUSTOM_server07_inherit_all_from_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1172,7 +1206,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server08_no_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1183,10 +1216,11 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: CUSTOM_server09_override_profile_no_port_channel_Eth1 shutdown: false - type: switched l2_mtu: 8000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1209,7 +1243,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server10_no_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 17 mode: active @@ -1221,7 +1254,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK description: CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 18 mode: active @@ -1233,7 +1265,6 @@ ethernet_interfaces: port_profile: NESTED_PORT_PROFILE description: CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_Eth1 shutdown: false - type: port-channel-member channel_group: id: 19 mode: active @@ -1245,9 +1276,10 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server13_disabled_interfaces_Eth1 shutdown: true - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet21 peer: server14_explicitly_enabled_interfaces peer_interface: Eth1 @@ -1255,9 +1287,10 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server14_explicitly_enabled_interfaces_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet22 peer: server15_port_channel_disabled_interfaces peer_interface: Eth1 @@ -1265,7 +1298,6 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server15_port_channel_disabled_interfaces_Eth1 shutdown: true - type: port-channel-member channel_group: id: 22 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml index ad78366688c..ee32c02319a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml @@ -48,7 +48,7 @@ router_bgp: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Vlan4092 - ip_address: 172.31.255.64 peer_group: UNDERLAY-PEERS remote_as: '65001' @@ -72,22 +72,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' redistribute_routes: - source_protocol: connected @@ -102,7 +102,6 @@ router_bgp: enabled: false vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:12 route_targets: import: @@ -113,15 +112,16 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3011 updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:13 route_targets: import: @@ -132,15 +132,16 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3012 updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:10 route_targets: import: @@ -151,15 +152,16 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3009 updates: wait_install: true - name: Tenant_A_WAN_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:14 route_targets: import: @@ -172,16 +174,17 @@ router_bgp: route_targets: - '14:14' - 65000:789 + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected - source_protocol: static neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3013 updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:11 route_targets: import: @@ -192,15 +195,16 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3010 updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:20 route_targets: import: @@ -211,15 +215,16 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3019 updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:21 route_targets: import: @@ -230,15 +235,16 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3020 updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:30 route_targets: import: @@ -249,15 +255,16 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan2 updates: wait_install: true - name: Tenant_C_WAN_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:31 route_targets: import: @@ -268,11 +275,13 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-PEERS + description: DC1-SVC3A_Vlan3030 updates: wait_install: true vlan_aware_bundles: @@ -391,6 +400,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true queue_monitor_length: enabled: true log: 5 @@ -447,7 +462,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -471,7 +486,7 @@ snmp_server: vlans: - id: 4092 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -481,9 +496,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -492,9 +507,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -503,17 +518,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -531,9 +546,9 @@ vlans: name: Tenant_a_WEB_DHCP_vrf_no_source_int tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -551,17 +566,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -570,21 +585,21 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4092 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -610,7 +625,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -635,7 +650,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -665,7 +680,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -681,7 +696,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -743,7 +758,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -767,7 +782,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -783,7 +798,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -807,7 +822,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.252.7/31 @@ -823,43 +838,50 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ip_address: 10.255.252.7/31 port_channel_interfaces: - name: Port-Channel5 description: CUSTOM_MLAG_PEER_DC1-SVC3A_Po5 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: CUSTOM_DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-124,130-131,140-141,150,160-162,210-211,250,310-311,350 mlag: 7 - name: Port-Channel10 description: CUSTOM_server03_ESI_PortChanne1 - type: switched shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 evpn_ethernet_segment: identifier: 0000:1234:0303:0202:0101 route_target: 03:03:02:02:01:01 lacp_id: 0303.0202.0101 - name: Port-Channel14 description: CUSTOM_server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -879,10 +901,12 @@ port_channel_interfaces: mlag: 14 - name: Port-Channel15 description: CUSTOM_server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -902,10 +926,12 @@ port_channel_interfaces: mlag: 15 - name: Port-Channel17 description: CUSTOM_server10_no_profile_port_channel_lacp_fallback_server10_no_profile_port_channel_lacp_fallback - type: switched shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -927,11 +953,13 @@ port_channel_interfaces: lacp_fallback_timeout: 90 - name: Port-Channel18 description: CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -953,11 +981,13 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel19 description: CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_NESTED_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched shutdown: false - mode: trunk + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 l2_mtu: 8000 - vlans: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -979,10 +1009,11 @@ port_channel_interfaces: lacp_fallback_timeout: 10 - name: Port-Channel22 description: CUSTOM_server15_port_channel_disabled_interfaces_ - type: switched shutdown: false - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 22 ethernet_interfaces: - name: Ethernet5 @@ -990,7 +1021,6 @@ ethernet_interfaces: peer_interface: Ethernet5 peer_type: mlag_peer description: CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet5 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -1000,7 +1030,6 @@ ethernet_interfaces: peer_interface: Ethernet6 peer_type: mlag_peer description: CUSTOM_MLAG_PEER_DC1-SVC3A_Ethernet6 - type: port-channel-member shutdown: false channel_group: id: 5 @@ -1011,7 +1040,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -1021,7 +1049,6 @@ ethernet_interfaces: peer_type: l2leaf description: CUSTOM_DC1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -1033,7 +1060,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.65/31 - name: Ethernet42 peer: DC1-SPINE2 @@ -1043,7 +1071,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.67/31 - name: Ethernet43 peer: DC1-SPINE3 @@ -1053,7 +1082,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.69/31 - name: Ethernet44 peer: DC1-SPINE4 @@ -1063,7 +1093,8 @@ ethernet_interfaces: speed: forced 100gfull shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.71/31 - name: Ethernet10 peer: server03_ESI @@ -1072,7 +1103,6 @@ ethernet_interfaces: port_profile: TENANT_A_B description: CUSTOM_server03_ESI_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -1083,10 +1113,12 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: CUSTOM_server04_inherit_all_from_profile_Eth2 shutdown: false - type: switched l2_mtu: 8000 - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -1109,9 +1141,11 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server05_no_profile_Eth2 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -1135,10 +1169,11 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY description: CUSTOM_server06_override_profile_Eth2 shutdown: false - type: switched l2_mtu: 8000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1162,7 +1197,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: CUSTOM_server07_inherit_all_from_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1172,7 +1206,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server08_no_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1183,10 +1216,11 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL description: CUSTOM_server09_override_profile_no_port_channel_Eth2 shutdown: false - type: switched l2_mtu: 8000 - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1209,7 +1243,6 @@ ethernet_interfaces: peer_type: server description: CUSTOM_server10_no_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 17 mode: active @@ -1221,7 +1254,6 @@ ethernet_interfaces: port_profile: ALL_WITH_SECURITY_PORT_CHANNEL_LACP_FALLBACK description: CUSTOM_server11_inherit_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 18 mode: active @@ -1233,7 +1265,6 @@ ethernet_interfaces: port_profile: NESTED_PORT_PROFILE description: CUSTOM_server12_inherit_nested_profile_port_channel_lacp_fallback_Eth2 shutdown: false - type: port-channel-member channel_group: id: 19 mode: active @@ -1245,9 +1276,10 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server13_disabled_interfaces_Eth2 shutdown: true - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet21 peer: server14_explicitly_enabled_interfaces peer_interface: Eth2 @@ -1255,9 +1287,10 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server14_explicitly_enabled_interfaces_Eth2 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' - name: Ethernet22 peer: server15_port_channel_disabled_interfaces peer_interface: Eth2 @@ -1265,7 +1298,6 @@ ethernet_interfaces: port_profile: TENANT_A description: CUSTOM_server15_port_channel_disabled_interfaces_Eth2 shutdown: true - type: port-channel-member channel_group: id: 22 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_BL1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_BL1.yml index 4f4c2f583d1..55b3f570d78 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_BL1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_BL1.yml @@ -4,7 +4,8 @@ my_dci_ethernet_interfaces: description: My test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_FABRIC.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_FABRIC.yml index 2cbfbaeb370..d5c7d0a4cc8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_FABRIC.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_FABRIC.yml @@ -32,7 +32,7 @@ node_type_keys: mlag_port_channel_interfaces: 'templates/interface-descriptions/mlag/port-channel-interfaces.j2' connected_endpoints_ethernet_interfaces: 'interface-descriptions/connected-endpoints/ethernet-interfaces.j2' connected_endpoints_port_channel_interfaces: 'interface-descriptions/connected-endpoints/port-channel-interfaces.j2' - overlay_loopback_interface: 'interface-descriptions/loopbacks/overlay-loopback.j2' + router_id_loopback_interface: 'interface-descriptions/loopbacks/router-id-loopback.j2' vtep_loopback_interface: 'interface-descriptions/loopbacks/vtep-loopback.j2' - key: l2leaf type: l2leaf diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_SERVERS.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_SERVERS.yml index c446ca6d38b..873ce05ff6a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_SERVERS.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/DC1_SERVERS.yml @@ -17,7 +17,6 @@ port_profiles: vlans: "210-211" - profile: ALL_WITH_SECURITY - parent_profile: NON_EXISTING_PROFILE # Test that pointing to a nonexisting profile won't break templates. mode: trunk vlans: "1-4094" spanning_tree_bpdufilter: true diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/all.yml index ed97d539c09..adbbb232b23 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/inventory/group_vars/all.yml @@ -1 +1,5 @@ --- +# Generate CSVs with fabric link info. +eos_designs_documentation: + topology_csv: true + p2p_links_csv: true diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/loopbacks/overlay-loopback.j2 b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/loopbacks/router-id-loopback.j2 similarity index 100% rename from ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/loopbacks/overlay-loopback.j2 rename to ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/loopbacks/router-id-loopback.j2 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/ethernet-interfaces.j2 b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/ethernet-interfaces.j2 index eba31ed37a9..d7b7e2711b9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/ethernet-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/ethernet-interfaces.j2 @@ -1 +1 @@ -CUSTOM_MLAG_PEER_{{ switch.mlag_peer }}_{{ mlag_interface }} \ No newline at end of file +CUSTOM_MLAG_PEER_{{ mlag_peer }}_{{ mlag_interface }} \ No newline at end of file diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/port-channel-interfaces.j2 b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/port-channel-interfaces.j2 index f7b5efeec2b..920ad4b01e9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/port-channel-interfaces.j2 +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ebgp_overlay_ebgp/templates/interface-descriptions/mlag/port-channel-interfaces.j2 @@ -1 +1 @@ -CUSTOM_MLAG_PEER_{{ switch.mlag_peer }}_Po{{ switch.mlag_interfaces[0] | regex_findall("\d") | join }} \ No newline at end of file +CUSTOM_MLAG_PEER_{{ mlag_peer }}_Po{{ mlag_interfaces[0] | regex_findall("\d") | join }} \ No newline at end of file diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1A.md index 8efda1467e0..61656e283b7 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,19 +255,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,20 +281,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.41/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | routed | - | 172.31.255.43/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | routed | - | 172.31.255.45/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | routed | - | 172.31.255.47/31 | default | 1500 | False | - | - | -| Ethernet8 | P2P_LINK_TO_ROUTERX_Ethernet8 | routed | - | 100.64.0.0/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.41/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | - | 172.31.255.43/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | - | 172.31.255.45/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | - | 172.31.255.47/31 | default | 1500 | False | - | - | +| Ethernet8 | P2P_LINK_TO_ROUTERX_Ethernet8 | - | 100.64.0.0/31 | default | 1500 | False | - | - | ##### ISIS @@ -354,12 +359,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -383,21 +388,20 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -408,15 +412,15 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.10/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.10/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -430,14 +434,14 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 isis enable EVPN_UNDERLAY @@ -450,8 +454,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -462,16 +466,16 @@ interface Loopback1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 @@ -481,7 +485,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -581,7 +585,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0006.00 | +| Net-ID | 49.0001.1921.6825.5010.00 | | Type | level-2 | | Router-ID | 192.168.255.10 | | Log Adjacency Changes | True | @@ -611,7 +615,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0006.00 + net 49.0001.1921.6825.5010.00 is-type level-2 router-id ipv4 192.168.255.10 log-adjacency-changes @@ -684,9 +688,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1B.md index 359c5f549f7..c9120c51260 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-BL1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,19 +255,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,19 +281,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | routed | - | 172.31.255.49/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | routed | - | 172.31.255.51/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | routed | - | 172.31.255.53/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | routed | - | 172.31.255.55/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | - | 172.31.255.49/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | - | 172.31.255.51/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | - | 172.31.255.53/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | - | 172.31.255.55/31 | default | 1500 | False | - | - | ##### ISIS @@ -352,12 +357,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -368,21 +373,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -393,15 +397,15 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.11/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.11/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -415,14 +419,14 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 isis enable EVPN_UNDERLAY @@ -435,8 +439,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -447,16 +451,16 @@ interface Loopback1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 @@ -466,7 +470,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -566,7 +570,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0007.00 | +| Net-ID | 49.0001.1921.6825.5011.00 | | Type | level-2 | | Router-ID | 192.168.255.11 | | Log Adjacency Changes | True | @@ -595,7 +599,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0007.00 + net 49.0001.1921.6825.5011.00 is-type level-2 router-id ipv4 192.168.255.11 log-adjacency-changes @@ -668,9 +672,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF1A.md index 0753dab9a60..131e9266a85 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -41,20 +42,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -145,6 +146,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -235,9 +240,9 @@ interface Ethernet2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_LEAF2_Po7 | switched | trunk | none | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_LEAF2_Po7 | trunk | none | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -246,9 +251,9 @@ interface Ethernet2 interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2A.md index d61eebe7cde..5889e3a6c41 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -240,14 +245,14 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -263,8 +268,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet7 | *trunk | *none | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet7 | *trunk | *none | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -283,12 +288,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -299,10 +304,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | none | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | none | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -311,17 +316,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -330,7 +335,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -343,7 +348,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2B.md index 72475ead5fc..6766700f2c8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-L2LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -240,14 +245,14 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -263,8 +268,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet8 | *trunk | *none | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet8 | *trunk | *none | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -283,12 +288,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -299,10 +304,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | none | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | none | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -311,17 +316,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -330,7 +335,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -343,7 +348,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF1A.md index 71aa43f2723..8e18f5c8e66 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -50,20 +51,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -154,6 +155,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -223,12 +228,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | routed | - | 172.31.255.5/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | routed | - | 172.31.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | - | 172.31.255.5/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | - | 172.31.255.7/31 | default | 1500 | False | - | - | ##### ISIS @@ -300,13 +305,13 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -319,7 +324,7 @@ interface Ethernet4 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 isis enable EVPN_UNDERLAY @@ -417,7 +422,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0001.00 | +| Net-ID | 49.0001.1921.6825.5005.00 | | Type | level-2 | | Router-ID | 192.168.255.5 | | Log Adjacency Changes | True | @@ -444,7 +449,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0001.00 + net 49.0001.1921.6825.5005.00 is-type level-2 router-id ipv4 192.168.255.5 log-adjacency-changes @@ -517,9 +522,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2A.md index 639741b8e75..fb206584853 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,19 +255,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,20 +281,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet1 | *trunk | *none | *- | *- | 7 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 172.31.255.9/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 172.31.255.11/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | routed | - | 172.31.255.13/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | routed | - | 172.31.255.15/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 172.31.255.9/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 172.31.255.11/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | - | 172.31.255.13/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | - | 172.31.255.15/31 | default | 1500 | False | - | - | ##### ISIS @@ -353,12 +358,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -374,29 +379,28 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | none | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | none | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ``` @@ -408,15 +412,15 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | -| Loopback10 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.6/32 | +| Loopback10 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback10 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback10 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -430,14 +434,14 @@ interface Port-Channel7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback10 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 isis enable EVPN_UNDERLAY @@ -450,8 +454,8 @@ interface Loopback10 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -462,16 +466,16 @@ interface Loopback10 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 @@ -481,7 +485,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -581,7 +585,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0002.00 | +| Net-ID | 49.0001.1921.6825.5006.00 | | Type | level-2 | | Router-ID | 192.168.255.6 | | Log Adjacency Changes | True | @@ -610,7 +614,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0002.00 + net 49.0001.1921.6825.5006.00 is-type level-2 router-id ipv4 192.168.255.6 log-adjacency-changes @@ -683,9 +687,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2B.md index 330e85aaa3d..4e1965ad80a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,19 +255,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -276,20 +281,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet2 | *trunk | *none | *- | *- | 7 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 172.31.255.17/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 172.31.255.19/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | routed | - | 172.31.255.21/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | routed | - | 172.31.255.23/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 172.31.255.17/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 172.31.255.19/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | - | 172.31.255.21/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | - | 172.31.255.23/31 | default | 1500 | False | - | - | ##### ISIS @@ -353,12 +358,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -374,29 +379,28 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | none | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | none | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ``` @@ -408,15 +412,15 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.7/32 | -| Loopback10 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.7/32 | +| Loopback10 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback10 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback10 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -430,14 +434,14 @@ interface Port-Channel7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback10 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 isis enable EVPN_UNDERLAY @@ -450,8 +454,8 @@ interface Loopback10 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -462,16 +466,16 @@ interface Loopback10 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4093 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 @@ -481,7 +485,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -581,7 +585,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0003.00 | +| Net-ID | 49.0001.1921.6825.5007.00 | | Type | level-2 | | Router-ID | 192.168.255.7 | | Log Adjacency Changes | True | @@ -610,7 +614,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0003.00 + net 49.0001.1921.6825.5007.00 is-type level-2 router-id ipv4 192.168.255.7 log-adjacency-changes @@ -683,9 +687,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE1.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE1.md index d04941f3c4c..1a1bd4f6fb3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 172.31.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 172.31.255.8/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 172.31.255.16/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | routed | - | 172.31.255.24/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | routed | - | 172.31.255.32/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | routed | - | 172.31.255.40/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | routed | - | 172.31.255.48/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 172.31.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 172.31.255.8/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 172.31.255.16/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | - | 172.31.255.24/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | - | 172.31.255.32/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | - | 172.31.255.40/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | - | 172.31.255.48/31 | default | 1500 | False | - | - | ##### ISIS @@ -328,13 +333,13 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -347,7 +352,7 @@ interface Ethernet7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 isis enable EVPN_UNDERLAY @@ -413,7 +418,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0000.0001.00 | +| Net-ID | 49.0001.1921.6825.5001.00 | | Type | level-2 | | Router-ID | 192.168.255.1 | | Log Adjacency Changes | True | @@ -443,7 +448,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0001.00 + net 49.0001.1921.6825.5001.00 is-type level-2 router-id ipv4 192.168.255.1 log-adjacency-changes @@ -528,19 +533,19 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group OVERLAY-PEERS - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group OVERLAY-PEERS - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group OVERLAY-PEERS - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group OVERLAY-PEERS - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group OVERLAY-PEERS - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group OVERLAY-PEERS - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group OVERLAY-PEERS - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE2.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE2.md index 42a0bbf143c..c4f2a49a449 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -144,6 +145,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -206,15 +211,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 172.31.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 172.31.255.10/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 172.31.255.18/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | routed | - | 172.31.255.26/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | routed | - | 172.31.255.34/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | routed | - | 172.31.255.42/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | routed | - | 172.31.255.50/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 172.31.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 172.31.255.10/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 172.31.255.18/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | - | 172.31.255.26/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | - | 172.31.255.34/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | - | 172.31.255.42/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | - | 172.31.255.50/31 | default | 1500 | False | - | - | ##### ISIS @@ -325,13 +330,13 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -344,7 +349,7 @@ interface Ethernet7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 isis enable EVPN_UNDERLAY @@ -410,7 +415,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0000.0002.00 | +| Net-ID | 49.0001.1921.6825.5002.00 | | Type | level-2 | | Router-ID | 192.168.255.2 | | Log Adjacency Changes | True | @@ -440,7 +445,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0002.00 + net 49.0001.1921.6825.5002.00 is-type level-2 router-id ipv4 192.168.255.2 log-adjacency-changes diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE3.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE3.md index a5db0493594..2a1f6fb946c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE3.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -40,20 +41,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -144,6 +145,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -206,15 +211,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | routed | - | 172.31.255.4/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | routed | - | 172.31.255.12/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | routed | - | 172.31.255.20/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | routed | - | 172.31.255.28/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | routed | - | 172.31.255.36/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | routed | - | 172.31.255.44/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | routed | - | 172.31.255.52/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | - | 172.31.255.4/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | - | 172.31.255.12/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | - | 172.31.255.20/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | - | 172.31.255.28/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | - | 172.31.255.36/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | - | 172.31.255.44/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | - | 172.31.255.52/31 | default | 1500 | False | - | - | ##### ISIS @@ -325,13 +330,13 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -344,7 +349,7 @@ interface Ethernet7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 isis enable EVPN_UNDERLAY @@ -410,7 +415,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0000.0003.00 | +| Net-ID | 49.0001.1921.6825.5003.00 | | Type | level-2 | | Router-ID | 192.168.255.3 | | Log Adjacency Changes | True | @@ -440,7 +445,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0003.00 + net 49.0001.1921.6825.5003.00 is-type level-2 router-id ipv4 192.168.255.3 log-adjacency-changes diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE4.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE4.md index 4208d5dcea1..38ccc49394f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE4.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SPINE4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | routed | - | 172.31.255.6/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | routed | - | 172.31.255.14/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | routed | - | 172.31.255.22/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | routed | - | 172.31.255.30/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | routed | - | 172.31.255.38/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | routed | - | 172.31.255.46/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | routed | - | 172.31.255.54/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | - | 172.31.255.6/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | - | 172.31.255.14/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | - | 172.31.255.22/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | - | 172.31.255.30/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | - | 172.31.255.38/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | - | 172.31.255.46/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | - | 172.31.255.54/31 | default | 1500 | False | - | - | ##### ISIS @@ -328,13 +333,13 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | ##### ISIS @@ -347,7 +352,7 @@ interface Ethernet7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 isis enable EVPN_UNDERLAY @@ -413,7 +418,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0000.0004.00 | +| Net-ID | 49.0001.1921.6825.5004.00 | | Type | level-2 | | Router-ID | 192.168.255.4 | | Log Adjacency Changes | True | @@ -443,7 +448,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0004.00 + net 49.0001.1921.6825.5004.00 is-type level-2 router-id ipv4 192.168.255.4 log-adjacency-changes @@ -528,19 +533,19 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group OVERLAY-PEERS - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group OVERLAY-PEERS - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group OVERLAY-PEERS - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group OVERLAY-PEERS - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group OVERLAY-PEERS - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group OVERLAY-PEERS - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group OVERLAY-PEERS - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3A.md index b2c18a022cb..7745cd67dab 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,14 +255,14 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -271,8 +276,8 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet1 | *trunk | *none | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet1 | *trunk | *none | *- | *- | 7 | @@ -280,12 +285,12 @@ vlan 4094 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 172.31.255.25/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 172.31.255.27/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | routed | - | 172.31.255.29/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | routed | - | 172.31.255.31/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 172.31.255.25/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 172.31.255.27/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | - | 172.31.255.29/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | - | 172.31.255.31/31 | default | 1500 | False | - | - | ##### ISIS @@ -349,12 +354,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -375,29 +380,28 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | none | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | none | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ``` @@ -409,15 +413,15 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.8/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.8/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -431,14 +435,14 @@ interface Port-Channel7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 isis enable EVPN_UNDERLAY @@ -451,7 +455,7 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -461,16 +465,16 @@ interface Loopback1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4094 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4094 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -574,7 +578,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0004.00 | +| Net-ID | 49.0001.1921.6825.5008.00 | | Type | level-2 | | Router-ID | 192.168.255.8 | | Log Adjacency Changes | True | @@ -603,7 +607,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0004.00 + net 49.0001.1921.6825.5008.00 is-type level-2 router-id ipv4 192.168.255.8 log-adjacency-changes @@ -676,9 +680,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3B.md index e66af905811..ba76f03869c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/devices/DC1-SVC3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,14 +255,14 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -271,8 +276,8 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet2 | *trunk | *none | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet2 | *trunk | *none | *- | *- | 7 | @@ -280,12 +285,12 @@ vlan 4094 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | routed | - | 172.31.255.33/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | routed | - | 172.31.255.35/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | routed | - | 172.31.255.37/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | routed | - | 172.31.255.39/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | - | 172.31.255.33/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | - | 172.31.255.35/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | - | 172.31.255.37/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | - | 172.31.255.39/31 | default | 1500 | False | - | - | ##### ISIS @@ -349,12 +354,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -375,29 +380,28 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | none | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | none | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ``` @@ -409,15 +413,15 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.9/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.9/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | ##### ISIS @@ -431,14 +435,14 @@ interface Port-Channel7 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 isis enable EVPN_UNDERLAY @@ -451,7 +455,7 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -461,16 +465,16 @@ interface Loopback1 ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | -| Vlan4094 | EVPN_UNDERLAY | True | 50 | point-to-point | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | +| Vlan4094 | EVPN_UNDERLAY | True | 50 | point-to-point | - | #### VLAN Interfaces Device Configuration ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -574,7 +578,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 | Settings | Value | | -------- | ----- | | Instance | EVPN_UNDERLAY | -| Net-ID | 49.0001.0001.0001.0005.00 | +| Net-ID | 49.0001.1921.6825.5009.00 | | Type | level-2 | | Router-ID | 192.168.255.9 | | Log Adjacency Changes | True | @@ -603,7 +607,7 @@ ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ```eos ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0005.00 + net 49.0001.1921.6825.5009.00 is-type level-2 router-id ipv4 192.168.255.9 log-adjacency-changes @@ -676,9 +680,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-documentation.md index a8d5426c5f4..7fa36d1b435 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-documentation.md @@ -154,22 +154,22 @@ | POD | Node | CLNS Address | | --- | ---- | ------------ | -| DC1_FABRIC | DC1-BL1A | 49.0001.0001.0001.0006.00 | -| DC1_FABRIC | DC1-BL1B | 49.0001.0001.0001.0007.00 | -| DC1_FABRIC | DC1-LEAF1A | 49.0001.0001.0001.0001.00 | -| DC1_FABRIC | DC1-LEAF2A | 49.0001.0001.0001.0002.00 | -| DC1_FABRIC | DC1-LEAF2B | 49.0001.0001.0001.0003.00 | -| DC1_FABRIC | DC1-SPINE1 | 49.0001.0001.0000.0001.00 | -| DC1_FABRIC | DC1-SPINE2 | 49.0001.0001.0000.0002.00 | -| DC1_FABRIC | DC1-SPINE3 | 49.0001.0001.0000.0003.00 | -| DC1_FABRIC | DC1-SPINE4 | 49.0001.0001.0000.0004.00 | -| DC1_FABRIC | DC1-SVC3A | 49.0001.0001.0001.0004.00 | -| DC1_FABRIC | DC1-SVC3B | 49.0001.0001.0001.0005.00 | +| DC1_FABRIC | DC1-BL1A | 49.0001.1921.6825.5010.00 | +| DC1_FABRIC | DC1-BL1B | 49.0001.1921.6825.5011.00 | +| DC1_FABRIC | DC1-LEAF1A | 49.0001.1921.6825.5005.00 | +| DC1_FABRIC | DC1-LEAF2A | 49.0001.1921.6825.5006.00 | +| DC1_FABRIC | DC1-LEAF2B | 49.0001.1921.6825.5007.00 | +| DC1_FABRIC | DC1-SPINE1 | 49.0001.1921.6825.5001.00 | +| DC1_FABRIC | DC1-SPINE2 | 49.0001.1921.6825.5002.00 | +| DC1_FABRIC | DC1-SPINE3 | 49.0001.1921.6825.5003.00 | +| DC1_FABRIC | DC1-SPINE4 | 49.0001.1921.6825.5004.00 | +| DC1_FABRIC | DC1-SVC3A | 49.0001.1921.6825.5008.00 | +| DC1_FABRIC | DC1-SVC3B | 49.0001.1921.6825.5009.00 | ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 192.168.254.0/24 | 256 | 4 | 1.57 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-p2p-links.csv b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-p2p-links.csv deleted file mode 100644 index 77164dfae44..00000000000 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ /dev/null @@ -1,29 +0,0 @@ -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address -l3leaf,DC1-BL1A,Ethernet1,172.31.255.41/31,spine,DC1-SPINE1,Ethernet6,172.31.255.40/31 -l3leaf,DC1-BL1A,Ethernet2,172.31.255.43/31,spine,DC1-SPINE2,Ethernet6,172.31.255.42/31 -l3leaf,DC1-BL1A,Ethernet3,172.31.255.45/31,spine,DC1-SPINE3,Ethernet6,172.31.255.44/31 -l3leaf,DC1-BL1A,Ethernet4,172.31.255.47/31,spine,DC1-SPINE4,Ethernet6,172.31.255.46/31 -l3leaf,DC1-BL1B,Ethernet1,172.31.255.49/31,spine,DC1-SPINE1,Ethernet7,172.31.255.48/31 -l3leaf,DC1-BL1B,Ethernet2,172.31.255.51/31,spine,DC1-SPINE2,Ethernet7,172.31.255.50/31 -l3leaf,DC1-BL1B,Ethernet3,172.31.255.53/31,spine,DC1-SPINE3,Ethernet7,172.31.255.52/31 -l3leaf,DC1-BL1B,Ethernet4,172.31.255.55/31,spine,DC1-SPINE4,Ethernet7,172.31.255.54/31 -l3leaf,DC1-LEAF1A,Ethernet1,172.31.255.1/31,spine,DC1-SPINE1,Ethernet1,172.31.255.0/31 -l3leaf,DC1-LEAF1A,Ethernet2,172.31.255.3/31,spine,DC1-SPINE2,Ethernet1,172.31.255.2/31 -l3leaf,DC1-LEAF1A,Ethernet3,172.31.255.5/31,spine,DC1-SPINE3,Ethernet1,172.31.255.4/31 -l3leaf,DC1-LEAF1A,Ethernet4,172.31.255.7/31,spine,DC1-SPINE4,Ethernet1,172.31.255.6/31 -l3leaf,DC1-LEAF2A,Ethernet1,172.31.255.9/31,spine,DC1-SPINE1,Ethernet2,172.31.255.8/31 -l3leaf,DC1-LEAF2A,Ethernet2,172.31.255.11/31,spine,DC1-SPINE2,Ethernet2,172.31.255.10/31 -l3leaf,DC1-LEAF2A,Ethernet3,172.31.255.13/31,spine,DC1-SPINE3,Ethernet2,172.31.255.12/31 -l3leaf,DC1-LEAF2A,Ethernet4,172.31.255.15/31,spine,DC1-SPINE4,Ethernet2,172.31.255.14/31 -l3leaf,DC1-LEAF2B,Ethernet1,172.31.255.17/31,spine,DC1-SPINE1,Ethernet3,172.31.255.16/31 -l3leaf,DC1-LEAF2B,Ethernet2,172.31.255.19/31,spine,DC1-SPINE2,Ethernet3,172.31.255.18/31 -l3leaf,DC1-LEAF2B,Ethernet3,172.31.255.21/31,spine,DC1-SPINE3,Ethernet3,172.31.255.20/31 -l3leaf,DC1-LEAF2B,Ethernet4,172.31.255.23/31,spine,DC1-SPINE4,Ethernet3,172.31.255.22/31 -spine,DC1-SPINE1,Ethernet4,172.31.255.24/31,l3leaf,DC1-SVC3A,Ethernet1,172.31.255.25/31 -spine,DC1-SPINE1,Ethernet5,172.31.255.32/31,l3leaf,DC1-SVC3B,Ethernet1,172.31.255.33/31 -spine,DC1-SPINE2,Ethernet4,172.31.255.26/31,l3leaf,DC1-SVC3A,Ethernet2,172.31.255.27/31 -spine,DC1-SPINE2,Ethernet5,172.31.255.34/31,l3leaf,DC1-SVC3B,Ethernet2,172.31.255.35/31 -spine,DC1-SPINE3,Ethernet4,172.31.255.28/31,l3leaf,DC1-SVC3A,Ethernet3,172.31.255.29/31 -spine,DC1-SPINE3,Ethernet5,172.31.255.36/31,l3leaf,DC1-SVC3B,Ethernet3,172.31.255.37/31 -spine,DC1-SPINE4,Ethernet4,172.31.255.30/31,l3leaf,DC1-SVC3A,Ethernet4,172.31.255.31/31 -spine,DC1-SPINE4,Ethernet5,172.31.255.38/31,l3leaf,DC1-SVC3B,Ethernet4,172.31.255.39/31 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 5ab96554483..00000000000 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,86 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -l3leaf,DC1-BL1A,Ethernet1,spine,DC1-SPINE1,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet2,spine,DC1-SPINE2,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet3,spine,DC1-SPINE3,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet4,spine,DC1-SPINE4,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet5,mlag_peer,DC1-BL1B,Ethernet5,True -l3leaf,DC1-BL1A,Ethernet6,mlag_peer,DC1-BL1B,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet8,other,ROUTERX,Ethernet8,True -l3leaf,DC1-BL1B,Ethernet1,spine,DC1-SPINE1,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet2,spine,DC1-SPINE2,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet3,spine,DC1-SPINE3,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet4,spine,DC1-SPINE4,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet5,mlag_peer,DC1-BL1A,Ethernet5,True -l3leaf,DC1-BL1B,Ethernet6,mlag_peer,DC1-BL1A,Ethernet6,True -l2leaf,DC1-L2LEAF1A,Ethernet1,l3leaf,DC1-LEAF2A,Ethernet7,True -l2leaf,DC1-L2LEAF1A,Ethernet2,l3leaf,DC1-LEAF2B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet1,l3leaf,DC1-SVC3A,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet2,l3leaf,DC1-SVC3B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet3,mlag_peer,DC1-L2LEAF2B,Ethernet3,True -l2leaf,DC1-L2LEAF2A,Ethernet4,mlag_peer,DC1-L2LEAF2B,Ethernet4,True -l2leaf,DC1-L2LEAF2B,Ethernet1,l3leaf,DC1-SVC3A,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet2,l3leaf,DC1-SVC3B,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet3,mlag_peer,DC1-L2LEAF2A,Ethernet3,True -l2leaf,DC1-L2LEAF2B,Ethernet4,mlag_peer,DC1-L2LEAF2A,Ethernet4,True -l3leaf,DC1-LEAF1A,Ethernet1,spine,DC1-SPINE1,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet2,spine,DC1-SPINE2,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet3,spine,DC1-SPINE3,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet4,spine,DC1-SPINE4,Ethernet1,True -l3leaf,DC1-LEAF2A,Ethernet1,spine,DC1-SPINE1,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet2,spine,DC1-SPINE2,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet3,spine,DC1-SPINE3,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet4,spine,DC1-SPINE4,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet5,mlag_peer,DC1-LEAF2B,Ethernet5,True -l3leaf,DC1-LEAF2A,Ethernet6,mlag_peer,DC1-LEAF2B,Ethernet6,True -l3leaf,DC1-LEAF2A,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet1,True -l3leaf,DC1-LEAF2B,Ethernet1,spine,DC1-SPINE1,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet2,spine,DC1-SPINE2,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet3,spine,DC1-SPINE3,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet4,spine,DC1-SPINE4,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet5,mlag_peer,DC1-LEAF2A,Ethernet5,True -l3leaf,DC1-LEAF2B,Ethernet6,mlag_peer,DC1-LEAF2A,Ethernet6,True -l3leaf,DC1-LEAF2B,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet2,True -spine,DC1-SPINE1,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet1,True -spine,DC1-SPINE1,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet1,True -spine,DC1-SPINE1,Ethernet4,l3leaf,DC1-SVC3A,Ethernet1,True -spine,DC1-SPINE1,Ethernet5,l3leaf,DC1-SVC3B,Ethernet1,True -spine,DC1-SPINE1,Ethernet6,l3leaf,DC1-BL1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet7,l3leaf,DC1-BL1B,Ethernet1,True -spine,DC1-SPINE2,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet2,True -spine,DC1-SPINE2,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet2,True -spine,DC1-SPINE2,Ethernet4,l3leaf,DC1-SVC3A,Ethernet2,True -spine,DC1-SPINE2,Ethernet5,l3leaf,DC1-SVC3B,Ethernet2,True -spine,DC1-SPINE2,Ethernet6,l3leaf,DC1-BL1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet7,l3leaf,DC1-BL1B,Ethernet2,True -spine,DC1-SPINE3,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet3,True -spine,DC1-SPINE3,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet3,True -spine,DC1-SPINE3,Ethernet4,l3leaf,DC1-SVC3A,Ethernet3,True -spine,DC1-SPINE3,Ethernet5,l3leaf,DC1-SVC3B,Ethernet3,True -spine,DC1-SPINE3,Ethernet6,l3leaf,DC1-BL1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet7,l3leaf,DC1-BL1B,Ethernet3,True -spine,DC1-SPINE4,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet4,True -spine,DC1-SPINE4,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet4,True -spine,DC1-SPINE4,Ethernet4,l3leaf,DC1-SVC3A,Ethernet4,True -spine,DC1-SPINE4,Ethernet5,l3leaf,DC1-SVC3B,Ethernet4,True -spine,DC1-SPINE4,Ethernet6,l3leaf,DC1-BL1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet7,l3leaf,DC1-BL1B,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet1,spine,DC1-SPINE1,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet2,spine,DC1-SPINE2,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet3,spine,DC1-SPINE3,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet4,spine,DC1-SPINE4,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet5,mlag_peer,DC1-SVC3B,Ethernet5,True -l3leaf,DC1-SVC3A,Ethernet6,mlag_peer,DC1-SVC3B,Ethernet6,True -l3leaf,DC1-SVC3A,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet1,True -l3leaf,DC1-SVC3B,Ethernet1,spine,DC1-SPINE1,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet2,spine,DC1-SPINE2,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet3,spine,DC1-SPINE3,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet4,spine,DC1-SPINE4,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet5,mlag_peer,DC1-SVC3A,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet6,mlag_peer,DC1-SVC3A,Ethernet6,True -l3leaf,DC1-SVC3B,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet2,True -l3leaf,DC1-SVC3B,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet2,True diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1A.cfg index 7d9d34c6b8b..cafb4980ceb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,36 +26,26 @@ hostname DC1-BL1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet6 @@ -94,12 +96,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -117,27 +119,27 @@ interface Ethernet8 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 @@ -147,7 +149,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -176,6 +178,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -201,9 +206,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -214,7 +219,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0006.00 + net 49.0001.1921.6825.5010.00 is-type level-2 router-id ipv4 192.168.255.10 log-adjacency-changes @@ -223,11 +228,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1B.cfg index b15d04b734f..33a996a0eb3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-BL1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,36 +26,26 @@ hostname DC1-BL1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet7 @@ -94,37 +96,37 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 @@ -134,7 +136,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -163,6 +165,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -188,9 +193,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -201,7 +206,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0007.00 + net 49.0001.1921.6825.5011.00 is-type level-2 router-id ipv4 192.168.255.11 log-adjacency-changes @@ -210,11 +215,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF1A.cfg index ec9111df653..878ace107a1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,26 +26,17 @@ hostname DC1-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet7 @@ -46,7 +49,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -54,11 +57,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2A.cfg index 2cabcb01cc6..665d17003db 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,21 +26,12 @@ hostname DC1-L2LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -36,17 +39,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet7 @@ -59,23 +62,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -92,11 +95,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2B.cfg index 369b7a11f01..3da8134b8b4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-L2LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,21 +26,12 @@ hostname DC1-L2LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -36,17 +39,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet8 @@ -59,23 +62,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -92,11 +95,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF1A.cfg index cd2cfe0631a..ad4a985c509 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,18 +26,9 @@ hostname DC1-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -77,14 +80,14 @@ interface Ethernet4 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -103,6 +106,9 @@ ip extcommunity-list ECL-EVPN-SOO permit soo 192.168.254.5:1 ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -128,9 +134,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -141,7 +147,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0001.00 + net 49.0001.1921.6825.5005.00 is-type level-2 router-id ipv4 192.168.255.5 log-adjacency-changes @@ -150,11 +156,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2A.cfg index 03567d3beea..e999364ea55 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,43 +26,33 @@ hostname DC1-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -102,12 +104,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -117,27 +119,27 @@ interface Ethernet7 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback10 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 @@ -147,7 +149,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -176,6 +178,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -201,9 +206,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -214,7 +219,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0002.00 + net 49.0001.1921.6825.5006.00 is-type level-2 router-id ipv4 192.168.255.6 log-adjacency-changes @@ -223,11 +228,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2B.cfg index a01237ac11e..ef4fddf2d66 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,43 +26,33 @@ hostname DC1-LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -102,12 +104,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -117,27 +119,27 @@ interface Ethernet7 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback10 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 @@ -147,7 +149,7 @@ interface Vlan4093 isis network point-to-point ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -176,6 +178,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -201,9 +206,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -214,7 +219,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0003.00 + net 49.0001.1921.6825.5007.00 is-type level-2 router-id ipv4 192.168.255.7 log-adjacency-changes @@ -223,11 +228,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE1.cfg index 53bd3961fff..d7bfc911bf6 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -112,14 +115,14 @@ interface Ethernet7 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -129,6 +132,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -148,19 +154,19 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group OVERLAY-PEERS - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group OVERLAY-PEERS - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group OVERLAY-PEERS - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group OVERLAY-PEERS - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group OVERLAY-PEERS - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group OVERLAY-PEERS - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group OVERLAY-PEERS - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS activate @@ -169,7 +175,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0001.00 + net 49.0001.1921.6825.5001.00 is-type level-2 router-id ipv4 192.168.255.1 log-adjacency-changes @@ -178,11 +184,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE2.cfg index b4f125e3cd5..8e5938c8d4e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE2 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -112,14 +115,14 @@ interface Ethernet7 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -129,8 +132,11 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0002.00 + net 49.0001.1921.6825.5002.00 is-type level-2 router-id ipv4 192.168.255.2 log-adjacency-changes @@ -139,11 +145,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE3.cfg index e32e1aecc34..ea4f689088f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE3 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -112,14 +115,14 @@ interface Ethernet7 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -129,8 +132,11 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0003.00 + net 49.0001.1921.6825.5003.00 is-type level-2 router-id ipv4 192.168.255.3 log-adjacency-changes @@ -139,11 +145,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE4.cfg index adcb294d45a..d6a7c38dec5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SPINE4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE4 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -112,14 +115,14 @@ interface Ethernet7 isis network point-to-point ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -129,6 +132,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -148,19 +154,19 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group OVERLAY-PEERS - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group OVERLAY-PEERS - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group OVERLAY-PEERS - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group OVERLAY-PEERS - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group OVERLAY-PEERS - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group OVERLAY-PEERS - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group OVERLAY-PEERS - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS activate @@ -169,7 +175,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0000.0004.00 + net 49.0001.1921.6825.5004.00 is-type level-2 router-id ipv4 192.168.255.4 log-adjacency-changes @@ -178,11 +184,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3A.cfg index 49e1176e9e6..9f1fd5e0629 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,39 +26,29 @@ hostname DC1-SVC3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -98,12 +100,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -118,27 +120,27 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -171,6 +173,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -196,9 +201,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -209,7 +214,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0004.00 + net 49.0001.1921.6825.5008.00 is-type level-2 router-id ipv4 192.168.255.8 log-adjacency-changes @@ -218,11 +223,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3B.cfg index 89984978e68..2bfe46c1338 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/configs/DC1-SVC3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -disableaaa -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,39 +26,29 @@ hostname DC1-SVC3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan none switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -98,12 +100,12 @@ interface Ethernet4 isis network point-to-point ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -118,27 +120,27 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 isis enable EVPN_UNDERLAY isis passive ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 isis enable EVPN_UNDERLAY isis passive ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -171,6 +173,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-EVPN-SOO-IN deny 10 match extcommunity ECL-EVPN-SOO ! @@ -196,9 +201,9 @@ router bgp 65000 neighbor OVERLAY-PEERS send-community neighbor OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group OVERLAY-PEERS - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.4 peer group OVERLAY-PEERS - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn neighbor OVERLAY-PEERS route-map RM-EVPN-SOO-IN in @@ -209,7 +214,7 @@ router bgp 65000 no neighbor OVERLAY-PEERS activate ! router isis EVPN_UNDERLAY - net 49.0001.0001.0001.0005.00 + net 49.0001.1921.6825.5009.00 is-type level-2 router-id ipv4 192.168.255.9 log-adjacency-changes @@ -218,11 +223,4 @@ router isis EVPN_UNDERLAY maximum-paths 4 ! ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1A.yml index 690e18c17c3..aeae2453c64 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1A.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -108,17 +114,17 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.10/31 @@ -127,27 +133,27 @@ vlan_interfaces: isis_metric: 50 isis_network_point_to_point: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.10/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1B_Po5 - type: switched + description: MLAG_DC1-BL1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -156,8 +162,7 @@ ethernet_interfaces: peer: DC1-BL1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -169,7 +174,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.41/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -183,7 +189,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.43/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -197,7 +204,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.45/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -211,7 +219,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.47/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -223,7 +232,8 @@ ethernet_interfaces: peer_interface: Ethernet8 peer_type: other description: P2P_LINK_TO_ROUTERX_Ethernet8 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 100.64.0.0/31 @@ -242,13 +252,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 isis_enable: EVPN_UNDERLAY @@ -256,7 +266,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0006.00 + net: 49.0001.1921.6825.5010.00 router_id: 192.168.255.10 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1B.yml index c5930fadd40..713239f13ed 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-BL1B.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -108,17 +114,17 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.11/31 @@ -127,27 +133,27 @@ vlan_interfaces: isis_metric: 50 isis_network_point_to_point: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.11/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1A_Po5 - type: switched + description: MLAG_DC1-BL1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -156,8 +162,7 @@ ethernet_interfaces: peer: DC1-BL1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -169,7 +174,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.49/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -183,7 +189,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.51/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -197,7 +204,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.53/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -211,7 +219,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.55/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -227,13 +236,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 isis_enable: EVPN_UNDERLAY @@ -241,7 +250,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0007.00 + net: 49.0001.1921.6825.5011.00 router_id: 192.168.255.11 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF1A.yml index 0764d5ba76c..c8d68f7dcc6 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -44,7 +50,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -69,7 +75,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -79,17 +84,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none ip_igmp_snooping: globally_enabled: true metadata: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2A.yml index 0ae64d994f4..eec04cd6e02 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -66,38 +72,41 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.16/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -106,8 +115,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -118,7 +126,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -128,7 +135,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2B.yml index e17e4fd0ebe..2cae6a5e6a8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -66,38 +72,41 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.17/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -106,8 +115,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -118,7 +126,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -128,7 +135,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF1A.yml index e622c902c66..e0e94199817 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF1A.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -86,7 +92,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -112,7 +118,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -126,7 +133,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -140,7 +148,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -154,7 +163,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -163,7 +173,7 @@ ethernet_interfaces: isis_circuit_type: level-2 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 isis_enable: EVPN_UNDERLAY @@ -171,7 +181,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0001.00 + net: 49.0001.1921.6825.5005.00 router_id: 192.168.255.5 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2A.yml index 05325de2ffb..edd77f489cd 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2A.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -108,17 +114,17 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.2/31 @@ -127,34 +133,36 @@ vlan_interfaces: isis_metric: 50 isis_network_point_to_point: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.2/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2B_Po5 - type: switched + description: MLAG_DC1-LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -163,8 +171,7 @@ ethernet_interfaces: peer: DC1-LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -176,7 +183,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.9/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -190,7 +198,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.11/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -204,7 +213,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.13/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -218,7 +228,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -231,7 +242,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -244,13 +254,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback10 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 isis_enable: EVPN_UNDERLAY @@ -258,7 +268,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0002.00 + net: 49.0001.1921.6825.5006.00 router_id: 192.168.255.6 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2B.yml index a846f9090bb..f74869ce19d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-LEAF2B.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -108,17 +114,17 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.3/31 @@ -127,34 +133,36 @@ vlan_interfaces: isis_metric: 50 isis_network_point_to_point: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.3/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2A_Po5 - type: switched + description: MLAG_DC1-LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -163,8 +171,7 @@ ethernet_interfaces: peer: DC1-LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -176,7 +183,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.17/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -190,7 +198,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.19/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -204,7 +213,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -218,7 +228,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -231,7 +242,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -244,13 +254,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback10 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 isis_enable: EVPN_UNDERLAY @@ -258,7 +268,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0003.00 + net: 49.0001.1921.6825.5007.00 router_id: 192.168.255.7 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE1.yml index 0262cc61219..c839cc6a205 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE1.yml @@ -36,31 +36,31 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 - ip_address: 192.168.255.11 peer_group: OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 - ip_address: 192.168.255.5 peer_group: OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 - ip_address: 192.168.255.6 peer_group: OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 - ip_address: 192.168.255.7 peer_group: OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 - ip_address: 192.168.255.8 peer_group: OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 - ip_address: 192.168.255.9 peer_group: OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -82,6 +82,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -103,7 +109,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -129,7 +135,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -143,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.8/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -157,7 +165,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.16/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -171,7 +180,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.24/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -185,7 +195,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.32/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -199,7 +210,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.40/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -213,7 +225,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.48/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -222,7 +235,7 @@ ethernet_interfaces: isis_circuit_type: level-2 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 isis_enable: EVPN_UNDERLAY @@ -230,7 +243,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0000.0001.00 + net: 49.0001.1921.6825.5001.00 router_id: 192.168.255.1 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE2.yml index 9da77aa27d7..c210e7d58e3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE2.yml @@ -21,6 +21,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -42,7 +48,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -68,7 +74,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -82,7 +89,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.10/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -96,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.18/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -110,7 +119,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.26/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -124,7 +134,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.34/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -138,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.42/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -152,7 +164,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.50/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -161,7 +174,7 @@ ethernet_interfaces: isis_circuit_type: level-2 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 isis_enable: EVPN_UNDERLAY @@ -169,7 +182,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0000.0002.00 + net: 49.0001.1921.6825.5002.00 router_id: 192.168.255.2 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE3.yml index 1a5b8e031a7..ee2e37cbb45 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE3.yml @@ -21,6 +21,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -42,7 +48,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -68,7 +74,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -82,7 +89,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.12/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -96,7 +104,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -110,7 +119,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.28/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -124,7 +134,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.36/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -138,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.44/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -152,7 +164,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.52/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -161,7 +174,7 @@ ethernet_interfaces: isis_circuit_type: level-2 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 isis_enable: EVPN_UNDERLAY @@ -169,7 +182,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0000.0003.00 + net: 49.0001.1921.6825.5003.00 router_id: 192.168.255.3 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE4.yml index 30bde9038a2..e029a4173b1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SPINE4.yml @@ -36,31 +36,31 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 - ip_address: 192.168.255.11 peer_group: OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 - ip_address: 192.168.255.5 peer_group: OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 - ip_address: 192.168.255.6 peer_group: OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 - ip_address: 192.168.255.7 peer_group: OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 - ip_address: 192.168.255.8 peer_group: OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 - ip_address: 192.168.255.9 peer_group: OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -82,6 +82,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -103,7 +109,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -129,7 +135,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -143,7 +150,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.14/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -157,7 +165,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -171,7 +180,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.30/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -185,7 +195,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.38/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -199,7 +210,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.46/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -213,7 +225,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.54/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -222,7 +235,7 @@ ethernet_interfaces: isis_circuit_type: level-2 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 isis_enable: EVPN_UNDERLAY @@ -230,7 +243,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0000.0004.00 + net: 49.0001.1921.6825.5004.00 router_id: 192.168.255.4 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3A.yml index ecd187ebd52..bf47a47b605 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3A.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -108,12 +114,12 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -124,27 +130,29 @@ vlan_interfaces: isis_network_point_to_point: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3B_Po5 - type: switched + description: MLAG_DC1-SVC3B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet5 shutdown: false channel_group: id: 5 @@ -153,8 +161,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet6 shutdown: false channel_group: id: 5 @@ -166,7 +173,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.25/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -180,7 +188,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.27/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -194,7 +203,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.29/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -208,7 +218,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.31/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -221,7 +232,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -231,7 +241,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -244,13 +253,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 isis_enable: EVPN_UNDERLAY @@ -258,7 +267,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0004.00 + net: 49.0001.1921.6825.5008.00 router_id: 192.168.255.8 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3B.yml index c18710ac0aa..1e00d2cc257 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_isis_overlay_ibgp/intended/structured_configs/DC1-SVC3B.yml @@ -36,11 +36,11 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 - ip_address: 192.168.255.4 peer_group: OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 static_routes: - vrf: MGMT destination_address_prefix: 0.0.0.0/0 @@ -62,6 +62,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -87,7 +93,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -108,12 +114,12 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -124,27 +130,29 @@ vlan_interfaces: isis_network_point_to_point: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3A_Po5 - type: switched + description: MLAG_DC1-SVC3A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: none shutdown: false - mode: trunk - vlans: none mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-SVC3A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet5 shutdown: false channel_group: id: 5 @@ -153,8 +161,7 @@ ethernet_interfaces: peer: DC1-SVC3A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet6 shutdown: false channel_group: id: 5 @@ -166,7 +173,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.33/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -180,7 +188,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.35/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -194,7 +203,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.37/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -208,7 +218,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.39/31 isis_enable: EVPN_UNDERLAY isis_bfd: true @@ -221,7 +232,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -231,7 +241,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -244,13 +253,13 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.9/32 isis_enable: EVPN_UNDERLAY isis_passive: true - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 isis_enable: EVPN_UNDERLAY @@ -258,7 +267,7 @@ loopback_interfaces: router_isis: instance: EVPN_UNDERLAY log_adjacency_changes: true - net: 49.0001.0001.0001.0005.00 + net: 49.0001.1921.6825.5009.00 router_id: 192.168.255.9 is_type: level-2 address_family_ipv4: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md index 7cdece966fa..575aa31df72 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -55,20 +56,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -159,6 +160,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -247,19 +252,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -273,19 +278,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | 172.31.255.41/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | routed | - | 172.31.255.43/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | routed | - | 172.31.255.45/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | routed | - | 172.31.255.47/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | 172.31.255.41/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | - | 172.31.255.43/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | - | 172.31.255.45/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | - | 172.31.255.47/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -336,12 +341,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -352,21 +357,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -377,28 +381,28 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.10/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.10/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ip ospf area 0.0.0.0 @@ -410,8 +414,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -425,7 +429,7 @@ interface Loopback1 ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 @@ -433,7 +437,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -634,16 +638,16 @@ router bgp 65104 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md index 6a7daf2e380..1c9713b9304 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -55,20 +56,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -159,6 +160,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -247,19 +252,19 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -273,19 +278,19 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-BL1A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-BL1A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | routed | - | 172.31.255.49/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | routed | - | 172.31.255.51/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | routed | - | 172.31.255.53/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | routed | - | 172.31.255.55/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | - | 172.31.255.49/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | - | 172.31.255.51/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | - | 172.31.255.53/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | - | 172.31.255.55/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -336,12 +341,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -352,21 +357,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-BL1A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-BL1A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -377,28 +381,28 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.11/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.11/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ip ospf area 0.0.0.0 @@ -410,8 +414,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -425,7 +429,7 @@ interface Loopback1 ```eos ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 @@ -433,7 +437,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -634,16 +638,16 @@ router bgp 65104 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md index fa026ad8edd..05dd8c48a7e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -148,6 +149,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -254,9 +259,9 @@ interface Ethernet2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_LEAF2_Po7 | switched | trunk | 210 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_LEAF2_Po7 | trunk | 210 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -265,9 +270,9 @@ interface Ethernet2 interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md index 5716d63962c..7df60b12afb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -241,7 +246,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -251,7 +256,7 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -267,8 +272,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet7 | *trunk | *210 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet7 | *trunk | *210 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -287,12 +292,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -303,10 +308,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 210 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 210 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -315,17 +320,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -334,7 +339,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -347,7 +352,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md index ea7869d6180..2e989c64040 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -241,7 +246,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -251,7 +256,7 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -267,8 +272,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet8 | *trunk | *210 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet8 | *trunk | *210 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -287,12 +292,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -303,10 +308,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 210 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 210 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -315,17 +320,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -334,7 +339,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -347,7 +352,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md index c8670b5c3a0..12a9159818d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -47,20 +48,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -151,6 +152,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -220,12 +225,12 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | 172.31.255.1/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | 172.31.255.3/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | routed | - | 172.31.255.5/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | routed | - | 172.31.255.7/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | 172.31.255.1/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | 172.31.255.3/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | - | 172.31.255.5/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | - | 172.31.255.7/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -284,28 +289,28 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.5/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ip ospf area 0.0.0.0 @@ -501,16 +506,16 @@ router bgp 65101 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md index fce6069e3da..8ad4541bea8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,9 +255,9 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,15 +267,15 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -284,20 +289,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet1 | *trunk | *210 | *- | *- | 7 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | 172.31.255.9/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | 172.31.255.11/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | routed | - | 172.31.255.13/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | routed | - | 172.31.255.15/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | 172.31.255.9/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | 172.31.255.11/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | - | 172.31.255.13/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | - | 172.31.255.15/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -348,12 +353,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -369,29 +374,28 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 210 | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 210 | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ``` @@ -403,28 +407,28 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.6/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ip ospf area 0.0.0.0 @@ -437,9 +441,9 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -461,14 +465,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 @@ -476,7 +480,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -725,16 +729,16 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.6:20 @@ -757,6 +761,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md index 79ab08771e2..30d72778d6d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,9 +255,9 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -262,15 +267,15 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -284,20 +289,20 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet2 | *trunk | *210 | *- | *- | 7 | *Inherited from Port-Channel Interface ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | 172.31.255.17/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | 172.31.255.19/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | routed | - | 172.31.255.21/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | routed | - | 172.31.255.23/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | 172.31.255.17/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | 172.31.255.19/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | - | 172.31.255.21/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | - | 172.31.255.23/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -348,12 +353,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -369,29 +374,28 @@ interface Ethernet7 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 210 | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 210 | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ``` @@ -403,28 +407,28 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.7/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.7/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ip ospf area 0.0.0.0 @@ -437,9 +441,9 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -461,14 +465,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 @@ -476,7 +480,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -725,16 +729,16 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.7:20 @@ -757,6 +761,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md index 584bd8934ab..f28ceec971b 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | 172.31.255.0/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | 172.31.255.8/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | 172.31.255.16/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | routed | - | 172.31.255.24/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | routed | - | 172.31.255.32/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | routed | - | 172.31.255.40/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | routed | - | 172.31.255.48/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | 172.31.255.0/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | 172.31.255.8/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | 172.31.255.16/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | - | 172.31.255.24/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | - | 172.31.255.32/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | - | 172.31.255.40/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | - | 172.31.255.48/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -309,20 +314,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ip ospf area 0.0.0.0 @@ -490,25 +495,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE2.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE2.md index de0b92d3916..19f6c1ed542 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | 172.31.255.2/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | 172.31.255.10/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | 172.31.255.18/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | routed | - | 172.31.255.26/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | routed | - | 172.31.255.34/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | routed | - | 172.31.255.42/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | routed | - | 172.31.255.50/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | 172.31.255.2/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | 172.31.255.10/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | 172.31.255.18/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | - | 172.31.255.26/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | - | 172.31.255.34/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | - | 172.31.255.42/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | - | 172.31.255.50/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -309,20 +314,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ip ospf area 0.0.0.0 @@ -490,25 +495,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE3.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE3.md index bc1a518b631..7dd1e7cfe61 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE3.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | routed | - | 172.31.255.4/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | routed | - | 172.31.255.12/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | routed | - | 172.31.255.20/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | routed | - | 172.31.255.28/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | routed | - | 172.31.255.36/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | routed | - | 172.31.255.44/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | routed | - | 172.31.255.52/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | - | 172.31.255.4/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | - | 172.31.255.12/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | - | 172.31.255.20/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | - | 172.31.255.28/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | - | 172.31.255.36/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | - | 172.31.255.44/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | - | 172.31.255.52/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -309,20 +314,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ip ospf area 0.0.0.0 @@ -490,25 +495,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE4.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE4.md index 055808a31c2..cfbf6cc39f3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE4.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -43,20 +44,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -147,6 +148,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -209,15 +214,15 @@ vlan internal order ascending range 1006 1199 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | routed | - | 172.31.255.6/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | routed | - | 172.31.255.14/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | routed | - | 172.31.255.22/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | routed | - | 172.31.255.30/31 | default | 1500 | False | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | routed | - | 172.31.255.38/31 | default | 1500 | False | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | routed | - | 172.31.255.46/31 | default | 1500 | False | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | routed | - | 172.31.255.54/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | - | 172.31.255.6/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | - | 172.31.255.14/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | - | 172.31.255.22/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | - | 172.31.255.30/31 | default | 1500 | False | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | - | 172.31.255.38/31 | default | 1500 | False | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | - | 172.31.255.46/31 | default | 1500 | False | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | - | 172.31.255.54/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -309,20 +314,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ip ospf area 0.0.0.0 @@ -490,25 +495,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3A.md index af147aee596..e40dd263fe8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,8 +255,8 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -261,11 +266,11 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -279,8 +284,8 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet1 | *trunk | *210 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet1 | *trunk | *210 | *- | *- | 7 | @@ -288,12 +293,12 @@ vlan 4094 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | 172.31.255.25/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | 172.31.255.27/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | routed | - | 172.31.255.29/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | routed | - | 172.31.255.31/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | 172.31.255.25/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | 172.31.255.27/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | - | 172.31.255.29/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | - | 172.31.255.31/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -344,12 +349,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -370,29 +375,28 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 210 | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 210 | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ``` @@ -404,28 +408,28 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.8/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.8/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ip ospf area 0.0.0.0 @@ -438,8 +442,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -460,14 +464,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.6/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -718,16 +722,16 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.8:20 @@ -750,6 +754,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.252.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3019 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3B.md index d9d7056ae76..dc5fc7b5d43 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SVC3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -57,20 +58,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -161,6 +162,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -250,8 +255,8 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | | 210 | Tenant_B_OP_Zone_1 | - | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -261,11 +266,11 @@ vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -279,8 +284,8 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet2 | *trunk | *210 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet2 | *trunk | *210 | *- | *- | 7 | @@ -288,12 +293,12 @@ vlan 4094 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | routed | - | 172.31.255.33/31 | default | 1500 | False | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | routed | - | 172.31.255.35/31 | default | 1500 | False | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | routed | - | 172.31.255.37/31 | default | 1500 | False | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | routed | - | 172.31.255.39/31 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | - | 172.31.255.33/31 | default | 1500 | False | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | - | 172.31.255.35/31 | default | 1500 | False | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | - | 172.31.255.37/31 | default | 1500 | False | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | - | 172.31.255.39/31 | default | 1500 | False | - | - | #### Ethernet Interfaces Device Configuration @@ -344,12 +349,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -370,29 +375,28 @@ interface Ethernet8 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 210 | - | - | - | - | 7 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 210 | - | - | - | - | 7 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ``` @@ -404,28 +408,28 @@ interface Port-Channel7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.9/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.9/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ip ospf area 0.0.0.0 @@ -438,8 +442,8 @@ interface Loopback1 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | | Vlan210 | Tenant_B_OP_Zone_1 | Tenant_B_OP_Zone | - | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -460,14 +464,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.7/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -718,16 +722,16 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.9:20 @@ -750,6 +754,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.252.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3019 redistribute connected ``` diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md index a8c86d3abd9..79768225eb9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md @@ -152,7 +152,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 192.168.254.0/24 | 256 | 7 | 2.74 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-p2p-links.csv b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-p2p-links.csv deleted file mode 100644 index 77164dfae44..00000000000 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-p2p-links.csv +++ /dev/null @@ -1,29 +0,0 @@ -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address -l3leaf,DC1-BL1A,Ethernet1,172.31.255.41/31,spine,DC1-SPINE1,Ethernet6,172.31.255.40/31 -l3leaf,DC1-BL1A,Ethernet2,172.31.255.43/31,spine,DC1-SPINE2,Ethernet6,172.31.255.42/31 -l3leaf,DC1-BL1A,Ethernet3,172.31.255.45/31,spine,DC1-SPINE3,Ethernet6,172.31.255.44/31 -l3leaf,DC1-BL1A,Ethernet4,172.31.255.47/31,spine,DC1-SPINE4,Ethernet6,172.31.255.46/31 -l3leaf,DC1-BL1B,Ethernet1,172.31.255.49/31,spine,DC1-SPINE1,Ethernet7,172.31.255.48/31 -l3leaf,DC1-BL1B,Ethernet2,172.31.255.51/31,spine,DC1-SPINE2,Ethernet7,172.31.255.50/31 -l3leaf,DC1-BL1B,Ethernet3,172.31.255.53/31,spine,DC1-SPINE3,Ethernet7,172.31.255.52/31 -l3leaf,DC1-BL1B,Ethernet4,172.31.255.55/31,spine,DC1-SPINE4,Ethernet7,172.31.255.54/31 -l3leaf,DC1-LEAF1A,Ethernet1,172.31.255.1/31,spine,DC1-SPINE1,Ethernet1,172.31.255.0/31 -l3leaf,DC1-LEAF1A,Ethernet2,172.31.255.3/31,spine,DC1-SPINE2,Ethernet1,172.31.255.2/31 -l3leaf,DC1-LEAF1A,Ethernet3,172.31.255.5/31,spine,DC1-SPINE3,Ethernet1,172.31.255.4/31 -l3leaf,DC1-LEAF1A,Ethernet4,172.31.255.7/31,spine,DC1-SPINE4,Ethernet1,172.31.255.6/31 -l3leaf,DC1-LEAF2A,Ethernet1,172.31.255.9/31,spine,DC1-SPINE1,Ethernet2,172.31.255.8/31 -l3leaf,DC1-LEAF2A,Ethernet2,172.31.255.11/31,spine,DC1-SPINE2,Ethernet2,172.31.255.10/31 -l3leaf,DC1-LEAF2A,Ethernet3,172.31.255.13/31,spine,DC1-SPINE3,Ethernet2,172.31.255.12/31 -l3leaf,DC1-LEAF2A,Ethernet4,172.31.255.15/31,spine,DC1-SPINE4,Ethernet2,172.31.255.14/31 -l3leaf,DC1-LEAF2B,Ethernet1,172.31.255.17/31,spine,DC1-SPINE1,Ethernet3,172.31.255.16/31 -l3leaf,DC1-LEAF2B,Ethernet2,172.31.255.19/31,spine,DC1-SPINE2,Ethernet3,172.31.255.18/31 -l3leaf,DC1-LEAF2B,Ethernet3,172.31.255.21/31,spine,DC1-SPINE3,Ethernet3,172.31.255.20/31 -l3leaf,DC1-LEAF2B,Ethernet4,172.31.255.23/31,spine,DC1-SPINE4,Ethernet3,172.31.255.22/31 -spine,DC1-SPINE1,Ethernet4,172.31.255.24/31,l3leaf,DC1-SVC3A,Ethernet1,172.31.255.25/31 -spine,DC1-SPINE1,Ethernet5,172.31.255.32/31,l3leaf,DC1-SVC3B,Ethernet1,172.31.255.33/31 -spine,DC1-SPINE2,Ethernet4,172.31.255.26/31,l3leaf,DC1-SVC3A,Ethernet2,172.31.255.27/31 -spine,DC1-SPINE2,Ethernet5,172.31.255.34/31,l3leaf,DC1-SVC3B,Ethernet2,172.31.255.35/31 -spine,DC1-SPINE3,Ethernet4,172.31.255.28/31,l3leaf,DC1-SVC3A,Ethernet3,172.31.255.29/31 -spine,DC1-SPINE3,Ethernet5,172.31.255.36/31,l3leaf,DC1-SVC3B,Ethernet3,172.31.255.37/31 -spine,DC1-SPINE4,Ethernet4,172.31.255.30/31,l3leaf,DC1-SVC3A,Ethernet4,172.31.255.31/31 -spine,DC1-SPINE4,Ethernet5,172.31.255.38/31,l3leaf,DC1-SVC3B,Ethernet4,172.31.255.39/31 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 23aa4b6dbd3..00000000000 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,85 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -l3leaf,DC1-BL1A,Ethernet1,spine,DC1-SPINE1,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet2,spine,DC1-SPINE2,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet3,spine,DC1-SPINE3,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet4,spine,DC1-SPINE4,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet5,mlag_peer,DC1-BL1B,Ethernet5,True -l3leaf,DC1-BL1A,Ethernet6,mlag_peer,DC1-BL1B,Ethernet6,True -l3leaf,DC1-BL1B,Ethernet1,spine,DC1-SPINE1,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet2,spine,DC1-SPINE2,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet3,spine,DC1-SPINE3,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet4,spine,DC1-SPINE4,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet5,mlag_peer,DC1-BL1A,Ethernet5,True -l3leaf,DC1-BL1B,Ethernet6,mlag_peer,DC1-BL1A,Ethernet6,True -l2leaf,DC1-L2LEAF1A,Ethernet1,l3leaf,DC1-LEAF2A,Ethernet7,True -l2leaf,DC1-L2LEAF1A,Ethernet2,l3leaf,DC1-LEAF2B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet1,l3leaf,DC1-SVC3A,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet2,l3leaf,DC1-SVC3B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet3,mlag_peer,DC1-L2LEAF2B,Ethernet3,True -l2leaf,DC1-L2LEAF2A,Ethernet4,mlag_peer,DC1-L2LEAF2B,Ethernet4,True -l2leaf,DC1-L2LEAF2B,Ethernet1,l3leaf,DC1-SVC3A,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet2,l3leaf,DC1-SVC3B,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet3,mlag_peer,DC1-L2LEAF2A,Ethernet3,True -l2leaf,DC1-L2LEAF2B,Ethernet4,mlag_peer,DC1-L2LEAF2A,Ethernet4,True -l3leaf,DC1-LEAF1A,Ethernet1,spine,DC1-SPINE1,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet2,spine,DC1-SPINE2,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet3,spine,DC1-SPINE3,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet4,spine,DC1-SPINE4,Ethernet1,True -l3leaf,DC1-LEAF2A,Ethernet1,spine,DC1-SPINE1,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet2,spine,DC1-SPINE2,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet3,spine,DC1-SPINE3,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet4,spine,DC1-SPINE4,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet5,mlag_peer,DC1-LEAF2B,Ethernet5,True -l3leaf,DC1-LEAF2A,Ethernet6,mlag_peer,DC1-LEAF2B,Ethernet6,True -l3leaf,DC1-LEAF2A,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet1,True -l3leaf,DC1-LEAF2B,Ethernet1,spine,DC1-SPINE1,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet2,spine,DC1-SPINE2,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet3,spine,DC1-SPINE3,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet4,spine,DC1-SPINE4,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet5,mlag_peer,DC1-LEAF2A,Ethernet5,True -l3leaf,DC1-LEAF2B,Ethernet6,mlag_peer,DC1-LEAF2A,Ethernet6,True -l3leaf,DC1-LEAF2B,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet2,True -spine,DC1-SPINE1,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet1,True -spine,DC1-SPINE1,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet1,True -spine,DC1-SPINE1,Ethernet4,l3leaf,DC1-SVC3A,Ethernet1,True -spine,DC1-SPINE1,Ethernet5,l3leaf,DC1-SVC3B,Ethernet1,True -spine,DC1-SPINE1,Ethernet6,l3leaf,DC1-BL1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet7,l3leaf,DC1-BL1B,Ethernet1,True -spine,DC1-SPINE2,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet2,True -spine,DC1-SPINE2,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet2,True -spine,DC1-SPINE2,Ethernet4,l3leaf,DC1-SVC3A,Ethernet2,True -spine,DC1-SPINE2,Ethernet5,l3leaf,DC1-SVC3B,Ethernet2,True -spine,DC1-SPINE2,Ethernet6,l3leaf,DC1-BL1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet7,l3leaf,DC1-BL1B,Ethernet2,True -spine,DC1-SPINE3,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet3,True -spine,DC1-SPINE3,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet3,True -spine,DC1-SPINE3,Ethernet4,l3leaf,DC1-SVC3A,Ethernet3,True -spine,DC1-SPINE3,Ethernet5,l3leaf,DC1-SVC3B,Ethernet3,True -spine,DC1-SPINE3,Ethernet6,l3leaf,DC1-BL1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet7,l3leaf,DC1-BL1B,Ethernet3,True -spine,DC1-SPINE4,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet4,True -spine,DC1-SPINE4,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet4,True -spine,DC1-SPINE4,Ethernet4,l3leaf,DC1-SVC3A,Ethernet4,True -spine,DC1-SPINE4,Ethernet5,l3leaf,DC1-SVC3B,Ethernet4,True -spine,DC1-SPINE4,Ethernet6,l3leaf,DC1-BL1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet7,l3leaf,DC1-BL1B,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet1,spine,DC1-SPINE1,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet2,spine,DC1-SPINE2,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet3,spine,DC1-SPINE3,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet4,spine,DC1-SPINE4,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet5,mlag_peer,DC1-SVC3B,Ethernet5,True -l3leaf,DC1-SVC3A,Ethernet6,mlag_peer,DC1-SVC3B,Ethernet6,True -l3leaf,DC1-SVC3A,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet1,True -l3leaf,DC1-SVC3B,Ethernet1,spine,DC1-SPINE1,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet2,spine,DC1-SPINE2,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet3,spine,DC1-SPINE3,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet4,spine,DC1-SPINE4,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet5,mlag_peer,DC1-SVC3A,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet6,mlag_peer,DC1-SVC3A,Ethernet6,True -l3leaf,DC1-SVC3B,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet2,True -l3leaf,DC1-SVC3B,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet2,True diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1A.cfg index 227a1822b62..b98f65a22a7 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,36 +26,26 @@ hostname DC1-BL1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1B_Po5 + description MLAG_DC1-BL1B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet6 @@ -90,35 +92,35 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-BL1B_Ethernet5 + description MLAG_DC1-BL1B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1B_Ethernet6 + description MLAG_DC1-BL1B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.10/31 @@ -126,7 +128,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -153,6 +155,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -171,16 +176,16 @@ router bgp 65104 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 @@ -200,11 +205,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1B.cfg index 974e6f50437..3b677f8d525 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-BL1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,36 +26,26 @@ hostname DC1-BL1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT ! interface Port-Channel5 - description MLAG_PEER_DC1-BL1A_Po5 + description MLAG_DC1-BL1A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE1_Ethernet7 @@ -90,35 +92,35 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-BL1A_Ethernet5 + description MLAG_DC1-BL1A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-BL1A_Ethernet6 + description MLAG_DC1-BL1A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.11/31 @@ -126,7 +128,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -153,6 +155,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -171,16 +176,16 @@ router bgp 65104 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 @@ -200,11 +205,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg index 16d74af29f1..9b05101f998 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,18 +26,9 @@ hostname DC1-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! @@ -34,9 +37,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet7 @@ -49,7 +52,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -57,11 +60,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg index f65c9549659..b024e078797 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,24 +26,15 @@ hostname DC1-L2LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -39,17 +42,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet7 @@ -62,23 +65,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -95,11 +98,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg index de1afdb8b43..ea96a326fa3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,24 +26,15 @@ hostname DC1-L2LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -39,17 +42,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet8 @@ -62,23 +65,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -95,11 +98,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg index e9b9340a889..f902536701e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,18 +26,9 @@ hostname DC1-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -73,19 +76,19 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -102,6 +105,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -120,16 +126,16 @@ router bgp 65101 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! address-family evpn host-flap detection window 180 threshold 30 @@ -148,11 +154,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg index 6d68a2d001d..e21c8c59f22 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,32 +26,23 @@ hostname DC1-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -47,19 +50,18 @@ vrf instance MGMT vrf instance Tenant_B_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -107,12 +109,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -122,19 +124,19 @@ interface Ethernet7 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -146,14 +148,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.2/31 @@ -161,7 +163,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -191,6 +193,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-MLAG-PEER-IN permit 10 description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing set origin incomplete @@ -221,16 +226,16 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.6:20 @@ -253,6 +258,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ! router ospf 101 @@ -266,11 +272,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg index a36e940c7ca..12abee9f2fe 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,32 +26,23 @@ hostname DC1-LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -47,19 +50,18 @@ vrf instance MGMT vrf instance Tenant_B_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -107,12 +109,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -122,19 +124,19 @@ interface Ethernet7 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -146,14 +148,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ip address 10.255.251.3/31 @@ -161,7 +163,7 @@ interface Vlan4093 ip ospf area 0.0.0.0 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -191,6 +193,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-MLAG-PEER-IN permit 10 description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing set origin incomplete @@ -221,16 +226,16 @@ router bgp 65102 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.7:20 @@ -253,6 +258,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ! router ospf 101 @@ -266,11 +272,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE1.cfg index c3b76348d6e..fcd71578003 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -105,13 +108,13 @@ interface Ethernet7 ip ospf message-digest-key 1 sha256 7 kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -121,6 +124,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -140,25 +146,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate @@ -179,11 +185,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE2.cfg index a7de9d9e746..06a9d885581 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE2 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -105,13 +108,13 @@ interface Ethernet7 ip ospf message-digest-key 1 sha256 7 kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -121,6 +124,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -140,25 +146,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate @@ -179,11 +185,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE3.cfg index c6626a402b2..e9833e81d79 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE3 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -105,13 +108,13 @@ interface Ethernet7 ip ospf message-digest-key 1 sha256 7 kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -121,6 +124,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -140,25 +146,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate @@ -179,11 +185,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE4.cfg index 0740395a892..5d2530425d9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SPINE4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE4 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -105,13 +108,13 @@ interface Ethernet7 ip ospf message-digest-key 1 sha256 7 kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -121,6 +124,9 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! router bfd multihop interval 1200 min-rx 1200 multiplier 3 ! @@ -140,25 +146,25 @@ router bgp 65001 neighbor EVPN-OVERLAY-PEERS maximum-routes 0 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65104 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 ! address-family evpn neighbor EVPN-OVERLAY-PEERS activate @@ -179,11 +185,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3A.cfg index 3c290759f98..ab9866e6ac1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,28 +26,19 @@ hostname DC1-SVC3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -43,19 +46,18 @@ vrf instance MGMT vrf instance Tenant_B_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -103,12 +105,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -123,19 +125,19 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -147,14 +149,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.6/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -186,6 +188,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-MLAG-PEER-IN permit 10 description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing set origin incomplete @@ -216,16 +221,16 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.8:20 @@ -248,6 +253,7 @@ router bgp 65103 router-id 192.168.255.8 update wait-install neighbor 10.255.252.7 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.252.7 description DC1-SVC3B_Vlan3019 redistribute connected ! router ospf 101 @@ -261,11 +267,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3B.cfg index dedf537df02..28341313025 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/configs/DC1-SVC3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,28 +26,19 @@ hostname DC1-SVC3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 4096 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 210 name Tenant_B_OP_Zone_1 ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -43,19 +46,18 @@ vrf instance MGMT vrf instance Tenant_B_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 210 switchport mode trunk + switchport mlag 7 ! interface Ethernet1 @@ -103,12 +105,12 @@ interface Ethernet4 ip ospf message-digest-key 1 sha256 7 QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -123,19 +125,19 @@ interface Ethernet8 channel-group 7 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ip ospf area 0.0.0.0 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ip ospf area 0.0.0.0 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -147,14 +149,14 @@ interface Vlan210 ip address virtual 10.2.10.1/24 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.252.7/31 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -186,6 +188,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-MLAG-PEER-IN permit 10 description Make routes learned over MLAG Peer-link less preferred on spines to ensure optimal routing set origin incomplete @@ -216,16 +221,16 @@ router bgp 65103 neighbor MLAG-IPv4-UNDERLAY-PEER route-map RM-MLAG-PEER-IN in neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 ! vlan-aware-bundle Tenant_B_OP_Zone rd 192.168.255.9:20 @@ -248,6 +253,7 @@ router bgp 65103 router-id 192.168.255.9 update wait-install neighbor 10.255.252.6 peer group MLAG-IPv4-UNDERLAY-PEER + neighbor 10.255.252.6 description DC1-SVC3A_Vlan3019 redistribute connected ! router ospf 101 @@ -261,11 +267,4 @@ router ospf 101 bfd default max-lsa 12000 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml index 0c58d0304dc..fbf0e398313 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml @@ -38,22 +38,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' static_routes: - vrf: MGMT @@ -76,6 +76,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -101,7 +107,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -122,44 +128,44 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.10/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.10/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1B_Po5 - type: switched + description: MLAG_DC1-BL1B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet5 shutdown: false channel_group: id: 5 @@ -168,8 +174,7 @@ ethernet_interfaces: peer: DC1-BL1B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1B_Ethernet6 shutdown: false channel_group: id: 5 @@ -181,7 +186,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.41/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -197,7 +203,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.43/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -213,7 +220,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.45/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -229,7 +237,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.47/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -247,12 +256,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml index 0b973f61e54..0156f84b725 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml @@ -38,22 +38,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' static_routes: - vrf: MGMT @@ -76,6 +76,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -101,7 +107,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -122,44 +128,44 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.11/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.11/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-BL1A_Po5 - type: switched + description: MLAG_DC1-BL1A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-BL1A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet5 shutdown: false channel_group: id: 5 @@ -168,8 +174,7 @@ ethernet_interfaces: peer: DC1-BL1A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-BL1A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-BL1A_Ethernet6 shutdown: false channel_group: id: 5 @@ -181,7 +186,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.49/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -197,7 +203,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.51/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -213,7 +220,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.53/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -229,7 +237,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.55/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -247,12 +256,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml index fc2059c49e9..9b84b17122a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -44,7 +50,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -69,7 +75,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -79,17 +84,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' vlans: - id: 210 name: Tenant_B_OP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml index 65e198e0c14..118a8ab2043 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 @@ -74,33 +80,36 @@ vlans: tenant: Tenant_A vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.16/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -109,8 +118,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -121,7 +129,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -131,7 +138,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml index 261122a052e..caa0c829f32 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 @@ -74,33 +80,36 @@ vlans: tenant: Tenant_A vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.17/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -109,8 +118,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -121,7 +129,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -131,7 +138,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml index b976ee5bfe3..dd6cd337caf 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml @@ -38,22 +38,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' static_routes: - vrf: MGMT @@ -76,6 +76,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -100,7 +106,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -126,7 +132,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.1/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -142,7 +149,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.3/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -158,7 +166,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.5/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -174,7 +183,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.7/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -185,12 +195,12 @@ ethernet_interfaces: key: QB0XEg/PJV6Y5HtvjDdiafrPx/g+JRKk loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml index 05a68b8de08..fce92d8310a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml @@ -49,26 +49,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_B_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:20 route_targets: import: @@ -79,11 +78,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2B_Vlan3019 updates: wait_install: true vlan_aware_bundles: @@ -116,6 +117,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -144,7 +151,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -165,32 +172,32 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 name: Tenant_B_OP_Zone_1 tenant: Tenant_A - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.2/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -207,33 +214,35 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2B_Po5 - type: switched + description: MLAG_DC1-LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -242,8 +251,7 @@ ethernet_interfaces: peer: DC1-LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -255,7 +263,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.9/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -271,7 +280,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.11/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -287,7 +297,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.13/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -303,7 +314,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.15/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -318,7 +330,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -331,12 +342,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml index ced6de268ec..8b0a85a1cae 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml @@ -49,26 +49,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_B_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:20 route_targets: import: @@ -79,11 +78,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-LEAF2A_Vlan3019 updates: wait_install: true vlan_aware_bundles: @@ -116,6 +117,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -144,7 +151,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -165,32 +172,32 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 name: Tenant_B_OP_Zone_1 tenant: Tenant_A - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ip_address: 10.255.251.3/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -207,33 +214,35 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2A_Po5 - type: switched + description: MLAG_DC1-LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -242,8 +251,7 @@ ethernet_interfaces: peer: DC1-LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -255,7 +263,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.17/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -271,7 +280,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.19/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -287,7 +297,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.21/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -303,7 +314,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.23/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -318,7 +330,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -331,12 +342,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml index f53f5123ed1..040494a6082 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml @@ -35,37 +35,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -109,7 +115,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -135,7 +141,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.0/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -151,7 +158,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.8/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -167,7 +175,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.16/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -183,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.24/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -199,7 +209,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.32/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -215,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.40/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -231,7 +243,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.48/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -242,7 +255,7 @@ ethernet_interfaces: key: kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml index 30c5aa2144b..b3157b69daa 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml @@ -35,37 +35,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -109,7 +115,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -135,7 +141,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.2/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -151,7 +158,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.10/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -167,7 +175,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.18/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -183,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.26/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -199,7 +209,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.34/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -215,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.42/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -231,7 +243,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.50/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -242,7 +255,7 @@ ethernet_interfaces: key: kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml index 85c456d908d..f36358a6ff5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml @@ -35,37 +35,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -109,7 +115,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -135,7 +141,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.4/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -151,7 +158,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.12/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -167,7 +175,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.20/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -183,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.28/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -199,7 +209,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.36/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -215,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.44/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -231,7 +243,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.52/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -242,7 +255,7 @@ ethernet_interfaces: key: kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml index eb78b9d1370..cddb0388ff6 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml @@ -35,37 +35,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65104' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -88,6 +88,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -109,7 +115,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -135,7 +141,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.6/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -151,7 +158,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.14/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -167,7 +175,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.22/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -183,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.30/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -199,7 +209,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.38/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -215,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.46/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -231,7 +243,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.54/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -242,7 +255,7 @@ ethernet_interfaces: key: kguPGHyy/wCN0mKibi4dLRL4PmsrU4UP loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml index cd3ce388881..09f55080dea 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml @@ -49,26 +49,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_B_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:20 route_targets: import: @@ -79,11 +78,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.7 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3B_Vlan3019 updates: wait_install: true vlan_aware_bundles: @@ -116,6 +117,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -144,7 +151,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -165,20 +172,20 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 name: Tenant_B_OP_Zone_1 tenant: Tenant_A - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -197,33 +204,35 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.252.6/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3B_Po5 - type: switched + description: MLAG_DC1-SVC3B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-SVC3B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet5 shutdown: false channel_group: id: 5 @@ -232,8 +241,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet6 shutdown: false channel_group: id: 5 @@ -245,7 +253,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.25/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -261,7 +270,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.27/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -277,7 +287,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.29/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -293,7 +304,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.31/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -308,7 +320,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -318,7 +329,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -331,12 +341,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml index 9b0219a9a92..414167a7b97 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_ospf_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml @@ -49,26 +49,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_B_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:20 route_targets: import: @@ -79,11 +78,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.252.6 peer_group: MLAG-IPv4-UNDERLAY-PEER + description: DC1-SVC3A_Vlan3019 updates: wait_install: true vlan_aware_bundles: @@ -116,6 +117,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -144,7 +151,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -165,20 +172,20 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 210 name: Tenant_B_OP_Zone_1 tenant: Tenant_A - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -197,33 +204,35 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.252.7/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3A_Po5 - type: switched + description: MLAG_DC1-SVC3A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: '210' shutdown: false - mode: trunk - vlans: '210' mlag: 7 ethernet_interfaces: - name: Ethernet5 peer: DC1-SVC3A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet5 shutdown: false channel_group: id: 5 @@ -232,8 +241,7 @@ ethernet_interfaces: peer: DC1-SVC3A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet6 shutdown: false channel_group: id: 5 @@ -245,7 +253,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.33/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -261,7 +270,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.35/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -277,7 +287,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.37/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -293,7 +304,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ip_address: 172.31.255.39/31 ospf_network_point_to_point: true ospf_area: 0.0.0.0 @@ -308,7 +320,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -318,7 +329,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -331,12 +341,12 @@ mlag_configuration: reload_delay_non_mlag: '330' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.9/32 ospf_area: 0.0.0.0 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 ospf_area: 0.0.0.0 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1A.md index 039b13d5745..39fa3f588cb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -59,20 +60,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.110/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -163,6 +164,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -268,21 +273,21 @@ vlan 350 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet11 | P2P_LINK_TO_outside-r1_other1 | routed | - | 10.23.23.1/30 | default | 1500 | False | - | - | -| Ethernet4000 | My test | routed | - | 10.1.2.3/12 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet11 | P2P_LINK_TO_outside-r1_other1 | - | 10.23.23.1/30 | default | 1500 | False | - | - | +| Ethernet4000 | My test | - | 10.1.2.3/12 | default | 1500 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet9 | P2P_LINK_TO_DC1-BL1B_Ethernet9 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet10 | P2P_LINK_TO_DC1-BL1B_Ethernet10 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet6 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet6 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet6 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet6 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet9 | P2P_LINK_TO_DC1-BL1B_Ethernet9 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet10 | P2P_LINK_TO_DC1-BL1B_Ethernet10 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -353,27 +358,27 @@ interface Ethernet4000 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.10/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.10/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.10/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.10/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ``` @@ -689,16 +694,16 @@ router bgp 65104 neighbor 10.23.23.2 description outside-r1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1B.md index f7610e1380e..add34229433 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-BL1B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.111/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -267,22 +272,22 @@ vlan 350 ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | -| Ethernet11 | P2P_LINK_TO_outside-r1_other2 | routed | - | 10.23.23.5/30 | default | 1500 | False | - | - | -| Ethernet4000 | My test | routed | - | 10.1.2.3/12 | default | 1500 | False | - | - | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Ethernet11 | P2P_LINK_TO_outside-r1_other2 | - | 10.23.23.5/30 | default | 1500 | False | - | - | +| Ethernet4000 | My test | - | 10.1.2.3/12 | default | 1500 | False | - | - | ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet9 | P2P_LINK_TO_DC1-BL1A_Ethernet9 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet10 | P2P_LINK_TO_DC1-BL1A_Ethernet10 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet11 | P2P_LINK_TO_outside-r1_other2 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet7 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet7 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet7 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet7 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet9 | P2P_LINK_TO_DC1-BL1A_Ethernet9 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet10 | P2P_LINK_TO_DC1-BL1A_Ethernet10 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet11 | P2P_LINK_TO_outside-r1_other2 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -354,27 +359,27 @@ interface Ethernet4000 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.11/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.11/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.11/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.11/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.11/32 ``` @@ -668,16 +673,16 @@ router bgp 65105 neighbor 10.23.23.6 description outside-r1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md index 23162ca791d..65d360629f5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -44,20 +45,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.112/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -148,6 +149,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -282,9 +287,9 @@ interface Ethernet2 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_LEAF2_Po7 | switched | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_LEAF2_Po7 | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -293,9 +298,9 @@ interface Ethernet2 interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport ``` ## Routing diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md index 7e85824e0b5..40e432dd297 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.113/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -259,7 +264,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -317,7 +322,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -333,8 +338,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet7 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet7 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2B_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2B_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -353,12 +358,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -369,10 +374,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2B_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2B_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -381,17 +386,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -400,7 +405,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -413,7 +418,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md index 95d53bce7eb..ac62fe588e9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-L2LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [MLAG](#mlag) @@ -48,20 +49,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.114/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 @@ -152,6 +153,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -259,7 +264,7 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 4094 | MLAG_PEER | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration @@ -317,7 +322,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -333,8 +338,8 @@ vlan 4094 | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | | Ethernet1 | DC1-SVC3A_Ethernet8 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 1 | | Ethernet2 | DC1-SVC3B_Ethernet8 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 1 | -| Ethernet3 | MLAG_PEER_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *['MLAG'] | 3 | -| Ethernet4 | MLAG_PEER_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *['MLAG'] | 3 | +| Ethernet3 | MLAG_DC1-L2LEAF2A_Ethernet3 | *trunk | *- | *- | *MLAG | 3 | +| Ethernet4 | MLAG_DC1-L2LEAF2A_Ethernet4 | *trunk | *- | *- | *MLAG | 3 | *Inherited from Port-Channel Interface @@ -353,12 +358,12 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ``` @@ -369,10 +374,10 @@ interface Ethernet4 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel1 | DC1_SVC3_Po7 | switched | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 1 | - | -| Port-Channel3 | MLAG_PEER_DC1-L2LEAF2A_Po3 | switched | trunk | - | - | ['MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel1 | DC1_SVC3_Po7 | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 1 | - | +| Port-Channel3 | MLAG_DC1-L2LEAF2A_Port-Channel3 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration @@ -381,17 +386,17 @@ interface Ethernet4 interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ``` ### VLAN Interfaces @@ -400,7 +405,7 @@ interface Port-Channel3 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -413,7 +418,7 @@ interface Port-Channel3 ```eos ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF1A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF1A.md index 13489d95365..e67d7aa2753 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF1A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF1A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -58,20 +59,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -162,6 +163,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -266,19 +271,19 @@ vlan 131 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet6 | server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet7 | server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | +| Ethernet6 | SERVER_server02_SINGLE_NODE_TRUNK_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet7 | SERVER_server02_SINGLE_NODE_Eth1 | access | 110 | - | - | - | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -313,7 +318,7 @@ interface Ethernet4 ipv6 enable ! interface Ethernet6 - description server02_SINGLE_NODE_TRUNK_Eth1 + description SERVER_server02_SINGLE_NODE_TRUNK_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -326,7 +331,7 @@ interface Ethernet6 spanning-tree bpdufilter enable ! interface Ethernet7 - description server02_SINGLE_NODE_Eth1 + description SERVER_server02_SINGLE_NODE_Eth1 no shutdown switchport access vlan 110 switchport mode access @@ -341,27 +346,27 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.5/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.5/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ``` @@ -647,16 +652,16 @@ router bgp 65101 neighbor interface Ethernet4 peer-group UNDERLAY_PEERS remote-as 65001 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2A.md index 5d4338d3669..c00260c12f7 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -65,20 +66,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -169,6 +170,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -269,7 +274,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -284,21 +289,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -343,31 +348,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -381,23 +386,23 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet1 | *trunk | *110-111,120-121,130-131,160-161 | *- | *- | 7 | -| Ethernet10 | server01_MLAG_Eth2 | *trunk | *210-211 | *- | *- | 10 | -| Ethernet11 | server01_MTU_PROFILE_MLAG_Eth4 | *access | *110 | *- | *- | 11 | -| Ethernet12 | server01_MTU_ADAPTOR_MLAG_Eth6 | *access | *- | *- | *- | 12 | +| Ethernet10 | SERVER_server01_MLAG_Eth2 | *trunk | *210-211 | *- | *- | 10 | +| Ethernet11 | SERVER_server01_MTU_PROFILE_MLAG_Eth4 | *access | *110 | *- | *- | 11 | +| Ethernet12 | SERVER_server01_MTU_ADAPTOR_MLAG_Eth6 | *- | *- | *- | *- | 12 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -432,12 +437,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -447,17 +452,17 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth2 + description SERVER_server01_MLAG_Eth2 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server01_MTU_PROFILE_MLAG_Eth4 + description SERVER_server01_MTU_PROFILE_MLAG_Eth4 no shutdown channel-group 11 mode active ! interface Ethernet12 - description server01_MTU_ADAPTOR_MLAG_Eth6 + description SERVER_server01_MTU_ADAPTOR_MLAG_Eth6 no shutdown channel-group 12 mode active ``` @@ -468,52 +473,52 @@ interface Ethernet12 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | 7 | - | -| Port-Channel10 | server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | 10 | - | -| Port-Channel11 | server01_MTU_PROFILE_MLAG_PortChanne1 | switched | access | 110 | - | - | - | - | 11 | - | -| Port-Channel12 | server01_MTU_ADAPTOR_MLAG_PortChanne1 | switched | access | - | - | - | - | - | 12 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | 7 | - | +| Port-Channel10 | PortChanne1 | trunk | 210-211 | - | - | - | - | 10 | - | +| Port-Channel11 | PortChanne1 | access | 110 | - | - | - | - | 11 | - | +| Port-Channel12 | PortChanne1 | - | - | - | - | - | - | 12 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Port-Channel11 - description server01_MTU_PROFILE_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport mlag 11 ! interface Port-Channel12 - description server01_MTU_ADAPTOR_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1601 switchport @@ -528,16 +533,16 @@ interface Port-Channel12 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.6/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -545,12 +550,12 @@ interface Port-Channel12 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -567,7 +572,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -580,13 +585,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -618,7 +623,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -700,48 +705,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.2/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.2/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.2/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1056,16 +1061,16 @@ router bgp 65102 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65102 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1134,6 +1139,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3011 redistribute connected ! address-family ipv4 @@ -1146,6 +1152,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012 redistribute connected ! address-family ipv4 @@ -1158,6 +1165,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009 redistribute connected ! address-family ipv4 @@ -1170,6 +1178,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010 redistribute connected ! address-family ipv4 @@ -1182,6 +1191,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ! address-family ipv4 @@ -1194,6 +1204,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan2 redistribute connected ! address-family ipv4 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2B.md index 829a9bfa4ac..7f229e69683 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF2B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -65,20 +66,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -169,6 +170,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -269,7 +274,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -284,21 +289,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -343,31 +348,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -381,23 +386,23 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF2A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF2A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF1A_Ethernet2 | *trunk | *110-111,120-121,130-131,160-161 | *- | *- | 7 | -| Ethernet10 | server01_MLAG_Eth3 | *trunk | *210-211 | *- | *- | 10 | -| Ethernet11 | server01_MTU_PROFILE_MLAG_Eth5 | *access | *110 | *- | *- | 11 | -| Ethernet12 | server01_MTU_ADAPTOR_MLAG_Eth7 | *access | *- | *- | *- | 12 | +| Ethernet10 | SERVER_server01_MLAG_Eth3 | *trunk | *210-211 | *- | *- | 10 | +| Ethernet11 | SERVER_server01_MTU_PROFILE_MLAG_Eth5 | *access | *110 | *- | *- | 11 | +| Ethernet12 | SERVER_server01_MTU_ADAPTOR_MLAG_Eth7 | *- | *- | *- | *- | 12 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -432,12 +437,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -447,17 +452,17 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth3 + description SERVER_server01_MLAG_Eth3 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server01_MTU_PROFILE_MLAG_Eth5 + description SERVER_server01_MTU_PROFILE_MLAG_Eth5 no shutdown channel-group 11 mode active ! interface Ethernet12 - description server01_MTU_ADAPTOR_MLAG_Eth7 + description SERVER_server01_MTU_ADAPTOR_MLAG_Eth7 no shutdown channel-group 12 mode active ``` @@ -468,52 +473,52 @@ interface Ethernet12 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF2A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1-L2LEAF1A_Po1 | switched | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | 7 | - | -| Port-Channel10 | server01_MLAG_PortChanne1 | switched | trunk | 210-211 | - | - | - | - | 10 | - | -| Port-Channel11 | server01_MTU_PROFILE_MLAG_PortChanne1 | switched | access | 110 | - | - | - | - | 11 | - | -| Port-Channel12 | server01_MTU_ADAPTOR_MLAG_PortChanne1 | switched | access | - | - | - | - | - | 12 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF2A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1-L2LEAF1A_Po1 | trunk | 110-111,120-121,130-131,160-161 | - | - | - | - | 7 | - | +| Port-Channel10 | PortChanne1 | trunk | 210-211 | - | - | - | - | 10 | - | +| Port-Channel11 | PortChanne1 | access | 110 | - | - | - | - | 11 | - | +| Port-Channel12 | PortChanne1 | - | - | - | - | - | - | 12 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Port-Channel11 - description server01_MTU_PROFILE_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport mlag 11 ! interface Port-Channel12 - description server01_MTU_ADAPTOR_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1601 switchport @@ -528,16 +533,16 @@ interface Port-Channel12 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.7/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.7/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.6/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.7/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -545,12 +550,12 @@ interface Port-Channel12 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -567,7 +572,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -580,13 +585,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -618,7 +623,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -700,48 +705,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.3/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.3/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.3/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1056,16 +1061,16 @@ router bgp 65102 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65102 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -1134,6 +1139,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3011 redistribute connected ! address-family ipv4 @@ -1146,6 +1152,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012 redistribute connected ! address-family ipv4 @@ -1158,6 +1165,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009 redistribute connected ! address-family ipv4 @@ -1170,6 +1178,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010 redistribute connected ! address-family ipv4 @@ -1182,6 +1191,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ! address-family ipv4 @@ -1194,6 +1204,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan2 redistribute connected ! address-family ipv4 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3A.md index a8fa8ca5281..6015e1e1f5c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -270,7 +275,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -285,21 +290,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -344,31 +349,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -382,17 +387,17 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE5_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE5_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE5_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE5_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -413,12 +418,12 @@ interface Ethernet2 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF3B_Ethernet5 + description MLAG_DC1-LEAF3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF3B_Ethernet6 + description MLAG_DC1-LEAF3B_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -429,21 +434,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF3B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF3B_Po5 + description MLAG_DC1-LEAF3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -454,16 +458,16 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.12/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.12/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.12/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.12/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.12/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::c/128 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | 2001:1::c/128 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -471,13 +475,13 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.12/32 ipv6 address 2001:1::c/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -494,7 +498,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -507,13 +511,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -545,7 +549,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -627,48 +631,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -982,7 +986,7 @@ router bgp 65106 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65106 neighbor 2001:1::5 peer group EVPN-OVERLAY-PEERS neighbor 2001:1::5 remote-as 65001 - neighbor 2001:1::5 description DC1-SPINE5 + neighbor 2001:1::5 description DC1-SPINE5_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3B.md index 0b96e0a03a6..56d9e69fbd0 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -270,7 +275,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -285,21 +290,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -344,31 +349,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -382,17 +387,17 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE5_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE5_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE5_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE5_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -413,12 +418,12 @@ interface Ethernet2 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF3A_Ethernet5 + description MLAG_DC1-LEAF3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF3A_Ethernet6 + description MLAG_DC1-LEAF3A_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -429,21 +434,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF3A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF3A_Po5 + description MLAG_DC1-LEAF3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -454,16 +458,16 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.13/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.12/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.13/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.12/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.13/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::d/128 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | 2001:1::d/128 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -471,13 +475,13 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.13/32 ipv6 address 2001:1::d/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -494,7 +498,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -507,13 +511,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -545,7 +549,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -627,48 +631,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -982,7 +986,7 @@ router bgp 65106 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65106 neighbor 2001:1::5 peer group EVPN-OVERLAY-PEERS neighbor 2001:1::5 remote-as 65001 - neighbor 2001:1::5 description DC1-SPINE5 + neighbor 2001:1::5 description DC1-SPINE5_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4A.md index ea8ec4452a9..a8b179aefac 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.106/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -270,7 +275,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -285,21 +290,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -344,31 +349,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -382,16 +387,16 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF4B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF4B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF4B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF4B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE6_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE6_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -405,12 +410,12 @@ interface Ethernet1 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF4B_Ethernet5 + description MLAG_DC1-LEAF4B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF4B_Ethernet6 + description MLAG_DC1-LEAF4B_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -421,21 +426,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF4B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF4B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF4B_Po5 + description MLAG_DC1-LEAF4B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -446,16 +450,16 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.14/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.14/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.14/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.14/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.14/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::e/128 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | 2001:1::e/128 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -463,13 +467,13 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.14/32 ipv6 address 2001:1::e/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.14/32 ! @@ -486,7 +490,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -499,13 +503,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -537,7 +541,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -619,48 +623,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -972,7 +976,7 @@ router bgp 65107 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65107 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65001 - neighbor 192.168.255.6 description DC1-SPINE6 + neighbor 192.168.255.6 description DC1-SPINE6_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4B.md index 00f93c8c934..ba2c725a599 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-LEAF4B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -66,20 +67,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.107/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 @@ -170,6 +171,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -270,7 +275,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -285,21 +290,21 @@ vlan internal order ascending range 1006 1199 | 211 | Tenant_B_OP_Zone_2 | - | | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -344,31 +349,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -382,16 +387,16 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-LEAF4A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-LEAF4A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-LEAF4A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-LEAF4A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE6_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE6_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -405,12 +410,12 @@ interface Ethernet1 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF4A_Ethernet5 + description MLAG_DC1-LEAF4A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF4A_Ethernet6 + description MLAG_DC1-LEAF4A_Ethernet6 no shutdown channel-group 5 mode active ``` @@ -421,21 +426,20 @@ interface Ethernet6 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-LEAF4A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-LEAF4A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF4A_Po5 + description MLAG_DC1-LEAF4A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ``` ### Loopback Interfaces @@ -446,16 +450,16 @@ interface Port-Channel5 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.15/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.14/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.15/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.14/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.15/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::f/128 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | 2001:1::f/128 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -463,13 +467,13 @@ interface Port-Channel5 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.15/32 ipv6 address 2001:1::f/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.14/32 ! @@ -486,7 +490,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -499,13 +503,13 @@ interface Loopback100 | Vlan211 | Tenant_B_OP_Zone_2 | Tenant_B_OP_Zone | - | False | | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -537,7 +541,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -619,48 +623,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -972,7 +976,7 @@ router bgp 65107 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65107 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65001 - neighbor 192.168.255.6 description DC1-SPINE6 + neighbor 192.168.255.6 description DC1-SPINE6_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE1.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE1.md index 607bf60f2eb..1bdacbc30e4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE1.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE1.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.101/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.1/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.1/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ``` @@ -462,25 +467,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE2.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE2.md index b1368619cc9..4acaf8048cd 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE2.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE2.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.102/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.2/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.2/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ``` @@ -462,25 +467,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE3.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE3.md index aa44f461ba9..409e7f70855 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE3.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE3.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.103/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet3 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.3/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.3/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ``` @@ -462,25 +467,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE4.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE4.md index 692f6739fc8..ceec59d63ff 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE4.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE4.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -45,20 +46,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.104/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -149,6 +150,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -211,15 +216,15 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF1A_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF2A_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF2B_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SVC3A_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet5 | P2P_LINK_TO_DC1-SVC3B_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet6 | P2P_LINK_TO_DC1-BL1A_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet7 | P2P_LINK_TO_DC1-BL1B_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -283,20 +288,20 @@ interface Ethernet7 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.4/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.4/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | +| Loopback0 | ROUTER_ID | default | - | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ``` @@ -462,25 +467,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE5.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE5.md index 816e0ffaca5..d43a9e26271 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE5.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE5.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -46,20 +47,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -150,6 +151,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -212,12 +217,12 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF3A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF3B_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-LEAF3A_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-LEAF3B_Ethernet2 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF3A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF3B_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-LEAF3A_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-LEAF3B_Ethernet2 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -260,20 +265,20 @@ interface Ethernet4 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.5/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.5/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::5/128 | +| Loopback0 | ROUTER_ID | default | 2001:1::5/128 | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ipv6 address 2001:1::5/128 @@ -429,10 +434,10 @@ router bgp 65001 neighbor interface Ethernet4 peer-group UNDERLAY_PEERS remote-as 65106 neighbor 2001:1::c peer group EVPN-OVERLAY-PEERS neighbor 2001:1::c remote-as 65106 - neighbor 2001:1::c description DC1-LEAF3A + neighbor 2001:1::c description DC1-LEAF3A_Loopback0 neighbor 2001:1::d peer group EVPN-OVERLAY-PEERS neighbor 2001:1::d remote-as 65106 - neighbor 2001:1::d description DC1-LEAF3B + neighbor 2001:1::d description DC1-LEAF3B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE6.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE6.md index be0c1cd6116..7255f3ba1f0 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE6.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SPINE6.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Spanning Tree](#spanning-tree) @@ -46,20 +47,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.105/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -150,6 +151,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -212,10 +217,10 @@ vlan internal order ascending range 1006 1199 ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-LEAF4A_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-LEAF4B_Ethernet1 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-LEAF4A_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-LEAF4B_Ethernet1 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -244,20 +249,20 @@ interface Ethernet2 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.6/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.6/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | 2001:1::6/128 | +| Loopback0 | ROUTER_ID | default | 2001:1::6/128 | #### Loopback Interfaces Device Configuration ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ipv6 address 2001:1::6/128 @@ -409,10 +414,10 @@ router bgp 65001 neighbor interface Ethernet2 peer-group UNDERLAY_PEERS remote-as 65107 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65107 - neighbor 192.168.255.14 description DC1-LEAF4A + neighbor 192.168.255.14 description DC1-LEAF4A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65107 - neighbor 192.168.255.15 description DC1-LEAF4B + neighbor 192.168.255.15 description DC1-LEAF4B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3A.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3A.md index 249e0df6f7c..ea13db40a63 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3A.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3A.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -65,20 +66,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.108/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 @@ -169,6 +170,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -269,7 +274,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -287,24 +292,24 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -358,43 +363,43 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -408,28 +413,28 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3B_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3B_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet1 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet1 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 7 | -| Ethernet10 | server03_ESI_Eth1 | *trunk | *110-111,210-211 | *- | *- | 10 | -| Ethernet11 | server04_inherit_all_from_profile_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet12 | server05_no_profile_Eth1 | trunk | 1-4094 | - | - | - | -| Ethernet13 | server06_override_profile_Eth1 | access | 210 | - | - | - | -| Ethernet14 | server07_inherit_all_from_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 14 | -| Ethernet15 | server08_no_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 15 | -| Ethernet16 | server09_override_profile_no_port_channel_Eth1 | access | 210 | - | - | - | +| Ethernet10 | SERVER_server03_ESI_Eth1 | *trunk | *110-111,210-211 | *- | *- | 10 | +| Ethernet11 | SERVER_server04_inherit_all_from_profile_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet12 | SERVER_server05_no_profile_Eth1 | trunk | 1-4094 | - | - | - | +| Ethernet13 | SERVER_server06_override_profile_Eth1 | access | 210 | - | - | - | +| Ethernet14 | SERVER_server07_inherit_all_from_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 14 | +| Ethernet15 | SERVER_server08_no_profile_port_channel_Eth1 | *trunk | *1-4094 | *- | *- | 15 | +| Ethernet16 | SERVER_server09_override_profile_no_port_channel_Eth1 | access | 210 | - | - | - | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet4 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -464,12 +469,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -484,12 +489,12 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet10 - description server03_ESI_Eth1 + description SERVER_server03_ESI_Eth1 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server04_inherit_all_from_profile_Eth1 + description SERVER_server04_inherit_all_from_profile_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -502,7 +507,7 @@ interface Ethernet11 spanning-tree bpdufilter enable ! interface Ethernet12 - description server05_no_profile_Eth1 + description SERVER_server05_no_profile_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -515,7 +520,7 @@ interface Ethernet12 spanning-tree bpdufilter enable ! interface Ethernet13 - description server06_override_profile_Eth1 + description SERVER_server06_override_profile_Eth1 no shutdown switchport access vlan 210 switchport mode access @@ -528,17 +533,17 @@ interface Ethernet13 spanning-tree bpduguard enable ! interface Ethernet14 - description server07_inherit_all_from_profile_port_channel_Eth1 + description SERVER_server07_inherit_all_from_profile_port_channel_Eth1 no shutdown channel-group 14 mode active ! interface Ethernet15 - description server08_no_profile_port_channel_Eth1 + description SERVER_server08_no_profile_port_channel_Eth1 no shutdown channel-group 15 mode on ! interface Ethernet16 - description server09_override_profile_no_port_channel_Eth1 + description SERVER_server09_override_profile_no_port_channel_Eth1 no shutdown switchport access vlan 210 switchport mode access @@ -557,13 +562,13 @@ interface Ethernet16 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3B_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 7 | - | -| Port-Channel10 | server03_ESI_PortChanne1 | switched | trunk | 110-111,210-211 | - | - | - | - | - | 0000:0000:0303:0202:0101 | -| Port-Channel14 | server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | - | - | 14 | - | -| Port-Channel15 | server08_no_profile_port_channel_server08_no_profile_port_channel | switched | trunk | 1-4094 | - | - | - | - | 15 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3B_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Port-Channel10 | PortChanne1 | trunk | 110-111,210-211 | - | - | - | - | - | 0000:0000:0303:0202:0101 | +| Port-Channel14 | ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | - | - | 14 | - | +| Port-Channel15 | server08_no_profile_port_channel | trunk | 1-4094 | - | - | - | - | 15 | - | ##### EVPN Multihoming @@ -578,38 +583,37 @@ interface Ethernet16 ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server03_ESI_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 lacp system-id 0303.0202.0101 ! interface Port-Channel14 - description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL + description ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 14 spanning-tree portfast spanning-tree bpdufilter enable @@ -619,11 +623,11 @@ interface Port-Channel14 storm-control unknown-unicast level 2 ! interface Port-Channel15 - description server08_no_profile_port_channel_server08_no_profile_port_channel + description server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -641,16 +645,16 @@ interface Port-Channel15 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.8/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.8/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.8/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -658,12 +662,12 @@ interface Port-Channel15 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -680,7 +684,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -696,16 +700,16 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -743,7 +747,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -843,69 +847,69 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ipv6 enable ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1259,16 +1263,16 @@ router bgp 65103 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65103 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3B.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3B.md index bfc5622d9a9..a8ad2b3e32a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3B.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/devices/DC1-SVC3B.md @@ -9,6 +9,7 @@ - [Management API HTTP](#management-api-http) - [Authentication](#authentication) - [Local Users](#local-users) + - [Enable Password](#enable-password) - [Monitoring](#monitoring) - [TerminAttr Daemon](#terminattr-daemon) - [Hardware TCAM Profile](#hardware-tcam-profile) @@ -65,20 +66,20 @@ | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | oob_management | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | +| Management1 | OOB_MANAGEMENT | oob | MGMT | 192.168.200.109/24 | 192.168.200.5 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | oob_management | oob | MGMT | - | - | +| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | #### Management Interfaces Device Configuration ```eos ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 @@ -169,6 +170,10 @@ username admin privilege 15 role network-admin nopassword username cvpadmin privilege 15 role network-admin secret sha512 ``` +### Enable Password + +Enable password has been disabled + ## Monitoring ### TerminAttr Daemon @@ -269,7 +274,7 @@ vlan internal order ascending range 1006 1199 | VLAN ID | Name | Trunk Groups | | ------- | ---- | ------------ | -| 2 | MLAG_iBGP_Tenant_C_OP_Zone | LEAF_PEER_L3 | +| 2 | MLAG_L3_VRF_Tenant_C_OP_Zone | MLAG | | 110 | Tenant_A_OP_Zone_1 | - | | 111 | Tenant_A_OP_Zone_2 | - | | 120 | Tenant_A_WEB_Zone_1 | - | @@ -287,24 +292,24 @@ vlan internal order ascending range 1006 1199 | 310 | Tenant_C_OP_Zone_1 | - | | 311 | Tenant_C_OP_Zone_2 | - | | 350 | Tenant_C_WAN_Zone_1 | - | -| 3009 | MLAG_iBGP_Tenant_A_OP_Zone | LEAF_PEER_L3 | -| 3010 | MLAG_iBGP_Tenant_A_WEB_Zone | LEAF_PEER_L3 | -| 3011 | MLAG_iBGP_Tenant_A_APP_Zone | LEAF_PEER_L3 | -| 3012 | MLAG_iBGP_Tenant_A_DB_Zone | LEAF_PEER_L3 | -| 3013 | MLAG_iBGP_Tenant_A_WAN_Zone | LEAF_PEER_L3 | -| 3019 | MLAG_iBGP_Tenant_B_OP_Zone | LEAF_PEER_L3 | -| 3020 | MLAG_iBGP_Tenant_B_WAN_Zone | LEAF_PEER_L3 | -| 3030 | MLAG_iBGP_Tenant_C_WAN_Zone | LEAF_PEER_L3 | -| 4093 | LEAF_PEER_L3 | LEAF_PEER_L3 | -| 4094 | MLAG_PEER | MLAG | +| 3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | MLAG | +| 3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | MLAG | +| 3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | MLAG | +| 3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | MLAG | +| 3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | MLAG | +| 3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | MLAG | +| 3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | MLAG | +| 3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | MLAG | +| 4093 | MLAG_L3 | MLAG | +| 4094 | MLAG | MLAG | ### VLANs Device Configuration ```eos ! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -358,43 +363,43 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ``` @@ -408,27 +413,27 @@ vlan 4094 | Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | Channel-Group | | --------- | ----------- | ---- | ----- | ----------- | ----------- | ------------- | -| Ethernet5 | MLAG_PEER_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | -| Ethernet6 | MLAG_PEER_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *['LEAF_PEER_L3', 'MLAG'] | 5 | +| Ethernet5 | MLAG_DC1-SVC3A_Ethernet5 | *trunk | *- | *- | *MLAG | 5 | +| Ethernet6 | MLAG_DC1-SVC3A_Ethernet6 | *trunk | *- | *- | *MLAG | 5 | | Ethernet7 | DC1-L2LEAF2A_Ethernet2 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 7 | | Ethernet8 | DC1-L2LEAF2B_Ethernet2 | *trunk | *110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | *- | *- | 7 | -| Ethernet11 | server04_inherit_all_from_profile_Eth2 | trunk | 1-4094 | - | - | - | -| Ethernet12 | server05_no_profile_Eth2 | trunk | 1-4094 | - | - | - | -| Ethernet13 | server06_override_profile_Eth2 | access | 210 | - | - | - | -| Ethernet14 | server07_inherit_all_from_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 14 | -| Ethernet15 | server08_no_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 15 | -| Ethernet16 | server09_override_profile_no_port_channel_Eth2 | access | 210 | - | - | - | +| Ethernet11 | SERVER_server04_inherit_all_from_profile_Eth2 | trunk | 1-4094 | - | - | - | +| Ethernet12 | SERVER_server05_no_profile_Eth2 | trunk | 1-4094 | - | - | - | +| Ethernet13 | SERVER_server06_override_profile_Eth2 | access | 210 | - | - | - | +| Ethernet14 | SERVER_server07_inherit_all_from_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 14 | +| Ethernet15 | SERVER_server08_no_profile_port_channel_Eth2 | *trunk | *1-4094 | *- | *- | 15 | +| Ethernet16 | SERVER_server09_override_profile_no_port_channel_Eth2 | access | 210 | - | - | - | *Inherited from Port-Channel Interface ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | -| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | routed | - | - | default | 1500 | False | - | - | - | - | -| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | routed | - | - | default | 1500 | False | - | - | - | - | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Ethernet1 | P2P_LINK_TO_DC1-SPINE1_Ethernet5 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet2 | P2P_LINK_TO_DC1-SPINE2_Ethernet5 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet3 | P2P_LINK_TO_DC1-SPINE3_Ethernet5 | - | - | default | 1500 | False | - | - | - | - | +| Ethernet4 | P2P_LINK_TO_DC1-SPINE4_Ethernet5 | - | - | default | 1500 | False | - | - | - | - | #### Ethernet Interfaces Device Configuration @@ -463,12 +468,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -483,7 +488,7 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet11 - description server04_inherit_all_from_profile_Eth2 + description SERVER_server04_inherit_all_from_profile_Eth2 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -496,7 +501,7 @@ interface Ethernet11 spanning-tree bpdufilter enable ! interface Ethernet12 - description server05_no_profile_Eth2 + description SERVER_server05_no_profile_Eth2 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -509,7 +514,7 @@ interface Ethernet12 spanning-tree bpdufilter enable ! interface Ethernet13 - description server06_override_profile_Eth2 + description SERVER_server06_override_profile_Eth2 no shutdown switchport access vlan 210 switchport mode access @@ -522,17 +527,17 @@ interface Ethernet13 spanning-tree bpduguard enable ! interface Ethernet14 - description server07_inherit_all_from_profile_port_channel_Eth2 + description SERVER_server07_inherit_all_from_profile_port_channel_Eth2 no shutdown channel-group 14 mode active ! interface Ethernet15 - description server08_no_profile_port_channel_Eth2 + description SERVER_server08_no_profile_port_channel_Eth2 no shutdown channel-group 15 mode on ! interface Ethernet16 - description server09_override_profile_no_port_channel_Eth2 + description SERVER_server09_override_profile_no_port_channel_Eth2 no shutdown switchport access vlan 210 switchport mode access @@ -551,39 +556,38 @@ interface Ethernet16 ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | -| Port-Channel5 | MLAG_PEER_DC1-SVC3A_Po5 | switched | trunk | - | - | ['LEAF_PEER_L3', 'MLAG'] | - | - | - | - | -| Port-Channel7 | DC1_L2LEAF2_Po1 | switched | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 7 | - | -| Port-Channel14 | server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL | switched | trunk | 1-4094 | - | - | - | - | 14 | - | -| Port-Channel15 | server08_no_profile_port_channel_server08_no_profile_port_channel | switched | trunk | 1-4094 | - | - | - | - | 15 | - | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Port-Channel5 | MLAG_DC1-SVC3A_Port-Channel5 | trunk | - | - | MLAG | - | - | - | - | +| Port-Channel7 | DC1_L2LEAF2_Po1 | trunk | 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 | - | - | - | - | 7 | - | +| Port-Channel14 | ALL_WITH_SECURITY_PORT_CHANNEL | trunk | 1-4094 | - | - | - | - | 14 | - | +| Port-Channel15 | server08_no_profile_port_channel | trunk | 1-4094 | - | - | - | - | 15 | - | #### Port-Channel Interfaces Device Configuration ```eos ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel14 - description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL + description ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 14 spanning-tree portfast spanning-tree bpdufilter enable @@ -593,11 +597,11 @@ interface Port-Channel14 storm-control unknown-unicast level 2 ! interface Port-Channel15 - description server08_no_profile_port_channel_server08_no_profile_port_channel + description server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -615,16 +619,16 @@ interface Port-Channel15 | Interface | Description | VRF | IP Address | | --------- | ----------- | --- | ---------- | -| Loopback0 | EVPN_Overlay_Peering | default | 192.168.255.9/32 | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | 192.168.254.8/32 | +| Loopback0 | ROUTER_ID | default | 192.168.255.9/32 | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | 192.168.254.8/32 | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | 10.255.1.9/32 | ##### IPv6 | Interface | Description | VRF | IPv6 Address | | --------- | ----------- | --- | ------------ | -| Loopback0 | EVPN_Overlay_Peering | default | - | -| Loopback1 | VTEP_VXLAN_Tunnel_Source | default | - | +| Loopback0 | ROUTER_ID | default | - | +| Loopback1 | VXLAN_TUNNEL_SOURCE | default | - | | Loopback100 | Tenant_A_OP_Zone_VTEP_DIAGNOSTICS | Tenant_A_OP_Zone | - | #### Loopback Interfaces Device Configuration @@ -632,12 +636,12 @@ interface Port-Channel15 ```eos ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -654,7 +658,7 @@ interface Loopback100 | Interface | Description | VRF | MTU | Shutdown | | --------- | ----------- | --- | ---- | -------- | -| Vlan2 | MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | +| Vlan2 | MLAG_L3_VRF_Tenant_C_OP_Zone | Tenant_C_OP_Zone | 1500 | False | | Vlan110 | Tenant_A_OP_Zone_1 | Tenant_A_OP_Zone | - | False | | Vlan111 | Tenant_A_OP_Zone_2 | Tenant_A_OP_Zone | - | False | | Vlan120 | Tenant_A_WEB_Zone_1 | Tenant_A_WEB_Zone | - | False | @@ -670,16 +674,16 @@ interface Loopback100 | Vlan310 | Tenant_C_OP_Zone_1 | Tenant_C_OP_Zone | - | False | | Vlan311 | Tenant_C_OP_Zone_2 | Tenant_C_OP_Zone | - | False | | Vlan350 | Tenant_C_WAN_Zone_1 | Tenant_C_WAN_Zone | - | False | -| Vlan3009 | MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | -| Vlan3010 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | -| Vlan3011 | MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | -| Vlan3012 | MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | -| Vlan3013 | MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | -| Vlan3019 | MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | -| Vlan3020 | MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | -| Vlan3030 | MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | -| Vlan4093 | MLAG_PEER_L3_PEERING | default | 1500 | False | -| Vlan4094 | MLAG_PEER | default | 1500 | False | +| Vlan3009 | MLAG_L3_VRF_Tenant_A_OP_Zone | Tenant_A_OP_Zone | 1500 | False | +| Vlan3010 | MLAG_L3_VRF_Tenant_A_WEB_Zone | Tenant_A_WEB_Zone | 1500 | False | +| Vlan3011 | MLAG_L3_VRF_Tenant_A_APP_Zone | Tenant_A_APP_Zone | 1500 | False | +| Vlan3012 | MLAG_L3_VRF_Tenant_A_DB_Zone | Tenant_A_DB_Zone | 1500 | False | +| Vlan3013 | MLAG_L3_VRF_Tenant_A_WAN_Zone | Tenant_A_WAN_Zone | 1500 | False | +| Vlan3019 | MLAG_L3_VRF_Tenant_B_OP_Zone | Tenant_B_OP_Zone | 1500 | False | +| Vlan3020 | MLAG_L3_VRF_Tenant_B_WAN_Zone | Tenant_B_WAN_Zone | 1500 | False | +| Vlan3030 | MLAG_L3_VRF_Tenant_C_WAN_Zone | Tenant_C_WAN_Zone | 1500 | False | +| Vlan4093 | MLAG_L3 | default | 1500 | False | +| Vlan4094 | MLAG | default | 1500 | False | ##### IPv4 @@ -717,7 +721,7 @@ interface Loopback100 ```eos ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -817,69 +821,69 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ipv6 enable ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -1233,16 +1237,16 @@ router bgp 65103 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65103 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md index 8485ec94403..952d697d108 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-documentation.md @@ -145,7 +145,7 @@ ### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) | VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | +| ------------------ | ------------------- | ------------------ | ------------------ | | 192.168.254.0/24 | 256 | 11 | 4.3 % | ### VTEP Loopback Node allocation diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv deleted file mode 100644 index 5cd7b25c2d8..00000000000 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/documentation/fabric/DC1_FABRIC-topology.csv +++ /dev/null @@ -1,130 +0,0 @@ -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -l3leaf,DC1-BL1A,Ethernet1,spine,DC1-SPINE1,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet2,spine,DC1-SPINE2,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet3,spine,DC1-SPINE3,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet4,spine,DC1-SPINE4,Ethernet6,True -l3leaf,DC1-BL1A,Ethernet9,l3leaf,DC1-BL1B,Ethernet9,True -l3leaf,DC1-BL1A,Ethernet10,l3leaf,DC1-BL1B,Ethernet10,True -l3leaf,DC1-BL1A,Ethernet11,other,outside-r1,other1,True -l3leaf,DC1-BL1A,Ethernet4000,my_precious,MY-own-peer,Ethernet123,True -l3leaf,DC1-BL1B,Ethernet1,spine,DC1-SPINE1,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet2,spine,DC1-SPINE2,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet3,spine,DC1-SPINE3,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet4,spine,DC1-SPINE4,Ethernet7,True -l3leaf,DC1-BL1B,Ethernet9,l3leaf,DC1-BL1A,Ethernet9,True -l3leaf,DC1-BL1B,Ethernet10,l3leaf,DC1-BL1A,Ethernet10,True -l3leaf,DC1-BL1B,Ethernet11,other,outside-r1,other2,True -l3leaf,DC1-BL1B,Ethernet4000,my_precious,MY-own-peer,Ethernet123,True -l2leaf,DC1-L2LEAF1A,Ethernet1,l3leaf,DC1-LEAF2A,Ethernet7,True -l2leaf,DC1-L2LEAF1A,Ethernet2,l3leaf,DC1-LEAF2B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet1,l3leaf,DC1-SVC3A,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet2,l3leaf,DC1-SVC3B,Ethernet7,True -l2leaf,DC1-L2LEAF2A,Ethernet3,mlag_peer,DC1-L2LEAF2B,Ethernet3,True -l2leaf,DC1-L2LEAF2A,Ethernet4,mlag_peer,DC1-L2LEAF2B,Ethernet4,True -l2leaf,DC1-L2LEAF2B,Ethernet1,l3leaf,DC1-SVC3A,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet2,l3leaf,DC1-SVC3B,Ethernet8,True -l2leaf,DC1-L2LEAF2B,Ethernet3,mlag_peer,DC1-L2LEAF2A,Ethernet3,True -l2leaf,DC1-L2LEAF2B,Ethernet4,mlag_peer,DC1-L2LEAF2A,Ethernet4,True -l3leaf,DC1-LEAF1A,Ethernet1,spine,DC1-SPINE1,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet2,spine,DC1-SPINE2,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet3,spine,DC1-SPINE3,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet4,spine,DC1-SPINE4,Ethernet1,True -l3leaf,DC1-LEAF1A,Ethernet6,server,server02_SINGLE_NODE_TRUNK,Eth1,True -l3leaf,DC1-LEAF1A,Ethernet7,server,server02_SINGLE_NODE,Eth1,True -l3leaf,DC1-LEAF2A,Ethernet1,spine,DC1-SPINE1,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet2,spine,DC1-SPINE2,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet3,spine,DC1-SPINE3,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet4,spine,DC1-SPINE4,Ethernet2,True -l3leaf,DC1-LEAF2A,Ethernet5,mlag_peer,DC1-LEAF2B,Ethernet5,True -l3leaf,DC1-LEAF2A,Ethernet6,mlag_peer,DC1-LEAF2B,Ethernet6,True -l3leaf,DC1-LEAF2A,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet1,True -l3leaf,DC1-LEAF2A,Ethernet10,server,server01_MLAG,Eth2,True -l3leaf,DC1-LEAF2A,Ethernet11,server,server01_MTU_PROFILE_MLAG,Eth4,True -l3leaf,DC1-LEAF2A,Ethernet12,server,server01_MTU_ADAPTOR_MLAG,Eth6,True -l3leaf,DC1-LEAF2B,Ethernet1,spine,DC1-SPINE1,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet2,spine,DC1-SPINE2,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet3,spine,DC1-SPINE3,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet4,spine,DC1-SPINE4,Ethernet3,True -l3leaf,DC1-LEAF2B,Ethernet5,mlag_peer,DC1-LEAF2A,Ethernet5,True -l3leaf,DC1-LEAF2B,Ethernet6,mlag_peer,DC1-LEAF2A,Ethernet6,True -l3leaf,DC1-LEAF2B,Ethernet7,l2leaf,DC1-L2LEAF1A,Ethernet2,True -l3leaf,DC1-LEAF2B,Ethernet10,server,server01_MLAG,Eth3,True -l3leaf,DC1-LEAF2B,Ethernet11,server,server01_MTU_PROFILE_MLAG,Eth5,True -l3leaf,DC1-LEAF2B,Ethernet12,server,server01_MTU_ADAPTOR_MLAG,Eth7,True -l3leaf,DC1-LEAF3A,Ethernet1,spine,DC1-SPINE5,Ethernet1,True -l3leaf,DC1-LEAF3A,Ethernet2,spine,DC1-SPINE5,Ethernet3,True -l3leaf,DC1-LEAF3A,Ethernet5,mlag_peer,DC1-LEAF3B,Ethernet5,True -l3leaf,DC1-LEAF3A,Ethernet6,mlag_peer,DC1-LEAF3B,Ethernet6,True -l3leaf,DC1-LEAF3B,Ethernet1,spine,DC1-SPINE5,Ethernet2,True -l3leaf,DC1-LEAF3B,Ethernet2,spine,DC1-SPINE5,Ethernet4,True -l3leaf,DC1-LEAF3B,Ethernet5,mlag_peer,DC1-LEAF3A,Ethernet5,True -l3leaf,DC1-LEAF3B,Ethernet6,mlag_peer,DC1-LEAF3A,Ethernet6,True -l3leaf,DC1-LEAF4A,Ethernet1,spine,DC1-SPINE6,Ethernet1,True -l3leaf,DC1-LEAF4A,Ethernet5,mlag_peer,DC1-LEAF4B,Ethernet5,True -l3leaf,DC1-LEAF4A,Ethernet6,mlag_peer,DC1-LEAF4B,Ethernet6,True -l3leaf,DC1-LEAF4B,Ethernet1,spine,DC1-SPINE6,Ethernet2,True -l3leaf,DC1-LEAF4B,Ethernet5,mlag_peer,DC1-LEAF4A,Ethernet5,True -l3leaf,DC1-LEAF4B,Ethernet6,mlag_peer,DC1-LEAF4A,Ethernet6,True -spine,DC1-SPINE1,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet1,True -spine,DC1-SPINE1,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet1,True -spine,DC1-SPINE1,Ethernet4,l3leaf,DC1-SVC3A,Ethernet1,True -spine,DC1-SPINE1,Ethernet5,l3leaf,DC1-SVC3B,Ethernet1,True -spine,DC1-SPINE1,Ethernet6,l3leaf,DC1-BL1A,Ethernet1,True -spine,DC1-SPINE1,Ethernet7,l3leaf,DC1-BL1B,Ethernet1,True -spine,DC1-SPINE2,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet2,True -spine,DC1-SPINE2,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet2,True -spine,DC1-SPINE2,Ethernet4,l3leaf,DC1-SVC3A,Ethernet2,True -spine,DC1-SPINE2,Ethernet5,l3leaf,DC1-SVC3B,Ethernet2,True -spine,DC1-SPINE2,Ethernet6,l3leaf,DC1-BL1A,Ethernet2,True -spine,DC1-SPINE2,Ethernet7,l3leaf,DC1-BL1B,Ethernet2,True -spine,DC1-SPINE3,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet3,True -spine,DC1-SPINE3,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet3,True -spine,DC1-SPINE3,Ethernet4,l3leaf,DC1-SVC3A,Ethernet3,True -spine,DC1-SPINE3,Ethernet5,l3leaf,DC1-SVC3B,Ethernet3,True -spine,DC1-SPINE3,Ethernet6,l3leaf,DC1-BL1A,Ethernet3,True -spine,DC1-SPINE3,Ethernet7,l3leaf,DC1-BL1B,Ethernet3,True -spine,DC1-SPINE4,Ethernet1,l3leaf,DC1-LEAF1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet2,l3leaf,DC1-LEAF2A,Ethernet4,True -spine,DC1-SPINE4,Ethernet3,l3leaf,DC1-LEAF2B,Ethernet4,True -spine,DC1-SPINE4,Ethernet4,l3leaf,DC1-SVC3A,Ethernet4,True -spine,DC1-SPINE4,Ethernet5,l3leaf,DC1-SVC3B,Ethernet4,True -spine,DC1-SPINE4,Ethernet6,l3leaf,DC1-BL1A,Ethernet4,True -spine,DC1-SPINE4,Ethernet7,l3leaf,DC1-BL1B,Ethernet4,True -spine,DC1-SPINE5,Ethernet1,l3leaf,DC1-LEAF3A,Ethernet1,True -spine,DC1-SPINE5,Ethernet2,l3leaf,DC1-LEAF3B,Ethernet1,True -spine,DC1-SPINE5,Ethernet3,l3leaf,DC1-LEAF3A,Ethernet2,True -spine,DC1-SPINE5,Ethernet4,l3leaf,DC1-LEAF3B,Ethernet2,True -spine,DC1-SPINE6,Ethernet1,l3leaf,DC1-LEAF4A,Ethernet1,True -spine,DC1-SPINE6,Ethernet2,l3leaf,DC1-LEAF4B,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet1,spine,DC1-SPINE1,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet2,spine,DC1-SPINE2,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet3,spine,DC1-SPINE3,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet4,spine,DC1-SPINE4,Ethernet4,True -l3leaf,DC1-SVC3A,Ethernet5,mlag_peer,DC1-SVC3B,Ethernet5,True -l3leaf,DC1-SVC3A,Ethernet6,mlag_peer,DC1-SVC3B,Ethernet6,True -l3leaf,DC1-SVC3A,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet1,True -l3leaf,DC1-SVC3A,Ethernet10,server,server03_ESI,Eth1,True -l3leaf,DC1-SVC3A,Ethernet11,server,server04_inherit_all_from_profile,Eth1,True -l3leaf,DC1-SVC3A,Ethernet12,server,server05_no_profile,Eth1,True -l3leaf,DC1-SVC3A,Ethernet13,server,server06_override_profile,Eth1,True -l3leaf,DC1-SVC3A,Ethernet14,server,server07_inherit_all_from_profile_port_channel,Eth1,True -l3leaf,DC1-SVC3A,Ethernet15,server,server08_no_profile_port_channel,Eth1,True -l3leaf,DC1-SVC3A,Ethernet16,server,server09_override_profile_no_port_channel,Eth1,True -l3leaf,DC1-SVC3B,Ethernet1,spine,DC1-SPINE1,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet2,spine,DC1-SPINE2,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet3,spine,DC1-SPINE3,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet4,spine,DC1-SPINE4,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet5,mlag_peer,DC1-SVC3A,Ethernet5,True -l3leaf,DC1-SVC3B,Ethernet6,mlag_peer,DC1-SVC3A,Ethernet6,True -l3leaf,DC1-SVC3B,Ethernet7,l2leaf,DC1-L2LEAF2A,Ethernet2,True -l3leaf,DC1-SVC3B,Ethernet8,l2leaf,DC1-L2LEAF2B,Ethernet2,True -l3leaf,DC1-SVC3B,Ethernet11,server,server04_inherit_all_from_profile,Eth2,True -l3leaf,DC1-SVC3B,Ethernet12,server,server05_no_profile,Eth2,True -l3leaf,DC1-SVC3B,Ethernet13,server,server06_override_profile,Eth2,True -l3leaf,DC1-SVC3B,Ethernet14,server,server07_inherit_all_from_profile_port_channel,Eth2,True -l3leaf,DC1-SVC3B,Ethernet15,server,server08_no_profile_port_channel,Eth2,True -l3leaf,DC1-SVC3B,Ethernet16,server,server09_override_profile_no_port_channel,Eth2,True diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1A.cfg index cf1016dff52..baeb4f0ef3d 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,20 +26,11 @@ hostname DC1-BL1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -102,17 +105,17 @@ interface Ethernet4000 ip address 10.1.2.3/12 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.10/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.10/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.110/24 @@ -157,15 +160,18 @@ ip routing vrf Tenant_A_WAN_Zone ip routing vrf Tenant_B_WAN_Zone ip routing vrf Tenant_C_WAN_Zone ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_A_WAN_Zone 10.3.4.0/24 1.2.3.4 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -206,16 +212,16 @@ router bgp 65104 neighbor 10.23.23.2 description outside-r1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -295,11 +301,4 @@ router general ! exit ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1B.cfg index 5d320e65463..cbed29d9e57 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-BL1B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,20 +26,11 @@ hostname DC1-BL1B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 150 name Tenant_A_WAN_Zone_1 ! @@ -103,17 +106,17 @@ interface Ethernet4000 ip address 10.1.2.3/12 ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.11/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.11/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.111/24 @@ -158,15 +161,18 @@ ip routing vrf Tenant_A_WAN_Zone ip routing vrf Tenant_B_WAN_Zone ip routing vrf Tenant_C_WAN_Zone ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ip route vrf Tenant_A_WAN_Zone 10.3.4.0/24 1.2.3.4 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -207,16 +213,16 @@ router bgp 65105 neighbor 10.23.23.6 description outside-r1 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_WAN_Zone @@ -288,11 +294,4 @@ router bgp 65105 router-id 192.168.255.11 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg index 9f5abfe7012..c0803ba5693 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,18 +28,9 @@ hostname DC1-L2LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -57,9 +60,9 @@ vrf instance MGMT interface Port-Channel1 description DC1_LEAF2_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport ! interface Ethernet1 description DC1-LEAF2A_Ethernet7 @@ -72,7 +75,7 @@ interface Ethernet2 channel-group 1 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.112/24 @@ -80,11 +83,7 @@ no ip routing vrf MGMT ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg index 59aac785557..125c268e8a5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-L2LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -81,7 +84,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -89,17 +92,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2B_Po3 + description MLAG_DC1-L2LEAF2B_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet7 @@ -112,23 +115,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet3 + description MLAG_DC1-L2LEAF2B_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2B_Ethernet4 + description MLAG_DC1-L2LEAF2B_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.113/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -147,11 +150,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg index 7e55e1abd6b..9fb3327e7b2 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-L2LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,19 +28,10 @@ hostname DC1-L2LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode mstp no spanning-tree vlan-id 4094 spanning-tree mst 0 priority 16384 ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 110 name Tenant_A_OP_Zone_1 ! @@ -81,7 +84,7 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -89,17 +92,17 @@ vrf instance MGMT interface Port-Channel1 description DC1_SVC3_Po7 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 1 ! interface Port-Channel3 - description MLAG_PEER_DC1-L2LEAF2A_Po3 + description MLAG_DC1-L2LEAF2A_Port-Channel3 no shutdown - switchport switchport mode trunk switchport trunk group MLAG + switchport ! interface Ethernet1 description DC1-SVC3A_Ethernet8 @@ -112,23 +115,23 @@ interface Ethernet2 channel-group 1 mode active ! interface Ethernet3 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet3 + description MLAG_DC1-L2LEAF2A_Ethernet3 no shutdown channel-group 3 mode active ! interface Ethernet4 - description MLAG_PEER_DC1-L2LEAF2A_Ethernet4 + description MLAG_DC1-L2LEAF2A_Ethernet4 no shutdown channel-group 3 mode active ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.114/24 ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -147,11 +150,7 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer ! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg index c0b40841d71..e898182aabb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,20 +28,11 @@ hostname DC1-LEAF1A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 120 name Tenant_A_WEB_Zone_1 ! @@ -77,7 +80,7 @@ interface Ethernet4 ipv6 enable ! interface Ethernet6 - description server02_SINGLE_NODE_TRUNK_Eth1 + description SERVER_server02_SINGLE_NODE_TRUNK_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -90,24 +93,24 @@ interface Ethernet6 spanning-tree bpdufilter enable ! interface Ethernet7 - description server02_SINGLE_NODE_Eth1 + description SERVER_server02_SINGLE_NODE_Eth1 no shutdown switchport access vlan 110 switchport mode access switchport ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -159,14 +162,17 @@ no ip routing vrf MGMT ip routing vrf Tenant_A_APP_Zone ip routing vrf Tenant_A_WEB_Zone ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -196,16 +202,16 @@ router bgp 65101 neighbor interface Ethernet4 peer-group UNDERLAY_PEERS remote-as 65001 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -243,11 +249,4 @@ router bgp 65101 router-id 192.168.255.5 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg index 41919bdf692..943a93fdd8b 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF2A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,39 +123,39 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2B_Po5 + description MLAG_DC1-LEAF2B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Port-Channel11 - description server01_MTU_PROFILE_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport mlag 11 ! interface Port-Channel12 - description server01_MTU_ADAPTOR_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1601 switchport @@ -187,12 +190,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2B_Ethernet5 + description MLAG_DC1-LEAF2B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2B_Ethernet6 + description MLAG_DC1-LEAF2B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -202,27 +205,27 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth2 + description SERVER_server01_MLAG_Eth2 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server01_MTU_PROFILE_MLAG_Eth4 + description SERVER_server01_MTU_PROFILE_MLAG_Eth4 no shutdown channel-group 11 mode active ! interface Ethernet12 - description server01_MTU_ADAPTOR_MLAG_Eth6 + description SERVER_server01_MTU_ADAPTOR_MLAG_Eth6 no shutdown channel-group 12 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -233,13 +236,13 @@ interface Loopback100 ip address 10.255.1.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -321,48 +324,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.2/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.2/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.2/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.2/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.2/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -410,12 +413,12 @@ ip routing vrf Tenant_A_WEB_Zone ip routing vrf Tenant_B_OP_Zone ip routing vrf Tenant_C_OP_Zone ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing +! mlag configuration domain-id DC1_LEAF2 local-interface Vlan4094 @@ -426,6 +429,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -468,16 +474,16 @@ router bgp 65102 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65102 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -546,6 +552,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3011 redistribute connected ! address-family ipv4 @@ -558,6 +565,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3012 redistribute connected ! address-family ipv4 @@ -570,6 +578,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3009 redistribute connected ! address-family ipv4 @@ -582,6 +591,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3010 redistribute connected ! address-family ipv4 @@ -594,6 +604,7 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan3019 redistribute connected ! address-family ipv4 @@ -606,16 +617,10 @@ router bgp 65102 router-id 192.168.255.6 update wait-install neighbor 10.255.251.3 peer group MLAG_PEER + neighbor 10.255.251.3 description DC1-LEAF2B_Vlan2 redistribute connected ! address-family ipv4 no neighbor 10.255.251.3 next-hop address-family ipv6 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg index 4f57b6894fa..79bd7dddf68 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF2B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,39 +123,39 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF2A_Po5 + description MLAG_DC1-LEAF2A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1-L2LEAF1A_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,160-161 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server01_MLAG_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 210-211 switchport mode trunk + switchport mlag 10 ! interface Port-Channel11 - description server01_MTU_PROFILE_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1600 - switchport switchport access vlan 110 + switchport mode access + switchport mlag 11 ! interface Port-Channel12 - description server01_MTU_ADAPTOR_MLAG_PortChanne1 + description PortChanne1 no shutdown mtu 1601 switchport @@ -187,12 +190,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF2A_Ethernet5 + description MLAG_DC1-LEAF2A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF2A_Ethernet6 + description MLAG_DC1-LEAF2A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -202,27 +205,27 @@ interface Ethernet7 channel-group 7 mode active ! interface Ethernet10 - description server01_MLAG_Eth3 + description SERVER_server01_MLAG_Eth3 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server01_MTU_PROFILE_MLAG_Eth5 + description SERVER_server01_MTU_PROFILE_MLAG_Eth5 no shutdown channel-group 11 mode active ! interface Ethernet12 - description server01_MTU_ADAPTOR_MLAG_Eth7 + description SERVER_server01_MTU_ADAPTOR_MLAG_Eth7 no shutdown channel-group 12 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.7/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.6/32 ! @@ -233,13 +236,13 @@ interface Loopback100 ip address 10.255.1.7/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -321,48 +324,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ip address 10.255.251.3/31 ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ip address 10.255.251.3/31 ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ip address 10.255.251.3/31 ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ip address 10.255.251.3/31 ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ip address 10.255.251.3/31 ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -410,12 +413,12 @@ ip routing vrf Tenant_A_WEB_Zone ip routing vrf Tenant_B_OP_Zone ip routing vrf Tenant_C_OP_Zone ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 seq 20 permit 192.168.254.0/24 eq 32 ! +ipv6 unicast-routing +! mlag configuration domain-id DC1_LEAF2 local-interface Vlan4094 @@ -426,6 +429,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -468,16 +474,16 @@ router bgp 65102 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65102 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -546,6 +552,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3011 redistribute connected ! address-family ipv4 @@ -558,6 +565,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3012 redistribute connected ! address-family ipv4 @@ -570,6 +578,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3009 redistribute connected ! address-family ipv4 @@ -582,6 +591,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3010 redistribute connected ! address-family ipv4 @@ -594,6 +604,7 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan3019 redistribute connected ! address-family ipv4 @@ -606,16 +617,10 @@ router bgp 65102 router-id 192.168.255.7 update wait-install neighbor 10.255.251.2 peer group MLAG_PEER + neighbor 10.255.251.2 description DC1-LEAF2A_Vlan2 redistribute connected ! address-family ipv4 no neighbor 10.255.251.2 next-hop address-family ipv6 ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3A.cfg index e83832c7b0e..24a6cd1012f 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,12 +123,11 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF3B_Po5 + description MLAG_DC1-LEAF3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE5_Ethernet1 @@ -142,23 +144,23 @@ interface Ethernet2 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF3B_Ethernet5 + description MLAG_DC1-LEAF3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF3B_Ethernet6 + description MLAG_DC1-LEAF3B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.12/32 ipv6 address 2001:1::c/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -169,13 +171,13 @@ interface Loopback100 ip address 10.255.1.12/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -257,48 +259,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -346,6 +348,13 @@ ip routing ipv6 interfaces vrf Tenant_A_WEB_Zone ip routing ipv6 interfaces vrf Tenant_B_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! +ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 + seq 10 permit 2001:1::/64 eq 128 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -354,13 +363,6 @@ ipv6 unicast-routing vrf Tenant_A_WEB_Zone ipv6 unicast-routing vrf Tenant_B_OP_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 - seq 10 permit 2001:1::/64 eq 128 -! mlag configuration domain-id DC1_LEAF3 local-interface Vlan4094 @@ -371,6 +373,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -414,7 +419,7 @@ router bgp 65106 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65106 neighbor 2001:1::5 peer group EVPN-OVERLAY-PEERS neighbor 2001:1::5 remote-as 65001 - neighbor 2001:1::5 description DC1-SPINE5 + neighbor 2001:1::5 description DC1-SPINE5_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -528,11 +533,4 @@ router bgp 65106 neighbor interface Vlan2 peer-group MLAG_PEER remote-as 65106 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3B.cfg index f0ae64a5c02..2c7e30218a9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,12 +123,11 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF3A_Po5 + description MLAG_DC1-LEAF3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE5_Ethernet2 @@ -142,23 +144,23 @@ interface Ethernet2 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF3A_Ethernet5 + description MLAG_DC1-LEAF3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF3A_Ethernet6 + description MLAG_DC1-LEAF3A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.13/32 ipv6 address 2001:1::d/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.12/32 ! @@ -169,13 +171,13 @@ interface Loopback100 ip address 10.255.1.13/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -257,48 +259,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -346,6 +348,13 @@ ip routing ipv6 interfaces vrf Tenant_A_WEB_Zone ip routing ipv6 interfaces vrf Tenant_B_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! +ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 + seq 10 permit 2001:1::/64 eq 128 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -354,13 +363,6 @@ ipv6 unicast-routing vrf Tenant_A_WEB_Zone ipv6 unicast-routing vrf Tenant_B_OP_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 - seq 10 permit 2001:1::/64 eq 128 -! mlag configuration domain-id DC1_LEAF3 local-interface Vlan4094 @@ -371,6 +373,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -414,7 +419,7 @@ router bgp 65106 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65106 neighbor 2001:1::5 peer group EVPN-OVERLAY-PEERS neighbor 2001:1::5 remote-as 65001 - neighbor 2001:1::5 description DC1-SPINE5 + neighbor 2001:1::5 description DC1-SPINE5_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -528,11 +533,4 @@ router bgp 65106 neighbor interface Vlan2 peer-group MLAG_PEER remote-as 65106 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4A.cfg index 028247006f6..0384f1757c9 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF4A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,12 +123,11 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF4B_Po5 + description MLAG_DC1-LEAF4B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE6_Ethernet1 @@ -135,23 +137,23 @@ interface Ethernet1 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF4B_Ethernet5 + description MLAG_DC1-LEAF4B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF4B_Ethernet6 + description MLAG_DC1-LEAF4B_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.14/32 ipv6 address 2001:1::e/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.14/32 ! @@ -162,13 +164,13 @@ interface Loopback100 ip address 10.255.1.14/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.106/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -250,48 +252,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -339,6 +341,13 @@ ip routing ipv6 interfaces vrf Tenant_A_WEB_Zone ip routing ipv6 interfaces vrf Tenant_B_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! +ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 + seq 10 permit 2001:1::/64 eq 128 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -347,13 +356,6 @@ ipv6 unicast-routing vrf Tenant_A_WEB_Zone ipv6 unicast-routing vrf Tenant_B_OP_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 - seq 10 permit 2001:1::/64 eq 128 -! mlag configuration domain-id DC1_LEAF4 local-interface Vlan4094 @@ -364,6 +366,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -406,7 +411,7 @@ router bgp 65107 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65107 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65001 - neighbor 192.168.255.6 description DC1-SPINE6 + neighbor 192.168.255.6 description DC1-SPINE6_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -520,11 +525,4 @@ router bgp 65107 neighbor interface Vlan2 peer-group MLAG_PEER remote-as 65107 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4B.cfg index 3cfe012dfca..84b7f8f4cf4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-LEAF4B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-LEAF4B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -78,31 +81,31 @@ vlan 311 name Tenant_C_OP_Zone_2 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -120,12 +123,11 @@ vrf instance Tenant_B_OP_Zone vrf instance Tenant_C_OP_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-LEAF4A_Po5 + description MLAG_DC1-LEAF4A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Ethernet1 description P2P_LINK_TO_DC1-SPINE6_Ethernet2 @@ -135,23 +137,23 @@ interface Ethernet1 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-LEAF4A_Ethernet5 + description MLAG_DC1-LEAF4A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-LEAF4A_Ethernet6 + description MLAG_DC1-LEAF4A_Ethernet6 no shutdown channel-group 5 mode active ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.15/32 ipv6 address 2001:1::f/128 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.14/32 ! @@ -162,13 +164,13 @@ interface Loopback100 ip address 10.255.1.15/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.107/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -250,48 +252,48 @@ interface Vlan311 ip address virtual 10.3.11.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -339,6 +341,13 @@ ip routing ipv6 interfaces vrf Tenant_A_WEB_Zone ip routing ipv6 interfaces vrf Tenant_B_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! +ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 + seq 10 permit 2001:1::/64 eq 128 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -347,13 +356,6 @@ ipv6 unicast-routing vrf Tenant_A_WEB_Zone ipv6 unicast-routing vrf Tenant_B_OP_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! -ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 - seq 10 permit 2001:1::/64 eq 128 -! mlag configuration domain-id DC1_LEAF4 local-interface Vlan4094 @@ -364,6 +366,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -406,7 +411,7 @@ router bgp 65107 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65107 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65001 - neighbor 192.168.255.6 description DC1-SPINE6 + neighbor 192.168.255.6 description DC1-SPINE6_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -520,11 +525,4 @@ router bgp 65107 neighbor interface Vlan2 peer-group MLAG_PEER remote-as 65107 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE1.cfg index 4e2d951449e..0ddf6fabe49 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE1 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -77,12 +80,12 @@ interface Ethernet7 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.101/24 @@ -90,13 +93,16 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,25 +136,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -159,11 +165,4 @@ router bgp 65001 neighbor UNDERLAY_PEERS next-hop address-family ipv6 originate neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE2.cfg index 04a632f8e68..a231cc81025 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE2 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -77,12 +80,12 @@ interface Ethernet7 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.102/24 @@ -90,13 +93,16 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,25 +136,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -159,11 +165,4 @@ router bgp 65001 neighbor UNDERLAY_PEERS next-hop address-family ipv6 originate neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE3.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE3.cfg index e46d6e59670..18dc3436416 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE3.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE3.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE3 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -77,12 +80,12 @@ interface Ethernet7 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.103/24 @@ -90,13 +93,16 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,25 +136,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -159,11 +165,4 @@ router bgp 65001 neighbor UNDERLAY_PEERS next-hop address-family ipv6 originate neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE4.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE4.cfg index 2ef52d7a289..88ade62d5a4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE4.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE4.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE4 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -77,12 +80,12 @@ interface Ethernet7 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.104/24 @@ -90,13 +93,16 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -130,25 +136,25 @@ router bgp 65001 neighbor interface Ethernet7 peer-group UNDERLAY_PEERS remote-as 65105 neighbor 192.168.255.5 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.5 remote-as 65101 - neighbor 192.168.255.5 description DC1-LEAF1A + neighbor 192.168.255.5 description DC1-LEAF1A_Loopback0 neighbor 192.168.255.6 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.6 remote-as 65102 - neighbor 192.168.255.6 description DC1-LEAF2A + neighbor 192.168.255.6 description DC1-LEAF2A_Loopback0 neighbor 192.168.255.7 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.7 remote-as 65102 - neighbor 192.168.255.7 description DC1-LEAF2B + neighbor 192.168.255.7 description DC1-LEAF2B_Loopback0 neighbor 192.168.255.8 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.8 remote-as 65103 - neighbor 192.168.255.8 description DC1-SVC3A + neighbor 192.168.255.8 description DC1-SVC3A_Loopback0 neighbor 192.168.255.9 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.9 remote-as 65103 - neighbor 192.168.255.9 description DC1-SVC3B + neighbor 192.168.255.9 description DC1-SVC3B_Loopback0 neighbor 192.168.255.10 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.10 remote-as 65104 - neighbor 192.168.255.10 description DC1-BL1A + neighbor 192.168.255.10 description DC1-BL1A_Loopback0 neighbor 192.168.255.11 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.11 remote-as 65105 - neighbor 192.168.255.11 description DC1-BL1B + neighbor 192.168.255.11 description DC1-BL1B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -159,11 +165,4 @@ router bgp 65001 neighbor UNDERLAY_PEERS next-hop address-family ipv6 originate neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE5.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE5.cfg index a441adba6fe..98c30407f1c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE5.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE5.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE5 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -56,13 +59,13 @@ interface Ethernet4 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.5/32 ipv6 address 2001:1::5/128 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -70,16 +73,19 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 seq 10 permit 2001:1::/64 eq 128 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -113,10 +119,10 @@ router bgp 65001 neighbor interface Ethernet4 peer-group UNDERLAY_PEERS remote-as 65106 neighbor 2001:1::c peer group EVPN-OVERLAY-PEERS neighbor 2001:1::c remote-as 65106 - neighbor 2001:1::c description DC1-LEAF3A + neighbor 2001:1::c description DC1-LEAF3A_Loopback0 neighbor 2001:1::d peer group EVPN-OVERLAY-PEERS neighbor 2001:1::d remote-as 65106 - neighbor 2001:1::d description DC1-LEAF3B + neighbor 2001:1::d description DC1-LEAF3B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -130,11 +136,4 @@ router bgp 65001 address-family ipv6 neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE6.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE6.cfg index 371f52ab3be..dcaa56ecad5 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE6.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SPINE6.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -14,17 +26,8 @@ hostname DC1-SPINE6 ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer -! spanning-tree mode none ! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vrf instance MGMT ! interface Ethernet1 @@ -42,13 +45,13 @@ interface Ethernet2 ipv6 enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.6/32 ipv6 address 2001:1::6/128 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.105/24 @@ -56,16 +59,19 @@ interface Management1 ip routing ipv6 interfaces no ip routing vrf MGMT ! -ipv6 unicast-routing -! ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY seq 10 permit 192.168.255.0/24 eq 32 ! ipv6 prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 seq 10 permit 2001:1::/64 eq 128 ! +ipv6 unicast-routing +! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -97,10 +103,10 @@ router bgp 65001 neighbor interface Ethernet2 peer-group UNDERLAY_PEERS remote-as 65107 neighbor 192.168.255.14 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.14 remote-as 65107 - neighbor 192.168.255.14 description DC1-LEAF4A + neighbor 192.168.255.14 description DC1-LEAF4A_Loopback0 neighbor 192.168.255.15 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.15 remote-as 65107 - neighbor 192.168.255.15 description DC1-LEAF4B + neighbor 192.168.255.15 description DC1-LEAF4B_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! address-family evpn @@ -114,11 +120,4 @@ router bgp 65001 address-family ipv6 neighbor UNDERLAY_PEERS activate ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3A.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3A.cfg index 86d81f3091c..6fed0a7a16a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3A.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3A.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-SVC3A ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -87,43 +90,43 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -147,38 +150,37 @@ vrf instance Tenant_C_OP_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3B_Po5 + description MLAG_DC1-SVC3B_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel10 - description server03_ESI_PortChanne1 + description PortChanne1 no shutdown - switchport switchport trunk allowed vlan 110-111,210-211 switchport mode trunk + switchport evpn ethernet-segment identifier 0000:0000:0303:0202:0101 route-target import 03:03:02:02:01:01 lacp system-id 0303.0202.0101 ! interface Port-Channel14 - description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL + description ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 14 spanning-tree portfast spanning-tree bpdufilter enable @@ -188,11 +190,11 @@ interface Port-Channel14 storm-control unknown-unicast level 2 ! interface Port-Channel15 - description server08_no_profile_port_channel_server08_no_profile_port_channel + description server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -230,12 +232,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3B_Ethernet5 + description MLAG_DC1-SVC3B_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3B_Ethernet6 + description MLAG_DC1-SVC3B_Ethernet6 no shutdown channel-group 5 mode active ! @@ -250,12 +252,12 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet10 - description server03_ESI_Eth1 + description SERVER_server03_ESI_Eth1 no shutdown channel-group 10 mode active ! interface Ethernet11 - description server04_inherit_all_from_profile_Eth1 + description SERVER_server04_inherit_all_from_profile_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -268,7 +270,7 @@ interface Ethernet11 spanning-tree bpdufilter enable ! interface Ethernet12 - description server05_no_profile_Eth1 + description SERVER_server05_no_profile_Eth1 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -281,7 +283,7 @@ interface Ethernet12 spanning-tree bpdufilter enable ! interface Ethernet13 - description server06_override_profile_Eth1 + description SERVER_server06_override_profile_Eth1 no shutdown switchport access vlan 210 switchport mode access @@ -294,17 +296,17 @@ interface Ethernet13 spanning-tree bpduguard enable ! interface Ethernet14 - description server07_inherit_all_from_profile_port_channel_Eth1 + description SERVER_server07_inherit_all_from_profile_port_channel_Eth1 no shutdown channel-group 14 mode active ! interface Ethernet15 - description server08_no_profile_port_channel_Eth1 + description SERVER_server08_no_profile_port_channel_Eth1 no shutdown channel-group 15 mode on ! interface Ethernet16 - description server09_override_profile_no_port_channel_Eth1 + description SERVER_server09_override_profile_no_port_channel_Eth1 no shutdown switchport access vlan 210 switchport mode access @@ -317,12 +319,12 @@ interface Ethernet16 spanning-tree bpduguard enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.8/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -333,13 +335,13 @@ interface Loopback100 ip address 10.255.1.8/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.108/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -439,69 +441,69 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ipv6 enable ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -558,6 +560,10 @@ ip routing ipv6 interfaces vrf Tenant_B_WAN_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_WAN_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -569,10 +575,6 @@ ipv6 unicast-routing vrf Tenant_B_WAN_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ipv6 unicast-routing vrf Tenant_C_WAN_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! mlag configuration domain-id DC1_SVC3 local-interface Vlan4094 @@ -583,6 +585,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -625,16 +630,16 @@ router bgp 65103 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65103 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -786,11 +791,4 @@ router bgp 65103 neighbor interface Vlan3030 peer-group MLAG_PEER remote-as 65103 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3B.cfg b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3B.cfg index 191fbadb27c..cde663e22d1 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3B.cfg +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/configs/DC1-SVC3B.cfg @@ -1,4 +1,16 @@ -!RANCID-CONTENT-TYPE: arista +! +no enable password +no aaa root +! +username admin privilege 15 role network-admin nopassword +username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. +! +management api http-commands + protocol https + no shutdown + ! + vrf MGMT + no shutdown ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=192.168.200.11:9910 -cvauth=key,telarista -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -16,24 +28,15 @@ hostname DC1-SVC3B ip name-server vrf MGMT 8.8.8.8 ip name-server vrf MGMT 192.168.200.5 ! -ntp local-interface vrf MGMT Management1 -ntp server vrf MGMT 192.168.200.5 prefer +platform sand lag hardware-only ! spanning-tree mode mstp no spanning-tree vlan-id 4093-4094 spanning-tree mst 0 priority 4096 ! -platform sand lag hardware-only -! -no enable password -no aaa root -! -username admin privilege 15 role network-admin nopassword -username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj. -! vlan 2 - name MLAG_iBGP_Tenant_C_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_OP_Zone + trunk group MLAG ! vlan 110 name Tenant_A_OP_Zone_1 @@ -87,43 +90,43 @@ vlan 350 name Tenant_C_WAN_Zone_1 ! vlan 3009 - name MLAG_iBGP_Tenant_A_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_OP_Zone + trunk group MLAG ! vlan 3010 - name MLAG_iBGP_Tenant_A_WEB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WEB_Zone + trunk group MLAG ! vlan 3011 - name MLAG_iBGP_Tenant_A_APP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_APP_Zone + trunk group MLAG ! vlan 3012 - name MLAG_iBGP_Tenant_A_DB_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_DB_Zone + trunk group MLAG ! vlan 3013 - name MLAG_iBGP_Tenant_A_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_A_WAN_Zone + trunk group MLAG ! vlan 3019 - name MLAG_iBGP_Tenant_B_OP_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_OP_Zone + trunk group MLAG ! vlan 3020 - name MLAG_iBGP_Tenant_B_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_B_WAN_Zone + trunk group MLAG ! vlan 3030 - name MLAG_iBGP_Tenant_C_WAN_Zone - trunk group LEAF_PEER_L3 + name MLAG_L3_VRF_Tenant_C_WAN_Zone + trunk group MLAG ! vlan 4093 - name LEAF_PEER_L3 - trunk group LEAF_PEER_L3 + name MLAG_L3 + trunk group MLAG ! vlan 4094 - name MLAG_PEER + name MLAG trunk group MLAG ! vrf instance MGMT @@ -147,27 +150,26 @@ vrf instance Tenant_C_OP_Zone vrf instance Tenant_C_WAN_Zone ! interface Port-Channel5 - description MLAG_PEER_DC1-SVC3A_Po5 + description MLAG_DC1-SVC3A_Port-Channel5 no shutdown - switchport switchport mode trunk - switchport trunk group LEAF_PEER_L3 switchport trunk group MLAG + switchport ! interface Port-Channel7 description DC1_L2LEAF2_Po1 no shutdown - switchport switchport trunk allowed vlan 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 switchport mode trunk + switchport mlag 7 ! interface Port-Channel14 - description server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL + description ALL_WITH_SECURITY_PORT_CHANNEL no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 14 spanning-tree portfast spanning-tree bpdufilter enable @@ -177,11 +179,11 @@ interface Port-Channel14 storm-control unknown-unicast level 2 ! interface Port-Channel15 - description server08_no_profile_port_channel_server08_no_profile_port_channel + description server08_no_profile_port_channel no shutdown - switchport switchport trunk allowed vlan 1-4094 switchport mode trunk + switchport mlag 15 spanning-tree portfast spanning-tree bpdufilter enable @@ -219,12 +221,12 @@ interface Ethernet4 ipv6 enable ! interface Ethernet5 - description MLAG_PEER_DC1-SVC3A_Ethernet5 + description MLAG_DC1-SVC3A_Ethernet5 no shutdown channel-group 5 mode active ! interface Ethernet6 - description MLAG_PEER_DC1-SVC3A_Ethernet6 + description MLAG_DC1-SVC3A_Ethernet6 no shutdown channel-group 5 mode active ! @@ -239,7 +241,7 @@ interface Ethernet8 channel-group 7 mode active ! interface Ethernet11 - description server04_inherit_all_from_profile_Eth2 + description SERVER_server04_inherit_all_from_profile_Eth2 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -252,7 +254,7 @@ interface Ethernet11 spanning-tree bpdufilter enable ! interface Ethernet12 - description server05_no_profile_Eth2 + description SERVER_server05_no_profile_Eth2 no shutdown switchport trunk allowed vlan 1-4094 switchport mode trunk @@ -265,7 +267,7 @@ interface Ethernet12 spanning-tree bpdufilter enable ! interface Ethernet13 - description server06_override_profile_Eth2 + description SERVER_server06_override_profile_Eth2 no shutdown switchport access vlan 210 switchport mode access @@ -278,17 +280,17 @@ interface Ethernet13 spanning-tree bpduguard enable ! interface Ethernet14 - description server07_inherit_all_from_profile_port_channel_Eth2 + description SERVER_server07_inherit_all_from_profile_port_channel_Eth2 no shutdown channel-group 14 mode active ! interface Ethernet15 - description server08_no_profile_port_channel_Eth2 + description SERVER_server08_no_profile_port_channel_Eth2 no shutdown channel-group 15 mode on ! interface Ethernet16 - description server09_override_profile_no_port_channel_Eth2 + description SERVER_server09_override_profile_no_port_channel_Eth2 no shutdown switchport access vlan 210 switchport mode access @@ -301,12 +303,12 @@ interface Ethernet16 spanning-tree bpduguard enable ! interface Loopback0 - description EVPN_Overlay_Peering + description ROUTER_ID no shutdown ip address 192.168.255.9/32 ! interface Loopback1 - description VTEP_VXLAN_Tunnel_Source + description VXLAN_TUNNEL_SOURCE no shutdown ip address 192.168.254.8/32 ! @@ -317,13 +319,13 @@ interface Loopback100 ip address 10.255.1.9/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 192.168.200.109/24 ! interface Vlan2 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone + description MLAG_L3_VRF_Tenant_C_OP_Zone no shutdown mtu 1500 vrf Tenant_C_OP_Zone @@ -423,69 +425,69 @@ interface Vlan350 ip address virtual 10.3.50.1/24 ! interface Vlan3009 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone + description MLAG_L3_VRF_Tenant_A_OP_Zone no shutdown mtu 1500 vrf Tenant_A_OP_Zone ipv6 enable ! interface Vlan3010 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone + description MLAG_L3_VRF_Tenant_A_WEB_Zone no shutdown mtu 1500 vrf Tenant_A_WEB_Zone ipv6 enable ! interface Vlan3011 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone + description MLAG_L3_VRF_Tenant_A_APP_Zone no shutdown mtu 1500 vrf Tenant_A_APP_Zone ipv6 enable ! interface Vlan3012 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone + description MLAG_L3_VRF_Tenant_A_DB_Zone no shutdown mtu 1500 vrf Tenant_A_DB_Zone ipv6 enable ! interface Vlan3013 - description MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone + description MLAG_L3_VRF_Tenant_A_WAN_Zone no shutdown mtu 1500 vrf Tenant_A_WAN_Zone ipv6 enable ! interface Vlan3019 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone + description MLAG_L3_VRF_Tenant_B_OP_Zone no shutdown mtu 1500 vrf Tenant_B_OP_Zone ipv6 enable ! interface Vlan3020 - description MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone + description MLAG_L3_VRF_Tenant_B_WAN_Zone no shutdown mtu 1500 vrf Tenant_B_WAN_Zone ipv6 enable ! interface Vlan3030 - description MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone + description MLAG_L3_VRF_Tenant_C_WAN_Zone no shutdown mtu 1500 vrf Tenant_C_WAN_Zone ipv6 enable ! interface Vlan4093 - description MLAG_PEER_L3_PEERING + description MLAG_L3 no shutdown mtu 1500 ipv6 enable ! interface Vlan4094 - description MLAG_PEER + description MLAG no shutdown mtu 1500 no autostate @@ -542,6 +544,10 @@ ip routing ipv6 interfaces vrf Tenant_B_WAN_Zone ip routing ipv6 interfaces vrf Tenant_C_OP_Zone ip routing ipv6 interfaces vrf Tenant_C_WAN_Zone ! +ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY + seq 10 permit 192.168.255.0/24 eq 32 + seq 20 permit 192.168.254.0/24 eq 32 +! ipv6 unicast-routing ipv6 unicast-routing vrf Tenant_A_APP_Zone ipv6 unicast-routing vrf Tenant_A_DB_Zone @@ -553,10 +559,6 @@ ipv6 unicast-routing vrf Tenant_B_WAN_Zone ipv6 unicast-routing vrf Tenant_C_OP_Zone ipv6 unicast-routing vrf Tenant_C_WAN_Zone ! -ip prefix-list PL-LOOPBACKS-EVPN-OVERLAY - seq 10 permit 192.168.255.0/24 eq 32 - seq 20 permit 192.168.254.0/24 eq 32 -! mlag configuration domain-id DC1_SVC3 local-interface Vlan4094 @@ -567,6 +569,9 @@ mlag configuration ! ip route vrf MGMT 0.0.0.0/0 192.168.200.5 ! +ntp local-interface vrf MGMT Management1 +ntp server vrf MGMT 192.168.200.5 prefer +! route-map RM-CONN-2-BGP permit 10 match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY ! @@ -609,16 +614,16 @@ router bgp 65103 neighbor interface Vlan4093 peer-group MLAG_PEER remote-as 65103 neighbor 192.168.255.1 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.1 remote-as 65001 - neighbor 192.168.255.1 description DC1-SPINE1 + neighbor 192.168.255.1 description DC1-SPINE1_Loopback0 neighbor 192.168.255.2 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.2 remote-as 65001 - neighbor 192.168.255.2 description DC1-SPINE2 + neighbor 192.168.255.2 description DC1-SPINE2_Loopback0 neighbor 192.168.255.3 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.3 remote-as 65001 - neighbor 192.168.255.3 description DC1-SPINE3 + neighbor 192.168.255.3 description DC1-SPINE3_Loopback0 neighbor 192.168.255.4 peer group EVPN-OVERLAY-PEERS neighbor 192.168.255.4 remote-as 65001 - neighbor 192.168.255.4 description DC1-SPINE4 + neighbor 192.168.255.4 description DC1-SPINE4_Loopback0 redistribute connected route-map RM-CONN-2-BGP ! vlan-aware-bundle Tenant_A_APP_Zone @@ -770,11 +775,4 @@ router bgp 65103 neighbor interface Vlan3030 peer-group MLAG_PEER remote-as 65103 redistribute connected ! -management api http-commands - protocol https - no shutdown - ! - vrf MGMT - no shutdown -! end diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml index 1fdf9cb897f..9a0f377bf28 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1A.yml @@ -83,22 +83,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' - ip_address: 10.23.23.2 remote_as: '64900' @@ -107,7 +107,6 @@ router_bgp: peer_group: UNDERLAY_PEERS vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:14 route_targets: import: @@ -118,6 +117,7 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -152,7 +152,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:21 route_targets: import: @@ -163,10 +162,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.10 rd: 192.168.255.10:31 route_targets: import: @@ -177,6 +176,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.10 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -229,6 +229,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -262,7 +268,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.110/24 @@ -294,7 +300,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -303,7 +310,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -312,7 +320,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -321,14 +330,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet6 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet9 peer: DC1-BL1B peer_interface: Ethernet9 peer_type: l3leaf description: P2P_LINK_TO_DC1-BL1B_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ipv6_enable: true @@ -337,7 +348,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: l3leaf description: P2P_LINK_TO_DC1-BL1B_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ipv6_enable: true @@ -346,7 +358,8 @@ ethernet_interfaces: peer_interface: other1 peer_type: other description: P2P_LINK_TO_outside-r1_other1 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.23.23.1/30 @@ -354,18 +367,19 @@ ethernet_interfaces: description: My test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 peer_type: my_precious loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.10/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.10/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml index 755868bf7f0..511e7c37de8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-BL1B.yml @@ -83,22 +83,22 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' - ip_address: 10.23.23.6 remote_as: '64900' @@ -107,7 +107,6 @@ router_bgp: peer_group: UNDERLAY_PEERS vrfs: - name: Tenant_A_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:14 route_targets: import: @@ -118,6 +117,7 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - source_protocol: static @@ -152,7 +152,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:21 route_targets: import: @@ -163,10 +162,10 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected - name: Tenant_C_WAN_Zone - router_id: 192.168.255.11 rd: 192.168.255.11:31 route_targets: import: @@ -177,6 +176,7 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.11 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -229,6 +229,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -262,7 +268,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.111/24 @@ -294,7 +300,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -303,7 +310,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -312,7 +320,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -321,14 +330,16 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet7 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet9 peer: DC1-BL1A peer_interface: Ethernet9 peer_type: l3leaf description: P2P_LINK_TO_DC1-BL1A_Ethernet9 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ipv6_enable: true @@ -337,7 +348,8 @@ ethernet_interfaces: peer_interface: Ethernet10 peer_type: l3leaf description: P2P_LINK_TO_DC1-BL1A_Ethernet10 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ipv6_enable: true @@ -346,7 +358,8 @@ ethernet_interfaces: peer_interface: other2 peer_type: other description: P2P_LINK_TO_outside-r1_other2 - type: routed + switchport: + enabled: false shutdown: false mtu: 1500 ip_address: 10.23.23.5/30 @@ -355,18 +368,19 @@ ethernet_interfaces: description: My test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 peer_type: my_precious loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.11/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.11/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml index 5beaf75a878..e53bee41601 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF1A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -44,7 +50,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.112/24 @@ -69,7 +75,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -79,17 +84,18 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-LEAF2B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active port_channel_interfaces: - name: Port-Channel1 description: DC1_LEAF2_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,160-161 vlans: - id: 130 name: Tenant_A_APP_Zone_1 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml index bbb12754ee0..9b9e1abc62b 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2A.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.113/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -122,33 +128,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.16/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2B_Po3 - type: switched + description: MLAG_DC1-L2LEAF2B_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2B peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet3 shutdown: false channel_group: id: 3 @@ -157,8 +166,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2B peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2B_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2B_Ethernet4 shutdown: false channel_group: id: 3 @@ -169,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -179,7 +186,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet7 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml index a787d50d9a4..1c2835435f7 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-L2LEAF2B.yml @@ -20,6 +20,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -45,7 +51,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.114/24 @@ -66,7 +72,7 @@ ntp: vlans: - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -122,33 +128,36 @@ vlans: tenant: Tenant_C vlan_interfaces: - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 ip_address: 10.255.252.17/31 port_channel_interfaces: - name: Port-Channel3 - description: MLAG_PEER_DC1-L2LEAF2A_Po3 - type: switched + description: MLAG_DC1-L2LEAF2A_Port-Channel3 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - MLAG - name: Port-Channel1 description: DC1_SVC3_Po7 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 1 ethernet_interfaces: - name: Ethernet3 peer: DC1-L2LEAF2A peer_interface: Ethernet3 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet3 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet3 shutdown: false channel_group: id: 3 @@ -157,8 +166,7 @@ ethernet_interfaces: peer: DC1-L2LEAF2A peer_interface: Ethernet4 peer_type: mlag_peer - description: MLAG_PEER_DC1-L2LEAF2A_Ethernet4 - type: port-channel-member + description: MLAG_DC1-L2LEAF2A_Ethernet4 shutdown: false channel_group: id: 3 @@ -169,7 +177,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3A_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active @@ -179,7 +186,6 @@ ethernet_interfaces: peer_type: l3leaf description: DC1-SVC3B_Ethernet8 shutdown: false - type: port-channel-member channel_group: id: 1 mode: active diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml index fd9a14c9fc5..d406bb21132 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF1A.yml @@ -73,26 +73,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.5 rd: 192.168.255.5:12 route_targets: import: @@ -103,10 +102,10 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected - name: Tenant_A_WEB_Zone - router_id: 192.168.255.5 rd: 192.168.255.5:11 route_targets: import: @@ -117,6 +116,7 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.5 redistribute_routes: - source_protocol: connected vlan_aware_bundles: @@ -158,6 +158,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -188,7 +194,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -220,7 +226,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -229,7 +236,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -238,7 +246,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -247,18 +256,21 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet6 peer: server02_SINGLE_NODE_TRUNK peer_interface: Eth1 peer_type: server port_profile: ALL_WITH_SECURITY - description: server02_SINGLE_NODE_TRUNK_Eth1 + description: SERVER_server02_SINGLE_NODE_TRUNK_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -280,18 +292,19 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: TENANT_A - description: server02_SINGLE_NODE_Eth1 + description: SERVER_server02_SINGLE_NODE_Eth1 shutdown: false - type: switched - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.5/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml index b758d4c7dd1..5c0559bf605 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2A.yml @@ -57,7 +57,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF2B remote_as: '65102' - description: DC1-LEAF2B + description: DC1-LEAF2B_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -93,26 +93,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:12 route_targets: import: @@ -123,11 +122,13 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan3011 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -137,7 +138,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:13 route_targets: import: @@ -148,11 +148,13 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan3012 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -162,7 +164,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:10 route_targets: import: @@ -173,11 +174,13 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan3009 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -187,7 +190,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:11 route_targets: import: @@ -198,11 +200,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan3010 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -212,7 +216,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:20 route_targets: import: @@ -223,11 +226,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan3019 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -237,7 +242,6 @@ router_bgp: updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.6 rd: 192.168.255.6:30 route_targets: import: @@ -248,11 +252,13 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.6 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.3 peer_group: MLAG_PEER + description: DC1-LEAF2B_Vlan2 address_family_ipv4: neighbors: - ip_address: 10.255.251.3 @@ -350,6 +356,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -393,7 +405,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -420,12 +432,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -435,9 +447,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -446,9 +458,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -457,9 +469,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -468,9 +480,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -485,9 +497,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -496,18 +508,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -533,7 +545,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -558,7 +570,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -586,7 +598,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -616,7 +628,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -640,7 +652,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 @@ -664,54 +676,60 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.2/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2B_Po5 - type: switched + description: MLAG_DC1-LEAF2B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,160-161 mlag: 7 - name: Port-Channel10 - description: server01_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 mlag: 10 - name: Port-Channel11 - description: server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 11 - name: Port-Channel12 - description: server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false mtu: 1601 + switchport: + enabled: true mlag: 12 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet5 shutdown: false channel_group: id: 5 @@ -720,8 +738,7 @@ ethernet_interfaces: peer: DC1-LEAF2B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2B_Ethernet6 shutdown: false channel_group: id: 5 @@ -733,7 +750,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -742,7 +760,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -751,7 +770,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -760,7 +780,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-L2LEAF1A @@ -768,7 +789,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -777,9 +797,8 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: TENANT_B - description: server01_MLAG_Eth2 + description: SERVER_server01_MLAG_Eth2 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -788,9 +807,8 @@ ethernet_interfaces: peer_interface: Eth4 peer_type: server port_profile: TENANT_A_MTU - description: server01_MTU_PROFILE_MLAG_Eth4 + description: SERVER_server01_MTU_PROFILE_MLAG_Eth4 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -798,9 +816,8 @@ ethernet_interfaces: peer: server01_MTU_ADAPTOR_MLAG peer_interface: Eth6 peer_type: server - description: server01_MTU_ADAPTOR_MLAG_Eth6 + description: SERVER_server01_MTU_ADAPTOR_MLAG_Eth6 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -827,11 +844,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml index 488fe1e7b4f..76b25d873f4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF2B.yml @@ -57,7 +57,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF2A remote_as: '65102' - description: DC1-LEAF2A + description: DC1-LEAF2A_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -93,26 +93,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:12 route_targets: import: @@ -123,11 +122,13 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan3011 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -137,7 +138,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_DB_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:13 route_targets: import: @@ -148,11 +148,13 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan3012 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -162,7 +164,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:10 route_targets: import: @@ -173,11 +174,13 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan3009 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -187,7 +190,6 @@ router_bgp: updates: wait_install: true - name: Tenant_A_WEB_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:11 route_targets: import: @@ -198,11 +200,13 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan3010 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -212,7 +216,6 @@ router_bgp: updates: wait_install: true - name: Tenant_B_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:20 route_targets: import: @@ -223,11 +226,13 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan3019 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -237,7 +242,6 @@ router_bgp: updates: wait_install: true - name: Tenant_C_OP_Zone - router_id: 192.168.255.7 rd: 192.168.255.7:30 route_targets: import: @@ -248,11 +252,13 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.7 redistribute_routes: - source_protocol: connected neighbors: - ip_address: 10.255.251.2 peer_group: MLAG_PEER + description: DC1-LEAF2A_Vlan2 address_family_ipv4: neighbors: - ip_address: 10.255.251.2 @@ -350,6 +356,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -393,7 +405,7 @@ vrfs: ip_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -420,12 +432,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -435,9 +447,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -446,9 +458,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -457,9 +469,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -468,9 +480,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -485,9 +497,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -496,18 +508,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -533,7 +545,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -558,7 +570,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -586,7 +598,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -616,7 +628,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -640,7 +652,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 @@ -664,54 +676,60 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ip_address: 10.255.251.3/31 port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF2A_Po5 - type: switched + description: MLAG_DC1-LEAF2A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1-L2LEAF1A_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,160-161 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,160-161 mlag: 7 - name: Port-Channel10 - description: server01_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false - mode: trunk - vlans: 210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 210-211 mlag: 10 - name: Port-Channel11 - description: server01_MTU_PROFILE_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false mtu: 1600 - mode: access - vlans: '110' + switchport: + enabled: true + mode: access + access_vlan: '110' mlag: 11 - name: Port-Channel12 - description: server01_MTU_ADAPTOR_MLAG_PortChanne1 - type: switched + description: PortChanne1 shutdown: false mtu: 1601 + switchport: + enabled: true mlag: 12 ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF2A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet5 shutdown: false channel_group: id: 5 @@ -720,8 +738,7 @@ ethernet_interfaces: peer: DC1-LEAF2A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF2A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF2A_Ethernet6 shutdown: false channel_group: id: 5 @@ -733,7 +750,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -742,7 +760,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -751,7 +770,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -760,7 +780,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-L2LEAF1A @@ -768,7 +789,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF1A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -777,9 +797,8 @@ ethernet_interfaces: peer_interface: Eth3 peer_type: server port_profile: TENANT_B - description: server01_MLAG_Eth3 + description: SERVER_server01_MLAG_Eth3 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -788,9 +807,8 @@ ethernet_interfaces: peer_interface: Eth5 peer_type: server port_profile: TENANT_A_MTU - description: server01_MTU_PROFILE_MLAG_Eth5 + description: SERVER_server01_MTU_PROFILE_MLAG_Eth5 shutdown: false - type: port-channel-member channel_group: id: 11 mode: active @@ -798,9 +816,8 @@ ethernet_interfaces: peer: server01_MTU_ADAPTOR_MLAG peer_interface: Eth7 peer_type: server - description: server01_MTU_ADAPTOR_MLAG_Eth7 + description: SERVER_server01_MTU_ADAPTOR_MLAG_Eth7 shutdown: false - type: port-channel-member channel_group: id: 12 mode: active @@ -827,11 +844,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.7/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.6/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3A.yml index b8e65491d6f..511c75cab3e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3A.yml @@ -63,7 +63,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF3B remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -89,11 +89,10 @@ router_bgp: - ip_address: 2001:1::5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE5 - description: DC1-SPINE5 + description: DC1-SPINE5_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:12 route_targets: import: @@ -104,15 +103,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:13 route_targets: import: @@ -123,15 +122,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:10 route_targets: import: @@ -142,15 +141,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan3009 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:11 route_targets: import: @@ -161,15 +160,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:20 route_targets: import: @@ -180,15 +179,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan3019 - name: Tenant_C_OP_Zone - router_id: 192.168.255.12 rd: 192.168.255.12:30 route_targets: import: @@ -199,13 +198,14 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.12 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3B + description: DC1-LEAF3B_Vlan2 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.12:12 @@ -295,6 +295,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -344,7 +350,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -371,12 +377,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -386,9 +392,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -397,9 +403,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -408,9 +414,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -419,9 +425,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -436,9 +442,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -447,18 +453,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -484,7 +490,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -509,7 +515,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -537,7 +543,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -567,7 +573,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -591,7 +597,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -615,26 +621,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF3B_Po5 - type: switched + description: MLAG_DC1-LEAF3B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF3B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF3B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF3B_Ethernet5 shutdown: false channel_group: id: 5 @@ -643,8 +649,7 @@ ethernet_interfaces: peer: DC1-LEAF3B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF3B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF3B_Ethernet6 shutdown: false channel_group: id: 5 @@ -656,7 +661,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE5_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE5 @@ -665,7 +671,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE5_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true mlag_configuration: domain_id: DC1_LEAF3 @@ -694,12 +701,12 @@ route_maps: - ipv6 address prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.12/32 ipv6_address: 2001:1::c/128 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.12/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3B.yml index 6fe26dbaca6..83b4c2a6fb8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF3B.yml @@ -63,7 +63,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF3A remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -89,11 +89,10 @@ router_bgp: - ip_address: 2001:1::5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE5 - description: DC1-SPINE5 + description: DC1-SPINE5_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:12 route_targets: import: @@ -104,15 +103,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:13 route_targets: import: @@ -123,15 +122,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:10 route_targets: import: @@ -142,15 +141,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan3009 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:11 route_targets: import: @@ -161,15 +160,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:20 route_targets: import: @@ -180,15 +179,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan3019 - name: Tenant_C_OP_Zone - router_id: 192.168.255.13 rd: 192.168.255.13:30 route_targets: import: @@ -199,13 +198,14 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.13 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65106' - description: DC1-LEAF3A + description: DC1-LEAF3A_Vlan2 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.13:12 @@ -295,6 +295,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -344,7 +350,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -371,12 +377,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -386,9 +392,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -397,9 +403,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -408,9 +414,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -419,9 +425,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -436,9 +442,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -447,18 +453,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -484,7 +490,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -509,7 +515,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -537,7 +543,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -567,7 +573,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -591,7 +597,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -615,26 +621,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF3A_Po5 - type: switched + description: MLAG_DC1-LEAF3A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF3A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF3A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF3A_Ethernet5 shutdown: false channel_group: id: 5 @@ -643,8 +649,7 @@ ethernet_interfaces: peer: DC1-LEAF3A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF3A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF3A_Ethernet6 shutdown: false channel_group: id: 5 @@ -656,7 +661,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE5_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE5 @@ -665,7 +671,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE5_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true mlag_configuration: domain_id: DC1_LEAF3 @@ -694,12 +701,12 @@ route_maps: - ipv6 address prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.13/32 ipv6_address: 2001:1::d/128 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.12/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4A.yml index 450dcf5a19f..f789fab036c 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4A.yml @@ -63,7 +63,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF4B remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -84,11 +84,10 @@ router_bgp: - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE6 - description: DC1-SPINE6 + description: DC1-SPINE6_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:12 route_targets: import: @@ -99,15 +98,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:13 route_targets: import: @@ -118,15 +117,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:10 route_targets: import: @@ -137,15 +136,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan3009 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:11 route_targets: import: @@ -156,15 +155,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:20 route_targets: import: @@ -175,15 +174,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan3019 - name: Tenant_C_OP_Zone - router_id: 192.168.255.14 rd: 192.168.255.14:30 route_targets: import: @@ -194,13 +193,14 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.14 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4B + description: DC1-LEAF4B_Vlan2 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.14:12 @@ -290,6 +290,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -339,7 +345,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.106/24 @@ -366,12 +372,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -381,9 +387,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -392,9 +398,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -403,9 +409,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -414,9 +420,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -431,9 +437,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -442,18 +448,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -479,7 +485,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -504,7 +510,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -532,7 +538,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -562,7 +568,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -586,7 +592,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -610,26 +616,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF4B_Po5 - type: switched + description: MLAG_DC1-LEAF4B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF4B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF4B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF4B_Ethernet5 shutdown: false channel_group: id: 5 @@ -638,8 +644,7 @@ ethernet_interfaces: peer: DC1-LEAF4B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF4B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF4B_Ethernet6 shutdown: false channel_group: id: 5 @@ -651,7 +656,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE6_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true mlag_configuration: domain_id: DC1_LEAF4 @@ -680,12 +686,12 @@ route_maps: - ipv6 address prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.14/32 ipv6_address: 2001:1::e/128 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.14/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4B.yml index a72467a51a9..7bda784913e 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-LEAF4B.yml @@ -63,7 +63,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-LEAF4A remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -84,11 +84,10 @@ router_bgp: - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE6 - description: DC1-SPINE6 + description: DC1-SPINE6_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:12 route_targets: import: @@ -99,15 +98,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:13 route_targets: import: @@ -118,15 +117,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:10 route_targets: import: @@ -137,15 +136,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan3009 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:11 route_targets: import: @@ -156,15 +155,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:20 route_targets: import: @@ -175,15 +174,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan3019 - name: Tenant_C_OP_Zone - router_id: 192.168.255.15 rd: 192.168.255.15:30 route_targets: import: @@ -194,13 +193,14 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.15 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65107' - description: DC1-LEAF4A + description: DC1-LEAF4A_Vlan2 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.15:12 @@ -290,6 +290,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -339,7 +345,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.107/24 @@ -366,12 +372,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -381,9 +387,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -392,9 +398,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -403,9 +409,9 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -414,9 +420,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -431,9 +437,9 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -442,18 +448,18 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -479,7 +485,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -504,7 +510,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -532,7 +538,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -562,7 +568,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -586,7 +592,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -610,26 +616,26 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-LEAF4A_Po5 - type: switched + description: MLAG_DC1-LEAF4A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG ethernet_interfaces: - name: Ethernet5 peer: DC1-LEAF4A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF4A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-LEAF4A_Ethernet5 shutdown: false channel_group: id: 5 @@ -638,8 +644,7 @@ ethernet_interfaces: peer: DC1-LEAF4A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-LEAF4A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-LEAF4A_Ethernet6 shutdown: false channel_group: id: 5 @@ -651,7 +656,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE6_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true mlag_configuration: domain_id: DC1_LEAF4 @@ -680,12 +686,12 @@ route_maps: - ipv6 address prefix-list PL-LOOPBACKS-EVPN-OVERLAY-V6 loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.15/32 ipv6_address: 2001:1::f/128 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.14/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml index a2aae8b0405..0d86397565a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE1.yml @@ -85,37 +85,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -139,6 +139,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -160,7 +166,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.101/24 @@ -186,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF2A @@ -195,7 +202,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-LEAF2B @@ -204,7 +212,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SVC3A @@ -213,7 +222,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet5 peer: DC1-SVC3B @@ -222,7 +232,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet6 peer: DC1-BL1A @@ -231,7 +242,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-BL1B @@ -240,11 +252,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.1/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml index 4c783f5b18b..d2ba271152a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE2.yml @@ -85,37 +85,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -139,6 +139,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -160,7 +166,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.102/24 @@ -186,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF2A @@ -195,7 +202,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-LEAF2B @@ -204,7 +212,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SVC3A @@ -213,7 +222,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet5 peer: DC1-SVC3B @@ -222,7 +232,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet6 peer: DC1-BL1A @@ -231,7 +242,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-BL1B @@ -240,11 +252,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.2/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml index 75ee4497ec7..742e6bd1beb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE3.yml @@ -85,37 +85,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -139,6 +139,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -160,7 +166,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.103/24 @@ -186,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF2A @@ -195,7 +202,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-LEAF2B @@ -204,7 +212,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SVC3A @@ -213,7 +222,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet5 peer: DC1-SVC3B @@ -222,7 +232,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet6 peer: DC1-BL1A @@ -231,7 +242,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-BL1B @@ -240,11 +252,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet3 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.3/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml index bfda6af3685..f0aae2fbbeb 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE4.yml @@ -85,37 +85,37 @@ router_bgp: - ip_address: 192.168.255.10 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1A - description: DC1-BL1A + description: DC1-BL1A_Loopback0 remote_as: '65104' - ip_address: 192.168.255.11 peer_group: EVPN-OVERLAY-PEERS peer: DC1-BL1B - description: DC1-BL1B + description: DC1-BL1B_Loopback0 remote_as: '65105' - ip_address: 192.168.255.5 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF1A - description: DC1-LEAF1A + description: DC1-LEAF1A_Loopback0 remote_as: '65101' - ip_address: 192.168.255.6 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2A - description: DC1-LEAF2A + description: DC1-LEAF2A_Loopback0 remote_as: '65102' - ip_address: 192.168.255.7 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF2B - description: DC1-LEAF2B + description: DC1-LEAF2B_Loopback0 remote_as: '65102' - ip_address: 192.168.255.8 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3A - description: DC1-SVC3A + description: DC1-SVC3A_Loopback0 remote_as: '65103' - ip_address: 192.168.255.9 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SVC3B - description: DC1-SVC3B + description: DC1-SVC3B_Loopback0 remote_as: '65103' static_routes: - vrf: MGMT @@ -139,6 +139,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -160,7 +166,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.104/24 @@ -186,7 +192,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF2A @@ -195,7 +202,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-LEAF2B @@ -204,7 +212,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF2B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SVC3A @@ -213,7 +222,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet5 peer: DC1-SVC3B @@ -222,7 +232,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SVC3B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet6 peer: DC1-BL1A @@ -231,7 +242,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1A_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-BL1B @@ -240,11 +252,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-BL1B_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.4/32 prefix_lists: diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE5.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE5.yml index fdc75ccc7ee..336d5c6165a 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE5.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE5.yml @@ -74,12 +74,12 @@ router_bgp: - ip_address: 2001:1::c peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF3A - description: DC1-LEAF3A + description: DC1-LEAF3A_Loopback0 remote_as: '65106' - ip_address: 2001:1::d peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF3B - description: DC1-LEAF3B + description: DC1-LEAF3B_Loopback0 remote_as: '65106' static_routes: - vrf: MGMT @@ -103,6 +103,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -124,7 +130,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -150,7 +156,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF3A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF3B @@ -159,7 +166,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF3B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-LEAF3A @@ -168,7 +176,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF3A_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-LEAF3B @@ -177,11 +186,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF3B_Ethernet2 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.5/32 ipv6_address: 2001:1::5/128 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE6.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE6.yml index 99b397fa9e4..5a978c5f1a4 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE6.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SPINE6.yml @@ -64,12 +64,12 @@ router_bgp: - ip_address: 192.168.255.14 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF4A - description: DC1-LEAF4A + description: DC1-LEAF4A_Loopback0 remote_as: '65107' - ip_address: 192.168.255.15 peer_group: EVPN-OVERLAY-PEERS peer: DC1-LEAF4B - description: DC1-LEAF4B + description: DC1-LEAF4B_Loopback0 remote_as: '65107' static_routes: - vrf: MGMT @@ -93,6 +93,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -114,7 +120,7 @@ vrfs: ip_routing: false management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.105/24 @@ -140,7 +146,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF4A_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-LEAF4B @@ -149,11 +156,12 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-LEAF4B_Ethernet1 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.6/32 ipv6_address: 2001:1::6/128 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml index 184966cd352..b11a24a2eb3 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3A.yml @@ -57,7 +57,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-SVC3B remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -93,26 +93,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:12 route_targets: import: @@ -123,15 +122,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:13 route_targets: import: @@ -142,15 +141,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:10 route_targets: import: @@ -161,15 +160,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3009 - name: Tenant_A_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:14 route_targets: import: @@ -180,15 +179,15 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3013 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3013 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:11 route_targets: import: @@ -199,15 +198,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:20 route_targets: import: @@ -218,15 +217,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3019 - name: Tenant_B_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:21 route_targets: import: @@ -237,15 +236,15 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3020 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3020 - name: Tenant_C_OP_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:30 route_targets: import: @@ -256,15 +255,15 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan2 - name: Tenant_C_WAN_Zone - router_id: 192.168.255.8 rd: 192.168.255.8:31 route_targets: import: @@ -275,13 +274,14 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.8 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3030 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3B + description: DC1-SVC3B_Vlan3030 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.8:12 @@ -395,6 +395,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -456,7 +462,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.108/24 @@ -483,12 +489,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -498,9 +504,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -509,9 +515,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -520,17 +526,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -539,9 +545,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -556,17 +562,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -575,26 +581,26 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -620,7 +626,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -645,7 +651,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -673,7 +679,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -689,7 +695,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ipv6_enable: true @@ -719,7 +725,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -743,7 +749,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -759,7 +765,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ipv6_enable: true @@ -783,7 +789,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true @@ -799,42 +805,49 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3B_Po5 - type: switched + description: MLAG_DC1-SVC3B_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 7 - name: Port-Channel10 - description: server03_ESI_PortChanne1 - type: switched + description: PortChanne1 shutdown: false - mode: trunk - vlans: 110-111,210-211 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,210-211 evpn_ethernet_segment: identifier: 0000:0000:0303:0202:0101 route_target: 03:03:02:02:01:01 lacp_id: 0303.0202.0101 - name: Port-Channel14 - description: server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched + description: ALL_WITH_SECURITY_PORT_CHANNEL shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -853,11 +866,13 @@ port_channel_interfaces: unit: percent mlag: 14 - name: Port-Channel15 - description: server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched + description: server08_no_profile_port_channel shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -880,8 +895,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet5 shutdown: false channel_group: id: 5 @@ -890,8 +904,7 @@ ethernet_interfaces: peer: DC1-SVC3B peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3B_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3B_Ethernet6 shutdown: false channel_group: id: 5 @@ -903,7 +916,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -912,7 +926,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -921,7 +936,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -930,7 +946,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet4 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-L2LEAF2A @@ -938,7 +955,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -948,7 +964,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet1 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -957,9 +972,8 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: TENANT_A_B - description: server03_ESI_Eth1 + description: SERVER_server03_ESI_Eth1 shutdown: false - type: port-channel-member channel_group: id: 10 mode: active @@ -968,11 +982,13 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: ALL_WITH_SECURITY - description: server04_inherit_all_from_profile_Eth1 + description: SERVER_server04_inherit_all_from_profile_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -993,11 +1009,13 @@ ethernet_interfaces: peer: server05_no_profile peer_interface: Eth1 peer_type: server - description: server05_no_profile_Eth1 + description: SERVER_server05_no_profile_Eth1 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -1019,11 +1037,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: ALL_WITH_SECURITY - description: server06_override_profile_Eth1 + description: SERVER_server06_override_profile_Eth1 shutdown: false - type: switched - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1045,9 +1064,8 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: ALL_WITH_SECURITY_PORT_CHANNEL - description: server07_inherit_all_from_profile_port_channel_Eth1 + description: SERVER_server07_inherit_all_from_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1055,9 +1073,8 @@ ethernet_interfaces: peer: server08_no_profile_port_channel peer_interface: Eth1 peer_type: server - description: server08_no_profile_port_channel_Eth1 + description: SERVER_server08_no_profile_port_channel_Eth1 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1066,11 +1083,12 @@ ethernet_interfaces: peer_interface: Eth1 peer_type: server port_profile: ALL_WITH_SECURITY_PORT_CHANNEL - description: server09_override_profile_no_port_channel_Eth1 + description: SERVER_server09_override_profile_no_port_channel_Eth1 shutdown: false - type: switched - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1110,11 +1128,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.8/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml index 8760c068e68..e4af98bf7b0 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/intended/structured_configs/DC1-SVC3B.yml @@ -57,7 +57,7 @@ router_bgp: peer_group: MLAG_PEER peer: DC1-SVC3A remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan4093 - name: Ethernet1 peer_group: UNDERLAY_PEERS remote_as: '65001' @@ -93,26 +93,25 @@ router_bgp: - ip_address: 192.168.255.1 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE1 - description: DC1-SPINE1 + description: DC1-SPINE1_Loopback0 remote_as: '65001' - ip_address: 192.168.255.2 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE2 - description: DC1-SPINE2 + description: DC1-SPINE2_Loopback0 remote_as: '65001' - ip_address: 192.168.255.3 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE3 - description: DC1-SPINE3 + description: DC1-SPINE3_Loopback0 remote_as: '65001' - ip_address: 192.168.255.4 peer_group: EVPN-OVERLAY-PEERS peer: DC1-SPINE4 - description: DC1-SPINE4 + description: DC1-SPINE4_Loopback0 remote_as: '65001' vrfs: - name: Tenant_A_APP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:12 route_targets: import: @@ -123,15 +122,15 @@ router_bgp: - address_family: evpn route_targets: - '12:12' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3011 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3011 - name: Tenant_A_DB_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:13 route_targets: import: @@ -142,15 +141,15 @@ router_bgp: - address_family: evpn route_targets: - '13:13' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3012 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3012 - name: Tenant_A_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:10 route_targets: import: @@ -161,15 +160,15 @@ router_bgp: - address_family: evpn route_targets: - '10:10' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3009 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3009 - name: Tenant_A_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:14 route_targets: import: @@ -180,15 +179,15 @@ router_bgp: - address_family: evpn route_targets: - '14:14' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3013 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3013 - name: Tenant_A_WEB_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:11 route_targets: import: @@ -199,15 +198,15 @@ router_bgp: - address_family: evpn route_targets: - '11:11' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3010 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3010 - name: Tenant_B_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:20 route_targets: import: @@ -218,15 +217,15 @@ router_bgp: - address_family: evpn route_targets: - '20:20' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3019 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3019 - name: Tenant_B_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:21 route_targets: import: @@ -237,15 +236,15 @@ router_bgp: - address_family: evpn route_targets: - '21:21' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3020 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3020 - name: Tenant_C_OP_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:30 route_targets: import: @@ -256,15 +255,15 @@ router_bgp: - address_family: evpn route_targets: - '30:30' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan2 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan2 - name: Tenant_C_WAN_Zone - router_id: 192.168.255.9 rd: 192.168.255.9:31 route_targets: import: @@ -275,13 +274,14 @@ router_bgp: - address_family: evpn route_targets: - '31:31' + router_id: 192.168.255.9 redistribute_routes: - source_protocol: connected neighbor_interfaces: - name: Vlan3030 peer_group: MLAG_PEER remote_as: '65103' - description: DC1-SVC3A + description: DC1-SVC3A_Vlan3030 vlan_aware_bundles: - name: Tenant_A_APP_Zone rd: 192.168.255.9:12 @@ -395,6 +395,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true ip_name_servers: - ip_address: 192.168.200.5 vrf: MGMT @@ -456,7 +462,7 @@ vrfs: ipv6_routing: true management_interfaces: - name: Management1 - description: oob_management + description: OOB_MANAGEMENT shutdown: false vrf: MGMT ip_address: 192.168.200.109/24 @@ -483,12 +489,12 @@ ntp: vlans: - id: 4093 tenant: system - name: LEAF_PEER_L3 + name: MLAG_L3 trunk_groups: - - LEAF_PEER_L3 + - MLAG - id: 4094 tenant: system - name: MLAG_PEER + name: MLAG trunk_groups: - MLAG - id: 130 @@ -498,9 +504,9 @@ vlans: name: Tenant_A_APP_Zone_2 tenant: Tenant_A - id: 3011 - name: MLAG_iBGP_Tenant_A_APP_Zone + name: MLAG_L3_VRF_Tenant_A_APP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 140 name: Tenant_A_DB_BZone_1 @@ -509,9 +515,9 @@ vlans: name: Tenant_A_DB_Zone_2 tenant: Tenant_A - id: 3012 - name: MLAG_iBGP_Tenant_A_DB_Zone + name: MLAG_L3_VRF_Tenant_A_DB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 110 name: Tenant_A_OP_Zone_1 @@ -520,17 +526,17 @@ vlans: name: Tenant_A_OP_Zone_2 tenant: Tenant_A - id: 3009 - name: MLAG_iBGP_Tenant_A_OP_Zone + name: MLAG_L3_VRF_Tenant_A_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 150 name: Tenant_A_WAN_Zone_1 tenant: Tenant_A - id: 3013 - name: MLAG_iBGP_Tenant_A_WAN_Zone + name: MLAG_L3_VRF_Tenant_A_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 120 name: Tenant_A_WEB_Zone_1 @@ -539,9 +545,9 @@ vlans: name: Tenant_A_WEBZone_2 tenant: Tenant_A - id: 3010 - name: MLAG_iBGP_Tenant_A_WEB_Zone + name: MLAG_L3_VRF_Tenant_A_WEB_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_A - id: 160 name: Tenant_A_VMOTION @@ -556,17 +562,17 @@ vlans: name: Tenant_B_OP_Zone_2 tenant: Tenant_B - id: 3019 - name: MLAG_iBGP_Tenant_B_OP_Zone + name: MLAG_L3_VRF_Tenant_B_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 250 name: Tenant_B_WAN_Zone_1 tenant: Tenant_B - id: 3020 - name: MLAG_iBGP_Tenant_B_WAN_Zone + name: MLAG_L3_VRF_Tenant_B_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_B - id: 310 name: Tenant_C_OP_Zone_1 @@ -575,26 +581,26 @@ vlans: name: Tenant_C_OP_Zone_2 tenant: Tenant_C - id: 2 - name: MLAG_iBGP_Tenant_C_OP_Zone + name: MLAG_L3_VRF_Tenant_C_OP_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C - id: 350 name: Tenant_C_WAN_Zone_1 tenant: Tenant_C - id: 3030 - name: MLAG_iBGP_Tenant_C_WAN_Zone + name: MLAG_L3_VRF_Tenant_C_WAN_Zone trunk_groups: - - LEAF_PEER_L3 + - MLAG tenant: Tenant_C vlan_interfaces: - name: Vlan4093 - description: MLAG_PEER_L3_PEERING + description: MLAG_L3 shutdown: false mtu: 1500 ipv6_enable: true - name: Vlan4094 - description: MLAG_PEER + description: MLAG shutdown: false no_autostate: true mtu: 1500 @@ -620,7 +626,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_APP_Zone' + description: MLAG_L3_VRF_Tenant_A_APP_Zone vrf: Tenant_A_APP_Zone mtu: 1500 ipv6_enable: true @@ -645,7 +651,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_DB_Zone' + description: MLAG_L3_VRF_Tenant_A_DB_Zone vrf: Tenant_A_DB_Zone mtu: 1500 ipv6_enable: true @@ -673,7 +679,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_OP_Zone' + description: MLAG_L3_VRF_Tenant_A_OP_Zone vrf: Tenant_A_OP_Zone mtu: 1500 ipv6_enable: true @@ -689,7 +695,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WAN_Zone' + description: MLAG_L3_VRF_Tenant_A_WAN_Zone vrf: Tenant_A_WAN_Zone mtu: 1500 ipv6_enable: true @@ -719,7 +725,7 @@ vlan_interfaces: tenant: Tenant_A type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_A_WEB_Zone' + description: MLAG_L3_VRF_Tenant_A_WEB_Zone vrf: Tenant_A_WEB_Zone mtu: 1500 ipv6_enable: true @@ -743,7 +749,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_OP_Zone' + description: MLAG_L3_VRF_Tenant_B_OP_Zone vrf: Tenant_B_OP_Zone mtu: 1500 ipv6_enable: true @@ -759,7 +765,7 @@ vlan_interfaces: tenant: Tenant_B type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_B_WAN_Zone' + description: MLAG_L3_VRF_Tenant_B_WAN_Zone vrf: Tenant_B_WAN_Zone mtu: 1500 ipv6_enable: true @@ -783,7 +789,7 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_OP_Zone' + description: MLAG_L3_VRF_Tenant_C_OP_Zone vrf: Tenant_C_OP_Zone mtu: 1500 ipv6_enable: true @@ -799,32 +805,37 @@ vlan_interfaces: tenant: Tenant_C type: underlay_peering shutdown: false - description: 'MLAG_PEER_L3_iBGP: vrf Tenant_C_WAN_Zone' + description: MLAG_L3_VRF_Tenant_C_WAN_Zone vrf: Tenant_C_WAN_Zone mtu: 1500 ipv6_enable: true port_channel_interfaces: - name: Port-Channel5 - description: MLAG_PEER_DC1-SVC3A_Po5 - type: switched + description: MLAG_DC1-SVC3A_Port-Channel5 + switchport: + enabled: true + mode: trunk + trunk: + groups: + - MLAG shutdown: false - mode: trunk - trunk_groups: - - LEAF_PEER_L3 - - MLAG - name: Port-Channel7 description: DC1_L2LEAF2_Po1 - type: switched + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 shutdown: false - mode: trunk - vlans: 110-111,120-121,130-131,140-141,150,160-161,210-211,250,310-311,350 mlag: 7 - name: Port-Channel14 - description: server07_inherit_all_from_profile_port_channel_ALL_WITH_SECURITY_PORT_CHANNEL - type: switched + description: ALL_WITH_SECURITY_PORT_CHANNEL shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -843,11 +854,13 @@ port_channel_interfaces: unit: percent mlag: 14 - name: Port-Channel15 - description: server08_no_profile_port_channel_server08_no_profile_port_channel - type: switched + description: server08_no_profile_port_channel shutdown: false - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -870,8 +883,7 @@ ethernet_interfaces: peer: DC1-SVC3A peer_interface: Ethernet5 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet5 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet5 shutdown: false channel_group: id: 5 @@ -880,8 +892,7 @@ ethernet_interfaces: peer: DC1-SVC3A peer_interface: Ethernet6 peer_type: mlag_peer - description: MLAG_PEER_DC1-SVC3A_Ethernet6 - type: port-channel-member + description: MLAG_DC1-SVC3A_Ethernet6 shutdown: false channel_group: id: 5 @@ -893,7 +904,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE1_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet2 peer: DC1-SPINE2 @@ -902,7 +914,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE2_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet3 peer: DC1-SPINE3 @@ -911,7 +924,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE3_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet4 peer: DC1-SPINE4 @@ -920,7 +934,8 @@ ethernet_interfaces: description: P2P_LINK_TO_DC1-SPINE4_Ethernet5 shutdown: false mtu: 1500 - type: routed + switchport: + enabled: false ipv6_enable: true - name: Ethernet7 peer: DC1-L2LEAF2A @@ -928,7 +943,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2A_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -938,7 +952,6 @@ ethernet_interfaces: peer_type: l2leaf description: DC1-L2LEAF2B_Ethernet2 shutdown: false - type: port-channel-member channel_group: id: 7 mode: active @@ -947,11 +960,13 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: ALL_WITH_SECURITY - description: server04_inherit_all_from_profile_Eth2 + description: SERVER_server04_inherit_all_from_profile_Eth2 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -972,11 +987,13 @@ ethernet_interfaces: peer: server05_no_profile peer_interface: Eth2 peer_type: server - description: server05_no_profile_Eth2 + description: SERVER_server05_no_profile_Eth2 shutdown: false - type: switched - mode: trunk - vlans: 1-4094 + switchport: + enabled: true + mode: trunk + trunk: + allowed_vlan: 1-4094 spanning_tree_portfast: edge spanning_tree_bpdufilter: 'True' spanning_tree_bpduguard: 'False' @@ -998,11 +1015,12 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: ALL_WITH_SECURITY - description: server06_override_profile_Eth2 + description: SERVER_server06_override_profile_Eth2 shutdown: false - type: switched - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1024,9 +1042,8 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: ALL_WITH_SECURITY_PORT_CHANNEL - description: server07_inherit_all_from_profile_port_channel_Eth2 + description: SERVER_server07_inherit_all_from_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 14 mode: active @@ -1034,9 +1051,8 @@ ethernet_interfaces: peer: server08_no_profile_port_channel peer_interface: Eth2 peer_type: server - description: server08_no_profile_port_channel_Eth2 + description: SERVER_server08_no_profile_port_channel_Eth2 shutdown: false - type: port-channel-member channel_group: id: 15 mode: 'on' @@ -1045,11 +1061,12 @@ ethernet_interfaces: peer_interface: Eth2 peer_type: server port_profile: ALL_WITH_SECURITY_PORT_CHANNEL - description: server09_override_profile_no_port_channel_Eth2 + description: SERVER_server09_override_profile_no_port_channel_Eth2 shutdown: false - type: switched - mode: access - vlans: '210' + switchport: + enabled: true + mode: access + access_vlan: '210' spanning_tree_portfast: network spanning_tree_bpdufilter: 'False' spanning_tree_bpduguard: 'True' @@ -1089,11 +1106,11 @@ route_maps: - ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY loopback_interfaces: - name: Loopback0 - description: EVPN_Overlay_Peering + description: ROUTER_ID shutdown: false ip_address: 192.168.255.9/32 - name: Loopback1 - description: VTEP_VXLAN_Tunnel_Source + description: VXLAN_TUNNEL_SOURCE shutdown: false ip_address: 192.168.254.8/32 - name: Loopback100 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/DC1_BL1.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/DC1_BL1.yml index 95d6546404d..02d7cfbce10 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/DC1_BL1.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/DC1_BL1.yml @@ -4,7 +4,8 @@ my_dci_ethernet_interfaces: description: My test ip_address: 10.1.2.3/12 shutdown: false - type: routed + switchport: + enabled: false mtu: 1500 peer: MY-own-peer peer_interface: Ethernet123 diff --git a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/all.yml b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/all.yml index ed97d539c09..5436804b3e8 100644 --- a/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/all.yml +++ b/ansible_collections/arista/avd/molecule/evpn_underlay_rfc5549_overlay_ebgp/inventory/group_vars/all.yml @@ -1 +1,4 @@ --- +# Generate CSV with fabric p2p link info. Here testing for RFC5549 where we have no interface IPs. +eos_designs_documentation: + p2p_links_csv: true diff --git a/ansible_collections/arista/avd/molecule/example-isis-ldp-ipvpn/molecule.yml b/ansible_collections/arista/avd/molecule/example-isis-ldp-ipvpn/molecule.yml index 1547508ec5b..d1c83d7a6c4 100644 --- a/ansible_collections/arista/avd/molecule/example-isis-ldp-ipvpn/molecule.yml +++ b/ansible_collections/arista/avd/molecule/example-isis-ldp-ipvpn/molecule.yml @@ -27,8 +27,5 @@ provisioner: ansible_args: - --inventory - ${MOLECULE_SCENARIO_DIRECTORY}/../../examples/isis-ldp-ipvpn/inventory.yml - # Running with tags build to avoid deploy_eapi to run. - - --tags - - build verifier: name: ansible diff --git a/ansible_collections/arista/avd/molecule/example-single-dc-l3ls/molecule.yml b/ansible_collections/arista/avd/molecule/example-single-dc-l3ls/molecule.yml index 7388aff49a0..431ebf7539f 100644 --- a/ansible_collections/arista/avd/molecule/example-single-dc-l3ls/molecule.yml +++ b/ansible_collections/arista/avd/molecule/example-single-dc-l3ls/molecule.yml @@ -27,8 +27,5 @@ provisioner: ansible_args: - --inventory - ${MOLECULE_SCENARIO_DIRECTORY}/../../examples/single-dc-l3ls/inventory.yml - # Running with tags build to avoid deploy_eapi to run. - - --tags - - build verifier: name: ansible diff --git a/ansible_collections/arista/avd/plugins/action/cv_workflow.py b/ansible_collections/arista/avd/plugins/action/cv_workflow.py index 5e1f817280b..ed4b37ccb74 100644 --- a/ansible_collections/arista/avd/plugins/action/cv_workflow.py +++ b/ansible_collections/arista/avd/plugins/action/cv_workflow.py @@ -74,8 +74,8 @@ "timeouts": { "type": "dict", "options": { - "workspace_build_timeout": {"type": "float", "default": CVTimeOuts.workspace_build_timeout if HAS_PYAVD else 300}, - "change_control_creation_timeout": {"type": "float", "default": CVTimeOuts.change_control_creation_timeout if HAS_PYAVD else 300}, + "workspace_build_timeout": {"type": "float", "default": CVTimeOuts.workspace_build_timeout if HAS_PYAVD else 300.0}, + "change_control_creation_timeout": {"type": "float", "default": CVTimeOuts.change_control_creation_timeout if HAS_PYAVD else 300.0}, }, }, "return_details": {"type": "bool", "required": False, "default": False}, @@ -100,7 +100,6 @@ def run(self, tmp: Any = None, task_vars: dict | None = None) -> dict: setup_module_logging(result) # Get task arguments and validate them - validated_args = strip_empties_from_dict(self._task.args) validation_result, validated_args = self.validate_argument_spec(ARGUMENT_SPEC) validated_args = strip_empties_from_dict(validated_args) @@ -341,7 +340,11 @@ def setup_module_logging(result: dict) -> None: result: The dictionary used for the ansible module results """ python_to_ansible_handler = PythonToAnsibleHandler(result, display) - LOGGER.addHandler(python_to_ansible_handler) - # TODO: mechanism to manipulate the logger globally for pyavd - # Keep debug to be able to see logs with `-v` and `-vvv` - LOGGER.setLevel(logging.DEBUG) + + # Modifying the root logger to also cover pyavd. + root_logger = logging.getLogger() + root_logger.addHandler(python_to_ansible_handler) + if display.verbosity >= 3: + root_logger.setLevel(logging.DEBUG) + elif display.verbosity >= 1: + root_logger.setLevel(logging.INFO) diff --git a/ansible_collections/arista/avd/plugins/action/eos_designs_documentation.py b/ansible_collections/arista/avd/plugins/action/eos_designs_documentation.py new file mode 100644 index 00000000000..63944ea8795 --- /dev/null +++ b/ansible_collections/arista/avd/plugins/action/eos_designs_documentation.py @@ -0,0 +1,137 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +import json +import logging +from pathlib import Path +from typing import Any + +from ansible.errors import AnsibleActionFail +from ansible.plugins.action import ActionBase, display +from yaml import load + +from ansible_collections.arista.avd.plugins.plugin_utils.utils import PythonToAnsibleHandler, YamlLoader, write_file + +try: + from pyavd._utils import get, strip_empties_from_dict + from pyavd.get_fabric_documentation import get_fabric_documentation + + HAS_PYAVD = True +except ImportError: + HAS_PYAVD = False + + +LOGGER = logging.getLogger("ansible_collections.arista.avd") +LOGGING_LEVELS = ["DEBUG", "INFO", "ERROR", "WARNING", "CRITICAL"] + +ARGUMENT_SPEC = { + "structured_config_dir": {"type": "str", "required": True}, + "structured_config_suffix": {"type": "str", "default": "yml"}, + "fabric_documentation_file": {"type": "str", "required": True}, + "mode": {"type": "str", "default": "0o664"}, + "fabric_documentation": {"type": "bool", "default": True}, + "include_connected_endpoints": {"type": "bool", "default": False}, + "topology_csv_file": {"type": "str", "required": True}, + "topology_csv": {"type": "bool", "default": False}, + "p2p_links_csv_file": {"type": "str", "required": True}, + "p2p_links_csv": {"type": "bool", "default": False}, +} + + +class ActionModule(ActionBase): + def run(self, tmp: Any = None, task_vars: dict | None = None) -> None: + self._supports_check_mode = False + + if task_vars is None: + task_vars = {} + + result = super().run(tmp, task_vars) + del tmp # tmp no longer has any effect + + if not HAS_PYAVD: + msg = "The arista.avd.eos_designs_documentation' plugin requires the 'pyavd' Python library. Got import error" + raise AnsibleActionFail(msg) + + # Setup module logging + setup_module_logging(result) + + # Get task arguments and validate them + validation_result, validated_args = self.validate_argument_spec(ARGUMENT_SPEC) + validated_args = strip_empties_from_dict(validated_args) + + # Converting to json and back to remove any AnsibeUnsafe types + validated_args = json.loads(json.dumps(validated_args)) + + return self.main(validated_args, task_vars, result) + + def main(self, validated_args: dict, task_vars: dict, result: dict) -> dict: + avd_switch_facts: dict = get(task_vars, "avd_switch_facts", required=True) + device_list = list(avd_switch_facts.keys()) + + structured_configs = self.read_structured_configs( + device_list=device_list, + structured_config_dir=validated_args["structured_config_dir"], + structured_config_suffix=validated_args["structured_config_suffix"], + ) + fabric_name = get(task_vars, "fabric_name", required=True) + output = get_fabric_documentation( + {"avd_switch_facts": avd_switch_facts}, + structured_configs=structured_configs, + fabric_name=fabric_name, + fabric_documentation=validated_args["fabric_documentation"], + include_connected_endpoints=validated_args["include_connected_endpoints"], + topology_csv=validated_args["topology_csv"], + p2p_links_csv=validated_args["p2p_links_csv"], + ) + if output.fabric_documentation: + result["changed"] = write_file( + content=output.fabric_documentation, + filename=validated_args["fabric_documentation_file"], + file_mode=validated_args["mode"], + ) + if output.topology_csv: + changed = write_file( + content=output.topology_csv, + filename=validated_args["topology_csv_file"], + file_mode=validated_args["mode"], + ) + result["changed"] = result.get("changed") or changed + + if output.p2p_links_csv: + changed = write_file( + content=output.p2p_links_csv, + filename=validated_args["p2p_links_csv_file"], + file_mode=validated_args["mode"], + ) + result["changed"] = result.get("changed") or changed + + return result + + def read_structured_configs(self, device_list: list[str], structured_config_dir: str, structured_config_suffix: str) -> dict[str, dict]: + return {device: self.read_one_structured_config(device, structured_config_dir, structured_config_suffix) for device in device_list} + + def read_one_structured_config(self, device: str, structured_config_dir: str, structured_config_suffix: str) -> dict: + path = Path(structured_config_dir, f"{device}.{structured_config_suffix}") + if not path.exists(): + logging.warning("Could not find structured config file for '%s'. The documentation may be incomplete.", device) + + with path.open(encoding="UTF-8") as stream: + if structured_config_suffix in ["yml", "yaml"]: + return load(stream, Loader=YamlLoader) # noqa: S506 + + # JSON + return json.load(stream) + + +def setup_module_logging(result: dict) -> None: + """ + Add a Handler to copy the logs from the plugin into Ansible output based on their level. + + Parameters: + result: The dictionary used for the ansible module results + """ + python_to_ansible_handler = PythonToAnsibleHandler(result, display) + LOGGER.addHandler(python_to_ansible_handler) + # TODO: mechanism to manipulate the logger globally for pyavd + # Keep debug to be able to see logs with `-v` and `-vvv` + LOGGER.setLevel(logging.DEBUG) diff --git a/ansible_collections/arista/avd/plugins/action/eos_designs_facts.py b/ansible_collections/arista/avd/plugins/action/eos_designs_facts.py index 1f0780f312d..f11bfc2f9e4 100644 --- a/ansible_collections/arista/avd/plugins/action/eos_designs_facts.py +++ b/ansible_collections/arista/avd/plugins/action/eos_designs_facts.py @@ -144,15 +144,6 @@ def create_avd_switch_facts_instances(self, fabric_hosts: list, hostvars: object # Fetch all templated Ansible vars for this host host_hostvars = dict(hostvars.get(host)) - # Initialize SharedUtils class to be passed to EosDesignsFacts below. - shared_utils = SharedUtils(hostvars=host_hostvars, templar=self.templar) - - # Insert dynamic keys into the input data if not set. - # These keys are required by the schema, but the default values are set inside shared_utils. - host_hostvars.setdefault("node_type_keys", shared_utils.node_type_keys) - host_hostvars.setdefault("connected_endpoints_keys", shared_utils.connected_endpoints_keys) - host_hostvars.setdefault("network_services_keys", shared_utils.network_services_keys) - # Set correct hostname in schema tools and perform conversion and validation avdschematools.hostname = host host_result = avdschematools.convert_and_validate_data(host_hostvars, return_counters=True) @@ -168,6 +159,9 @@ def create_avd_switch_facts_instances(self, fabric_hosts: list, hostvars: object # This is used to access EosDesignsFacts objects of other switches during rendering of one switch. host_hostvars["avd_switch_facts"] = avd_switch_facts + # Initialize SharedUtils class to be passed to EosDesignsFacts below. + shared_utils = SharedUtils(hostvars=host_hostvars, templar=self.templar, schema=avdschematools.avdschema) + # Create an instance of EosDesignsFacts and insert into common avd_switch_facts dict avd_switch_facts[host] = {"switch": EosDesignsFacts(hostvars=host_hostvars, shared_utils=shared_utils)} diff --git a/ansible_collections/arista/avd/plugins/action/eos_designs_structured_config.py b/ansible_collections/arista/avd/plugins/action/eos_designs_structured_config.py index ccd79bd85c0..18a42f27815 100644 --- a/ansible_collections/arista/avd/plugins/action/eos_designs_structured_config.py +++ b/ansible_collections/arista/avd/plugins/action/eos_designs_structured_config.py @@ -2,8 +2,8 @@ # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. - import cProfile +import json import pstats from collections import ChainMap from typing import Any @@ -15,7 +15,7 @@ from ansible_collections.arista.avd.plugins.plugin_utils.pyavd_wrappers import RaiseOnUse from ansible_collections.arista.avd.plugins.plugin_utils.schema.avdschematools import AvdSchemaTools -from ansible_collections.arista.avd.plugins.plugin_utils.utils import get_templar +from ansible_collections.arista.avd.plugins.plugin_utils.utils import get_templar, write_file PLUGIN_NAME = "arista.avd.eos_designs_structured_config" try: @@ -45,7 +45,8 @@ def run(self, tmp: Any = None, task_vars: dict | None = None) -> dict: profiler.enable() eos_designs_custom_templates = self._task.args.get("eos_designs_custom_templates", []) - self.dest = self._task.args.get("dest", False) + filename = str(self._task.args.get("dest", "")) + file_mode = str(self._task.args.get("mode", "0o664")) template_output = self._task.args.get("template_output", False) validation_mode = self._task.args.get("validation_mode") @@ -142,19 +143,23 @@ def run(self, tmp: Any = None, task_vars: dict | None = None) -> dict: with self._templar.set_temporary_context(available_variables=template_vars): output = self._templar.template(output, fail_on_undefined=False) - # If the argument 'dest' is set, write the output data to a file. - if self.dest: - # Depending on the file suffix of 'dest' (default: 'json') we will format the data to yaml or just write the output data directly. - # The Copy module used in 'write_file' will convert the output data to json automatically. - if self.dest.split(".")[-1] in ["yml", "yaml"]: - write_file_result = self.write_file(yaml.dump(output, Dumper=AnsibleDumper, indent=2, sort_keys=False, width=130), task_vars) + # If the argument 'dest' (filename) is set, write the output data to a file. + if filename: + # Depending on the file suffix of 'filename' (default: 'json') we will format the data to yaml or just write the output data directly. + if filename.endswith((".yml", ".yaml")): + result["changed"] = write_file( + content=yaml.dump(output, Dumper=AnsibleDumper, indent=2, sort_keys=False, width=130), + filename=filename, + file_mode=file_mode, + ) else: - write_file_result = self.write_file(output, task_vars) - - # Overwrite result with the result from the copy operation (setting 'changed' flag accordingly) - result.update(write_file_result) + result["changed"] = write_file( + content=json.dumps(output), + filename=filename, + file_mode=file_mode, + ) - # If 'dest' is not set, hardcode 'changed' to true, since we don't know if something changed and later tasks may depend on this. + # If 'dest' (filename) is not set, hardcode 'changed' to true, since we don't know if something changed and later tasks may depend on this. else: result["changed"] = True @@ -167,28 +172,3 @@ def run(self, tmp: Any = None, task_vars: dict | None = None) -> dict: stats.dump_stats(cprofile_file) return result - - def write_file(self, content: str, task_vars: dict) -> dict: - """ - This function implements the Ansible 'copy' action_module, to benefit from Ansible builtin functionality like 'changed'. - - Reuse task data. - """ - new_task = self._task.copy() - new_task.args = { - "dest": self.dest, - "mode": self._task.args.get("mode"), - "content": content, - } - - copy_action = self._shared_loader_obj.action_loader.get( - "ansible.legacy.copy", - task=new_task, - connection=self._connection, - play_context=self._play_context, - loader=self._loader, - templar=self._templar, - shared_loader_obj=self._shared_loader_obj, - ) - - return copy_action.run(task_vars=task_vars) diff --git a/ansible_collections/arista/avd/plugins/filter/add_md_toc.py b/ansible_collections/arista/avd/plugins/filter/add_md_toc.py index 89aefb83a90..d6b4b522a13 100644 --- a/ansible_collections/arista/avd/plugins/filter/add_md_toc.py +++ b/ansible_collections/arista/avd/plugins/filter/add_md_toc.py @@ -58,7 +58,6 @@ --- tasks: - name: Generate fabric documentation - tags: [build, provision, documentation] run_once: true delegate_to: localhost check_mode: no diff --git a/ansible_collections/arista/avd/plugins/modules/configlet_build_config.py b/ansible_collections/arista/avd/plugins/modules/configlet_build_config.py index e21ea40de80..6ce29598561 100644 --- a/ansible_collections/arista/avd/plugins/modules/configlet_build_config.py +++ b/ansible_collections/arista/avd/plugins/modules/configlet_build_config.py @@ -34,7 +34,6 @@ EXAMPLES = r""" # tasks file for configlet_build_config - name: generate intended variables - tags: [build, provision] configlet_build_config: configlet_dir: '/path/to/configlets/folder/' configlet_prefix: 'AVD_' diff --git a/ansible_collections/arista/avd/plugins/modules/eos_designs_documentation.py b/ansible_collections/arista/avd/plugins/modules/eos_designs_documentation.py new file mode 100644 index 00000000000..55c154aeed3 --- /dev/null +++ b/ansible_collections/arista/avd/plugins/modules/eos_designs_documentation.py @@ -0,0 +1,79 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. + +DOCUMENTATION = r""" +--- +module: eos_designs_documentation +version_added: "5.0.0" +author: Arista Ansible Team (@aristanetworks) +short_description: Generate AVD Fabric Documentation +description: |- + The `arista.avd.eos_designs_documentation` module is an Ansible Action Plugin providing the following capabilities: + + - Generate fabric documentation using AVD facts and structured configuration files. + - Optionally include connected endpoints documentation. +options: + structured_config_dir: + description: Path to directory containing files with AVD structured configurations. + required: true + type: str + structured_config_suffix: + description: File suffix for AVD structured configuration files. + default: "yml" + type: str + fabric_documentation_file: + description: Path to output Markdown file. + required: true + type: str + mode: + description: Mode of output files. + default: "0o664" + type: str + fabric_documentation: + description: Generate fabric documentation. + default: true + type: bool + include_connected_endpoints: + description: Include connected endpoints in fabric documentation. + default: false + type: bool + topology_csv_file: + description: Path to output topology CSV file. + required: true + type: str + topology_csv: + description: Generate Topology CSV with all interfaces towards other devices. + default: false + type: bool + p2p_links_csv_file: + description: Path to output P2P links CSV file. + required: true + type: str + p2p_links_csv: + description: Generate P2P links CSV with all routed point-to-point links between devices. + default: false + type: bool +""" + +EXAMPLES = r""" +--- + +- name: Generate fabric documentation + arista.avd.eos_designs_documentation: + structured_config_dir: "{{ structured_dir }}" + structured_config_suffix: "{{ avd_structured_config_file_format }}" + fabric_documentation_file: "{{ fabric_dir }}/{{ fabric_name }}-documentation.md" + fabric_documentation: "{{ eos_designs_documentation.enable | arista.avd.default(true) }}" + include_connected_endpoints: "{{ eos_designs_documentation.connected_endpoints | arista.avd.default(false) }}" + topology_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" + topology_csv: "{{ eos_designs_documentation.topology_csv | arista.avd.default(true) }}" + p2p_links_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" + p2p_links_csv: "{{ eos_designs_documentation.p2p_links_csv | arista.avd.default(true) }}" + mode: "0o664" + delegate_to: localhost + check_mode: false + run_once: true +""" + +# TODO: RETURN diff --git a/ansible_collections/arista/avd/plugins/modules/eos_designs_facts.py b/ansible_collections/arista/avd/plugins/modules/eos_designs_facts.py index 36b3391d2b2..4c476299003 100644 --- a/ansible_collections/arista/avd/plugins/modules/eos_designs_facts.py +++ b/ansible_collections/arista/avd/plugins/modules/eos_designs_facts.py @@ -52,14 +52,12 @@ EXAMPLES = r""" --- - name: Set eos_designs facts - tags: [build, provision, facts] arista.avd.eos_designs_facts: schema_id: eos_designs check_mode: False run_once: True - name: Set eos_designs facts per device - tags: [build, provision, facts] ansible.builtin.set_fact: switch: "{{ avd_switch_facts[inventory_hostname].switch }}" delegate_to: localhost diff --git a/ansible_collections/arista/avd/plugins/modules/set_vars.py b/ansible_collections/arista/avd/plugins/modules/set_vars.py index 5b319720fdc..cffc8f60b6b 100644 --- a/ansible_collections/arista/avd/plugins/modules/set_vars.py +++ b/ansible_collections/arista/avd/plugins/modules/set_vars.py @@ -17,7 +17,6 @@ EXAMPLES = r""" - name: Remove avd_switch_facts - tags: [build, provision, facts, remove_avd_switch_facts] arista.avd.set_vars: avd_switch_facts: null run_once: true diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/ansible_eos_device.py b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/ansible_eos_device.py index 0441572b97d..b40c411f77d 100644 --- a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/ansible_eos_device.py +++ b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/ansible_eos_device.py @@ -32,7 +32,7 @@ try: from anta import __DEBUG__ from anta.device import AntaDevice - from anta.logger import anta_log_exception + from anta.logger import anta_log_exception, exc_to_str HAS_ANTA = True except ImportError: @@ -118,42 +118,33 @@ async def _collect(self, command: AntaCommand, *, collection_id: str | None = No Keyword Args: ------------- collection_id (str, optional): This parameter is not used in this implementation. Defaults to None. - - If there is an exception while collecting the command, the exception will be propagated - and handled in ANTA. That means ANTA will set the test result to 'error', the play will - continue and the test will be marked as FAIL in the eos_validate_state report. """ if self.check_mode: logger.info("_collect was called in check_mode, doing nothing") return - try: - commands = [] + commands = [] - if command.revision: - commands.append({"cmd": command.command, "revision": command.revision}) - else: - commands.append({"cmd": command.command}) + if command.revision: + commands.append({"cmd": command.command, "revision": command.revision}) + else: + commands.append({"cmd": command.command}) - # Run the synchronous function send_request() in a separate thread to not block the asyncio event loop - send_request = partial(self._connection.send_request, commands, version=command.version, output=command.ofmt) - loop = get_event_loop() + # Run the synchronous function send_request() in a separate thread to not block the asyncio event loop + send_request = partial(self._connection.send_request, commands, version=command.version, output=command.ofmt) + loop = get_event_loop() + try: response = await loop.run_in_executor(None, send_request) # Save the command result command.output = loads(response) if command.ofmt == "json" else response - logger.debug("%s: %s", self.name, command) - except JSONDecodeError: # Even if the outformat is 'json' send_request() sometimes returns a non-valid JSON depending on the output content # https://github.com/ansible-collections/arista.eos/blob/main/plugins/httpapi/eos.py#L194 command.output = {"messages": [response]} - except Exception as e: - message = f"Command '{command.command}' failed" - command.failed = e - logger.debug(command) - msg = f"{message}: {e!s}" - raise e.__class__(msg) from e + command.errors = [exc_to_str(e)] + logger.warning("Command '%s' failed: %s", command.command, exc_to_str(e)) + logger.debug("%s: %s", self.name, command) async def refresh(self) -> None: """Update attributes of an AnsibleEOSDevice instance. diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/avdtestbase.py b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/avdtestbase.py index c6102fbfcee..d8aff954cbb 100644 --- a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/avdtestbase.py +++ b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/avdtestbase.py @@ -53,6 +53,11 @@ def vtep_mapping(self) -> list[tuple[str, str]]: """Return the vtep_mapping from the ConfigManager instance.""" return self.config_manager.vtep_mapping + @property + def dps_mapping(self) -> list[tuple[str, str]]: + """Return the dps_mapping from the ConfigManager instance.""" + return self.config_manager.dps_mapping + def render(self) -> dict: """Return the test_definition of the class. diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/config_manager.py b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/config_manager.py index 811c9e750d7..81a357b5b66 100644 --- a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/config_manager.py +++ b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/config_manager.py @@ -50,6 +50,7 @@ def __init__(self, device_name: str, hostvars: Mapping) -> None: self.structured_config = self.get_host_structured_config(host=device_name) self.loopback0_mapping = self.get_loopback0_mapping() self.vtep_mapping = self.get_vtep_mapping() + self.dps_mapping = self.get_dps_mapping() def get_host_structured_config(self, host: str) -> Mapping: """Get a specified host's structured configuration from the hostvars. @@ -84,6 +85,35 @@ def get_vtep_mapping(self) -> list[tuple[str, str]]: """Get the vtep_mapping list.""" return self._get_loopback_mappings["vtep_mapping"] + def get_dps_mapping(self) -> list[tuple[str, str]]: + """Get the dps_mapping list.""" + return self._get_loopback_mappings["dps_mapping"] + + def _get_ip_address(self, host: str, interfaces: list, vtep_interface: str) -> tuple[str, str] | None: + """Retrieve the IP address for a given VTEP interface on a host. + + Parameters + ---------- + host: str + The hostname of the device. + interfaces: list + List of interface dictionaries. + vtep_interface: str + The name of the VTEP interface. + + Returns: + ------- + tuple | None + A tuple containing the hostname and IP address if found, else None. + """ + if (loopback_interface := get_item(interfaces, "name", vtep_interface)) is None: + LOGGER.warning("Host '%s' interface '%s' is missing.", host, vtep_interface) + elif (loopback_ip := loopback_interface.get("ip_address")) is None: + LOGGER.warning("Host '%s' variable 'ip_address' of interface '%s' is missing.", host, vtep_interface) + else: + return (host, str(ip_interface(loopback_ip).ip)) + return None # Ensure a value is always returned + @cached_property def _get_loopback_mappings(self) -> dict: """Generate the loopback mappings for the eos_validate_state tests, which are used in AvdTestBase subclasses. @@ -93,13 +123,16 @@ def _get_loopback_mappings(self) -> dict: dict: A dictionary containing: - "loopback0_mapping": A list of tuples where each tuple contains a hostname and its Loopback0 IP address. - "vtep_mapping": A list of tuples where each tuple contains a hostname and its VTEP IP address if `Vxlan1` is the source_interface. - + - "dps_mapping": A list of tuples where each tuple contains a hostname and its VTEP IP address if `Dps` is in the source_interface. """ - results = {"loopback0_mapping": [], "vtep_mapping": []} + results = {"loopback0_mapping": [], "vtep_mapping": [], "dps_mapping": []} for host in self.hostvars: host_struct_cfg = self.get_host_structured_config(host) loopback_interfaces = host_struct_cfg.get("loopback_interfaces", []) + dps_interfaces = host_struct_cfg.get("dps_interfaces", []) + + # Handle Loopback0 interface if (loopback0 := get_item(loopback_interfaces, "name", "Loopback0")) is not None: if (loopback_ip := loopback0.get("ip_address")) is None: LOGGER.warning("Host '%s' variable 'ip_address' of interface 'Loopback0' is missing.", host) @@ -111,13 +144,17 @@ def _get_loopback_mappings(self) -> dict: vtep_interface = default( get(host_struct_cfg, "vxlan_interface.vxlan1.vxlan.source_interface"), get(host_struct_cfg, "vxlan_interface.Vxlan1.vxlan.source_interface") ) + if vtep_interface is None: + continue + + # Determine the correct mapping based on the interface name + if "Dps" in vtep_interface: + ip_address = self._get_ip_address(host, dps_interfaces, vtep_interface) + if ip_address: + results["dps_mapping"].append(ip_address) + else: + ip_address = self._get_ip_address(host, loopback_interfaces, vtep_interface) + if ip_address: + results["vtep_mapping"].append(ip_address) - # NOTE: For now we exclude WAN VTEPs from the vtep_mapping - if vtep_interface is not None and "Dps" not in vtep_interface: - if (loopback_interface := get_item(loopback_interfaces, "name", vtep_interface)) is None: - LOGGER.warning("Host '%s' interface '%s' is missing.", host, vtep_interface) - elif (loopback_ip := loopback_interface.get("ip_address")) is None: - LOGGER.warning("Host '%s' variable 'ip_address' of interface '%s' is missing.", host, vtep_interface) - else: - results["vtep_mapping"].append((host, str(ip_interface(loopback_ip).ip))) return results diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/mixins.py b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/mixins.py index 3eaa0edd821..e2e1c8b7b1e 100644 --- a/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/mixins.py +++ b/ansible_collections/arista/avd/plugins/plugin_utils/eos_validate_state_utils/mixins.py @@ -111,6 +111,18 @@ def is_subinterface(self, interface: dict) -> bool: """ return "." in interface.get("name", "") + def is_vtep(self) -> bool: + """Check if the host is a VTEP by verifying the presence of a VXLAN interface.""" + return get(self.structured_config, "vxlan_interface") is not None + + def is_wan_vtep(self) -> bool: + """Check if the host is a WAN VTEP by verifying the presence of a VXLAN interface and Dps in the source interface.""" + return self.is_vtep() and "Dps" in get( + self.structured_config, + "vxlan_interface.vxlan1.vxlan.source_interface", + (get(self.structured_config, "vxlan_interface.Vxlan1.vxlan.source_interface", "")), + ) + class ValidationMixin: """Mixin class for the eos_validate_state tests. diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/utils/__init__.py b/ansible_collections/arista/avd/plugins/plugin_utils/utils/__init__.py index 0edee04a0c6..4e95bbe4269 100644 --- a/ansible_collections/arista/avd/plugins/plugin_utils/utils/__init__.py +++ b/ansible_collections/arista/avd/plugins/plugin_utils/utils/__init__.py @@ -10,14 +10,15 @@ from .get_validated_value import get_validated_value from .log_message import log_message from .python_to_ansible_logging_handler import PythonToAnsibleContextFilter, PythonToAnsibleHandler +from .write_file import write_file from .yaml_dumper import NoAliasDumper, YamlDumper from .yaml_loader import YamlLoader -# TODO: AVD5.0.0 Some utils are exposed in custom modules code, so we will need to keep it here until 5.0 +# TODO: The pyavd imports can be removed once validate_state has been moved to pyavd. try: - from pyavd._utils import default, get, template, template_var + from pyavd._utils import default, get except ImportError as e: - default = get = template = template_var = RaiseOnUse(ImportError(f"The 'arista.avd' collection requires the 'pyavd' Python library. Got import error {e}")) + default = get = RaiseOnUse(ImportError(f"The 'arista.avd' collection requires the 'pyavd' Python library. Got import error {e}")) __all__ = [ "compile_searchpath", @@ -33,6 +34,5 @@ "YamlLoader", "default", "get", - "template", - "template_var", + "write_file", ] diff --git a/ansible_collections/arista/avd/plugins/plugin_utils/utils/write_file.py b/ansible_collections/arista/avd/plugins/plugin_utils/utils/write_file.py new file mode 100644 index 00000000000..63e469aba06 --- /dev/null +++ b/ansible_collections/arista/avd/plugins/plugin_utils/utils/write_file.py @@ -0,0 +1,30 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path + + +def write_file(content: str, filename: str, file_mode: str = "0o664", dir_mode: str = "0o775") -> bool: + """ + This function writes the file only if the content has changed. + + Parameters + ---------- + content: The content to write + filename: Target filename + + Returns: + ------- + bool: Indicate if the content of filename has changed. + """ + path = Path(filename) + if not path.exists(): + # Create parent dirs automatically. + path.parent.mkdir(mode=int(dir_mode, 8), parents=True, exist_ok=True) + # Touch file + path.touch(mode=int(file_mode, 8)) + elif path.read_text(encoding="UTF-8") == content: + return False + + path.write_text(content, encoding="UTF-8") + return True diff --git a/ansible_collections/arista/avd/pylintrc b/ansible_collections/arista/avd/pylintrc index 2b2a3f59f4e..368bad11cb6 100644 --- a/ansible_collections/arista/avd/pylintrc +++ b/ansible_collections/arista/avd/pylintrc @@ -91,6 +91,7 @@ disable= too-few-public-methods, too-many-ancestors, # inconsistent results between python 3.6 and 3.7+ too-many-arguments, + too-many-positional-arguments, too-many-boolean-expressions, too-many-branches, too-many-function-args, diff --git a/ansible_collections/arista/avd/requirements.txt b/ansible_collections/arista/avd/requirements.txt index fa7a718bdb6..c11f623ce78 100644 --- a/ansible_collections/arista/avd/requirements.txt +++ b/ansible_collections/arista/avd/requirements.txt @@ -1,3 +1,3 @@ # PyAVD must follow the exact same version as the Ansible collection. # For development this should be installed as an editable install as specified in requirement-dev.txt -pyavd[ansible-collection]==5.0.0.dev2 +pyavd[ansible-collection]==5.0.0.dev8 diff --git a/ansible_collections/arista/avd/roles/build_output_folders/README.md b/ansible_collections/arista/avd/roles/build_output_folders/README.md index fe741cf447e..31fffea567f 100644 --- a/ansible_collections/arista/avd/roles/build_output_folders/README.md +++ b/ansible_collections/arista/avd/roles/build_output_folders/README.md @@ -75,7 +75,6 @@ Below is an example to use in your playbook to build output folders using defaul gather_facts: no tasks: - name: 'Build local folders for output' - tags: [build] ansible.builtin.import_role: name: arista.avd.build_output_folders ``` diff --git a/ansible_collections/arista/avd/roles/cv_deploy/README.md b/ansible_collections/arista/avd/roles/cv_deploy/README.md index 145b572d5d4..4f574e175d7 100644 --- a/ansible_collections/arista/avd/roles/cv_deploy/README.md +++ b/ansible_collections/arista/avd/roles/cv_deploy/README.md @@ -51,11 +51,12 @@ The API to CloudVision is using gRPC over encrypted HTTP/2. ## Limitations - It is not possible to authenticate with username/password. See the [instructions below](#steps-to-create-service-accounts-on-cloudvision) on how to create a service account on CloudVision. -- Configuration deployment is based on the "Static Configuration Studio" which is still a Beta feature on CloudVision. - - This role is **only** supported on **CloudVision as a Service (CVaaS)** or "on-prem" **CloudVision 2024.1.0** or later. - - Make sure to enable "Studios - End-to-End Provisioning" under Settings, Features. +- This role is **only** supported on **CloudVision as a Service (CVaaS)** or "on-prem" **CloudVision 2024.1.0** or later. + - Configuration deployment is based on the "Static Configuration Studio" which was a Beta feature on CloudVision 2024.1.0. + Make sure to enable "Studios - End-to-End Provisioning" under Settings, Features. ![Figure 1: Ansible Role arista.avd.cv_deploy](../../docs/_media/studios_end_to_end_provisioning.png) +- Currently only the first of the given cv_servers is being used. ## Roadmap @@ -69,6 +70,7 @@ This feature is still under development, so several planned features are not imp - Add automatic testing. - Add required CloudVision versions once the APIs are generally available. - Update AVD examples. +- Handle multinode clusters by trying connecting to each one by one. ## Example diff --git a/ansible_collections/arista/avd/roles/cv_deploy/tasks/main.yml b/ansible_collections/arista/avd/roles/cv_deploy/tasks/main.yml index ed1579e64e2..c5e2aa111eb 100644 --- a/ansible_collections/arista/avd/roles/cv_deploy/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/cv_deploy/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" diff --git a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v1.yml b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v1.yml index cdf086de0da..9dc18961283 100644 --- a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v1.yml +++ b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v1.yml @@ -2,19 +2,16 @@ # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. - name: "Collecting facts from CVP {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_facts: register: cvp_facts - name: "Create configlets on CVP {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_configlet: cvp_facts: "{{ cvp_facts.ansible_facts }}" configlets: "{{ cvp_vars.cvp_configlets }}" configlet_filter: ["{{ configlets_cvp_prefix }}"] - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task: tasks: "{{ cvp_devices_results.data.tasks }}" # noqa: args[module] wait: 720 diff --git a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v3.yml b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v3.yml index 53ebec4bc3f..4bf753e757a 100644 --- a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v3.yml +++ b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/cv_collection_v3.yml @@ -2,13 +2,11 @@ # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. - name: "Create configlets on CVP {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_configlet_v3: configlets: "{{ cvp_vars.cvp_configlets }}" register: cvp_configlets_status - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task_v3: tasks: "{{ cvp_configlets_status.taskIds }}" when: diff --git a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/main.yml b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/main.yml index 87c3185ca86..916d29dd311 100644 --- a/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/cvp_configlet_upload/tasks/main.yml @@ -4,9 +4,8 @@ --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -17,7 +16,6 @@ # tasks file for cvp_configlet_upload - name: Generate intended variables - tags: [build, provision, apply] arista.avd.configlet_build_config: configlet_dir: "{{ configlet_directory }}" configlet_prefix: "{{ configlets_cvp_prefix }}" diff --git a/ansible_collections/arista/avd/roles/dhcp_provisioner/README.md b/ansible_collections/arista/avd/roles/dhcp_provisioner/README.md index 59b9fa854ad..33b70b4cf7c 100644 --- a/ansible_collections/arista/avd/roles/dhcp_provisioner/README.md +++ b/ansible_collections/arista/avd/roles/dhcp_provisioner/README.md @@ -55,6 +55,7 @@ all: - **`ztp_lease_time`**: Maximum lease time before devices lose IP. Renewal is max/2 (default is 300 sec). - **`ztp_mac_source`**: Define which mac-address field is used for identification: interface mac-address (`interface`) or system-mac-address (`system`). Default: `system` - **`ztp_mode`**: Define how role works either `offline` or `online` (Default `offline`). +- **`avd_dhcp_provisioner_provision`**: Run `arista.cvp.dhcp_configuration` in either online or offline mode (Default `true`). *Example*: diff --git a/ansible_collections/arista/avd/roles/dhcp_provisioner/tasks/main.yml b/ansible_collections/arista/avd/roles/dhcp_provisioner/tasks/main.yml index e3ee415b0f5..d1a1a0043e8 100644 --- a/ansible_collections/arista/avd/roles/dhcp_provisioner/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/dhcp_provisioner/tasks/main.yml @@ -5,6 +5,7 @@ # tasks file for dhcp_provisioner - name: Create required output directories if not present + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -29,5 +30,5 @@ run_once: true - name: Start creation/update process. - tags: [provision] + when: avd_dhcp_provisioner_provision | arista.avd.default(true) ansible.builtin.include_tasks: "./{{ ztp_mode }}.yml" diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/input-variables.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/input-variables.md index 61ab34ac880..6d8df9aa776 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/input-variables.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/input-variables.md @@ -555,6 +555,12 @@ roles/eos_cli_config_gen/docs/tables/virtual-source-nat-vrfs.md roles/eos_cli_config_gen/docs/tables/config-comment.md --8<-- +### Config end + +--8<-- +roles/eos_cli_config_gen/docs/tables/config-end.md +--8<-- + ### CVX --8<-- @@ -653,6 +659,12 @@ roles/eos_cli_config_gen/docs/tables/monitor-sessions.md roles/eos_cli_config_gen/docs/tables/monitor-layer1.md --8<-- +### Monitor telemetry + +--8<-- +roles/eos_cli_config_gen/docs/tables/monitor-telemetry.md +--8<-- + ### SFLOW --8<-- diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/role-configuration.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/role-configuration.md index 8dc98f47fde..50865f47167 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/role-configuration.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/role-configuration.md @@ -65,38 +65,30 @@ roles/eos_cli_config_gen/docs/tables/role-input-validation.md roles/eos_cli_config_gen/docs/tables/custom-templates.md --8<-- -### eos_cli_config_gen configuration +## Generation of device configuration and documentation ---8<-- -roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-configuration.md ---8<-- - -### eos_cli_config_gen documentation +The following settings can be leveraged to control generation of device configuration and documentation. --8<-- -roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-documentation.md +roles/eos_cli_config_gen/docs/tables/role-settings.md --8<-- ### Generate default config -The `generate_default_config` knob allows to omit default EOS configuration. -This can be useful when leveraging `eos_cli_config_gen` to generate configlets with CloudVision. +The `generate_default_config` setting controls the generation of some default EOS configurations. + +This is historic behavior which has been disabled by default in AVD 5.0.0 and will be removed in AVD 6.0.0. +Instead it is recommended to build structured config according to the intended output configurations. -The following commands will be omitted when `generate_default_config` is set to `false`: +The following commands will be generated when `generate_default_config` is set to `true`: - RANCID Content Type -- Hostname -- Default configuration for `aaa` -- Default configuration for `enable password` +- Hostname (even if `hostname` variable is not set. Then the hostname is picked up from `inventory_hostname`) +- Default configuration `no aaa root` +- Default configuration `no enable password` - Transceiver qsfp default mode - End of configuration delimiter --8<-- roles/eos_cli_config_gen/docs/tables/generate-default-config.md --8<-- - -### Generate device documentation - ---8<-- -roles/eos_cli_config_gen/docs/tables/generate-device-documentation.md ---8<-- diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/aaa-root.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/aaa-root.md index 2ce20850810..d28a830967d 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/aaa-root.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/aaa-root.md @@ -8,6 +8,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [aaa_root](## "aaa_root") | Dictionary | | | | | + | [  disabled](## "aaa_root.disabled") | Boolean | | | | Set to `true` to configure `no aaa root` which is the EOS default. | | [  secret](## "aaa_root.secret") | Dictionary | | | | | | [    sha512_password](## "aaa_root.secret.sha512_password") | String | | | | | @@ -15,6 +16,9 @@ ```yaml aaa_root: + + # Set to `true` to configure `no aaa root` which is the EOS default. + disabled: secret: sha512_password: ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/community-lists.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/community-lists.md index a7827fea8c7..64c8f401763 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/community-lists.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/community-lists.md @@ -7,13 +7,16 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [community_lists](## "community_lists") | List, items: Dictionary | | | | | + | [community_lists](## "community_lists") deprecated | List, items: Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ip_community_lists instead. | | [  - name](## "community_lists.[].name") | String | Required, Unique | | | Community-list Name. | | [    action](## "community_lists.[].action") | String | Required | | | Action as string.
Example: "permit GSHUT 65123:123"
| === "YAML" ```yaml + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ip_community_lists instead. community_lists: # Community-list Name. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/config-end.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/config-end.md new file mode 100644 index 00000000000..8876cbadee9 --- /dev/null +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/config-end.md @@ -0,0 +1,17 @@ + +=== "Table" + + | Variable | Type | Required | Default | Value Restrictions | Description | + | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [config_end](## "config_end") | Boolean | | `False` | | Render `end` at the end of the configuration. | + +=== "YAML" + + ```yaml + # Render `end` at the end of the configuration. + config_end: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/dot1x.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/dot1x.md index b35ca208d50..da9c6cb982a 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/dot1x.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/dot1x.md @@ -15,6 +15,9 @@ | [  mac_based_authentication](## "dot1x.mac_based_authentication") | Dictionary | | | | | | [    delay](## "dot1x.mac_based_authentication.delay") | Integer | | | Min: 0
Max: 300 | | | [    hold_period](## "dot1x.mac_based_authentication.hold_period") | Integer | | | Min: 1
Max: 300 | | + | [  radius_av_pair_username_format](## "dot1x.radius_av_pair_username_format") | Dictionary | | | | RADIUS AV-pair username settings. | + | [    delimiter](## "dot1x.radius_av_pair_username_format.delimiter") | String | Required | | Valid Values:
- colon
- hyphen
- none
- period | Delimiter to use in MAC address string. | + | [    mac_string_case](## "dot1x.radius_av_pair_username_format.mac_string_case") | String | Required | | Valid Values:
- lowercase
- uppercase | MAC address string in lowercase/uppercase. | | [  radius_av_pair](## "dot1x.radius_av_pair") | Dictionary | | | | | | [    service_type](## "dot1x.radius_av_pair.service_type") | Boolean | | | | | | [    framed_mtu](## "dot1x.radius_av_pair.framed_mtu") | Integer | | | Min: 68
Max: 9236 | | @@ -66,6 +69,15 @@ mac_based_authentication: delay: hold_period: + + # RADIUS AV-pair username settings. + radius_av_pair_username_format: + + # Delimiter to use in MAC address string. + delimiter: + + # MAC address string in lowercase/uppercase. + mac_string_case: radius_av_pair: service_type: framed_mtu: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/enable-password.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/enable-password.md index 3aae2fe056c..47fddc6a3f5 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/enable-password.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/enable-password.md @@ -8,6 +8,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [enable_password](## "enable_password") | Dictionary | | | | | + | [  disabled](## "enable_password.disabled") | Boolean | | | | Set to `true` to configure `no enable password` which is the EOS default. | | [  hash_algorithm](## "enable_password.hash_algorithm") | String | | | Valid Values:
- md5
- sha512 | | | [  key](## "enable_password.key") | String | | | | Must be the hash of the password using the specified algorithm.
By default EOS salts the password, so the simplest is to generate the hash on an EOS device.
| @@ -15,6 +16,9 @@ ```yaml enable_password: + + # Set to `true` to configure `no enable password` which is the EOS default. + disabled: hash_algorithm: # Must be the hash of the password using the specified algorithm. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-configuration.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-configuration.md deleted file mode 100644 index 4cc21d778dc..00000000000 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-configuration.md +++ /dev/null @@ -1,20 +0,0 @@ - -=== "Table" - - | Variable | Type | Required | Default | Value Restrictions | Description | - | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [eos_cli_config_gen_configuration](## "eos_cli_config_gen_configuration") | Dictionary | | | | | - | [  hide_passwords](## "eos_cli_config_gen_configuration.hide_passwords") | Boolean | | `False` | | Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the configuration if true.
| - -=== "YAML" - - ```yaml - eos_cli_config_gen_configuration: - - # Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the configuration if true. - hide_passwords: - ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-documentation.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-documentation.md deleted file mode 100644 index 77329680e7c..00000000000 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/eos-cli-config-gen-documentation.md +++ /dev/null @@ -1,20 +0,0 @@ - -=== "Table" - - | Variable | Type | Required | Default | Value Restrictions | Description | - | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [eos_cli_config_gen_documentation](## "eos_cli_config_gen_documentation") | Dictionary | | | | | - | [  hide_passwords](## "eos_cli_config_gen_documentation.hide_passwords") | Boolean | | `True` | | Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the documentation if true.
| - -=== "YAML" - - ```yaml - eos_cli_config_gen_documentation: - - # Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the documentation if true. - hide_passwords: - ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md index 7807f26879a..310a44e8602 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md @@ -16,19 +16,19 @@ | [    mtu](## "ethernet_interfaces.[].mtu") | Integer | | | Min: 68
Max: 65535 | | | [    l2_mtu](## "ethernet_interfaces.[].l2_mtu") | Integer | | | Min: 68
Max: 65535 | "l2_mtu" should only be defined for platforms supporting the "l2 mtu" CLI.
| | [    l2_mru](## "ethernet_interfaces.[].l2_mru") | Integer | | | Min: 68
Max: 65535 | "l2_mru" should only be defined for platforms supporting the "l2 mru" CLI.
| - | [    vlans](## "ethernet_interfaces.[].vlans") | String | | | | List of switchport vlans as string.
For a trunk port this would be a range like "1-200,300".
For an access port this would be a single vlan "123".
| - | [    native_vlan](## "ethernet_interfaces.[].native_vlan") | Integer | | | | | - | [    native_vlan_tag](## "ethernet_interfaces.[].native_vlan_tag") | Boolean | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. | - | [    mode](## "ethernet_interfaces.[].mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | | - | [    phone](## "ethernet_interfaces.[].phone") | Dictionary | | | | | - | [      trunk](## "ethernet_interfaces.[].phone.trunk") | String | | | Valid Values:
- tagged
- tagged phone
- untagged
- untagged phone | | - | [      vlan](## "ethernet_interfaces.[].phone.vlan") | Integer | | | Min: 1
Max: 4094 | | + | [    vlans](## "ethernet_interfaces.[].vlans") deprecated | String | | | | List of switchport vlans as string.
For a trunk port this would be a range like "1-200,300".
For an access port this would be a single vlan "123".
This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.access_vlan or ethernet_interfaces[].switchport.trunk.allowed_vlan instead. | + | [    native_vlan](## "ethernet_interfaces.[].native_vlan") deprecated | Integer | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.trunk.native_vlan instead. | + | [    native_vlan_tag](## "ethernet_interfaces.[].native_vlan_tag") deprecated | Boolean | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence.This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.trunk.native_vlan_tag instead. | + | [    mode](## "ethernet_interfaces.[].mode") deprecated | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.mode instead. | + | [    phone](## "ethernet_interfaces.[].phone") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.phone instead. | + | [      trunk](## "ethernet_interfaces.[].phone.trunk") deprecated | String | | | Valid Values:
- tagged
- tagged phone
- untagged
- untagged phone | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.phone.trunk instead. | + | [      vlan](## "ethernet_interfaces.[].phone.vlan") deprecated | Integer | | | Min: 1
Max: 4094 | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.phone.vlan instead. | | [    l2_protocol](## "ethernet_interfaces.[].l2_protocol") | Dictionary | | | | | | [      encapsulation_dot1q_vlan](## "ethernet_interfaces.[].l2_protocol.encapsulation_dot1q_vlan") | Integer | | | | Vlan tag to configure on sub-interface. | | [      forwarding_profile](## "ethernet_interfaces.[].l2_protocol.forwarding_profile") | String | | | | L2 protocol forwarding profile. | - | [    trunk_groups](## "ethernet_interfaces.[].trunk_groups") | List, items: String | | | | | + | [    trunk_groups](## "ethernet_interfaces.[].trunk_groups") deprecated | List, items: String | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.trunk.groups instead. | | [      - <str>](## "ethernet_interfaces.[].trunk_groups.[]") | String | | | | | - | [    type](## "ethernet_interfaces.[].type") | String | | | Valid Values:
- routed
- switched
- l3dot1q
- l2dot1q
- port-channel-member | l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed.
Interface will not be listed in device documentation, unless "type" is set.
| + | [    type](## "ethernet_interfaces.[].type") deprecated | String | | | Valid Values:
- routed
- switched
- l3dot1q
- l2dot1q
- port-channel-member | l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed.
The `type = switched/routed` should not be combined with `switchport`.
This key is deprecated. Support will be removed in AVD version 6.0.0. See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation) for details. | | [    snmp_trap_link_change](## "ethernet_interfaces.[].snmp_trap_link_change") | Boolean | | | | | | [    address_locking](## "ethernet_interfaces.[].address_locking") | Dictionary | | | | | | [      ipv4](## "ethernet_interfaces.[].address_locking.ipv4") | Boolean | | | | Enable address locking for IPv4. | @@ -60,21 +60,34 @@ | [        shared_index](## "ethernet_interfaces.[].evpn_ethernet_segment.mpls.shared_index") | Integer | | | Min: 1
Max: 1024 | | | [        tunnel_flood_filter_time](## "ethernet_interfaces.[].evpn_ethernet_segment.mpls.tunnel_flood_filter_time") | Integer | | | | | | [      route_target](## "ethernet_interfaces.[].evpn_ethernet_segment.route_target") | String | | | | EVPN Route Target for ESI with format xx:xx:xx:xx:xx:xx. | - | [    encapsulation_dot1q_vlan](## "ethernet_interfaces.[].encapsulation_dot1q_vlan") | Integer | | | | VLAN tag to configure on sub-interface. | - | [    encapsulation_vlan](## "ethernet_interfaces.[].encapsulation_vlan") | Dictionary | | | | | + | [    encapsulation_dot1q_vlan](## "ethernet_interfaces.[].encapsulation_dot1q_vlan") deprecated | Integer | | | | VLAN tag to configure on sub-interface.This key is deprecated. Support will be removed in AVD version 6.0.0. Use encapsulation_dot1q.vlan instead. | + | [    encapsulation_dot1q](## "ethernet_interfaces.[].encapsulation_dot1q") | Dictionary | | | | Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. | + | [      vlan](## "ethernet_interfaces.[].encapsulation_dot1q.vlan") | Integer | Required | | Min: 1
Max: 4094 | VLAD ID. | + | [      inner_vlan](## "ethernet_interfaces.[].encapsulation_dot1q.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. | + | [    encapsulation_vlan](## "ethernet_interfaces.[].encapsulation_vlan") | Dictionary | | | | This setting can only be applied to sub-interfaces on EOS.
Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. | | [      client](## "ethernet_interfaces.[].encapsulation_vlan.client") | Dictionary | | | | | - | [        dot1q](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q") | Dictionary | | | | | - | [          vlan](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q.vlan") | Integer | | | | Client VLAN ID. | - | [          outer](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q.outer") | Integer | | | | Client Outer VLAN ID. | + | [        dot1q](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [          vlan](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q.vlan") | Integer | | | Min: 1
Max: 4094 | Client VLAN ID. | + | [          outer](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q.outer") | Integer | | | Min: 1
Max: 4094 | Client Outer VLAN ID. | | [          inner](## "ethernet_interfaces.[].encapsulation_vlan.client.dot1q.inner") | Integer | | | | Client Inner VLAN ID. | - | [        unmatched](## "ethernet_interfaces.[].encapsulation_vlan.client.unmatched") | Boolean | | | | | + | [        unmatched](## "ethernet_interfaces.[].encapsulation_vlan.client.unmatched") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [        encapsulation](## "ethernet_interfaces.[].encapsulation_vlan.client.encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad
- unmatched
- untagged | | + | [        vlan](## "ethernet_interfaces.[].encapsulation_vlan.client.vlan") | Integer | | | Min: 1
Max: 4094 | Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        outer_vlan](## "ethernet_interfaces.[].encapsulation_vlan.client.outer_vlan") | Integer | | | Min: 1
Max: 4094 | Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        inner_vlan](## "ethernet_interfaces.[].encapsulation_vlan.client.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        inner_encapsulation](## "ethernet_interfaces.[].encapsulation_vlan.client.inner_encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad | | | [      network](## "ethernet_interfaces.[].encapsulation_vlan.network") | Dictionary | | | | Network encapsulations are all optional and skipped if using client unmatched. | - | [        dot1q](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q") | Dictionary | | | | | - | [          vlan](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.vlan") | Integer | | | | Network VLAN ID. | - | [          outer](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.outer") | Integer | | | | Network outer VLAN ID. | - | [          inner](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.inner") | Integer | | | | Network inner VLAN ID. | - | [        client](## "ethernet_interfaces.[].encapsulation_vlan.network.client") | Boolean | | | | | - | [    vlan_id](## "ethernet_interfaces.[].vlan_id") | Integer | | | Min: 1
Max: 4094 | | + | [        dot1q](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [          vlan](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.vlan") | Integer | | | Min: 1
Max: 4094 | Network VLAN ID. | + | [          outer](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.outer") | Integer | | | Min: 1
Max: 4094 | Network outer VLAN ID. | + | [          inner](## "ethernet_interfaces.[].encapsulation_vlan.network.dot1q.inner") | Integer | | | Min: 1
Max: 4094 | Network inner VLAN ID. | + | [        client](## "ethernet_interfaces.[].encapsulation_vlan.network.client") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [        encapsulation](## "ethernet_interfaces.[].encapsulation_vlan.network.encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad
- client
- client inner
- untagged | `untagged` (no encapsulation) is applicable for `untagged` client only.
`client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. | + | [        vlan](## "ethernet_interfaces.[].encapsulation_vlan.network.vlan") | Integer | | | Min: 1
Max: 4094 | Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        outer_vlan](## "ethernet_interfaces.[].encapsulation_vlan.network.outer_vlan") | Integer | | | Min: 1
Max: 4094 | Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        inner_vlan](## "ethernet_interfaces.[].encapsulation_vlan.network.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        inner_encapsulation](## "ethernet_interfaces.[].encapsulation_vlan.network.inner_encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad | | + | [    vlan_id](## "ethernet_interfaces.[].vlan_id") | Integer | | | Min: 1
Max: 4094 | This setting can only be applied to sub-interfaces on EOS.
Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. | | [    ip_address](## "ethernet_interfaces.[].ip_address") | String | | | | IPv4 address/mask or "dhcp". | | [    ip_address_secondaries](## "ethernet_interfaces.[].ip_address_secondaries") | List, items: String | | | | | | [      - <str>](## "ethernet_interfaces.[].ip_address_secondaries.[]") | String | | | | | @@ -247,9 +260,9 @@ | [      transmit](## "ethernet_interfaces.[].lldp.transmit") | Boolean | | | | | | [      receive](## "ethernet_interfaces.[].lldp.receive") | Boolean | | | | | | [      ztp_vlan](## "ethernet_interfaces.[].lldp.ztp_vlan") | Integer | | | | ZTP vlan number. | - | [    trunk_private_vlan_secondary](## "ethernet_interfaces.[].trunk_private_vlan_secondary") | Boolean | | | | | - | [    pvlan_mapping](## "ethernet_interfaces.[].pvlan_mapping") | String | | | | List of vlans as string. | - | [    vlan_translations](## "ethernet_interfaces.[].vlan_translations") | List, items: Dictionary | | | | | + | [    trunk_private_vlan_secondary](## "ethernet_interfaces.[].trunk_private_vlan_secondary") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.trunk.private_vlan_secondary instead. | + | [    pvlan_mapping](## "ethernet_interfaces.[].pvlan_mapping") deprecated | String | | | | List of vlans as string.This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.pvlan_mapping instead. | + | [    vlan_translations](## "ethernet_interfaces.[].vlan_translations") deprecated | List, items: Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use ethernet_interfaces[].switchport.vlan_translations instead. | | [      - from](## "ethernet_interfaces.[].vlan_translations.[].from") | String | | | | List of vlans as string (only one vlan if direction is "both"). | | [        to](## "ethernet_interfaces.[].vlan_translations.[].to") | Integer | | | | VLAN ID. | | [        direction](## "ethernet_interfaces.[].vlan_translations.[].direction") | String | | `both` | Valid Values:
- in
- out
- both | | @@ -269,6 +282,7 @@ | [        enabled](## "ethernet_interfaces.[].dot1x.mac_based_authentication.enabled") | Boolean | | | | | | [        always](## "ethernet_interfaces.[].dot1x.mac_based_authentication.always") | Boolean | | | | | | [        host_mode_common](## "ethernet_interfaces.[].dot1x.mac_based_authentication.host_mode_common") | Boolean | | | | | + | [      mac_based_access_list](## "ethernet_interfaces.[].dot1x.mac_based_access_list") | Boolean | | | | Operate interface in per-mac access-list mode. | | [      timeout](## "ethernet_interfaces.[].dot1x.timeout") | Dictionary | | | | | | [        idle_host](## "ethernet_interfaces.[].dot1x.timeout.idle_host") | Integer | | | Min: 10
Max: 65535 | | | [        quiet_period](## "ethernet_interfaces.[].dot1x.timeout.quiet_period") | Integer | | | Min: 1
Max: 65535 | | @@ -284,6 +298,25 @@ | [        authentication_failure_fallback_mba](## "ethernet_interfaces.[].dot1x.eapol.authentication_failure_fallback_mba") | Dictionary | | | | | | [          enabled](## "ethernet_interfaces.[].dot1x.eapol.authentication_failure_fallback_mba.enabled") | Boolean | | | | | | [          timeout](## "ethernet_interfaces.[].dot1x.eapol.authentication_failure_fallback_mba.timeout") | Integer | | | Min: 0
Max: 65535 | | + | [      aaa](## "ethernet_interfaces.[].dot1x.aaa") | Dictionary | | | | | + | [        unresponsive](## "ethernet_interfaces.[].dot1x.aaa.unresponsive") | Dictionary | | | | Configure AAA timeout options. | + | [          eap_response](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.eap_response") | String | | | Valid Values:
- success
- disabled | EAP response to send. EOS default is `success`. | + | [          action](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action") | Dictionary | | | | Set action for supplicant when AAA times out. | + | [            traffic_allow_access_list](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.traffic_allow_access_list") | String | | | | Name of standard access-list to apply when AAA times out. | + | [            apply_cached_results](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.apply_cached_results") | Boolean | | | | Use results from a previous AAA response. | + | [            cached_results_timeout](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.cached_results_timeout") | Dictionary | | | | | + | [              time_duration](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.cached_results_timeout.time_duration") | Integer | | | Min: 1 | Enable caching for a specific duration -
<1-10000> duration in days
<1-14400000> duration in minutes
<1-240000> duration in hours
<1-864000000> duration in seconds | + | [              time_duration_unit](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.cached_results_timeout.time_duration_unit") | String | Required | | Valid Values:
- days
- hours
- minutes
- seconds | | + | [            apply_alternate](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.apply_alternate") | Boolean | | | | Apply alternate action if primary action fails.
eg. aaa unresponsive action apply cached-results else traffic allow | + | [            traffic_allow](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.traffic_allow") | Boolean | | | | Set action for supplicant traffic when AAA times out. | + | [            traffic_allow_vlan](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.action.traffic_allow_vlan") | Integer | | | Min: 1
Max: 4094 | | + | [          phone_action](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action") | Dictionary | | | | Set action for supplicant when AAA times out. | + | [            apply_cached_results](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.apply_cached_results") | Boolean | | | | Use results from a previous AAA response. | + | [            cached_results_timeout](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.cached_results_timeout") | Dictionary | | | | | + | [              time_duration](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.cached_results_timeout.time_duration") | Integer | | | Min: 1 | Enable caching for a specific duration -
<1-10000> duration in days
<1-14400000> duration in minutes
<1-240000> duration in hours
<1-864000000> duration in seconds | + | [              time_duration_unit](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.cached_results_timeout.time_duration_unit") | String | Required | | Valid Values:
- days
- hours
- minutes
- seconds | | + | [            apply_alternate](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.apply_alternate") | Boolean | | | | Apply alternate action if primary action fails.
eg. aaa unresponsive phone action apply cached-results else traffic allow | + | [            traffic_allow](## "ethernet_interfaces.[].dot1x.aaa.unresponsive.phone_action.traffic_allow") | Boolean | | | | Set action for supplicant traffic when AAA times out. | | [    service_profile](## "ethernet_interfaces.[].service_profile") | String | | | | QOS profile. | | [    shape](## "ethernet_interfaces.[].shape") | Dictionary | | | | | | [      rate](## "ethernet_interfaces.[].shape.rate") | String | | | | Rate in kbps, pps or percent.
Supported options are platform dependent.
Examples:
- "5000 kbps"
- "1000 pps"
- "20 percent"
| @@ -400,7 +433,54 @@ | [        ipv6](## "ethernet_interfaces.[].vrrp_ids.[].ipv6") | Dictionary | | | | | | [          address](## "ethernet_interfaces.[].vrrp_ids.[].ipv6.address") | String | Required | | | Virtual IPv6 address. | | [    validate_state](## "ethernet_interfaces.[].validate_state") | Boolean | | | | Set to false to disable interface validation by the `eos_validate_state` role. | - | [    switchport](## "ethernet_interfaces.[].switchport") | Dictionary | | | | | + | [    switchport](## "ethernet_interfaces.[].switchport") | Dictionary | | | | This should not be combined with `ethernet_interfaces[].type = switched/routed`. | + | [      enabled](## "ethernet_interfaces.[].switchport.enabled") | Boolean | | | | Warning: This should not be combined with `ethernet_interfaces[].type = routed`. | + | [      mode](## "ethernet_interfaces.[].switchport.mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | Warning: This should not be combined with `ethernet_interfaces[].mode`. | + | [      access_vlan](## "ethernet_interfaces.[].switchport.access_vlan") | Integer | | | Min: 1
Max: 4094 | Set VLAN when interface is in access mode.
Warning: This should not be combined with `ethernet_interfaces[].mode = access/dot1q-tunnel` and `ethernet_interface[].vlans`. | + | [      trunk](## "ethernet_interfaces.[].switchport.trunk") | Dictionary | | | | | + | [        allowed_vlan](## "ethernet_interfaces.[].switchport.trunk.allowed_vlan") | String | | | | VLAN ID or range(s) of VLAN IDs.
Warning: This should not be combined with `ethernet_interfaces[].mode = trunk` and `ethernet_interface[].vlans`. | + | [        native_vlan](## "ethernet_interfaces.[].switchport.trunk.native_vlan") | Integer | | | Min: 1
Max: 4094 | Set native VLAN when interface is in trunking mode.
Warning: This should not be combined with `ethernet_interfaces[].native_vlan`. | + | [        native_vlan_tag](## "ethernet_interfaces.[].switchport.trunk.native_vlan_tag") | Boolean | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence.
Warning: This should not be combined with `ethernet_interfaces[].native_vlan_tag`. | + | [        private_vlan_secondary](## "ethernet_interfaces.[].switchport.trunk.private_vlan_secondary") | Boolean | | | | Enable secondary VLAN mapping for a private vlan.
Warning: This should not be combined with `ethernet_ineterfaces[].trunk_private_vlan_secondary`. | + | [        groups](## "ethernet_interfaces.[].switchport.trunk.groups") | List, items: String | | | | Warning: This should not be combined with `ethernet_ineterfaces[].trunk_groups`.
| + | [          - <str>](## "ethernet_interfaces.[].switchport.trunk.groups.[]") | String | | | | Trunk group name. | + | [      phone](## "ethernet_interfaces.[].switchport.phone") | Dictionary | | | | Warning: This should not be combined with `ethernet_interfaces[].phone`. | + | [        vlan](## "ethernet_interfaces.[].switchport.phone.vlan") | Integer | | | Min: 1
Max: 4094 | Warning: This should not be combined with `ethernet_interfaces[].phone.vlan`. | + | [        trunk](## "ethernet_interfaces.[].switchport.phone.trunk") | String | | | Valid Values:
- tagged
- tagged phone
- untagged
- untagged phone | Warning: This should not be combined with `ethernet_interfaces[].phone.trunk`. | + | [      pvlan_mapping](## "ethernet_interfaces.[].switchport.pvlan_mapping") | String | | | | Secondary VLAN IDs of the private VLAN mapping.
Warning: This should not be combined with `ethernet_interfaces[].pvlan_mapping`. | + | [      dot1q](## "ethernet_interfaces.[].switchport.dot1q") | Dictionary | | | | | + | [        ethertype](## "ethernet_interfaces.[].switchport.dot1q.ethertype") | Integer | | | Min: 1536
Max: 65535 | Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. | + | [        vlan_tag](## "ethernet_interfaces.[].switchport.dot1q.vlan_tag") | String | | | Valid Values:
- disallowed
- required | Allow/disallow VLAN tagged frames. | + | [      source_interface](## "ethernet_interfaces.[].switchport.source_interface") | String | | | Valid Values:
- tx
- tx multicast | tx: Allow bridged traffic to go out of the source interface.
tx multicast: Allow multicast traffic only to go out of the source interface. | + | [      vlan_translations](## "ethernet_interfaces.[].switchport.vlan_translations") | Dictionary | | | | VLAN Translation mappings.
Warning: This should not be combined with `ethernet_interfaces[].vlan_translations`. | + | [        in_required](## "ethernet_interfaces.[].switchport.vlan_translations.in_required") | Boolean | | | | Drop the ingress traffic that do not match any VLAN mapping. | + | [        out_required](## "ethernet_interfaces.[].switchport.vlan_translations.out_required") | Boolean | | | | Drop the egress traffic that do not match any VLAN mapping. | + | [        direction_in](## "ethernet_interfaces.[].switchport.vlan_translations.direction_in") | List, items: Dictionary | | | | Map ingress traffic only. | + | [          - from](## "ethernet_interfaces.[].switchport.vlan_translations.direction_in.[].from") | String | Required | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "ethernet_interfaces.[].switchport.vlan_translations.direction_in.[].to") | Integer | Required | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel](## "ethernet_interfaces.[].switchport.vlan_translations.direction_in.[].dot1q_tunnel") | Boolean | | | | | + | [            inner_vlan_from](## "ethernet_interfaces.[].switchport.vlan_translations.direction_in.[].inner_vlan_from") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map from. | + | [        direction_out](## "ethernet_interfaces.[].switchport.vlan_translations.direction_out") | List, items: Dictionary | | | | Map egress traffic only. | + | [          - from](## "ethernet_interfaces.[].switchport.vlan_translations.direction_out.[].from") | String | Required | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "ethernet_interfaces.[].switchport.vlan_translations.direction_out.[].to") | Integer | | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel_to](## "ethernet_interfaces.[].switchport.vlan_translations.direction_out.[].dot1q_tunnel_to") | String | | | | VLAN ID or range of VLAN IDs or "all". Range 1-4094.
This takes precedence over `to` and `inner_vlan_to`. | + | [            inner_vlan_to](## "ethernet_interfaces.[].switchport.vlan_translations.direction_out.[].inner_vlan_to") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map to. | + | [        direction_both](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both") | List, items: Dictionary | | | | Map both egress and ingress traffic. | + | [          - from](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both.[].from") | String | Required | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both.[].to") | Integer | Required | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both.[].dot1q_tunnel") | Boolean | | | | | + | [            inner_vlan_from](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both.[].inner_vlan_from") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map from. | + | [            network](## "ethernet_interfaces.[].switchport.vlan_translations.direction_both.[].network") | Boolean | | | | Enable use of network-side VLAN ID.
This setting can only be enabled when `inner_vlan_from` is defined. | + | [      vlan_forwarding_accept_all](## "ethernet_interfaces.[].switchport.vlan_forwarding_accept_all") | Boolean | | | | | + | [      backup_link](## "ethernet_interfaces.[].switchport.backup_link") | Dictionary | | | | | + | [        interface](## "ethernet_interfaces.[].switchport.backup_link.interface") | String | | | | Backup interface. Example - Ethernet4, Vlan10 etc. | + | [        prefer_vlan](## "ethernet_interfaces.[].switchport.backup_link.prefer_vlan") | String | | | | VLANs to carry on the backup interface (1-4094). | + | [      backup](## "ethernet_interfaces.[].switchport.backup") | Dictionary | | | | The `backup_link` is required for this setting. | + | [        dest_macaddr](## "ethernet_interfaces.[].switchport.backup.dest_macaddr") | String | | | Format: mac | Destination MAC address for MAC move updates.
The mac address should be multicast or broadcast.
Example: 01:00:00:00:00:00 | + | [        initial_mac_move_delay](## "ethernet_interfaces.[].switchport.backup.initial_mac_move_delay") | Integer | | | Min: 0
Max: 65535 | Initial MAC move delay in milliseconds. | + | [        mac_move_burst](## "ethernet_interfaces.[].switchport.backup.mac_move_burst") | Integer | | | Min: 0
Max: 65535 | Size of MAC move bursts. | + | [        mac_move_burst_interval](## "ethernet_interfaces.[].switchport.backup.mac_move_burst_interval") | Integer | | | Min: 0
Max: 65535 | MAC move burst interval in milliseconds. | + | [        preemption_delay](## "ethernet_interfaces.[].switchport.backup.preemption_delay") | Integer | | | Min: 0
Max: 65535 | Preemption delay in milliseconds. | | [      port_security](## "ethernet_interfaces.[].switchport.port_security") | Dictionary | | | | | | [        enabled](## "ethernet_interfaces.[].switchport.port_security.enabled") | Boolean | | | | | | [        mac_address_maximum](## "ethernet_interfaces.[].switchport.port_security.mac_address_maximum") | Dictionary | | | | Maximum number of MAC addresses allowed on the interface. | @@ -485,14 +565,35 @@ # List of switchport vlans as string. # For a trunk port this would be a range like "1-200,300". # For an access port this would be a single vlan "123". + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.access_vlan or ethernet_interfaces[].switchport.trunk.allowed_vlan instead. vlans: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.trunk.native_vlan instead. native_vlan: # If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.trunk.native_vlan_tag instead. native_vlan_tag: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.mode instead. mode: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.phone instead. phone: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.phone.trunk instead. trunk: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.phone.vlan instead. vlan: l2_protocol: @@ -501,11 +602,17 @@ # L2 protocol forwarding profile. forwarding_profile: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.trunk.groups instead. trunk_groups: - # l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed. - # Interface will not be listed in device documentation, unless "type" is set. + # The `type = switched/routed` should not be combined with `switchport`. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation) for details. type: snmp_trap_link_change: address_locking: @@ -560,34 +667,85 @@ route_target: # VLAN tag to configure on sub-interface. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use encapsulation_dot1q.vlan instead. encapsulation_dot1q_vlan: + + # Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. + encapsulation_dot1q: + + # VLAD ID. + vlan: + + # Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. + inner_vlan: + + # This setting can only be applied to sub-interfaces on EOS. + # Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. encapsulation_vlan: client: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. dot1q: # Client VLAN ID. - vlan: + vlan: # Client Outer VLAN ID. - outer: + outer: # Client Inner VLAN ID. inner: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. unmatched: + encapsulation: + + # Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + vlan: + + # Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + outer_vlan: + + # Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_vlan: + inner_encapsulation: # Network encapsulations are all optional and skipped if using client unmatched. network: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. dot1q: # Network VLAN ID. - vlan: + vlan: # Network outer VLAN ID. - outer: + outer: # Network inner VLAN ID. - inner: + inner: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. client: + + # `untagged` (no encapsulation) is applicable for `untagged` client only. + # `client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. + encapsulation: + + # Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + vlan: + + # Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + outer_vlan: + + # Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_vlan: + inner_encapsulation: + + # This setting can only be applied to sub-interfaces on EOS. + # Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. vlan_id: # IPv4 address/mask or "dhcp". @@ -911,10 +1069,19 @@ # ZTP vlan number. ztp_vlan: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.trunk.private_vlan_secondary instead. trunk_private_vlan_secondary: # List of vlans as string. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.pvlan_mapping instead. pvlan_mapping: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use ethernet_interfaces[].switchport.vlan_translations instead. vlan_translations: # List of vlans as string (only one vlan if direction is "both"). @@ -939,6 +1106,9 @@ enabled: always: host_mode_common: + + # Operate interface in per-mac access-list mode. + mac_based_access_list: timeout: idle_host: quiet_period: @@ -956,6 +1126,61 @@ authentication_failure_fallback_mba: enabled: timeout: + aaa: + + # Configure AAA timeout options. + unresponsive: + + # EAP response to send. EOS default is `success`. + eap_response: + + # Set action for supplicant when AAA times out. + action: + + # Name of standard access-list to apply when AAA times out. + traffic_allow_access_list: + + # Use results from a previous AAA response. + apply_cached_results: + cached_results_timeout: + + # Enable caching for a specific duration - + # <1-10000> duration in days + # <1-14400000> duration in minutes + # <1-240000> duration in hours + # <1-864000000> duration in seconds + time_duration: =1> + time_duration_unit: + + # Apply alternate action if primary action fails. + # eg. aaa unresponsive action apply cached-results else traffic allow + apply_alternate: + + # Set action for supplicant traffic when AAA times out. + traffic_allow: + traffic_allow_vlan: + + # Set action for supplicant when AAA times out. + phone_action: + + # Use results from a previous AAA response. + apply_cached_results: + cached_results_timeout: + + # Enable caching for a specific duration - + # <1-10000> duration in days + # <1-14400000> duration in minutes + # <1-240000> duration in hours + # <1-864000000> duration in seconds + time_duration: =1> + time_duration_unit: + + # Apply alternate action if primary action fails. + # eg. aaa unresponsive phone action apply cached-results else traffic allow + apply_alternate: + + # Set action for supplicant traffic when AAA times out. + traffic_allow: # QOS profile. service_profile: @@ -1183,7 +1408,150 @@ # Set to false to disable interface validation by the `eos_validate_state` role. validate_state: + + # This should not be combined with `ethernet_interfaces[].type = switched/routed`. switchport: + + # Warning: This should not be combined with `ethernet_interfaces[].type = routed`. + enabled: + + # Warning: This should not be combined with `ethernet_interfaces[].mode`. + mode: + + # Set VLAN when interface is in access mode. + # Warning: This should not be combined with `ethernet_interfaces[].mode = access/dot1q-tunnel` and `ethernet_interface[].vlans`. + access_vlan: + trunk: + + # VLAN ID or range(s) of VLAN IDs. + # Warning: This should not be combined with `ethernet_interfaces[].mode = trunk` and `ethernet_interface[].vlans`. + allowed_vlan: + + # Set native VLAN when interface is in trunking mode. + # Warning: This should not be combined with `ethernet_interfaces[].native_vlan`. + native_vlan: + + # If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + # Warning: This should not be combined with `ethernet_interfaces[].native_vlan_tag`. + native_vlan_tag: + + # Enable secondary VLAN mapping for a private vlan. + # Warning: This should not be combined with `ethernet_ineterfaces[].trunk_private_vlan_secondary`. + private_vlan_secondary: + + # Warning: This should not be combined with `ethernet_ineterfaces[].trunk_groups`. + groups: + + # Trunk group name. + - + + # Warning: This should not be combined with `ethernet_interfaces[].phone`. + phone: + + # Warning: This should not be combined with `ethernet_interfaces[].phone.vlan`. + vlan: + + # Warning: This should not be combined with `ethernet_interfaces[].phone.trunk`. + trunk: + + # Secondary VLAN IDs of the private VLAN mapping. + # Warning: This should not be combined with `ethernet_interfaces[].pvlan_mapping`. + pvlan_mapping: + dot1q: + + # Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. + ethertype: + + # Allow/disallow VLAN tagged frames. + vlan_tag: + + # tx: Allow bridged traffic to go out of the source interface. + # tx multicast: Allow multicast traffic only to go out of the source interface. + source_interface: + + # VLAN Translation mappings. + # Warning: This should not be combined with `ethernet_interfaces[].vlan_translations`. + vlan_translations: + + # Drop the ingress traffic that do not match any VLAN mapping. + in_required: + + # Drop the egress traffic that do not match any VLAN mapping. + out_required: + + # Map ingress traffic only. + direction_in: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + dot1q_tunnel: + + # Inner VLAN ID to map from. + inner_vlan_from: + + # Map egress traffic only. + direction_out: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + + # VLAN ID or range of VLAN IDs or "all". Range 1-4094. + # This takes precedence over `to` and `inner_vlan_to`. + dot1q_tunnel_to: + + # Inner VLAN ID to map to. + inner_vlan_to: + + # Map both egress and ingress traffic. + direction_both: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + dot1q_tunnel: + + # Inner VLAN ID to map from. + inner_vlan_from: + + # Enable use of network-side VLAN ID. + # This setting can only be enabled when `inner_vlan_from` is defined. + network: + vlan_forwarding_accept_all: + backup_link: + + # Backup interface. Example - Ethernet4, Vlan10 etc. + interface: + + # VLANs to carry on the backup interface (1-4094). + prefer_vlan: + + # The `backup_link` is required for this setting. + backup: + + # Destination MAC address for MAC move updates. + # The mac address should be multicast or broadcast. + # Example: 01:00:00:00:00:00 + dest_macaddr: + + # Initial MAC move delay in milliseconds. + initial_mac_move_delay: + + # Size of MAC move bursts. + mac_move_burst: + + # MAC move burst interval in milliseconds. + mac_move_burst_interval: + + # Preemption delay in milliseconds. + preemption_delay: port_security: enabled: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-default-config.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-default-config.md index df5d7690b27..ca41f832659 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-default-config.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-default-config.md @@ -7,7 +7,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [generate_default_config](## "generate_default_config") | Boolean | | `True` | | The `generate_default_config` knob allows to omit default EOS configuration.
This can be useful when leveraging `eos_cli_config_gen` to generate configlets with CloudVision.

The following commands will be omitted when `generate_default_config` is set to `false`:

- RANCID Content Type
- Hostname
- Default configuration for `aaa`
- Default configuration for `enable password`
- Transceiver qsfp default mode
- End of configuration delimiter
| + | [generate_default_config](## "generate_default_config") deprecated | Boolean | | `False` | | The `generate_default_config` knob allows to omit default EOS configuration.
This can be useful when leveraging `eos_cli_config_gen` to generate configlets with CloudVision.

The following commands will be omitted when `generate_default_config` is set to `false`:

- RANCID Content Type
- Hostname (even if `hostname` variable is not set. Then the hostname is picked up from `inventory_hostname`)
- Default configuration for `aaa`
- Default configuration for `enable password`
- Transceiver qsfp default mode
- End of configuration delimiter
This key is deprecated. Support will be removed in AVD version 6.0.0. See [here](https://avd.arista.com/devel/docs/porting-guides/5.x.x.html#default-eos-configuration-is-no-longer-automatically-generated) for details. | === "YAML" @@ -18,10 +18,13 @@ # The following commands will be omitted when `generate_default_config` is set to `false`: # # - RANCID Content Type - # - Hostname + # - Hostname (even if `hostname` variable is not set. Then the hostname is picked up from `inventory_hostname`) # - Default configuration for `aaa` # - Default configuration for `enable password` # - Transceiver qsfp default mode # - End of configuration delimiter - generate_default_config: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # See [here](https://avd.arista.com/devel/docs/porting-guides/5.x.x.html#default-eos-configuration-is-no-longer-automatically-generated) for details. + generate_default_config: ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/hardware.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/hardware.md index e1e088af92e..f974e40e5b1 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/hardware.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/hardware.md @@ -13,6 +13,9 @@ | [  speed_groups](## "hardware.speed_groups") | List, items: Dictionary | | | | | | [    - speed_group](## "hardware.speed_groups.[].speed_group") | String | Required, Unique | | | | | [      serdes](## "hardware.speed_groups.[].serdes") | String | | | | Serdes speed like "10g" or "25g". | + | [  port_groups](## "hardware.port_groups") | List, items: Dictionary | | | | | + | [    - port_group](## "hardware.port_groups.[].port_group") | String | Required, Unique | | | | + | [      select](## "hardware.port_groups.[].select") | String | | | | Select Ports to activate | === "YAML" @@ -25,4 +28,9 @@ # Serdes speed like "10g" or "25g". serdes: + port_groups: + - port_group: + + # Select Ports to activate + select: ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ip-security.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ip-security.md index ed9ce5641c3..c2194aa3274 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ip-security.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/ip-security.md @@ -16,7 +16,7 @@ | [      encryption](## "ip_security.ike_policies.[].encryption") | String | | | Valid Values:
- 3des
- aes128
- aes256 | IKE encryption algorithm. | | [      dh_group](## "ip_security.ike_policies.[].dh_group") | Integer | | | Valid Values:
- 1
- 2
- 5
- 14
- 15
- 16
- 17
- 20
- 21
- 24 | Diffie-Hellman group for the key exchange. | | [  sa_policies](## "ip_security.sa_policies") | List, items: Dictionary | | | | Security Association policies. | - | [    - name](## "ip_security.sa_policies.[].name") | String | Required, Unique | | | Name of the SA policy. The "null" value is deprecated and will be removed in AVD 5.0.0. | + | [    - name](## "ip_security.sa_policies.[].name") | String | Required, Unique | | | Name of the SA policy. | | [      sa_lifetime](## "ip_security.sa_policies.[].sa_lifetime") | Dictionary | | | | | | [        value](## "ip_security.sa_policies.[].sa_lifetime.value") | Integer | | | | Lifetime value for this SA.
Valid range depends on the unit.
<1-24> Lifetime in hours ( default )
<1-4000000> Packet limit in thousands
<1-6000> Byte limit in GB ( 1024 MB )
<1-6144000> Byte limit in MB ( 1024 KB ) | | [        unit](## "ip_security.sa_policies.[].sa_lifetime.unit") | String | | `hours` | Valid Values:
- gigabytes
- hours
- megabytes
- thousand-packets | | @@ -72,7 +72,7 @@ # Security Association policies. sa_policies: - # Name of the SA policy. The "null" value is deprecated and will be removed in AVD 5.0.0. + # Name of the SA policy. - name: sa_lifetime: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/logging.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/logging.md index e99a59c92b7..f786ee5d637 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/logging.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/logging.md @@ -8,19 +8,20 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [logging](## "logging") | Dictionary | | | | | - | [  console](## "logging.console") | String | | | Valid Values:
- debugging
- informational
- notifications
- warnings
- errors
- critical
- alerts
- emergencies
- disabled | Console logging severity level.
| - | [  monitor](## "logging.monitor") | String | | | Valid Values:
- debugging
- informational
- notifications
- warnings
- errors
- critical
- alerts
- emergencies
- disabled | Monitor logging severity level.
| + | [  console](## "logging.console") | String | | | Valid Values:
- debugging
- informational
- notifications
- warnings
- errors
- critical
- alerts
- emergencies
- disabled | Console logging severity level. | + | [  monitor](## "logging.monitor") | String | | | Valid Values:
- debugging
- informational
- notifications
- warnings
- errors
- critical
- alerts
- emergencies
- disabled | Monitor logging severity level. | | [  buffered](## "logging.buffered") | Dictionary | | | | | | [    size](## "logging.buffered.size") | Integer | | | Min: 10
Max: 2147483647 | | - | [    level](## "logging.buffered.level") | String | | | Valid Values:
- alerts
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- warnings
- disabled | Buffer logging severity level.
| - | [  trap](## "logging.trap") | String | | | Valid Values:
- alerts
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- system
- warnings
- disabled | Trap logging severity level.
| + | [    level](## "logging.buffered.level") | String | | | Valid Values:
- alerts
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- warnings
- disabled | Buffer logging severity level. | + | [  repeat_messages](## "logging.repeat_messages") | Boolean | | | | Summarize concurrent repeat messages. | + | [  trap](## "logging.trap") | String | | | Valid Values:
- alerts
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- system
- warnings
- disabled | Trap logging severity level. | | [  synchronous](## "logging.synchronous") | Dictionary | | | | | - | [    level](## "logging.synchronous.level") | String | | `critical` | Valid Values:
- alerts
- all
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- warnings
- disabled | Synchronous logging severity level.
| + | [    level](## "logging.synchronous.level") | String | | `critical` | Valid Values:
- alerts
- all
- critical
- debugging
- emergencies
- errors
- informational
- notifications
- warnings
- disabled | Synchronous logging severity level. | | [  format](## "logging.format") | Dictionary | | | | | | [    timestamp](## "logging.format.timestamp") | String | | | Valid Values:
- high-resolution
- traditional
- traditional timezone
- traditional year
- traditional timezone year
- traditional year timezone | Timestamp format. | | [    hostname](## "logging.format.hostname") | String | | | Valid Values:
- fqdn
- ipv4 | Hostname format in syslogs. For hostname _only_, remove the line. (default EOS CLI behaviour). | - | [    sequence_numbers](## "logging.format.sequence_numbers") | Boolean | | | | Add sequence numbers to log messages.
| - | [    rfc5424](## "logging.format.rfc5424") | Boolean | | | | Forward logs in RFC5424 format.
| + | [    sequence_numbers](## "logging.format.sequence_numbers") | Boolean | | | | Add sequence numbers to log messages. | + | [    rfc5424](## "logging.format.rfc5424") | Boolean | | | | Forward logs in RFC5424 format. | | [  facility](## "logging.facility") | String | | | Valid Values:
- auth
- cron
- daemon
- kern
- local0
- local1
- local2
- local3
- local4
- local5
- local6
- local7
- lpr
- mail
- news
- sys9
- sys10
- sys11
- sys12
- sys13
- sys14
- syslog
- user
- uucp | | | [  source_interface](## "logging.source_interface") | String | | | | Source Interface Name. | | [  vrfs](## "logging.vrfs") | List, items: Dictionary | | | | | @@ -37,6 +38,8 @@ | [        - name](## "logging.policy.match.match_lists.[].name") | String | Required, Unique | | | Match list. | | [          action](## "logging.policy.match.match_lists.[].action") | String | | | Valid Values:
- discard | | | [  event](## "logging.event") | Dictionary | | | | | + | [    congestion_drops_interval](## "logging.event.congestion_drops_interval") | Integer | | | Min: 1
Max: 65535 | Logging interval in seconds. | + | [    global_link_status](## "logging.event.global_link_status") | Boolean | | | | | | [    storm_control](## "logging.event.storm_control") | Dictionary | | | | | | [      discards](## "logging.event.storm_control.discards") | Dictionary | | | | | | [        global](## "logging.event.storm_control.discards.global") | Boolean | | | | | @@ -61,6 +64,9 @@ # Buffer logging severity level. level: + # Summarize concurrent repeat messages. + repeat_messages: + # Trap logging severity level. trap: synchronous: @@ -106,6 +112,10 @@ - name: action: event: + + # Logging interval in seconds. + congestion_drops_interval: + global_link_status: storm_control: discards: global: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/management-ssh.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/management-ssh.md index 1b612e87e6f..c9b7bd83c63 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/management-ssh.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/management-ssh.md @@ -8,6 +8,10 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [management_ssh](## "management_ssh") | Dictionary | | | | | + | [  authentication](## "management_ssh.authentication") | Dictionary | | | | | + | [    empty_passwords](## "management_ssh.authentication.empty_passwords") | String | | | Valid Values:
- auto
- deny
- permit | Permit or deny empty passwords for SSH authentication. | + | [    protocols](## "management_ssh.authentication.protocols") | List, items: String | | | | Allowed SSH authentication methods. | + | [      - <str>](## "management_ssh.authentication.protocols.[]") | String | | | Valid Values:
- keyboard-interactive
- password
- public-key | | | [  access_groups](## "management_ssh.access_groups") | List, items: Dictionary | | | | | | [    - name](## "management_ssh.access_groups.[].name") | String | | | | Standard ACL Name. | | [      vrf](## "management_ssh.access_groups.[].vrf") | String | | | | VRF Name. | @@ -43,6 +47,14 @@ ```yaml management_ssh: + authentication: + + # Permit or deny empty passwords for SSH authentication. + empty_passwords: + + # Allowed SSH authentication methods. + protocols: + - access_groups: # Standard ACL Name. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-connectivity.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-connectivity.md index 0033478b731..c883cb409fc 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-connectivity.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-connectivity.md @@ -14,13 +14,13 @@ | [    - name](## "monitor_connectivity.interface_sets.[].name") | String | | | | | | [      interfaces](## "monitor_connectivity.interface_sets.[].interfaces") | String | | | | Interface range(s) should be of same type, Ethernet, Loopback, Management etc.
Multiple interface ranges can be specified separated by ",".
| | [  local_interfaces](## "monitor_connectivity.local_interfaces") | String | | | | | - | [  address_only](## "monitor_connectivity.address_only") | Boolean | | `True` | | PREVIEW: This key is in preview.
When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device.
Not supported yet in EOS. | + | [  address_only](## "monitor_connectivity.address_only") | Boolean | | `True` | | When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device. | | [  hosts](## "monitor_connectivity.hosts") | List, items: Dictionary | | | | | | [    - name](## "monitor_connectivity.hosts.[].name") | String | Required, Unique | | | Host Name. | | [      description](## "monitor_connectivity.hosts.[].description") | String | | | | | | [      ip](## "monitor_connectivity.hosts.[].ip") | String | | | | | | [      local_interfaces](## "monitor_connectivity.hosts.[].local_interfaces") | String | | | | | - | [      address_only](## "monitor_connectivity.hosts.[].address_only") | Boolean | | `True` | | PREVIEW: This key is in preview.
When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device.
Not supported yet in EOS. | + | [      address_only](## "monitor_connectivity.hosts.[].address_only") | Boolean | | `True` | | When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device. | | [      url](## "monitor_connectivity.hosts.[].url") | String | | | | | | [  vrfs](## "monitor_connectivity.vrfs") | List, items: Dictionary | | | | | | [    - name](## "monitor_connectivity.vrfs.[].name") | String | Required, Unique | | | VRF Name. | @@ -29,13 +29,13 @@ | [        - name](## "monitor_connectivity.vrfs.[].interface_sets.[].name") | String | | | | | | [          interfaces](## "monitor_connectivity.vrfs.[].interface_sets.[].interfaces") | String | | | | | | [      local_interfaces](## "monitor_connectivity.vrfs.[].local_interfaces") | String | | | | | - | [      address_only](## "monitor_connectivity.vrfs.[].address_only") | Boolean | | `True` | | PREVIEW: This key is in preview.
When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device.
Not supported yet in EOS. | + | [      address_only](## "monitor_connectivity.vrfs.[].address_only") | Boolean | | `True` | | When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device. | | [      hosts](## "monitor_connectivity.vrfs.[].hosts") | List, items: Dictionary | | | | | | [        - name](## "monitor_connectivity.vrfs.[].hosts.[].name") | String | Required, Unique | | | Host name. | | [          description](## "monitor_connectivity.vrfs.[].hosts.[].description") | String | | | | | | [          ip](## "monitor_connectivity.vrfs.[].hosts.[].ip") | String | | | | | | [          local_interfaces](## "monitor_connectivity.vrfs.[].hosts.[].local_interfaces") | String | | | | | - | [          address_only](## "monitor_connectivity.vrfs.[].hosts.[].address_only") | Boolean | | `True` | | PREVIEW: This key is in preview.
When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device.
Not supported yet in EOS. | + | [          address_only](## "monitor_connectivity.vrfs.[].hosts.[].address_only") | Boolean | | `True` | | When address-only is configured, the source IP of the packet is set to the interface
IP but the packet may exit the device via a different interface.
When set to `false`, the probe uses the interface to exit the device. | | [          url](## "monitor_connectivity.vrfs.[].hosts.[].url") | String | | | | | === "YAML" @@ -52,11 +52,9 @@ interfaces: local_interfaces: - # PREVIEW: This key is in preview. # When address-only is configured, the source IP of the packet is set to the interface # IP but the packet may exit the device via a different interface. # When set to `false`, the probe uses the interface to exit the device. - # Not supported yet in EOS. address_only: hosts: @@ -66,11 +64,9 @@ ip: local_interfaces: - # PREVIEW: This key is in preview. # When address-only is configured, the source IP of the packet is set to the interface # IP but the packet may exit the device via a different interface. # When set to `false`, the probe uses the interface to exit the device. - # Not supported yet in EOS. address_only: url: vrfs: @@ -83,11 +79,9 @@ interfaces: local_interfaces: - # PREVIEW: This key is in preview. # When address-only is configured, the source IP of the packet is set to the interface # IP but the packet may exit the device via a different interface. # When set to `false`, the probe uses the interface to exit the device. - # Not supported yet in EOS. address_only: hosts: @@ -97,11 +91,9 @@ ip: local_interfaces: - # PREVIEW: This key is in preview. # When address-only is configured, the source IP of the packet is set to the interface # IP but the packet may exit the device via a different interface. # When set to `false`, the probe uses the interface to exit the device. - # Not supported yet in EOS. address_only: url: ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-sessions.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-sessions.md index 01ed2b31bec..6ae2687585c 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-sessions.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-sessions.md @@ -7,6 +7,8 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [monitor_session_default_encapsulation_gre](## "monitor_session_default_encapsulation_gre") | Dictionary | | | | | + | [  payload](## "monitor_session_default_encapsulation_gre.payload") | String | | | Valid Values:
- full-packet
- inner-packet | Mirroring GRE payload type configuration commands. | | [monitor_sessions](## "monitor_sessions") | List, items: Dictionary | | | | | | [  - name](## "monitor_sessions.[].name") | String | Required | | | Session Name. | | [    sources](## "monitor_sessions.[].sources") | List, items: Dictionary | | | | | @@ -33,6 +35,10 @@ === "YAML" ```yaml + monitor_session_default_encapsulation_gre: + + # Mirroring GRE payload type configuration commands. + payload: monitor_sessions: # Session Name. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-influx.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-influx.md deleted file mode 100644 index 7aed92e9171..00000000000 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-influx.md +++ /dev/null @@ -1,70 +0,0 @@ - -=== "Table" - - | Variable | Type | Required | Default | Value Restrictions | Description | - | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [monitor_telemetry_influx](## "monitor_telemetry_influx") | Dictionary | | | | | - | [  vrf](## "monitor_telemetry_influx.vrf") | String | | | | | - | [  destinations](## "monitor_telemetry_influx.destinations") | List, items: Dictionary | | | | Configure telemetry output destinations. | - | [    - name](## "monitor_telemetry_influx.destinations.[].name") | String | Required, Unique | | | InfluxDB connection name. | - | [      database](## "monitor_telemetry_influx.destinations.[].database") | String | | | | Set name of the database. | - | [      data_retention_policy](## "monitor_telemetry_influx.destinations.[].data_retention_policy") | String | | | | | - | [      url](## "monitor_telemetry_influx.destinations.[].url") | String | | | Pattern: `(http(s)?|udp|unix)://.+` | It only accepts http(s), udp and unix domain destination URL. | - | [      username](## "monitor_telemetry_influx.destinations.[].username") | String | | | | | - | [      password](## "monitor_telemetry_influx.destinations.[].password") | String | | | | | - | [      password_type](## "monitor_telemetry_influx.destinations.[].password_type") | String | | `7` | Valid Values:
- 0
- 7
- 8a | | - | [  source_group_standard_disabled](## "monitor_telemetry_influx.source_group_standard_disabled") | Boolean | | | | Disable standard set of telemetry. | - | [  source_sockets](## "monitor_telemetry_influx.source_sockets") | List, items: Dictionary | | | | | - | [    - name](## "monitor_telemetry_influx.source_sockets.[].name") | String | Required, Unique | | | Label of the socket connection. | - | [      connection_limit](## "monitor_telemetry_influx.source_sockets.[].connection_limit") | Integer | | | Min: 0
Max: 4294967295 | | - | [      url](## "monitor_telemetry_influx.source_sockets.[].url") | String | | | Pattern: `(http(s)?|udp|unix)://.+` | It only accepts http(s), udp and unix domain socket URL. | - | [  tags](## "monitor_telemetry_influx.tags") | List, items: Dictionary | | | | Extra tags added to the telemetry output. | - | [    - name](## "monitor_telemetry_influx.tags.[].name") | String | Required, Unique | | | Key of the global tag pair. | - | [      value](## "monitor_telemetry_influx.tags.[].value") | String | Required | | | Value of the global tag pair. | - -=== "YAML" - - ```yaml - monitor_telemetry_influx: - vrf: - - # Configure telemetry output destinations. - destinations: - - # InfluxDB connection name. - - name: - - # Set name of the database. - database: - data_retention_policy: - - # It only accepts http(s), udp and unix domain destination URL. - url: - username: - password: - password_type: - - # Disable standard set of telemetry. - source_group_standard_disabled: - source_sockets: - - # Label of the socket connection. - - name: - connection_limit: - - # It only accepts http(s), udp and unix domain socket URL. - url: - - # Extra tags added to the telemetry output. - tags: - - # Key of the global tag pair. - - name: - - # Value of the global tag pair. - value: - ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-postcard-policy.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry.md similarity index 70% rename from ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-postcard-policy.md rename to ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry.md index 6bb11e58c98..3c74212f10a 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry-postcard-policy.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/monitor-telemetry.md @@ -7,6 +7,24 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [monitor_telemetry_influx](## "monitor_telemetry_influx") | Dictionary | | | | | + | [  vrf](## "monitor_telemetry_influx.vrf") | String | | | | | + | [  destinations](## "monitor_telemetry_influx.destinations") | List, items: Dictionary | | | | Configure telemetry output destinations. | + | [    - name](## "monitor_telemetry_influx.destinations.[].name") | String | Required, Unique | | | InfluxDB connection name. | + | [      database](## "monitor_telemetry_influx.destinations.[].database") | String | | | | Set name of the database. | + | [      data_retention_policy](## "monitor_telemetry_influx.destinations.[].data_retention_policy") | String | | | | | + | [      url](## "monitor_telemetry_influx.destinations.[].url") | String | | | Pattern: `(http(s)?|udp|unix)://.+` | It only accepts http(s), udp and unix domain destination URL. | + | [      username](## "monitor_telemetry_influx.destinations.[].username") | String | | | | | + | [      password](## "monitor_telemetry_influx.destinations.[].password") | String | | | | | + | [      password_type](## "monitor_telemetry_influx.destinations.[].password_type") | String | | `7` | Valid Values:
- 0
- 7
- 8a | | + | [  source_group_standard_disabled](## "monitor_telemetry_influx.source_group_standard_disabled") | Boolean | | | | Disable standard set of telemetry. | + | [  source_sockets](## "monitor_telemetry_influx.source_sockets") | List, items: Dictionary | | | | | + | [    - name](## "monitor_telemetry_influx.source_sockets.[].name") | String | Required, Unique | | | Label of the socket connection. | + | [      connection_limit](## "monitor_telemetry_influx.source_sockets.[].connection_limit") | Integer | | | Min: 0
Max: 4294967295 | | + | [      url](## "monitor_telemetry_influx.source_sockets.[].url") | String | | | Pattern: `(http(s)?|udp|unix)://.+` | It only accepts http(s), udp and unix domain socket URL. | + | [  tags](## "monitor_telemetry_influx.tags") | List, items: Dictionary | | | | Extra tags added to the telemetry output. | + | [    - name](## "monitor_telemetry_influx.tags.[].name") | String | Required, Unique | | | Key of the global tag pair. | + | [      value](## "monitor_telemetry_influx.tags.[].value") | String | Required | | | Value of the global tag pair. | | [monitor_telemetry_postcard_policy](## "monitor_telemetry_postcard_policy") | Dictionary | | | | | | [  disabled](## "monitor_telemetry_postcard_policy.disabled") | Boolean | | `True` | | Enable or disable the postcard telemetry feature. | | [  ingress](## "monitor_telemetry_postcard_policy.ingress") | Dictionary | | | | | @@ -42,6 +60,44 @@ === "YAML" ```yaml + monitor_telemetry_influx: + vrf: + + # Configure telemetry output destinations. + destinations: + + # InfluxDB connection name. + - name: + + # Set name of the database. + database: + data_retention_policy: + + # It only accepts http(s), udp and unix domain destination URL. + url: + username: + password: + password_type: + + # Disable standard set of telemetry. + source_group_standard_disabled: + source_sockets: + + # Label of the socket connection. + - name: + connection_limit: + + # It only accepts http(s), udp and unix domain socket URL. + url: + + # Extra tags added to the telemetry output. + tags: + + # Key of the global tag pair. + - name: + + # Value of the global tag pair. + value: monitor_telemetry_postcard_policy: # Enable or disable the postcard telemetry feature. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md index 0cfe5409d87..7122aa5fab6 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md @@ -17,40 +17,53 @@ | [    shutdown](## "port_channel_interfaces.[].shutdown") | Boolean | | | | | | [    l2_mtu](## "port_channel_interfaces.[].l2_mtu") | Integer | | | Min: 68
Max: 65535 | "l2_mtu" should only be defined for platforms supporting the "l2 mtu" CLI.
| | [    l2_mru](## "port_channel_interfaces.[].l2_mru") | Integer | | | Min: 68
Max: 65535 | "l2_mru" should only be defined for platforms supporting the "l2 mru" CLI.
| - | [    vlans](## "port_channel_interfaces.[].vlans") | String | | | | List of switchport vlans as string.
For a trunk port this would be a range like "1-200,300".
For an access port this would be a single vlan "123".
| + | [    vlans](## "port_channel_interfaces.[].vlans") deprecated | String | | | | List of switchport vlans as string.
For a trunk port this would be a range like "1-200,300".
For an access port this would be a single vlan "123".
This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.access_vlan or port_channel_interfaces[].switchport.trunk.allowed_vlan instead. | | [    snmp_trap_link_change](## "port_channel_interfaces.[].snmp_trap_link_change") | Boolean | | | | | - | [    type](## "port_channel_interfaces.[].type") | String | | | Valid Values:
- routed
- switched
- l3dot1q
- l2dot1q | l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed.
Interface will not be listed in device documentation, unless "type" is set.
| - | [    encapsulation_dot1q_vlan](## "port_channel_interfaces.[].encapsulation_dot1q_vlan") | Integer | | | | VLAN tag to configure on sub-interface. | + | [    type](## "port_channel_interfaces.[].type") deprecated | String | | | Valid Values:
- routed
- switched
- l3dot1q
- l2dot1q | l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed.
Interface will not be listed in device documentation, unless "type" is set.
This key is deprecated. Support will be removed in AVD version 6.0.0. See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation) for details. | + | [    encapsulation_dot1q_vlan](## "port_channel_interfaces.[].encapsulation_dot1q_vlan") deprecated | Integer | | | | VLAN tag to configure on sub-interface.This key is deprecated. Support will be removed in AVD version 6.0.0. Use encapsulation_dot1q.vlan instead. | + | [    encapsulation_dot1q](## "port_channel_interfaces.[].encapsulation_dot1q") | Dictionary | | | | Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. | + | [      vlan](## "port_channel_interfaces.[].encapsulation_dot1q.vlan") | Integer | Required | | Min: 1
Max: 4094 | VLAD ID. | + | [      inner_vlan](## "port_channel_interfaces.[].encapsulation_dot1q.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. | | [    vrf](## "port_channel_interfaces.[].vrf") | String | | | | VRF name. | - | [    encapsulation_vlan](## "port_channel_interfaces.[].encapsulation_vlan") | Dictionary | | | | | + | [    encapsulation_vlan](## "port_channel_interfaces.[].encapsulation_vlan") | Dictionary | | | | This setting can only be applied to sub-interfaces on EOS.
Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. | | [      client](## "port_channel_interfaces.[].encapsulation_vlan.client") | Dictionary | | | | | - | [        dot1q](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q") | Dictionary | | | | | + | [        dot1q](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | | [          vlan](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q.vlan") | Integer | | | | Client VLAN ID. | - | [          outer](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q.outer") | Integer | | | | Client Outer VLAN ID. | - | [          inner](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q.inner") | Integer | | | | Client Inner VLAN ID. | - | [        unmatched](## "port_channel_interfaces.[].encapsulation_vlan.client.unmatched") | Boolean | | | | | + | [          outer](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q.outer") | Integer | | | Min: 1
Max: 4094 | Client Outer VLAN ID. | + | [          inner](## "port_channel_interfaces.[].encapsulation_vlan.client.dot1q.inner") | Integer | | | Min: 1
Max: 4094 | Client Inner VLAN ID. | + | [        unmatched](## "port_channel_interfaces.[].encapsulation_vlan.client.unmatched") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [        encapsulation](## "port_channel_interfaces.[].encapsulation_vlan.client.encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad
- unmatched
- untagged | | + | [        vlan](## "port_channel_interfaces.[].encapsulation_vlan.client.vlan") | Integer | | | Min: 1
Max: 4094 | Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        outer_vlan](## "port_channel_interfaces.[].encapsulation_vlan.client.outer_vlan") | Integer | | | Min: 1
Max: 4094 | Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        inner_vlan](## "port_channel_interfaces.[].encapsulation_vlan.client.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. | + | [        inner_encapsulation](## "port_channel_interfaces.[].encapsulation_vlan.client.inner_encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad | | | [      network](## "port_channel_interfaces.[].encapsulation_vlan.network") | Dictionary | | | | Network encapsulation are all optional, and skipped if using client unmatched. | - | [        dot1q](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q") | Dictionary | | | | | - | [          vlan](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.vlan") | Integer | | | | Network VLAN ID. | - | [          outer](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.outer") | Integer | | | | Network Outer VLAN ID. | - | [          inner](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.inner") | Integer | | | | Network Inner VLAN ID. | - | [        client](## "port_channel_interfaces.[].encapsulation_vlan.network.client") | Boolean | | | | | - | [    vlan_id](## "port_channel_interfaces.[].vlan_id") | Integer | | | Min: 1
Max: 4094 | | - | [    mode](## "port_channel_interfaces.[].mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | | - | [    native_vlan](## "port_channel_interfaces.[].native_vlan") | Integer | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. | - | [    native_vlan_tag](## "port_channel_interfaces.[].native_vlan_tag") | Boolean | | `False` | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. | + | [        dot1q](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [          vlan](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.vlan") | Integer | | | Min: 1
Max: 4094 | Network VLAN ID. | + | [          outer](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.outer") | Integer | | | Min: 1
Max: 4094 | Network Outer VLAN ID. | + | [          inner](## "port_channel_interfaces.[].encapsulation_vlan.network.dot1q.inner") | Integer | | | Min: 1
Max: 4094 | Network Inner VLAN ID. | + | [        client](## "port_channel_interfaces.[].encapsulation_vlan.network.client") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. | + | [        encapsulation](## "port_channel_interfaces.[].encapsulation_vlan.network.encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad
- client
- client inner
- untagged | `untagged` (no encapsulation) is applicable for `untagged` client only.
`client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. | + | [        vlan](## "port_channel_interfaces.[].encapsulation_vlan.network.vlan") | Integer | | | Min: 1
Max: 4094 | Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        outer_vlan](## "port_channel_interfaces.[].encapsulation_vlan.network.outer_vlan") | Integer | | | Min: 1
Max: 4094 | Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        inner_vlan](## "port_channel_interfaces.[].encapsulation_vlan.network.inner_vlan") | Integer | | | Min: 1
Max: 4094 | Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. | + | [        inner_encapsulation](## "port_channel_interfaces.[].encapsulation_vlan.network.inner_encapsulation") | String | | | Valid Values:
- dot1q
- dot1ad | | + | [    vlan_id](## "port_channel_interfaces.[].vlan_id") | Integer | | | Min: 1
Max: 4094 | This setting can only be applied to sub-interfaces on EOS.
Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. | + | [    mode](## "port_channel_interfaces.[].mode") deprecated | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.mode instead. | + | [    native_vlan](## "port_channel_interfaces.[].native_vlan") deprecated | Integer | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence.This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.trunk.native_vlan instead. | + | [    native_vlan_tag](## "port_channel_interfaces.[].native_vlan_tag") deprecated | Boolean | | `False` | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence.This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.trunk.native_vlan_tag instead. | | [    link_tracking_groups](## "port_channel_interfaces.[].link_tracking_groups") | List, items: Dictionary | | | | | | [      - name](## "port_channel_interfaces.[].link_tracking_groups.[].name") | String | Required, Unique | | | Group name. | | [        direction](## "port_channel_interfaces.[].link_tracking_groups.[].direction") | String | | | Valid Values:
- upstream
- downstream | | - | [    phone](## "port_channel_interfaces.[].phone") | Dictionary | | | | | - | [      trunk](## "port_channel_interfaces.[].phone.trunk") | String | | | Valid Values:
- tagged
- untagged | | - | [      vlan](## "port_channel_interfaces.[].phone.vlan") | Integer | | | Min: 1
Max: 4094 | | + | [    phone](## "port_channel_interfaces.[].phone") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.phone instead. | + | [      trunk](## "port_channel_interfaces.[].phone.trunk") deprecated | String | | | Valid Values:
- tagged
- untagged | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.phone.trunk instead. | + | [      vlan](## "port_channel_interfaces.[].phone.vlan") deprecated | Integer | | | Min: 1
Max: 4094 | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.phone.vlan instead. | | [    l2_protocol](## "port_channel_interfaces.[].l2_protocol") | Dictionary | | | | | | [      encapsulation_dot1q_vlan](## "port_channel_interfaces.[].l2_protocol.encapsulation_dot1q_vlan") | Integer | | | | Vlan tag to configure on sub-interface. | | [      forwarding_profile](## "port_channel_interfaces.[].l2_protocol.forwarding_profile") | String | | | | L2 protocol forwarding profile. | | [    mtu](## "port_channel_interfaces.[].mtu") | Integer | | | Min: 68
Max: 65535 | | | [    mlag](## "port_channel_interfaces.[].mlag") | Integer | | | Min: 1
Max: 2000 | MLAG ID. | - | [    trunk_groups](## "port_channel_interfaces.[].trunk_groups") | List, items: String | | | | | + | [    trunk_groups](## "port_channel_interfaces.[].trunk_groups") deprecated | List, items: String | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.trunk.groups instead. | | [      - <str>](## "port_channel_interfaces.[].trunk_groups.[]") | String | | | | | | [    lacp_fallback_timeout](## "port_channel_interfaces.[].lacp_fallback_timeout") | Integer | | `90` | Min: 0
Max: 300 | Timeout in seconds. | | [    lacp_fallback_mode](## "port_channel_interfaces.[].lacp_fallback_mode") | String | | | Valid Values:
- individual
- static | | @@ -77,9 +90,9 @@ | [      ldp](## "port_channel_interfaces.[].mpls.ldp") | Dictionary | | | | | | [        interface](## "port_channel_interfaces.[].mpls.ldp.interface") | Boolean | | | | | | [        igp_sync](## "port_channel_interfaces.[].mpls.ldp.igp_sync") | Boolean | | | | | - | [    trunk_private_vlan_secondary](## "port_channel_interfaces.[].trunk_private_vlan_secondary") | Boolean | | | | | - | [    pvlan_mapping](## "port_channel_interfaces.[].pvlan_mapping") | String | | | | List of vlans as string. | - | [    vlan_translations](## "port_channel_interfaces.[].vlan_translations") | List, items: Dictionary | | | | | + | [    trunk_private_vlan_secondary](## "port_channel_interfaces.[].trunk_private_vlan_secondary") deprecated | Boolean | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.trunk.private_vlan_secondary instead. | + | [    pvlan_mapping](## "port_channel_interfaces.[].pvlan_mapping") deprecated | String | | | | List of vlans as string.This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.pvlan_mapping instead. | + | [    vlan_translations](## "port_channel_interfaces.[].vlan_translations") deprecated | List, items: Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use port_channel_interfaces[].switchport.vlan_translations instead. | | [      - from](## "port_channel_interfaces.[].vlan_translations.[].from") | String | | | | List of vlans as string (only one vlan if direction is "both"). | | [        to](## "port_channel_interfaces.[].vlan_translations.[].to") | Integer | | | | VLAN ID. | | [        direction](## "port_channel_interfaces.[].vlan_translations.[].direction") | String | | `both` | Valid Values:
- in
- out
- both | | @@ -247,6 +260,65 @@ | [        enable](## "port_channel_interfaces.[].sflow.egress.enable") | Boolean | | | | | | [        unmodified_enable](## "port_channel_interfaces.[].sflow.egress.unmodified_enable") | Boolean | | | | | | [    switchport](## "port_channel_interfaces.[].switchport") | Dictionary | | | | | + | [      enabled](## "port_channel_interfaces.[].switchport.enabled") | Boolean | | | | Warning: This should not be combined with `port_channel_interfaces[].type = routed`. | + | [      mode](## "port_channel_interfaces.[].switchport.mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | Warning: This should not be combined with `port_channel_interfaces[].mode` | + | [      access_vlan](## "port_channel_interfaces.[].switchport.access_vlan") | Integer | | | Min: 1
Max: 4094 | Set VLAN when interface is in access mode.
Warning: This should not be combined with `port_channel_interfaces[].mode = access/dot1q-tunnel` and `port_channel_interface.vlans`. | + | [      trunk](## "port_channel_interfaces.[].switchport.trunk") | Dictionary | | | | | + | [        allowed_vlan](## "port_channel_interfaces.[].switchport.trunk.allowed_vlan") | String | | | | VLAN ID or range(s) of VLAN IDs (1-4094).
Warning: This should not be combined with `port_channel_interfaces[].mode = trunk` and `port_channel_interfaces[].vlans`. | + | [        native_vlan](## "port_channel_interfaces.[].switchport.trunk.native_vlan") | Integer | | | Min: 1
Max: 4094 | Set native VLAN when interface is in trunking mode.
Warning: This should not be combined with `port_channel_interfaces[].native_vlan`. | + | [        native_vlan_tag](## "port_channel_interfaces.[].switchport.trunk.native_vlan_tag") | Boolean | | | | If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence.
Warning: This should not be combined with `port_channel_interfaces[].native_vlan_tag`. | + | [        private_vlan_secondary](## "port_channel_interfaces.[].switchport.trunk.private_vlan_secondary") | Boolean | | | | Enable secondary VLAN mapping for a private vlan.
Warning: This should not be combined with `port_channel_interfaces[].trunk_private_vlan_secondary`. | + | [        groups](## "port_channel_interfaces.[].switchport.trunk.groups") | List, items: String | | | | Warning: This should not be combined with `port_channel_interfaces[].trunk_groups`.
| + | [          - <str>](## "port_channel_interfaces.[].switchport.trunk.groups.[]") | String | | | | Trunk group name. | + | [      phone](## "port_channel_interfaces.[].switchport.phone") | Dictionary | | | | | + | [        vlan](## "port_channel_interfaces.[].switchport.phone.vlan") | Integer | | | Min: 1
Max: 4094 | Warning: This should not be combined with `port_channel_interfaces[].phone.vlan`. | + | [        trunk](## "port_channel_interfaces.[].switchport.phone.trunk") | String | | | Valid Values:
- tagged
- tagged phone
- untagged
- untagged phone | Warning: This should not be combined with `port_channel_interfaces[].phone.trunk` | + | [      pvlan_mapping](## "port_channel_interfaces.[].switchport.pvlan_mapping") | String | | | | Secondary VLAN IDs of the private VLAN mapping.
Warning: This should not be combined with `port_channel_interfaces[].pvlan_mapping`. | + | [      dot1q](## "port_channel_interfaces.[].switchport.dot1q") | Dictionary | | | | | + | [        ethertype](## "port_channel_interfaces.[].switchport.dot1q.ethertype") | Integer | | | Min: 1536
Max: 65535 | Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. | + | [        vlan_tag](## "port_channel_interfaces.[].switchport.dot1q.vlan_tag") | String | | | Valid Values:
- disallowed
- required | | + | [      source_interface](## "port_channel_interfaces.[].switchport.source_interface") | String | | | Valid Values:
- tx
- tx multicast | tx: Allow bridged traffic to go out of the source interface.
tx multicast: Allow multicast traffic only to go out of the source interface. | + | [      vlan_translations](## "port_channel_interfaces.[].switchport.vlan_translations") | Dictionary | | | | VLAN Translation mappings.
Warning: This should not be combined with `port_channel_interfaces[].vlan_translations`. | + | [        in_required](## "port_channel_interfaces.[].switchport.vlan_translations.in_required") | Boolean | | | | Drop the ingress traffic that do not match any VLAN mapping. | + | [        out_required](## "port_channel_interfaces.[].switchport.vlan_translations.out_required") | Boolean | | | | Drop the egress traffic that do not match any VLAN mapping. | + | [        direction_in](## "port_channel_interfaces.[].switchport.vlan_translations.direction_in") | List, items: Dictionary | | | | Map ingress traffic only. | + | [          - from](## "port_channel_interfaces.[].switchport.vlan_translations.direction_in.[].from") | String | | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "port_channel_interfaces.[].switchport.vlan_translations.direction_in.[].to") | Integer | | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel](## "port_channel_interfaces.[].switchport.vlan_translations.direction_in.[].dot1q_tunnel") | Boolean | | | | | + | [            inner_vlan_from](## "port_channel_interfaces.[].switchport.vlan_translations.direction_in.[].inner_vlan_from") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map from. | + | [        direction_out](## "port_channel_interfaces.[].switchport.vlan_translations.direction_out") | List, items: Dictionary | | | | Map egress traffic only. | + | [          - from](## "port_channel_interfaces.[].switchport.vlan_translations.direction_out.[].from") | String | Required | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "port_channel_interfaces.[].switchport.vlan_translations.direction_out.[].to") | Integer | | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel_to](## "port_channel_interfaces.[].switchport.vlan_translations.direction_out.[].dot1q_tunnel_to") | String | | | | VLAN ID or range of VLAN IDs or "all". Range 1-4094.
This takes precedence over `to` and `inner_vlan_to`. | + | [            inner_vlan_to](## "port_channel_interfaces.[].switchport.vlan_translations.direction_out.[].inner_vlan_to") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map to. | + | [        direction_both](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both") | List, items: Dictionary | | | | Map both egress and ingress traffic. | + | [          - from](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both.[].from") | String | Required | | | VLAN ID or range of VLAN IDs to map from. Range 1-4094. | + | [            to](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both.[].to") | Integer | Required | | Min: 1
Max: 4094 | VLAN ID to map to. | + | [            dot1q_tunnel](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both.[].dot1q_tunnel") | Boolean | | | | | + | [            inner_vlan_from](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both.[].inner_vlan_from") | Integer | | | Min: 1
Max: 4094 | Inner VLAN ID to map from. | + | [            network](## "port_channel_interfaces.[].switchport.vlan_translations.direction_both.[].network") | Boolean | | | | Enable use of network-side VLAN ID.
This setting can only be enabled when `inner_vlan_from` is defined. | + | [      vlan_forwarding_accept_all](## "port_channel_interfaces.[].switchport.vlan_forwarding_accept_all") | Boolean | | | | | + | [      backup_link](## "port_channel_interfaces.[].switchport.backup_link") | Dictionary | | | | | + | [        interface](## "port_channel_interfaces.[].switchport.backup_link.interface") | String | Required | | | Backup interface. Example - Ethernet4, Vlan10 etc. | + | [        prefer_vlan](## "port_channel_interfaces.[].switchport.backup_link.prefer_vlan") | String | | | | VLANs to carry on the backup interface (1-4094). | + | [      backup](## "port_channel_interfaces.[].switchport.backup") | Dictionary | | | | The `backup_link` is required for this setting. | + | [        dest_macaddr](## "port_channel_interfaces.[].switchport.backup.dest_macaddr") | String | | | Format: mac | Destination MAC address for MAC move updates.
The mac address should be multicast or broadcast.
Example: 01:00:00:00:00:00 | + | [        initial_mac_move_delay](## "port_channel_interfaces.[].switchport.backup.initial_mac_move_delay") | Integer | | | Min: 0
Max: 65535 | Initial MAC move delay in milliseconds. | + | [        mac_move_burst](## "port_channel_interfaces.[].switchport.backup.mac_move_burst") | Integer | | | Min: 0
Max: 65535 | Size of MAC move bursts. | + | [        mac_move_burst_interval](## "port_channel_interfaces.[].switchport.backup.mac_move_burst_interval") | Integer | | | Min: 0
Max: 65535 | MAC move burst interval in milliseconds. | + | [        preemption_delay](## "port_channel_interfaces.[].switchport.backup.preemption_delay") | Integer | | | Min: 0
Max: 65535 | Preemption delay in milliseconds. | + | [      port_security](## "port_channel_interfaces.[].switchport.port_security") | Dictionary | | | | | + | [        enabled](## "port_channel_interfaces.[].switchport.port_security.enabled") | Boolean | | | | | + | [        mac_address_maximum](## "port_channel_interfaces.[].switchport.port_security.mac_address_maximum") | Dictionary | | | | Maximum number of MAC addresses allowed on the interface. | + | [          disabled](## "port_channel_interfaces.[].switchport.port_security.mac_address_maximum.disabled") | Boolean | | | | Disable port level check for port security (only in violation 'shutdown' mode). | + | [          limit](## "port_channel_interfaces.[].switchport.port_security.mac_address_maximum.limit") | Integer | | | Min: 1
Max: 1000 | MAC address limit. | + | [        violation](## "port_channel_interfaces.[].switchport.port_security.violation") | Dictionary | | | | Configure violation mode (shutdown or protect), EOS default is 'shutdown'. | + | [          mode](## "port_channel_interfaces.[].switchport.port_security.violation.mode") | String | | | Valid Values:
- shutdown
- protect | Configure port security mode. | + | [          protect_log](## "port_channel_interfaces.[].switchport.port_security.violation.protect_log") | Boolean | | | | Log new addresses seen after limit is reached in protect mode. | + | [        vlan_default_mac_address_maximum](## "port_channel_interfaces.[].switchport.port_security.vlan_default_mac_address_maximum") | Integer | | | Min: 0
Max: 1000 | Default maximum MAC addresses for all VLANs on this interface. | + | [        vlans](## "port_channel_interfaces.[].switchport.port_security.vlans") | List, items: Dictionary | | | | | + | [          - range](## "port_channel_interfaces.[].switchport.port_security.vlans.[].range") | String | Required, Unique | | | VLAN ID or range(s) of VLAN IDs, <1-4094>.
Example:
- 3
- 1,3
- 1-10
| + | [            mac_address_maximum](## "port_channel_interfaces.[].switchport.port_security.vlans.[].mac_address_maximum") | Integer | | | | | | [      tap](## "port_channel_interfaces.[].switchport.tap") | Dictionary | | | | In tap mode, the interface operates as a tap port.
Tap ports receive traffic for replication on one or more tool ports. | | [        allowed_vlan](## "port_channel_interfaces.[].switchport.tap.allowed_vlan") | String | | | | VLAN ID or range(s) of VLAN IDs within range 1-4094. | | [        default](## "port_channel_interfaces.[].switchport.tap.default") | Dictionary | | | | Default tap destination config. | @@ -321,60 +393,135 @@ # List of switchport vlans as string. # For a trunk port this would be a range like "1-200,300". # For an access port this would be a single vlan "123". + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.access_vlan or port_channel_interfaces[].switchport.trunk.allowed_vlan instead. vlans: snmp_trap_link_change: # l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed. # Interface will not be listed in device documentation, unless "type" is set. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation) for details. type: # VLAN tag to configure on sub-interface. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use encapsulation_dot1q.vlan instead. encapsulation_dot1q_vlan: + # Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. + encapsulation_dot1q: + + # VLAD ID. + vlan: + + # Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. + inner_vlan: + # VRF name. vrf: + + # This setting can only be applied to sub-interfaces on EOS. + # Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. encapsulation_vlan: client: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. dot1q: # Client VLAN ID. vlan: # Client Outer VLAN ID. - outer: + outer: # Client Inner VLAN ID. - inner: + inner: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. unmatched: + encapsulation: + + # Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + vlan: + + # Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + outer_vlan: + + # Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_vlan: + inner_encapsulation: # Network encapsulation are all optional, and skipped if using client unmatched. network: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. dot1q: # Network VLAN ID. - vlan: + vlan: # Network Outer VLAN ID. - outer: + outer: # Network Inner VLAN ID. - inner: + inner: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. client: + + # `untagged` (no encapsulation) is applicable for `untagged` client only. + # `client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. + encapsulation: + + # Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + vlan: + + # Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + outer_vlan: + + # Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_vlan: + inner_encapsulation: + + # This setting can only be applied to sub-interfaces on EOS. + # Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. vlan_id: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.mode instead. mode: # If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.trunk.native_vlan instead. native_vlan: # If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.trunk.native_vlan_tag instead. native_vlan_tag: link_tracking_groups: # Group name. - name: direction: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.phone instead. phone: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.phone.trunk instead. trunk: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.phone.vlan instead. vlan: l2_protocol: @@ -387,6 +534,9 @@ # MLAG ID. mlag: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.trunk.groups instead. trunk_groups: - @@ -430,10 +580,19 @@ ldp: interface: igp_sync: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.trunk.private_vlan_secondary instead. trunk_private_vlan_secondary: # List of vlans as string. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.pvlan_mapping instead. pvlan_mapping: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use port_channel_interfaces[].switchport.vlan_translations instead. vlan_translations: # List of vlans as string (only one vlan if direction is "both"). @@ -749,6 +908,175 @@ unmodified_enable: switchport: + # Warning: This should not be combined with `port_channel_interfaces[].type = routed`. + enabled: + + # Warning: This should not be combined with `port_channel_interfaces[].mode` + mode: + + # Set VLAN when interface is in access mode. + # Warning: This should not be combined with `port_channel_interfaces[].mode = access/dot1q-tunnel` and `port_channel_interface.vlans`. + access_vlan: + trunk: + + # VLAN ID or range(s) of VLAN IDs (1-4094). + # Warning: This should not be combined with `port_channel_interfaces[].mode = trunk` and `port_channel_interfaces[].vlans`. + allowed_vlan: + + # Set native VLAN when interface is in trunking mode. + # Warning: This should not be combined with `port_channel_interfaces[].native_vlan`. + native_vlan: + + # If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + # Warning: This should not be combined with `port_channel_interfaces[].native_vlan_tag`. + native_vlan_tag: + + # Enable secondary VLAN mapping for a private vlan. + # Warning: This should not be combined with `port_channel_interfaces[].trunk_private_vlan_secondary`. + private_vlan_secondary: + + # Warning: This should not be combined with `port_channel_interfaces[].trunk_groups`. + groups: + + # Trunk group name. + - + phone: + + # Warning: This should not be combined with `port_channel_interfaces[].phone.vlan`. + vlan: + + # Warning: This should not be combined with `port_channel_interfaces[].phone.trunk` + trunk: + + # Secondary VLAN IDs of the private VLAN mapping. + # Warning: This should not be combined with `port_channel_interfaces[].pvlan_mapping`. + pvlan_mapping: + dot1q: + + # Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. + ethertype: + vlan_tag: + + # tx: Allow bridged traffic to go out of the source interface. + # tx multicast: Allow multicast traffic only to go out of the source interface. + source_interface: + + # VLAN Translation mappings. + # Warning: This should not be combined with `port_channel_interfaces[].vlan_translations`. + vlan_translations: + + # Drop the ingress traffic that do not match any VLAN mapping. + in_required: + + # Drop the egress traffic that do not match any VLAN mapping. + out_required: + + # Map ingress traffic only. + direction_in: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + dot1q_tunnel: + + # Inner VLAN ID to map from. + inner_vlan_from: + + # Map egress traffic only. + direction_out: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + + # VLAN ID or range of VLAN IDs or "all". Range 1-4094. + # This takes precedence over `to` and `inner_vlan_to`. + dot1q_tunnel_to: + + # Inner VLAN ID to map to. + inner_vlan_to: + + # Map both egress and ingress traffic. + direction_both: + + # VLAN ID or range of VLAN IDs to map from. Range 1-4094. + - from: + + # VLAN ID to map to. + to: + dot1q_tunnel: + + # Inner VLAN ID to map from. + inner_vlan_from: + + # Enable use of network-side VLAN ID. + # This setting can only be enabled when `inner_vlan_from` is defined. + network: + vlan_forwarding_accept_all: + backup_link: + + # Backup interface. Example - Ethernet4, Vlan10 etc. + interface: + + # VLANs to carry on the backup interface (1-4094). + prefer_vlan: + + # The `backup_link` is required for this setting. + backup: + + # Destination MAC address for MAC move updates. + # The mac address should be multicast or broadcast. + # Example: 01:00:00:00:00:00 + dest_macaddr: + + # Initial MAC move delay in milliseconds. + initial_mac_move_delay: + + # Size of MAC move bursts. + mac_move_burst: + + # MAC move burst interval in milliseconds. + mac_move_burst_interval: + + # Preemption delay in milliseconds. + preemption_delay: + port_security: + enabled: + + # Maximum number of MAC addresses allowed on the interface. + mac_address_maximum: + + # Disable port level check for port security (only in violation 'shutdown' mode). + disabled: + + # MAC address limit. + limit: + + # Configure violation mode (shutdown or protect), EOS default is 'shutdown'. + violation: + + # Configure port security mode. + mode: + + # Log new addresses seen after limit is reached in protect mode. + protect_log: + + # Default maximum MAC addresses for all VLANs on this interface. + vlan_default_mac_address_maximum: + vlans: + + # VLAN ID or range(s) of VLAN IDs, <1-4094>. + # Example: + # - 3 + # - 1,3 + # - 1-10 + - range: + mac_address_maximum: + # In tap mode, the interface operates as a tap port. # Tap ports receive traffic for replication on one or more tool ports. tap: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/role-settings.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/role-settings.md new file mode 100644 index 00000000000..1cc291f2d07 --- /dev/null +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/role-settings.md @@ -0,0 +1,39 @@ + +=== "Table" + + | Variable | Type | Required | Default | Value Restrictions | Description | + | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [eos_cli_config_gen_configuration](## "eos_cli_config_gen_configuration") | Dictionary | | | | | + | [  enable](## "eos_cli_config_gen_configuration.enable") | Boolean | | `True` | | Generate device EOS configurations. | + | [  hide_passwords](## "eos_cli_config_gen_configuration.hide_passwords") | Boolean | | `False` | | Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the configuration if true.
| + | [eos_cli_config_gen_documentation](## "eos_cli_config_gen_documentation") | Dictionary | | | | | + | [  enable](## "eos_cli_config_gen_documentation.enable") | Boolean | | `True` | | Generate device Markdown documentation. | + | [  hide_passwords](## "eos_cli_config_gen_documentation.hide_passwords") | Boolean | | `True` | | Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the documentation if true.
| + | [generate_device_documentation](## "generate_device_documentation") deprecated | Boolean | | `True` | | This key is deprecated. Support will be removed in AVD version 6.0.0. Use eos_cli_config_gen_documentation.enable instead. | + +=== "YAML" + + ```yaml + eos_cli_config_gen_configuration: + + # Generate device EOS configurations. + enable: + + # Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the configuration if true. + hide_passwords: + eos_cli_config_gen_documentation: + + # Generate device Markdown documentation. + enable: + + # Replace the input data using the `hide_passwords` filter in the Jinja2 templates by '' in the documentation if true. + hide_passwords: + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use eos_cli_config_gen_documentation.enable instead. + generate_device_documentation: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-adaptive-virtual-topology.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-adaptive-virtual-topology.md index 942430773e8..0075e201822 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-adaptive-virtual-topology.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-adaptive-virtual-topology.md @@ -9,6 +9,7 @@ | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [router_adaptive_virtual_topology](## "router_adaptive_virtual_topology") | Dictionary | | | | | | [  topology_role](## "router_adaptive_virtual_topology.topology_role") | String | | | Valid Values:
- edge
- pathfinder
- transit region
- transit zone | Role name. | + | [  gateway_vxlan](## "router_adaptive_virtual_topology.gateway_vxlan") | Boolean | | | | Enables VXLAN gateway router profile.
Only applicable for `topology_role: edge`, `topology_role: transit region` or `topology_role: transit zone`. | | [  region](## "router_adaptive_virtual_topology.region") | Dictionary | | | | Region name and ID. | | [    name](## "router_adaptive_virtual_topology.region.name") | String | Required | | Pattern: `^[A-Za-z0-9_.:{}\[\]-]+$` | | | [    id](## "router_adaptive_virtual_topology.region.id") | Integer | Required | | Min: 1
Max: 255 | | @@ -22,7 +23,7 @@ | [    - name](## "router_adaptive_virtual_topology.profiles.[].name") | String | Required, Unique | | | AVT Name. | | [      load_balance_policy](## "router_adaptive_virtual_topology.profiles.[].load_balance_policy") | String | | | | Name of the load-balance policy. | | [      internet_exit_policy](## "router_adaptive_virtual_topology.profiles.[].internet_exit_policy") | String | | | | Name of the internet exit policy. | - | [  policies](## "router_adaptive_virtual_topology.policies") | List, items: Dictionary | | | | A sequence of application profiles mapped to some virtual topologies.

When `wan_mode` is set to `autovpn`, the rules are indexed using 10* in the list. | + | [  policies](## "router_adaptive_virtual_topology.policies") | List, items: Dictionary | | | | A sequence of application profiles mapped to some virtual topologies. | | [    - name](## "router_adaptive_virtual_topology.policies.[].name") | String | Required, Unique | | | Policy name. | | [      matches](## "router_adaptive_virtual_topology.policies.[].matches") | List, items: Dictionary | | | | | | [        - application_profile](## "router_adaptive_virtual_topology.policies.[].matches.[].application_profile") | String | | | | Application profile name. | @@ -44,6 +45,10 @@ # Role name. topology_role: + # Enables VXLAN gateway router profile. + # Only applicable for `topology_role: edge`, `topology_role: transit region` or `topology_role: transit zone`. + gateway_vxlan: + # Region name and ID. region: name: @@ -70,8 +75,6 @@ internet_exit_policy: # A sequence of application profiles mapped to some virtual topologies. - # - # When `wan_mode` is set to `autovpn`, the rules are indexed using 10* in the list. policies: # Policy name. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-bgp.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-bgp.md index d0bc0b68596..676ea213a1b 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-bgp.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-bgp.md @@ -275,7 +275,7 @@ | [  address_family_evpn](## "router_bgp.address_family_evpn") | Dictionary | | | | | | [    domain_identifier](## "router_bgp.address_family_evpn.domain_identifier") | String | | | | | | [    neighbor_default](## "router_bgp.address_family_evpn.neighbor_default") | Dictionary | | | | | - | [      encapsulation](## "router_bgp.address_family_evpn.neighbor_default.encapsulation") | String | | | Valid Values:
- vxlan
- mpls | | + | [      encapsulation](## "router_bgp.address_family_evpn.neighbor_default.encapsulation") | String | | | Valid Values:
- vxlan
- mpls
- path-selection | Transport encapsulation for neighbor. | | [      next_hop_self_source_interface](## "router_bgp.address_family_evpn.neighbor_default.next_hop_self_source_interface") | String | | | | Source interface name. | | [      next_hop_self_received_evpn_routes](## "router_bgp.address_family_evpn.neighbor_default.next_hop_self_received_evpn_routes") | Dictionary | | | | | | [        enable](## "router_bgp.address_family_evpn.neighbor_default.next_hop_self_received_evpn_routes.enable") | Boolean | | | | | @@ -292,6 +292,7 @@ | [          enabled](## "router_bgp.address_family_evpn.neighbors.[].default_route.enabled") | Boolean | | | | | | [          rcf](## "router_bgp.address_family_evpn.neighbors.[].default_route.rcf") | String | | | | RCF function name with parenthesis.
Example: MyFunction(myarg). | | [          route_map](## "router_bgp.address_family_evpn.neighbors.[].default_route.route_map") | String | | | | | + | [        encapsulation](## "router_bgp.address_family_evpn.neighbors.[].encapsulation") | String | | | Valid Values:
- vxlan
- mpls
- path-selection | Transport encapsulation for the neighbor. | | [    peer_groups](## "router_bgp.address_family_evpn.peer_groups") | List, items: Dictionary | | | | | | [      - name](## "router_bgp.address_family_evpn.peer_groups.[].name") | String | Required, Unique | | | Peer-group name. | | [        activate](## "router_bgp.address_family_evpn.peer_groups.[].activate") | Boolean | | | | | @@ -304,7 +305,7 @@ | [          rcf](## "router_bgp.address_family_evpn.peer_groups.[].default_route.rcf") | String | | | | RCF function name with parenthesis.
Example: MyFunction(myarg). | | [          route_map](## "router_bgp.address_family_evpn.peer_groups.[].default_route.route_map") | String | | | | | | [        domain_remote](## "router_bgp.address_family_evpn.peer_groups.[].domain_remote") | Boolean | | | | | - | [        encapsulation](## "router_bgp.address_family_evpn.peer_groups.[].encapsulation") | String | | | Valid Values:
- vxlan
- mpls | | + | [        encapsulation](## "router_bgp.address_family_evpn.peer_groups.[].encapsulation") | String | | | Valid Values:
- vxlan
- mpls
- path-selection | Transport encapsulation for the peer-group. | | [        additional_paths](## "router_bgp.address_family_evpn.peer_groups.[].additional_paths") | Dictionary | | | | | | [          receive](## "router_bgp.address_family_evpn.peer_groups.[].additional_paths.receive") | Boolean | | | | | | [          send](## "router_bgp.address_family_evpn.peer_groups.[].additional_paths.send") | Dictionary | | | | | @@ -385,6 +386,119 @@ | [        include_leaked](## "router_bgp.address_family_ipv4.redistribute_routes.[].include_leaked") | Boolean | | | | Only applicable if `source_protocol` is one of `connected`, `static`, `isis`, `ospf`, `ospfv3`. | | [        rcf](## "router_bgp.address_family_ipv4.redistribute_routes.[].rcf") | String | | | | RCF function name with parenthesis.
Example: MyFunction(myarg).
`route_map` and `rcf` are mutually exclusive. `route_map` takes precedence.
Only applicable if `source_protocol` is one of `connected`, `static`, `isis`, `user`, `dynamic`. | | [        ospf_route_type](## "router_bgp.address_family_ipv4.redistribute_routes.[].ospf_route_type") | String | | | Valid Values:
- external
- internal
- nssa-external
- nssa-external 1
- nssa-external 2 | Routes learned by the OSPF protocol.
The `ospf_route_type` is valid for source_protocols 'ospf' and 'ospfv3'.
| + | [  address_family_ipv4_labeled_unicast](## "router_bgp.address_family_ipv4_labeled_unicast") | Dictionary | | | | | + | [    aigp_session](## "router_bgp.address_family_ipv4_labeled_unicast.aigp_session") | Dictionary | | | | | + | [      confederation](## "router_bgp.address_family_ipv4_labeled_unicast.aigp_session.confederation") | Boolean | | | | | + | [      ebgp](## "router_bgp.address_family_ipv4_labeled_unicast.aigp_session.ebgp") | Boolean | | | | | + | [      ibgp](## "router_bgp.address_family_ipv4_labeled_unicast.aigp_session.ibgp") | Boolean | | | | | + | [    bgp](## "router_bgp.address_family_ipv4_labeled_unicast.bgp") | Dictionary | | | | | + | [      additional_paths](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths") | Dictionary | | | | | + | [        receive](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.receive") | Boolean | | | | | + | [        send](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send") | String | | | Valid Values:
- any
- backup
- ecmp
- limit
- disabled | Select an option to send multiple paths for same prefix through bgp updates.
any: Send any eligible path.
backup: Best path and installed backup path.
ecmp: All paths in best path ECMP group.
limit: Limit to n eligible paths.
disabled: Disable sending any path. | + | [        send_ecmp_limit](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_ecmp_limit") | Integer | | | Min: 2
Max: 64 | Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. | + | [        send_limit](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_limit") | Integer | | | Min: 2
Max: 64 | Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. | + | [      missing_policy](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy") | Dictionary | | | | Missing policy configuration for all address-families. | + | [        direction_in](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_in") | Dictionary | | | | Missing policy inbound direction. | + | [          action](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_in.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [          include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_in.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [          include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_in.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [          include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_in.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [        direction_out](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_out") | Dictionary | | | | Missing policy outbound direction. | + | [          action](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_out.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [          include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_out.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [          include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_out.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [          include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy.direction_out.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [      next_hop_unchanged](## "router_bgp.address_family_ipv4_labeled_unicast.bgp.next_hop_unchanged") | Boolean | | | | | + | [    graceful_restart](## "router_bgp.address_family_ipv4_labeled_unicast.graceful_restart") | Boolean | | | | | + | [    label_local_termination](## "router_bgp.address_family_ipv4_labeled_unicast.label_local_termination") | String | | | Valid Values:
- explicit-null
- implicit-null | | + | [    lfib_entry_installation_skipped](## "router_bgp.address_family_ipv4_labeled_unicast.lfib_entry_installation_skipped") | Boolean | | | | Skip LFIB entry installation and next hop self route advertisements. | + | [    neighbor_default](## "router_bgp.address_family_ipv4_labeled_unicast.neighbor_default") | Dictionary | | | | | + | [      next_hop_self](## "router_bgp.address_family_ipv4_labeled_unicast.neighbor_default.next_hop_self") | Boolean | | | | | + | [    peer_groups](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups") | List, items: Dictionary | | | | | + | [      - name](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].name") | String | Required, Unique | | | Peer-group name. | + | [        activate](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].activate") | Boolean | | | | | + | [        additional_paths](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].additional_paths") | Dictionary | | | | | + | [          receive](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].additional_paths.receive") | Boolean | | | | | + | [          send](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].additional_paths.send") | String | | | Valid Values:
- any
- backup
- ecmp
- limit
- disabled | Select an option to send multiple paths for same prefix through bgp updates.
any: Send any eligible path.
backup: Best path and installed backup path.
ecmp: All paths in best path ECMP group.
limit: Limit to n eligible paths.
disabled: Disable sending any path. | + | [          send_ecmp_limit](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].additional_paths.send_ecmp_limit") | Integer | | | Min: 2
Max: 64 | Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. | + | [          send_limit](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].additional_paths.send_limit") | Integer | | | Min: 2
Max: 64 | Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. | + | [        aigp_session](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].aigp_session") | Boolean | | | | | + | [        graceful_restart](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].graceful_restart") | Boolean | | | | | + | [        graceful_restart_helper](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].graceful_restart_helper") | Dictionary | | | | | + | [          stale_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].graceful_restart_helper.stale_route_map") | String | | | | | + | [        maximum_advertised_routes](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].maximum_advertised_routes") | Integer | | | Min: 0
Max: 4294967294 | Maximum number of routes (0 means unlimited). | + | [        maximum_advertised_routes_warning_limit](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].maximum_advertised_routes_warning_limit") | String | | | | Maximum number of routes after which a warning is issued (0 means never warn) or
Percentage of maximum number of routes at which to warn ("<1-100> percent").
| + | [        missing_policy](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy") | Dictionary | | | | Missing policy configuration for BGP Labeled-Unicast neighbor. | + | [          direction_in](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_in") | Dictionary | | | | Missing policy inbound direction. | + | [            action](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_in.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [            include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_in.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [            include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_in.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [            include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_in.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [          direction_out](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_out") | Dictionary | | | | Missing policy outbound direction. | + | [            action](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_out.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [            include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_out.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [            include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_out.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [            include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].missing_policy.direction_out.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [        multi_path](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].multi_path") | Boolean | | | | | + | [        next_hop_resolution](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_resolution") | Dictionary | | | | | + | [          v4_mapped_v6_translation](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_resolution.v4_mapped_v6_translation") | Boolean | | | | | + | [        next_hop_self](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_self") | Boolean | | | | | + | [        next_hop_self_source_interface](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_self_source_interface") | String | | | | Source interface name. | + | [        next_hop_self_v4_mapped_v6_source_interface](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_self_v4_mapped_v6_source_interface") | String | | | | v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. | + | [        next_hop_unchanged](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].next_hop_unchanged") | Boolean | | | | | + | [        rcf_in](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].rcf_in") | String | | | | Inbound RCF function name with parenthesis.
Example: MyFunction(myarg). | + | [        rcf_out](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].rcf_out") | String | | | | Outbound RCF function name with parenthesis.
Example: MyFunction(myarg). | + | [        route_map_in](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].route_map_in") | String | | | | Inbound route-map name. | + | [        route_map_out](## "router_bgp.address_family_ipv4_labeled_unicast.peer_groups.[].route_map_out") | String | | | | Outbound route-map name. | + | [    neighbors](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors") | List, items: Dictionary | | | | | + | [      - ip_address](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].ip_address") | String | Required, Unique | | | | + | [        activate](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].activate") | Boolean | | | | | + | [        additional_paths](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].additional_paths") | Dictionary | | | | | + | [          receive](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].additional_paths.receive") | Boolean | | | | | + | [          send](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].additional_paths.send") | String | | | Valid Values:
- any
- backup
- ecmp
- limit
- disabled | Select an option to send multiple paths for same prefix through bgp updates.
any: Send any eligible path.
backup: Best path and installed backup path.
ecmp: All paths in best path ECMP group.
limit: Limit to n eligible paths.
disabled: Disable sending any path. | + | [          send_ecmp_limit](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].additional_paths.send_ecmp_limit") | Integer | | | Min: 2
Max: 64 | Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. | + | [          send_limit](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].additional_paths.send_limit") | Integer | | | Min: 2
Max: 64 | Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. | + | [        aigp_session](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].aigp_session") | Boolean | | | | | + | [        graceful_restart](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].graceful_restart") | Boolean | | | | | + | [        graceful_restart_helper](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].graceful_restart_helper") | Dictionary | | | | | + | [          stale_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].graceful_restart_helper.stale_route_map") | String | | | | | + | [        maximum_advertised_routes](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].maximum_advertised_routes") | Integer | | | Min: 0
Max: 4294967294 | Maximum number of routes (0 means unlimited). | + | [        maximum_advertised_routes_warning_limit](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].maximum_advertised_routes_warning_limit") | String | | | | Maximum number of routes after which a warning is issued (0 means never warn) or
Percentage of maximum number of routes at which to warn ("<1-100> percent").
| + | [        missing_policy](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy") | Dictionary | | | | Missing policy configuration for BGP Labeled-Unicast neighbor. | + | [          direction_in](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_in") | Dictionary | | | | Missing policy inbound direction. | + | [            action](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_in.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [            include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_in.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [            include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_in.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [            include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_in.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [          direction_out](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_out") | Dictionary | | | | Missing policy outbound direction. | + | [            action](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_out.action") | String | Required | | Valid Values:
- deny
- permit
- deny-in-out | Missing policy action. | + | [            include_community_list](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_out.include_community_list") | Boolean | | | | Include community-list references in missing policy decision. | + | [            include_prefix_list](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_out.include_prefix_list") | Boolean | | | | Include prefix-list references in missing policy decision. | + | [            include_sub_route_map](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].missing_policy.direction_out.include_sub_route_map") | Boolean | | | | Include sub-route-map references in missing policy decision. | + | [        multi_path](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].multi_path") | Boolean | | | | | + | [        next_hop_resolution](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_resolution") | Dictionary | | | | | + | [          v4_mapped_v6_translation](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_resolution.v4_mapped_v6_translation") | Boolean | | | | | + | [        next_hop_self](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_self") | Boolean | | | | | + | [        next_hop_self_source_interface](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_self_source_interface") | String | | | | Source interface name. | + | [        next_hop_self_v4_mapped_v6_source_interface](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_self_v4_mapped_v6_source_interface") | String | | | | v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. | + | [        next_hop_unchanged](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].next_hop_unchanged") | Boolean | | | | | + | [        rcf_in](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].rcf_in") | String | | | | Inbound RCF function name with parenthesis.
Example: MyFunction(myarg). | + | [        rcf_out](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].rcf_out") | String | | | | Outbound RCF function name with parenthesis.
Example: MyFunction(myarg). | + | [        route_map_in](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].route_map_in") | String | | | | Inbound route-map name. | + | [        route_map_out](## "router_bgp.address_family_ipv4_labeled_unicast.neighbors.[].route_map_out") | String | | | | Outbound route-map name. | + | [    networks](## "router_bgp.address_family_ipv4_labeled_unicast.networks") | List, items: Dictionary | | | Min Length: 1 | | + | [      - prefix](## "router_bgp.address_family_ipv4_labeled_unicast.networks.[].prefix") | String | Required, Unique | | | IPv4 prefix "A.B.C.D/E" or IPv6 prefix "A:B:C:D:E:F:G:H/I". | + | [        route_map](## "router_bgp.address_family_ipv4_labeled_unicast.networks.[].route_map") | String | | | | Route-map name. | + | [    next_hops](## "router_bgp.address_family_ipv4_labeled_unicast.next_hops") | List, items: Dictionary | | | Min Length: 1 | | + | [      - ip_address](## "router_bgp.address_family_ipv4_labeled_unicast.next_hops.[].ip_address") | String | Required, Unique | | | | + | [        lfib_backup_ip_forwarding](## "router_bgp.address_family_ipv4_labeled_unicast.next_hops.[].lfib_backup_ip_forwarding") | Boolean | | | | | + | [    next_hop_resolution_ribs](## "router_bgp.address_family_ipv4_labeled_unicast.next_hop_resolution_ribs") | List, items: Dictionary | | | Min Length: 1
Max Length: 3 | Specify the RIBs used to resolve next-hops. The order of this list determines the order of RIB lookups. | + | [      - rib_type](## "router_bgp.address_family_ipv4_labeled_unicast.next_hop_resolution_ribs.[].rib_type") | String | Required | | Valid Values:
- system-connected
- tunnel-rib-colored
- tunnel-rib | Type of RIB. For 'tunnel-rib', use 'rib_name' to specify the name of the Tunnel-RIB to use. | + | [        rib_name](## "router_bgp.address_family_ipv4_labeled_unicast.next_hop_resolution_ribs.[].rib_name") | String | | | | The name of the tunnel-rib to use when using 'tunnel-rib' type. | + | [    tunnel_source_protocols](## "router_bgp.address_family_ipv4_labeled_unicast.tunnel_source_protocols") | List, items: Dictionary | | | Min Length: 1
Max Length: 2 | | + | [      - protocol](## "router_bgp.address_family_ipv4_labeled_unicast.tunnel_source_protocols.[].protocol") | String | Required, Unique | | Valid Values:
- isis segment-routing
- ldp | | + | [        rcf](## "router_bgp.address_family_ipv4_labeled_unicast.tunnel_source_protocols.[].rcf") | String | | | | Optional RCF function name with parenthesis.
Example: MyFunction(myarg). | + | [    update_wait_for_convergence](## "router_bgp.address_family_ipv4_labeled_unicast.update_wait_for_convergence") | Boolean | | | | Wait for BGP to converge before sending out any route updates. | | [  address_family_ipv4_multicast](## "router_bgp.address_family_ipv4_multicast") | Dictionary | | | | | | [    peer_groups](## "router_bgp.address_family_ipv4_multicast.peer_groups") | List, items: Dictionary | | | | | | [      - name](## "router_bgp.address_family_ipv4_multicast.peer_groups.[].name") | String | Required, Unique | | | Peer-group name. | @@ -1388,7 +1502,9 @@ address_family_evpn: domain_identifier: neighbor_default: - encapsulation: + + # Transport encapsulation for neighbor. + encapsulation: # Source interface name. next_hop_self_source_interface: @@ -1422,6 +1538,9 @@ # Example: MyFunction(myarg). rcf: route_map: + + # Transport encapsulation for the neighbor. + encapsulation: peer_groups: # Peer-group name. @@ -1449,7 +1568,9 @@ rcf: route_map: domain_remote: - encapsulation: + + # Transport encapsulation for the peer-group. + encapsulation: additional_paths: receive: send: @@ -1609,6 +1730,275 @@ # Routes learned by the OSPF protocol. # The `ospf_route_type` is valid for source_protocols 'ospf' and 'ospfv3'. ospf_route_type: + address_family_ipv4_labeled_unicast: + aigp_session: + confederation: + ebgp: + ibgp: + bgp: + additional_paths: + receive: + + # Select an option to send multiple paths for same prefix through bgp updates. + # any: Send any eligible path. + # backup: Best path and installed backup path. + # ecmp: All paths in best path ECMP group. + # limit: Limit to n eligible paths. + # disabled: Disable sending any path. + send: + + # Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. + send_ecmp_limit: + + # Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. + send_limit: + + # Missing policy configuration for all address-families. + missing_policy: + + # Missing policy inbound direction. + direction_in: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + + # Missing policy outbound direction. + direction_out: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + next_hop_unchanged: + graceful_restart: + label_local_termination: + + # Skip LFIB entry installation and next hop self route advertisements. + lfib_entry_installation_skipped: + neighbor_default: + next_hop_self: + peer_groups: + + # Peer-group name. + - name: + activate: + additional_paths: + receive: + + # Select an option to send multiple paths for same prefix through bgp updates. + # any: Send any eligible path. + # backup: Best path and installed backup path. + # ecmp: All paths in best path ECMP group. + # limit: Limit to n eligible paths. + # disabled: Disable sending any path. + send: + + # Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. + send_ecmp_limit: + + # Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. + send_limit: + aigp_session: + graceful_restart: + graceful_restart_helper: + stale_route_map: + + # Maximum number of routes (0 means unlimited). + maximum_advertised_routes: + + # Maximum number of routes after which a warning is issued (0 means never warn) or + # Percentage of maximum number of routes at which to warn ("<1-100> percent"). + maximum_advertised_routes_warning_limit: + + # Missing policy configuration for BGP Labeled-Unicast neighbor. + missing_policy: + + # Missing policy inbound direction. + direction_in: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + + # Missing policy outbound direction. + direction_out: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + multi_path: + next_hop_resolution: + v4_mapped_v6_translation: + next_hop_self: + + # Source interface name. + next_hop_self_source_interface: + + # v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. + next_hop_self_v4_mapped_v6_source_interface: + next_hop_unchanged: + + # Inbound RCF function name with parenthesis. + # Example: MyFunction(myarg). + rcf_in: + + # Outbound RCF function name with parenthesis. + # Example: MyFunction(myarg). + rcf_out: + + # Inbound route-map name. + route_map_in: + + # Outbound route-map name. + route_map_out: + neighbors: + - ip_address: + activate: + additional_paths: + receive: + + # Select an option to send multiple paths for same prefix through bgp updates. + # any: Send any eligible path. + # backup: Best path and installed backup path. + # ecmp: All paths in best path ECMP group. + # limit: Limit to n eligible paths. + # disabled: Disable sending any path. + send: + + # Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. + send_ecmp_limit: + + # Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. + send_limit: + aigp_session: + graceful_restart: + graceful_restart_helper: + stale_route_map: + + # Maximum number of routes (0 means unlimited). + maximum_advertised_routes: + + # Maximum number of routes after which a warning is issued (0 means never warn) or + # Percentage of maximum number of routes at which to warn ("<1-100> percent"). + maximum_advertised_routes_warning_limit: + + # Missing policy configuration for BGP Labeled-Unicast neighbor. + missing_policy: + + # Missing policy inbound direction. + direction_in: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + + # Missing policy outbound direction. + direction_out: + + # Missing policy action. + action: + + # Include community-list references in missing policy decision. + include_community_list: + + # Include prefix-list references in missing policy decision. + include_prefix_list: + + # Include sub-route-map references in missing policy decision. + include_sub_route_map: + multi_path: + next_hop_resolution: + v4_mapped_v6_translation: + next_hop_self: + + # Source interface name. + next_hop_self_source_interface: + + # v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. + next_hop_self_v4_mapped_v6_source_interface: + next_hop_unchanged: + + # Inbound RCF function name with parenthesis. + # Example: MyFunction(myarg). + rcf_in: + + # Outbound RCF function name with parenthesis. + # Example: MyFunction(myarg). + rcf_out: + + # Inbound route-map name. + route_map_in: + + # Outbound route-map name. + route_map_out: + networks: # >=1 items + + # IPv4 prefix "A.B.C.D/E" or IPv6 prefix "A:B:C:D:E:F:G:H/I". + - prefix: + + # Route-map name. + route_map: + next_hops: # >=1 items + - ip_address: + lfib_backup_ip_forwarding: + + # Specify the RIBs used to resolve next-hops. The order of this list determines the order of RIB lookups. + next_hop_resolution_ribs: # 1-3 items + + # Type of RIB. For 'tunnel-rib', use 'rib_name' to specify the name of the Tunnel-RIB to use. + - rib_type: + + # The name of the tunnel-rib to use when using 'tunnel-rib' type. + rib_name: + tunnel_source_protocols: # 1-2 items + - protocol: + + # Optional RCF function name with parenthesis. + # Example: MyFunction(myarg). + rcf: + + # Wait for BGP to converge before sending out any route updates. + update_wait_for_convergence: address_family_ipv4_multicast: peer_groups: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-isis.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-isis.md index bfecb34b22a..02a7c7bba0f 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-isis.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-isis.md @@ -27,8 +27,8 @@ | [        timeout](## "router_isis.set_overload_bit.on_startup.wait_for_bgp.timeout") | Integer | | | | Number of seconds. | | [  authentication](## "router_isis.authentication") | Dictionary | | | | | | [    both](## "router_isis.authentication.both") | Dictionary | | | | Authentication settings for level-1 and level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. | - | [      key_type](## "router_isis.authentication.both.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. Default key_id is 0. | - | [      key](## "router_isis.authentication.both.key") | String | | | | Password string. | + | [      key_type](## "router_isis.authentication.both.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [      key](## "router_isis.authentication.both.key") | String | | | | Password string. `key_type` is required for this setting. | | [      key_ids](## "router_isis.authentication.both.key_ids") | List, items: Dictionary | | | | | | [        - id](## "router_isis.authentication.both.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | | [          algorithm](## "router_isis.authentication.both.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | @@ -41,10 +41,10 @@ | [      shared_secret](## "router_isis.authentication.both.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | | [        profile](## "router_isis.authentication.both.shared_secret.profile") | String | Required | | | | | [        algorithm](## "router_isis.authentication.both.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | - | [      rx_disabled](## "router_isis.authentication.both.rx_disabled") | Boolean | | | | | + | [      rx_disabled](## "router_isis.authentication.both.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | | [    level_1](## "router_isis.authentication.level_1") | Dictionary | | | | Authentication settings for level-1. 'both' takes precedence over 'level_1' and 'level_2' settings. | - | [      key_type](## "router_isis.authentication.level_1.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. Default key_id is 0. | - | [      key](## "router_isis.authentication.level_1.key") | String | | | | Password string. | + | [      key_type](## "router_isis.authentication.level_1.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [      key](## "router_isis.authentication.level_1.key") | String | | | | Password string. `key_type` is required for this setting. | | [      key_ids](## "router_isis.authentication.level_1.key_ids") | List, items: Dictionary | | | | | | [        - id](## "router_isis.authentication.level_1.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | | [          algorithm](## "router_isis.authentication.level_1.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | @@ -57,10 +57,10 @@ | [      shared_secret](## "router_isis.authentication.level_1.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | | [        profile](## "router_isis.authentication.level_1.shared_secret.profile") | String | Required | | | | | [        algorithm](## "router_isis.authentication.level_1.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | - | [      rx_disabled](## "router_isis.authentication.level_1.rx_disabled") | Boolean | | | | | + | [      rx_disabled](## "router_isis.authentication.level_1.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | | [    level_2](## "router_isis.authentication.level_2") | Dictionary | | | | Authentication settings for level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. | - | [      key_type](## "router_isis.authentication.level_2.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. Default key_id is 0. | - | [      key](## "router_isis.authentication.level_2.key") | String | | | | Password string. | + | [      key_type](## "router_isis.authentication.level_2.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [      key](## "router_isis.authentication.level_2.key") | String | | | | Password string. `key_type` is required for this setting. | | [      key_ids](## "router_isis.authentication.level_2.key_ids") | List, items: Dictionary | | | | | | [        - id](## "router_isis.authentication.level_2.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | | [          algorithm](## "router_isis.authentication.level_2.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | @@ -73,7 +73,7 @@ | [      shared_secret](## "router_isis.authentication.level_2.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | | [        profile](## "router_isis.authentication.level_2.shared_secret.profile") | String | Required | | | | | [        algorithm](## "router_isis.authentication.level_2.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | - | [      rx_disabled](## "router_isis.authentication.level_2.rx_disabled") | Boolean | | | | | + | [      rx_disabled](## "router_isis.authentication.level_2.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | | [  advertise](## "router_isis.advertise") | Dictionary | | | | | | [    passive_only](## "router_isis.advertise.passive_only") | Boolean | | | | | | [  redistribute_routes](## "router_isis.redistribute_routes") | List, items: Dictionary | | | | | @@ -82,7 +82,7 @@ | [      include_leaked](## "router_isis.redistribute_routes.[].include_leaked") | Boolean | | | | | | [      ospf_route_type](## "router_isis.redistribute_routes.[].ospf_route_type") | String | | | Valid Values:
- external
- internal
- nssa-external | ospf_route_type is required with source_protocols 'ospf' and 'ospfv3'. | | [  address_family_ipv4](## "router_isis.address_family_ipv4") | Dictionary | | | | | - | [    enabled](## "router_isis.address_family_ipv4.enabled") | Boolean | | | | | + | [    enabled](## "router_isis.address_family_ipv4.enabled") | Boolean | Required | | | | | [    maximum_paths](## "router_isis.address_family_ipv4.maximum_paths") | Integer | | | Min: 1
Max: 128 | | | [    bfd_all_interfaces](## "router_isis.address_family_ipv4.bfd_all_interfaces") | Boolean | | | | Enable BFD on all interfaces. | | [    fast_reroute_ti_lfa](## "router_isis.address_family_ipv4.fast_reroute_ti_lfa") | Dictionary | | | | | @@ -95,7 +95,7 @@ | [      enabled](## "router_isis.address_family_ipv4.tunnel_source_labeled_unicast.enabled") | Boolean | | | | | | [      rcf](## "router_isis.address_family_ipv4.tunnel_source_labeled_unicast.rcf") | String | | | | Route Control Function. | | [  address_family_ipv6](## "router_isis.address_family_ipv6") | Dictionary | | | | | - | [    enabled](## "router_isis.address_family_ipv6.enabled") | Boolean | | | | | + | [    enabled](## "router_isis.address_family_ipv6.enabled") | Boolean | Required | | | | | [    maximum_paths](## "router_isis.address_family_ipv6.maximum_paths") | Integer | | | Min: 1
Max: 128 | | | [    bfd_all_interfaces](## "router_isis.address_family_ipv6.bfd_all_interfaces") | Boolean | | | | Enable BFD on all interfaces. | | [    fast_reroute_ti_lfa](## "router_isis.address_family_ipv6.fast_reroute_ti_lfa") | Dictionary | | | | | @@ -163,10 +163,10 @@ # Authentication settings for level-1 and level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. both: - # Configure authentication key type. Default key_id is 0. + # Configure authentication key type. key_type: - # Password string. + # Password string. `key_type` is required for this setting. key: key_ids: @@ -194,15 +194,17 @@ shared_secret: profile: algorithm: + + # Disable authentication check on the receive side. rx_disabled: # Authentication settings for level-1. 'both' takes precedence over 'level_1' and 'level_2' settings. level_1: - # Configure authentication key type. Default key_id is 0. + # Configure authentication key type. key_type: - # Password string. + # Password string. `key_type` is required for this setting. key: key_ids: @@ -230,15 +232,17 @@ shared_secret: profile: algorithm: + + # Disable authentication check on the receive side. rx_disabled: # Authentication settings for level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. level_2: - # Configure authentication key type. Default key_id is 0. + # Configure authentication key type. key_type: - # Password string. + # Password string. `key_type` is required for this setting. key: key_ids: @@ -266,6 +270,8 @@ shared_secret: profile: algorithm: + + # Disable authentication check on the receive side. rx_disabled: advertise: passive_only: @@ -279,7 +285,7 @@ # ospf_route_type is required with source_protocols 'ospf' and 'ospfv3'. ospf_route_type: address_family_ipv4: - enabled: + enabled: maximum_paths: # Enable BFD on all interfaces. @@ -298,7 +304,7 @@ # Route Control Function. rcf: address_family_ipv6: - enabled: + enabled: maximum_paths: # Enable BFD on all interfaces. diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-ospf.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-ospf.md index c94dfb5f770..69eab6194fa 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-ospf.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-ospf.md @@ -50,12 +50,15 @@ | [          not_advertise](## "router_ospf.process_ids.[].summary_addresses.[].not_advertise") | Boolean | | | | | | [      redistribute](## "router_ospf.process_ids.[].redistribute") | Dictionary | | | | | | [        static](## "router_ospf.process_ids.[].redistribute.static") | Dictionary | | | | | + | [          enabled](## "router_ospf.process_ids.[].redistribute.static.enabled") | Boolean | Required | | | | | [          route_map](## "router_ospf.process_ids.[].redistribute.static.route_map") | String | | | | Route Map Name. | | [          include_leaked](## "router_ospf.process_ids.[].redistribute.static.include_leaked") | Boolean | | | | | | [        connected](## "router_ospf.process_ids.[].redistribute.connected") | Dictionary | | | | | + | [          enabled](## "router_ospf.process_ids.[].redistribute.connected.enabled") | Boolean | Required | | | | | [          route_map](## "router_ospf.process_ids.[].redistribute.connected.route_map") | String | | | | Route Map Name. | | [          include_leaked](## "router_ospf.process_ids.[].redistribute.connected.include_leaked") | Boolean | | | | | | [        bgp](## "router_ospf.process_ids.[].redistribute.bgp") | Dictionary | | | | | + | [          enabled](## "router_ospf.process_ids.[].redistribute.bgp.enabled") | Boolean | Required | | | | | [          route_map](## "router_ospf.process_ids.[].redistribute.bgp.route_map") | String | | | | Route Map Name. | | [          include_leaked](## "router_ospf.process_ids.[].redistribute.bgp.include_leaked") | Boolean | | | | | | [      auto_cost_reference_bandwidth](## "router_ospf.process_ids.[].auto_cost_reference_bandwidth") | Integer | | | | Bandwidth in mbps. | @@ -157,16 +160,19 @@ not_advertise: redistribute: static: + enabled: # Route Map Name. route_map: include_leaked: connected: + enabled: # Route Map Name. route_map: include_leaked: bgp: + enabled: # Route Map Name. route_map: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-path-selection.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-path-selection.md index 458480a673e..f39492d5086 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-path-selection.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-path-selection.md @@ -15,7 +15,7 @@ | [      ipsec_profile](## "router_path_selection.path_groups.[].ipsec_profile") | String | | | | IPSec profile for the path group. | | [      flow_assignment](## "router_path_selection.path_groups.[].flow_assignment") | String | | | Valid Values:
- lan | Flow assignment `lan` can not be configured in a path group with dynamic peers. | | [      local_interfaces](## "router_path_selection.path_groups.[].local_interfaces") | List, items: Dictionary | | | | | - | [        - name](## "router_path_selection.path_groups.[].local_interfaces.[].name") | String | Required, Unique | | Pattern: `^Ethernet\d+(/\d+)*(\.\d+)?$` | Local interface name. | + | [        - name](## "router_path_selection.path_groups.[].local_interfaces.[].name") | String | Required, Unique | | Pattern: `^(Port-Channel|Ethernet(\d+/)*)\d+(\.\d+)?$` | Local interface name. | | [          public_address](## "router_path_selection.path_groups.[].local_interfaces.[].public_address") | String | | | | Public IP assigned by NAT. | | [          stun](## "router_path_selection.path_groups.[].local_interfaces.[].stun") | Dictionary | | | | | | [            server_profiles](## "router_path_selection.path_groups.[].local_interfaces.[].stun.server_profiles") | List, items: String | Required | | Min Length: 1
Max Length: 12 | STUN server-profile names. | diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-pim-sparse-mode.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-pim-sparse-mode.md index 54c82d2c972..37224d0c93e 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-pim-sparse-mode.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-pim-sparse-mode.md @@ -12,7 +12,7 @@ | [    bfd](## "router_pim_sparse_mode.ipv4.bfd") | Boolean | | | | Enable/Disable BFD. | | [    ssm_range](## "router_pim_sparse_mode.ipv4.ssm_range") | String | | | | IPv4 Prefix associated with SSM. | | [    rp_addresses](## "router_pim_sparse_mode.ipv4.rp_addresses") | List, items: Dictionary | | | | | - | [      - address](## "router_pim_sparse_mode.ipv4.rp_addresses.[].address") | String | Required, Unique | | | RP Address. | + | [      - address](## "router_pim_sparse_mode.ipv4.rp_addresses.[].address") | String | Required | | | RP Address. | | [        groups](## "router_pim_sparse_mode.ipv4.rp_addresses.[].groups") | List, items: String | | | | | | [          - <str>](## "router_pim_sparse_mode.ipv4.rp_addresses.[].groups.[]") | String | | | | | | [        access_lists](## "router_pim_sparse_mode.ipv4.rp_addresses.[].access_lists") | List, items: String | | | | | @@ -53,7 +53,7 @@ rp_addresses: # RP Address. - - address: + - address: groups: - access_lists: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-traffic-engineering.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-traffic-engineering.md index 776cfcd828b..1cd693aba58 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-traffic-engineering.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/router-traffic-engineering.md @@ -8,7 +8,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [router_traffic_engineering](## "router_traffic_engineering") | Dictionary | | | | | - | [  enabled](## "router_traffic_engineering.enabled") | Boolean | | | | | + | [  enabled](## "router_traffic_engineering.enabled") | Boolean | Required | | | | | [  router_id](## "router_traffic_engineering.router_id") | Dictionary | | | | | | [    ipv4](## "router_traffic_engineering.router_id.ipv4") | String | | | | | | [    ipv6](## "router_traffic_engineering.router_id.ipv6") | String | | | | | @@ -34,7 +34,7 @@ ```yaml router_traffic_engineering: - enabled: + enabled: router_id: ipv4: ipv6: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/snmp-server.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/snmp-server.md index f0f48faa2e6..d903e11168e 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/snmp-server.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/snmp-server.md @@ -72,6 +72,7 @@ | [  vrfs](## "snmp_server.vrfs") | List, items: Dictionary | | | | | | [    - name](## "snmp_server.vrfs.[].name") | String | Required, Unique | | | VRF name. | | [      enable](## "snmp_server.vrfs.[].enable") | Boolean | | | | | + | [  ifmib_ifspeed_shape_rate](## "snmp_server.ifmib_ifspeed_shape_rate") | Boolean | | | | SNMP ifspeed reflecting shaping rate. | === "YAML" @@ -205,4 +206,7 @@ # VRF name. - name: enable: + + # SNMP ifspeed reflecting shaping rate. + ifmib_ifspeed_shape_rate: ``` diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/system.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/system.md index e8ba9fdb5f0..050f3ab4e68 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/system.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/system.md @@ -13,10 +13,10 @@ | [      ipv4](## "system.control_plane.tcp_mss.ipv4") | Integer | | | | Segment size. | | [      ipv6](## "system.control_plane.tcp_mss.ipv6") | Integer | | | | Segment size. | | [    ipv4_access_groups](## "system.control_plane.ipv4_access_groups") | List, items: Dictionary | | | | | - | [      - acl_name](## "system.control_plane.ipv4_access_groups.[].acl_name") | String | Required, Unique | | | | + | [      - acl_name](## "system.control_plane.ipv4_access_groups.[].acl_name") | String | Required | | | | | [        vrf](## "system.control_plane.ipv4_access_groups.[].vrf") | String | | | | | | [    ipv6_access_groups](## "system.control_plane.ipv6_access_groups") | List, items: Dictionary | | | | | - | [      - acl_name](## "system.control_plane.ipv6_access_groups.[].acl_name") | String | Required, Unique | | | | + | [      - acl_name](## "system.control_plane.ipv6_access_groups.[].acl_name") | String | Required | | | | | [        vrf](## "system.control_plane.ipv6_access_groups.[].vrf") | String | | | | | | [  l1](## "system.l1") | Dictionary | | | | | | [    unsupported_speed_action](## "system.l1.unsupported_speed_action") | String | | | Valid Values:
- error
- warn | | @@ -35,10 +35,10 @@ # Segment size. ipv6: ipv4_access_groups: - - acl_name: + - acl_name: vrf: ipv6_access_groups: - - acl_name: + - acl_name: vrf: l1: unsupported_speed_action: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/traffic-policies.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/traffic-policies.md index a246914df61..ca1cf2d31f5 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/traffic-policies.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/traffic-policies.md @@ -26,7 +26,7 @@ | [    - name](## "traffic_policies.policies.[].name") | String | Required, Unique | | | Traffic Policy Name. | | [      matches](## "traffic_policies.policies.[].matches") | List, items: Dictionary | | | | | | [        - name](## "traffic_policies.policies.[].matches.[].name") | String | Required, Unique | | | Traffic Policy Item. | - | [          type](## "traffic_policies.policies.[].matches.[].type") | String | | | Valid Values:
- ipv4
- ipv6 | | + | [          type](## "traffic_policies.policies.[].matches.[].type") | String | Required | | Valid Values:
- ipv4
- ipv6 | | | [          source](## "traffic_policies.policies.[].matches.[].source") | Dictionary | | | | | | [            prefixes](## "traffic_policies.policies.[].matches.[].source.prefixes") | List, items: String | | | | | | [              - <str>](## "traffic_policies.policies.[].matches.[].source.prefixes.[]") | String | | | | IP address or prefix. | @@ -50,6 +50,7 @@ | [                - <str>](## "traffic_policies.policies.[].matches.[].protocols.[].flags.[]") | String | | | Valid Values:
- established
- initial | | | [              icmp_type](## "traffic_policies.policies.[].matches.[].protocols.[].icmp_type") | List, items: String | | | | | | [                - <str>](## "traffic_policies.policies.[].matches.[].protocols.[].icmp_type.[]") | String | | | | | + | [              enforce_gtsm](## "traffic_policies.policies.[].matches.[].protocols.[].enforce_gtsm") | Boolean | | | | Enforce the GTSM for BGP speakers. Only supported when protocol is set to 'neighbors'. | | [          actions](## "traffic_policies.policies.[].matches.[].actions") | Dictionary | | | | | | [            dscp](## "traffic_policies.policies.[].matches.[].actions.dscp") | Integer | | | | | | [            traffic_class](## "traffic_policies.policies.[].matches.[].actions.traffic_class") | Integer | | | | Traffic class ID. | @@ -108,7 +109,7 @@ # Traffic Policy Item. - name: - type: + type: source: prefixes: @@ -155,6 +156,9 @@ - icmp_type: - + + # Enforce the GTSM for BGP speakers. Only supported when protocol is set to 'neighbors'. + enforce_gtsm: actions: dscp: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md index 340f8c05327..64116a93aa3 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md @@ -156,6 +156,55 @@ | [    isis_passive](## "vlan_interfaces.[].isis_passive") | Boolean | | | | | | [    isis_metric](## "vlan_interfaces.[].isis_metric") | Integer | | | | | | [    isis_network_point_to_point](## "vlan_interfaces.[].isis_network_point_to_point") | Boolean | | | | | + | [    isis_authentication](## "vlan_interfaces.[].isis_authentication") | Dictionary | | | | | + | [      both](## "vlan_interfaces.[].isis_authentication.both") | Dictionary | | | | Authentication settings for level-1 and level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. | + | [        key_type](## "vlan_interfaces.[].isis_authentication.both.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [        key](## "vlan_interfaces.[].isis_authentication.both.key") | String | | | | Password string. `key_type` is required for this setting. | + | [        key_ids](## "vlan_interfaces.[].isis_authentication.both.key_ids") | List, items: Dictionary | | | | | + | [          - id](## "vlan_interfaces.[].isis_authentication.both.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | + | [            algorithm](## "vlan_interfaces.[].isis_authentication.both.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [            key_type](## "vlan_interfaces.[].isis_authentication.both.key_ids.[].key_type") | String | Required | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [            key](## "vlan_interfaces.[].isis_authentication.both.key_ids.[].key") | String | Required | | | Password string. | + | [            rfc_5310](## "vlan_interfaces.[].isis_authentication.both.key_ids.[].rfc_5310") | Boolean | | | | SHA digest computation according to rfc5310. | + | [        mode](## "vlan_interfaces.[].isis_authentication.both.mode") | String | | | Valid Values:
- md5
- sha
- text
- shared-secret | Authentication mode. | + | [        sha](## "vlan_interfaces.[].isis_authentication.both.sha") | Dictionary | | | | Required settings for authentication mode 'sha'. | + | [          key_id](## "vlan_interfaces.[].isis_authentication.both.sha.key_id") | Integer | Required | | Min: 1
Max: 65535 | | + | [        shared_secret](## "vlan_interfaces.[].isis_authentication.both.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | + | [          profile](## "vlan_interfaces.[].isis_authentication.both.shared_secret.profile") | String | Required | | | | + | [          algorithm](## "vlan_interfaces.[].isis_authentication.both.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [        rx_disabled](## "vlan_interfaces.[].isis_authentication.both.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | + | [      level_1](## "vlan_interfaces.[].isis_authentication.level_1") | Dictionary | | | | Authentication settings for level-1. 'both' takes precedence over 'level_1' and 'level_2' settings. | + | [        key_type](## "vlan_interfaces.[].isis_authentication.level_1.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [        key](## "vlan_interfaces.[].isis_authentication.level_1.key") | String | | | | Password string. `key_type` is required for this setting. | + | [        key_ids](## "vlan_interfaces.[].isis_authentication.level_1.key_ids") | List, items: Dictionary | | | | | + | [          - id](## "vlan_interfaces.[].isis_authentication.level_1.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | + | [            algorithm](## "vlan_interfaces.[].isis_authentication.level_1.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [            key_type](## "vlan_interfaces.[].isis_authentication.level_1.key_ids.[].key_type") | String | Required | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [            key](## "vlan_interfaces.[].isis_authentication.level_1.key_ids.[].key") | String | Required | | | Password string. | + | [            rfc_5310](## "vlan_interfaces.[].isis_authentication.level_1.key_ids.[].rfc_5310") | Boolean | | | | SHA digest computation according to rfc5310. | + | [        mode](## "vlan_interfaces.[].isis_authentication.level_1.mode") | String | | | Valid Values:
- md5
- sha
- text
- shared-secret | Authentication mode. | + | [        sha](## "vlan_interfaces.[].isis_authentication.level_1.sha") | Dictionary | | | | Required settings for authentication mode 'sha'. | + | [          key_id](## "vlan_interfaces.[].isis_authentication.level_1.sha.key_id") | Integer | Required | | Min: 1
Max: 65535 | | + | [        shared_secret](## "vlan_interfaces.[].isis_authentication.level_1.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | + | [          profile](## "vlan_interfaces.[].isis_authentication.level_1.shared_secret.profile") | String | Required | | | | + | [          algorithm](## "vlan_interfaces.[].isis_authentication.level_1.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [        rx_disabled](## "vlan_interfaces.[].isis_authentication.level_1.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | + | [      level_2](## "vlan_interfaces.[].isis_authentication.level_2") | Dictionary | | | | Authentication settings for level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. | + | [        key_type](## "vlan_interfaces.[].isis_authentication.level_2.key_type") | String | | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [        key](## "vlan_interfaces.[].isis_authentication.level_2.key") | String | | | | Password string. `key_type` is required for this setting. | + | [        key_ids](## "vlan_interfaces.[].isis_authentication.level_2.key_ids") | List, items: Dictionary | | | | | + | [          - id](## "vlan_interfaces.[].isis_authentication.level_2.key_ids.[].id") | Integer | Required, Unique | | Min: 1
Max: 65535 | Configure authentication key-id. | + | [            algorithm](## "vlan_interfaces.[].isis_authentication.level_2.key_ids.[].algorithm") | String | Required | | Valid Values:
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [            key_type](## "vlan_interfaces.[].isis_authentication.level_2.key_ids.[].key_type") | String | Required | | Valid Values:
- 0
- 7
- 8a | Configure authentication key type. | + | [            key](## "vlan_interfaces.[].isis_authentication.level_2.key_ids.[].key") | String | Required | | | Password string. | + | [            rfc_5310](## "vlan_interfaces.[].isis_authentication.level_2.key_ids.[].rfc_5310") | Boolean | | | | SHA digest computation according to rfc5310. | + | [        mode](## "vlan_interfaces.[].isis_authentication.level_2.mode") | String | | | Valid Values:
- md5
- sha
- text
- shared-secret | Authentication mode. | + | [        sha](## "vlan_interfaces.[].isis_authentication.level_2.sha") | Dictionary | | | | Required settings for authentication mode 'sha'. | + | [          key_id](## "vlan_interfaces.[].isis_authentication.level_2.sha.key_id") | Integer | Required | | Min: 1
Max: 65535 | | + | [        shared_secret](## "vlan_interfaces.[].isis_authentication.level_2.shared_secret") | Dictionary | | | | Required settings for authentication mode 'shared_secret'. | + | [          profile](## "vlan_interfaces.[].isis_authentication.level_2.shared_secret.profile") | String | Required | | | | + | [          algorithm](## "vlan_interfaces.[].isis_authentication.level_2.shared_secret.algorithm") | String | Required | | Valid Values:
- md5
- sha-1
- sha-224
- sha-256
- sha-384
- sha-512 | | + | [        rx_disabled](## "vlan_interfaces.[].isis_authentication.level_2.rx_disabled") | Boolean | | | | Disable authentication check on the receive side. | | [    mtu](## "vlan_interfaces.[].mtu") | Integer | | | | | | [    no_autostate](## "vlan_interfaces.[].no_autostate") | Boolean | | | | | | [    vrrp_ids](## "vlan_interfaces.[].vrrp_ids") | List, items: Dictionary | | | | Improved "vrrp" data model to support multiple VRRP IDs. | @@ -500,6 +549,121 @@ isis_passive: isis_metric: isis_network_point_to_point: + isis_authentication: + + # Authentication settings for level-1 and level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. + both: + + # Configure authentication key type. + key_type: + + # Password string. `key_type` is required for this setting. + key: + key_ids: + + # Configure authentication key-id. + - id: + algorithm: + + # Configure authentication key type. + key_type: + + # Password string. + key: + + # SHA digest computation according to rfc5310. + rfc_5310: + + # Authentication mode. + mode: + + # Required settings for authentication mode 'sha'. + sha: + key_id: + + # Required settings for authentication mode 'shared_secret'. + shared_secret: + profile: + algorithm: + + # Disable authentication check on the receive side. + rx_disabled: + + # Authentication settings for level-1. 'both' takes precedence over 'level_1' and 'level_2' settings. + level_1: + + # Configure authentication key type. + key_type: + + # Password string. `key_type` is required for this setting. + key: + key_ids: + + # Configure authentication key-id. + - id: + algorithm: + + # Configure authentication key type. + key_type: + + # Password string. + key: + + # SHA digest computation according to rfc5310. + rfc_5310: + + # Authentication mode. + mode: + + # Required settings for authentication mode 'sha'. + sha: + key_id: + + # Required settings for authentication mode 'shared_secret'. + shared_secret: + profile: + algorithm: + + # Disable authentication check on the receive side. + rx_disabled: + + # Authentication settings for level-2. 'both' takes precedence over 'level_1' and 'level_2' settings. + level_2: + + # Configure authentication key type. + key_type: + + # Password string. `key_type` is required for this setting. + key: + key_ids: + + # Configure authentication key-id. + - id: + algorithm: + + # Configure authentication key type. + key_type: + + # Password string. + key: + + # SHA digest computation according to rfc5310. + rfc_5310: + + # Authentication mode. + mode: + + # Required settings for authentication mode 'sha'. + sha: + key_id: + + # Required settings for authentication mode 'shared_secret'. + shared_secret: + profile: + algorithm: + + # Disable authentication check on the receive side. + rx_disabled: mtu: no_autostate: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_cli_config_gen/tasks/main.yml index 6c8f57093d5..7a22ab14885 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -14,36 +13,18 @@ run_once: true register: avd_requirements -# For backward compatibility reasons we need to handle the case where the role -# is imported in a playbook with a tag which would have run all the tasks. -- name: Handle role being imported with a tag - tags: [never] - ansible.builtin.set_fact: - run_all_tasks: true - run_once: true - - name: Generate eos intended configuration and device documentation - tags: [always] + when: >- + eos_cli_config_gen_configuration.enable | arista.avd.default(true) or + (eos_cli_config_gen_documentation.enable | arista.avd.default(generate_device_documentation, true)) arista.avd.eos_cli_config_gen: structured_config_filename: "{{ structured_config_filename }}" config_filename: "{{ eos_config_dir }}/{{ inventory_hostname }}.cfg" documentation_filename: "{{ devices_dir }}/{{ inventory_hostname }}.md" - read_structured_config_from_file: "{{ structured_config is not arista.avd.defined }}" + read_structured_config_from_file: "{{ structured_config is not arista.avd.defined or structured_config.skipped is arista.avd.defined(true) }}" validation_mode: "{{ avd_data_validation_mode }}" - # The logic to be on par with previous tags behavior is as follow: - # either all tasks should be run OR the config should explicitly be generated because of a tag in [all, build, provision] - # AND the config generation should NOT be explicitly be skipped (Ansible precedence) - generate_device_config: >- - {{ ((run_all_tasks | default(false)) or ansible_run_tags is arista.avd.contains(['all', 'build', 'provision'])) - and ansible_skip_tags is not arista.avd.contains(['build', 'provision']) }} - # The logic to be on par with previous tags behavior is as follow: - # either all tasks should be run OR the config should explicitly be generated because of a tag in [all, build, provision, documentation] - # AND the config generation should NOT be explicitly be skipped (Ansible precedence) - # AND generate_device_documentation must NOT be false - generate_device_doc: >- - {{ generate_device_documentation | arista.avd.default(true) and ((run_all_tasks | default(false)) - or ansible_run_tags is arista.avd.contains(['all', 'build', 'provision', 'documentation'])) - and ansible_skip_tags is not arista.avd.contains(['build', 'provision', 'documentation']) }} + generate_device_config: "{{ eos_cli_config_gen_configuration.enable | arista.avd.default(true) }}" + generate_device_doc: "{{ eos_cli_config_gen_documentation.enable | arista.avd.default(generate_device_documentation, true) }}" device_doc_toc: true cprofile_file: "{{ eos_cli_config_gen_cprofile_file | default(omit) }}" delegate_to: localhost diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/vars/main.yml b/ansible_collections/arista/avd/roles/eos_cli_config_gen/vars/main.yml index 025f1d1503d..a971d9ee394 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/vars/main.yml +++ b/ansible_collections/arista/avd/roles/eos_cli_config_gen/vars/main.yml @@ -11,9 +11,6 @@ role_schema_fragments_dir: "{{ role_schema_dir }}/{{ role_schema_fragments_dir_n # Schema fragments glob role_schema_fragments_file_glob: "*.schema.yml" role_schema_fragments_glob: "{{ role_schema_fragments_dir }}/{{ role_schema_fragments_file_glob }}" -# JSON Schema file -role_schema_json_schema_file_name: "{{ role_name }}.jsonschema.json" -role_schema_json_schema_path: "{{ role_schema_dir }}/{{ role_schema_json_schema_file_name }}" # Documentation folder role_documentation_dir_name: "docs" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/README.md b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/README.md index bdedea4f0ff..c7f6380be04 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/README.md +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/README.md @@ -99,6 +99,11 @@ roles/eos_config_deploy_cvp/defaults/main/output_directories.yml - **`execute_tasks`**: `true` / `false`. Support automatically executing pending tasks. Default: `false`. - **`cvp_configlets`**: Structure to add additional configlets to those automatically generated by AVD roles. - **`cv_collection`**: Version of CloudVision collection to use. Can be `v1` or `v3`. Default is `v3`. +- **`avd_eos_config_deploy_cvp_provision`**: Deploy/remove the generated configs and containers on CloudVision. Default: `true`. +- **`avd_eos_config_deploy_cvp_execute_existing_tasks`**: For `cv_collection: v1` only, execute *existing* tasks on CloudVision *before* uploading configlets. Default: `false`. +- **`avd_eos_config_deploy_cvp_execute_configlet_tasks`**: Execute pending tasks on CloudVision after uploading configlets. Default: `false`. +- **`avd_eos_config_deploy_cvp_execute_container_tasks`**: Execute pending tasks on CloudVision after creating containers. Default: `false`. +- **`avd_eos_config_deploy_cvp_execute_device_tasks`**: Execute pending tasks on CloudVision after onboarding, moving or changing devices. Default: `false`. #### Getting Started diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/main.yml index e17825a5270..ae0bf965e63 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/main.yml @@ -3,7 +3,7 @@ # that can be found in the LICENSE file. --- - name: Create required output directories if not present - tags: [always] + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -14,9 +14,8 @@ run_once: true - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -26,5 +25,4 @@ register: avd_requirements - name: Start creation/update process. - tags: [always] ansible.builtin.include_tasks: "{{ cv_collection }}/main.yml" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/absent.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/absent.yml index 4d30c0585c7..bc92c890d5c 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/absent.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/absent.yml @@ -4,42 +4,35 @@ --- # tasks file for eos-config-deploy-cvp - state=absent - name: "Collecting facts from CVP {{ inventory_hostname }}." - tags: [reset] arista.cvp.cv_facts: register: cvp_facts # Load tasks when device_filter is string - name: Load conditional cv_device execution if device_filter is string. - tags: [reset] ansible.builtin.include_tasks: "./cv-device-filter-string.yml" when: "device_filter is string" # Load tasks when device_filter is list - name: Load conditional cv_device execution if device_filter is list. - tags: [reset] ansible.builtin.include_tasks: "./cv-device-filter-list.yml" when: "device_filter is not string" - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [reset] arista.cvp.cv_task: tasks: "{{ cvp_devices_results.data.tasks }}" # noqa: args[module] wait: 720 - name: "Refreshing facts from CVP {{ inventory_hostname }}." - tags: [reset] arista.cvp.cv_facts: register: cvp_facts - name: "Deleting Containers topology on {{ inventory_hostname }}" - tags: [reset] arista.cvp.cv_container: topology: "{{ cvp_containers }}" cvp_facts: "{{ cvp_facts.ansible_facts }}" mode: delete - name: "Delete configlets from CVP {{ inventory_hostname }}." - tags: [reset] arista.cvp.cv_configlet: cvp_facts: "{{ cvp_facts.ansible_facts }}" configlets: "{{ cvp_vars.cvp_configlets }}" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-list.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-list.yml index 5de18f0bda2..c1a68858607 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-list.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-list.yml @@ -3,7 +3,6 @@ # that can be found in the LICENSE file. --- - name: "Configure devices on {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_device: devices: "{{ cvp_devices }}" cvp_facts: "{{ cvp_facts.ansible_facts }}" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-string.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-string.yml index 8a0c134ee33..78241569aa6 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-string.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/cv-device-filter-string.yml @@ -3,7 +3,6 @@ # that can be found in the LICENSE file. --- - name: "Configure devices on {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_device: devices: "{{ cvp_devices }}" cvp_facts: "{{ cvp_facts.ansible_facts }}" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-list.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-list.yml index 43abf16543e..0deefaae665 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-list.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-list.yml @@ -3,7 +3,6 @@ # that can be found in the LICENSE file. --- - name: Generate intended variables - tags: [always] arista.avd.inventory_to_container: # Inventory is read from memory unless 'avd_inventory_to_container_file' is set inventory: "{{ avd_inventory_to_container_file }}" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-string.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-string.yml index 2d97744d20b..3d7947c293e 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-string.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main-filter-string.yml @@ -3,7 +3,6 @@ # that can be found in the LICENSE file. --- - name: Generate intended variables - tags: [always] arista.avd.inventory_to_container: # Inventory is read from memory unless 'avd_inventory_to_container_file' is set inventory: "{{ avd_inventory_to_container_file }}" diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main.yml index 4371d4eafae..82946cf5530 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/main.yml @@ -5,18 +5,15 @@ # Common action for all states. # Load tasks when device_filter is string - name: Generate CVP information using device_filter as string. - tags: [always] ansible.builtin.include_tasks: "{{ cv_collection }}/main-filter-string.yml" when: "device_filter is string" # Load tasks when device_filter is list - name: Generate CVP information using device_filter as list. - tags: [always] ansible.builtin.include_tasks: "{{ cv_collection }}/main-filter-list.yml" when: "device_filter is not string" - name: "Build DEVICES and CONTAINER definition for {{ inventory_hostname }}" - tags: [generate, build, provision] ansible.builtin.template: src: "cvp-devices.j2" dest: "{{ structured_cvp_dir }}/{{ inventory_hostname }}.yml" @@ -25,7 +22,6 @@ run_once: true - name: "Load CVP device information for {{ inventory_hostname }}" - tags: [build, provision, online] ansible.builtin.include_vars: "{{ structured_cvp_dir }}/{{ inventory_hostname }}.yml" # delegate_to: localhost @@ -34,7 +30,7 @@ # If state=present launch creation/update process # If state=absent launch deletion process - name: Start creation/update process. - tags: [provision, online] + when: avd_eos_config_deploy_cvp_provision | arista.avd.default(true) ansible.builtin.include_tasks: "{{ cv_collection }}/{{ state }}.yml" ################################################# diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/present.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/present.yml index 38d08f93fc6..f8874619981 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/present.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v1/present.yml @@ -4,18 +4,16 @@ --- # tasks file for eos-config-deploy-cvp - state=present - name: "Collecting facts from CVP {{ inventory_hostname }}." - tags: [always] arista.cvp.cv_facts: register: cvp_facts - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task: tasks: "{{ cvp_facts.ansible_facts.tasks }}" # noqa: args[module] when: execute_tasks|bool + or avd_eos_config_deploy_cvp_execute_existing_tasks | arista.avd.default(false) - name: "Create configlets on CVP {{ inventory_hostname }}." - tags: [provision] arista.cvp.cv_configlet: cvp_facts: "{{ cvp_facts.ansible_facts }}" configlets: "{{ cvp_vars.cvp_configlets }}" @@ -23,50 +21,46 @@ register: cvp_configlets_status - name: "Execute any configlet generated tasks to update configuration on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task: tasks: "{{ cvp_configlets_status.data.tasks }}" # noqa: args[module] wait: 90 when: - cvp_configlets_status.data.tasks | length > 0 - execute_tasks|bool + or avd_eos_config_deploy_cvp_execute_configlet_task | arista.avd.default(false) - name: "Building Containers topology on {{ inventory_hostname }}" - tags: [provision] arista.cvp.cv_container: topology: "{{ cvp_containers }}" cvp_facts: "{{ cvp_facts.ansible_facts }}" register: cvp_container_results - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task: tasks: "{{ cvp_container_results.data.tasks }}" # noqa: args[module] wait: 720 when: - execute_tasks|bool + or avd_eos_config_deploy_cvp_execute_container_tasks | arista.avd.default(false) - name: "Refreshing facts from CVP {{ inventory_hostname }}." - tags: [always] arista.cvp.cv_facts: register: cvp_facts # Load tasks when device_filter is string - name: Load conditional cv_device execution if device_filter is string. - tags: [provision, apply] ansible.builtin.include_tasks: "./cv-device-filter-string.yml" when: "device_filter is string" # Load tasks when device_filter is list - name: Load conditional cv_device execution if device_filter is list. - tags: [provision, apply] ansible.builtin.include_tasks: "./cv-device-filter-list.yml" when: "device_filter is not string" - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task: tasks: "{{ cvp_devices_results.data.tasks }}" # noqa: args[module] wait: 720 when: - execute_tasks|bool + or avd_eos_config_deploy_cvp_execute_device_tasks | arista.avd.default(false) diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/main.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/main.yml index 43060598ea0..fb0f42585fb 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/main.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/main.yml @@ -3,7 +3,6 @@ # that can be found in the LICENSE file. --- - name: "Generate intended variables" - tags: [always] arista.avd.inventory_to_container: # Inventory is read from memory unless 'avd_inventory_to_container_file' is set inventory: "{{ avd_inventory_to_container_file }}" @@ -15,7 +14,6 @@ register: cvp_vars - name: "Build DEVICES and CONTAINER definition for {{ inventory_hostname }}" - tags: [generate, build, provision] ansible.builtin.template: src: "cvp-devices-v3.j2" dest: "{{ structured_cvp_dir }}/{{ inventory_hostname }}.yml" @@ -28,7 +26,7 @@ # If state=present launch creation/update process # If state=absent launch deletion process - name: Start creation/update process. - tags: [provision, online] + when: avd_eos_config_deploy_cvp_provision | arista.avd.default(true) ansible.builtin.include_tasks: "{{ cv_collection }}/{{ state }}.yml" ################################################# diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/present.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/present.yml index 946aa16a973..2ce8b56f6a5 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/present.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_cvp/tasks/v3/present.yml @@ -3,26 +3,23 @@ # that can be found in the LICENSE file. --- - name: "Load CVP device information for {{ inventory_hostname }}" - tags: [build, provision, online] ansible.builtin.include_vars: "{{ structured_cvp_dir }}/{{ inventory_hostname }}.yml" - name: "Create configlets on CVP {{ inventory_hostname }}." - tags: [provision] arista.cvp.cv_configlet_v3: configlets: "{{ cvp_vars.cvp_configlets }}" register: cvp_configlets_status - name: "Execute any configlet generated tasks to update configuration on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task_v3: tasks: "{{ cvp_configlets_status.taskIds }}" when: - cvp_configlets_status.taskIds is arista.avd.defined - cvp_configlets_status.taskIds | length > 0 - execute_tasks | bool + or avd_eos_config_deploy_cvp_execute_configlet_tasks | arista.avd.default(false) - name: "Building Containers topology on {{ inventory_hostname }}" - tags: [provision, containers] arista.cvp.cv_container_v3: topology: "{{ cvp_containers }}" state: present @@ -30,16 +27,15 @@ register: cvp_container_results - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task_v3: tasks: "{{ cvp_container_results.taskIds }}" when: - cvp_container_results.taskIds is arista.avd.defined - cvp_container_results.taskIds | length > 0 - execute_tasks | bool + or avd_eos_config_deploy_cvp_execute_container_tasks | arista.avd.default(false) - name: "Configure devices on {{ inventory_hostname }}" - tags: [provision, apply] arista.cvp.cv_device_v3: devices: "{{ cvp_devices }}" # noqa: args[module] state: present @@ -49,10 +45,10 @@ register: cvp_devices_results - name: "Execute pending tasks on {{ inventory_hostname }}" - tags: [apply] arista.cvp.cv_task_v3: tasks: "{{ cvp_devices_results.taskIds }}" when: - cvp_devices_results.taskIds is arista.avd.defined - cvp_devices_results.taskIds | length > 0 - execute_tasks | bool + or avd_eos_config_deploy_cvp_execute_device_tasks | arista.avd.default(false) diff --git a/ansible_collections/arista/avd/roles/eos_config_deploy_eapi/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_config_deploy_eapi/tasks/main.yml index 02be02e61ad..720413f64d9 100644 --- a/ansible_collections/arista/avd/roles/eos_config_deploy_eapi/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_config_deploy_eapi/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -15,6 +14,7 @@ register: avd_requirements - name: Create required output directories if not present + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -35,4 +35,3 @@ filename: "{{ pre_running_config_backup_filename }}" dir_path: "{{ pre_running_config_backup_dir }}" notify: "backup config" - tags: [provision] diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/how-to/wan.md b/ansible_collections/arista/avd/roles/eos_designs/docs/how-to/wan.md index 8b1938cb7a0..d5e6ee50fc2 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/how-to/wan.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/how-to/wan.md @@ -106,7 +106,8 @@ The following table list the `eos_designs` top level keys used for WAN and how t | Key | Must be the same for all the WAN routers | Comment | | --- | ---------------------------------------- | ------- | -| `wan_mode` | ✅ | Two possible modes, `autovpn` and `cv-pathfinder` (default). | +| `wan_mode` | ✅ | Two possible modes, `legacy-autovpn` and `cv-pathfinder` (default). | +| `wan_encapsulation` | ✅ | Two possible encapsulations, `vxlan` and `path-selection` (default). | | `wan_virtual_topologies` | ✅ | to define the Policies and the VRF to policy mappings. | | `wan_path_groups` | ✅ | to define the list of path-groups in the network. | | `wan_carriers` | ✅ | to define the list of carriers in the network, each carrier is assigned to a path-group. | @@ -134,16 +135,34 @@ Additionally, following keys must be set for the WAN route servers for the conne AVD supports two design types for WAN: -- AutoVPN +- Legacy AutoVPN - CV Pathfinder By default the mode is set to `cv-pathfinder` and can be changed using: ```yaml --- -wan_mode: autovpn | cv-pathfinder # default: cv-pathfinder +wan_mode: legacy-autovpn | cv-pathfinder # default: cv-pathfinder ``` +#### WAN encapsulation + +BGP peerings for the WAN can use two different encapsulation for EVPN address family: + +- path-selection +- vxlan + +By default the mode is set to `path-selection` and can be changed using: + +```yaml +--- +wan_encapsulaton: vxlan | path-selection # default: path-selection +``` + +!!! note + + All routers participating to the WAN _must_ have the same encapsulation defined. + #### WAN node_types There are two built-in node types for WAN: @@ -690,13 +709,32 @@ reused when adding LAN protocols to help understand the changes. #### LAN HA common configuration -EOS (and hence AVD) supports maximum 2 routers for HA. To establish LAN HA the requirements are the following: +EOS (and hence AVD) supports maximum 2 routers for HA. To be considered as HA nodes, they need to belong to the same node_group as below: + +```yaml +wan_router: + node_groups: + - group: Site42 + cv_pathfinder_region: AVD_Land_West + cv_pathfinder_site: Site42 + wan_ha: + enabled: true + nodes: + - name: node1 + id: 1 + [...] + - name: node2 + id: 1 + [...] +``` + +To establish LAN HA the requirements are the following: - The HA tunnels can be established only in the default VRF (EOS limitation) - The HA interfaces must be able to establish IPSec tunnels between each other. This implies that if the interfaces are on different subnet, the LAN must be able to route traffic between each interface. - EVPN Gateway is used to exchange the routes between the HA peers configured as follow - the advantage is that it caters for all VRFs and the default VRF export route-map is still valid. -By default, AVD uses the uplinks as the HA links. It is possible to override this by setting a single interface to be used as the *Direct HA link*: +By default, AVD uses the uplinks as the HA links. It is possible to override this by setting a list of interfaces to be used as the *Direct HA links*: ```yaml wan_router: @@ -710,12 +748,17 @@ wan_router: ha_ipv4_pool: 10.10.10.0/24 # (2)! ``` -1. Select the interface for HA, it can either be a way to select ONE interface for Direct HA, or to filter some of the uplink HA interfaces. +1. Select the interface for HA, it can either be a way to select one or more interface(s) for Direct HA, or to filter some of the uplink HA interfaces. 2. Prefix to use to allocate the IP address for the direct HA link. !!! warning - Only one interface can be used for Direct HA today in AVD. + For direct HA, AVD will configure a port-channel by default. + This feature was introduced recently in EOS and may not be supported on your version. + + If it is the case, only one interface can be used for Direct HA, and the port-channel creation can be disabled using `wan_ha.use_port_channel_for_direct_ha: false`. + + It is *not* possible to use multiple direct HA links while disabling the port-channel. From a configuration standpoint: @@ -790,6 +833,15 @@ In the situation where the LAN is EBGP but HA is configured over a direct link, WAN eBGP LAN with Direct HA link +!!! warning + + For direct HA, AVD will configure a port-channel by default. + This feature was introduced recently in EOS and may not be supported on your version. + + If it is the case, only one interface can be used for Direct HA, and the port-channel creation can be disabled using `wan_ha.use_port_channel_for_direct_ha: false`. + + It is *not* possible to use multiple direct HA links while disabling the port-channel. + #### OSPF LAN (NOT SUPPORTED) !!! danger "NOT SUPPORTED" @@ -989,6 +1041,7 @@ wan_virtual_topologies: | AvdTestBGP | VerifyBGPSpecificPeers | Validate the state of BGP Address Family sessions, including `Path-Selection` for AutoVPN, `Link-State` and `IPv4/IPv6 SR-TE` for CV Pathfinder. | | AvdTestIPSecurity | VerifySpecificIPSecConn | Validate the establishment of IP security connections for each static peer under the `router path-selection` section of the configuration. | | AvdTestStun | VerifyStunClient | Validate the presence of a STUN client translation for a given source IPv4 address and port. The list of expected translations for each device is built by searching local interfaces in each path-group. | +| AvdTestDpsReachability | VerifyReachability | Validate DPS reachability between devices. | !!! note More WAN-related tests are available directly in ANTA and can be added using custom catalogs. diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/input-variables.md b/ansible_collections/arista/avd/roles/eos_designs/docs/input-variables.md index c842009ff95..96ceb7b409c 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/input-variables.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/input-variables.md @@ -31,21 +31,20 @@ The input variables are documented below in tables and YAML. ## Design type -By setting the `design.type` variable, the default node-types described in [Node Type Variables](#node-type-variables) will be used. +!!! note + The `design.type` variable is no longer required. It has been deprecated and will be removed in AVD 6.0.0. + The default [Node Type Variables](#node-type-variables) can be used with all designs. --8<-- roles/eos_designs/docs/tables/design.md --8<-- -!!! note - The node types for AutoVPN and CV Pathfinders are part of the `l3ls-evpn` design. - ### 3-stage clos topology support (Leaf & Spine) - The **eos_designs** role support various deployments with layer 3 leaf and spine (3-stage Clos) and optionally, with dedicated overlay controllers. - 3 stage Clos fabric can be represented as spines, L3 leafs and L2 leafs, and also referred to as a "POD". -See the following examples using the `l3ls-evpn` design: +See the following examples: - [AVD example for a single data center using L3LS](../../../examples/single-dc-l3ls/README.md). - [AVD example for a dual data center using L3LS](../../../examples/dual-dc-l3ls/README.md). @@ -62,14 +61,14 @@ See the following examples using the `l3ls-evpn` design: - The **eos_designs** role support various deployments with layer 2 leaf and spine. For example, routing may terminate at the spine level or an external L3 device. - The Clos fabric can be represented as L3 spines, spines, and leafs. -See the following examples using the `l2ls` design: +See the following examples: - [Example for L2LS Fabric](../../../examples/l2ls-fabric/README.md). - [Example for Campus Fabric](../../../examples/campus-fabric/README.md). ### MPLS -The **eos_designs** role with the `mpls` design type supports any arbitrary physical mesh topology by combining and interconnecting different node types with the `core_interfaces` settings. +The **eos_designs** role supports any arbitrary physical mesh topology by combining and interconnecting different node types with the `core_interfaces` settings. The following underlay routing protocols are supported: @@ -92,7 +91,7 @@ The MPLS design supports most fabric topology variables already supported by l3l - EVPN overlay settings are set with `mpls_overlay_role` and `mpls_route_reflectors` instead of `evpn_role` and `evpn_route_servers`. - No Inband Management support. -See the following example using the `mpls` design: +See the following example: - [AVD example for a MPLS-VPN based WAN Network](../../../examples/isis-ldp-ipvpn/README.md). @@ -133,40 +132,24 @@ roles/eos_designs/docs/tables/fabric-ip-addressing.md ## Node Type Variables -The following tables provide information on the default node types that have been pre-defined in `eos_designs` for each design type. +The following tables provide information on the default node types that are pre-defined in `eos_designs`. To customize or create new node types, please refer to [node type customization](#node-type-customization) section. -### L3LS EVPN - -| Node Type Key | Underlay Router | Uplink Type | Default EVPN Role | L2 Network Services | L3 Network Services | VTEP | MLAG Support | Connected Endpoints | Default WAN Role | Default Underlay Routing Protocol | Default Overlay Routing Protocol | -| ------------------ | --------------- | ------------ | ----------------- | ------------------- | ------------------- | ---- | ------------ | ------------------- | ---------------- | --------------------------------- | -------------------------------- | -| super_spine | ✅ | p2p | none | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | -| spine | ✅ | p2p | server | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | -| l3leaf | ✅ | p2p | client | ✅ | ✅ | ✅ | ✅ | ✅ | ✘ | eBGP | eBGP | -| l2leaf | ✘ | port-channel | none | ✅ | ✘ | ✘ | ✅ | ✅ | ✘ | eBGP | eBGP | -| overlay_controller | ✅ | p2p | server | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | -| wan_rr | ✅ | p2p | server | ✘ | ✅ | ✅ | ✘ | ✘ | server | none | iBGP | -| wan_router | ✅ | p2p | client | ✘ | ✅ | ✅ | ✘ | ✘ | client | none | iBGP | - -- `wan_router`: Edge routers for AutoVPN or Edge and Transit routers for CV Pathfinder depending on the `wan_mode` value. -- `wan_rr`: AutoVPN RR or Pathfinder depending on the `wan_mode` value. - -### L2LS - -| Node Type Key | Underlay Router | Uplink Type | Default EVPN Role | L2 Network Services | L3 Network Services | VTEP | MLAG Support | Connected Endpoints | -| ------------------ | --------------- | ------------ | ----------------- | ------------------- | ------------------- | ---- | ------------ | ------------------- | -| l3spine | ✅ | p2p | none | ✅ | ✅ | ✘ | ✅ | ✅ | -| spine | ✘ | port-channel | none | ✅ | ✘ | ✘ | ✅ | ✅ | -| leaf | ✘ | port-channel | none | ✅ | ✘ | ✘ | ✅ | ✅ | - -### MPLS - -| Node Type Key | Underlay Router | Uplink Type | Default Overlay Role | L2 Network Services | L3 Network Services | VTEP | MLAG Support | Connected Endpoints | -| ------------------ | --------------- | ------------ | -------------------- | ------------------- | ------------------- | ---- | ------------ | ------------------- | -| p | ✅ | p2p | none | ✘ | ✘ | ✘ | ✘ | ✘ | -| rr | ✅ | p2p | server | ✘ | ✘ | ✘ | ✘ | ✘ | -| pe | ✅ | p2p | client | ✅ | ✅ | ✅ | ✘ | ✅ | +| Node Type Key | Underlay Router | Uplink Type | EVPN Role | MPLS Role | L2 Network Services | L3 Network Services | VTEP | MLAG Support | Connected Endpoints | WAN Role | Underlay Routing Protocol | Overlay Routing Protocol | Notes | +| ------------------ | --------------- | ------------ | ----------| ------------| ------------------- | ------------------- | ---- | ------------ | ------------------- | -------- | ------------------------- | ------------------------ | | +| spine | ✅ | p2p | server | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | | +| l3leaf | ✅ | p2p | client | ✘ | ✅ | ✅ | ✅ | ✅ | ✅ | ✘ | eBGP | eBGP | | +| l2leaf | ✘ | port-channel | N/A | ✘ | ✅ | ✘ | ✘ | ✅ | ✅ | ✘ | ✘ | ✘ | | +| l3spine | ✅ | p2p | none | ✘ | ✅ | ✅ | ✘ | ✅ | ✅ | ✘ | none | none | | +| l2spine | ✘ | port-channel | none | ✘ | ✅ | ✘ | ✘ | ✅ | ✅ | ✘ | ✘ | ✘ | | +| super_spine | ✅ | p2p | none | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | | +| overlay_controller | ✅ | p2p | server | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | eBGP | eBGP | | +| wan_rr | ✅ | p2p | server | ✘ | ✘ | ✅ | ✅ | ✘ | ✘ | server | none | iBGP | AutoVPN RR or Pathfinder depending on the e` value. | +| wan_router | ✅ | p2p | client | ✘ | ✘ | ✅ | ✅ | ✘ | ✘ | client | none | iBGP | Edge routers for AutoVPN or Edge and Transit routers for CV Pathfindeing on the `wan_mode` value. | +| p | ✅ | p2p | none | none, LSR | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | iBGP | ISIS-SR | | +| rr | ✅ | p2p | server | server, LSR | ✘ | ✘ | ✘ | ✘ | ✘ | ✘ | iBGP | ISIR | EVPN with MPLS encapsulation | +| pe | ✅ | p2p | client | client, LSR | ✅ | ✅ | ✅ | ✘ | ✅ | ✘ | iBGP | ISIS-SR | EVPN with MPLS encapsulation, L1 Network Services (PW) | ## Node type customization @@ -177,6 +160,8 @@ AVD provides the capability to customize your node types, supporting a variety o If you need to change all the existing `node_type_keys`, it is recommended to copy the defaults and modify them. If you need to add custom `node_type_keys`, create them under `custom_node_type_keys`; if named identically to default `node_type_keys` entries, custom entries will replace the equivalent default entry. +The default value of `node_type_keys` depend on the `design.type` setting which is deprecated for removal in AVD 6.0.0. The default design type `l3ls-evpn` provides all the default node types mentioned in the previous section. + ??? example "Default value for design `l3ls-evpn`" ```yaml @@ -186,17 +171,19 @@ AVD provides the capability to customize your node types, supporting a variety o type: spine default_evpn_role: server default_ptp_priority1: 20 + cv_tags_topology_type: spine - key: l3leaf type: l3leaf connected_endpoints: true default_evpn_role: client - default_ptp_priority1: 30 mlag_support: true network_services: l2: true l3: true vtep: true + default_ptp_priority1: 30 + cv_tags_topology_type: leaf - key: l2leaf type: l2leaf @@ -206,13 +193,35 @@ AVD provides the capability to customize your node types, supporting a variety o l2: true underlay_router: false uplink_type: port-channel + cv_tags_topology_type: leaf + + - key: l3spine + type: l3spine + connected_endpoints: true + mlag_support: true + network_services: + l2: true + l3: true + default_overlay_routing_protocol: none + default_underlay_routing_protocol: none + + - key: l2spine + type: spine + connected_endpoints: true + mlag_support: true + network_services: + l2: true + underlay_router: false + uplink_type: port-channel - key: super_spine type: super-spine + cv_tags_topology_type: core - key: overlay_controller type: overlay-controller default_evpn_role: server + cv_tags_topology_type: spine - key: wan_router type: wan_router @@ -220,9 +229,10 @@ AVD provides the capability to customize your node types, supporting a variety o default_wan_role: client default_underlay_routing_protocol: none default_overlay_routing_protocol: ibgp + default_flow_tracker_type: hardware + vtep: true network_services: l3: true - vtep: true - key: wan_rr type: wan_rr @@ -230,9 +240,44 @@ AVD provides the capability to customize your node types, supporting a variety o default_wan_role: server default_underlay_routing_protocol: none default_overlay_routing_protocol: ibgp + default_flow_tracker_type: hardware + vtep: true network_services: l3: true - vtep: true + + - key: p + type: p + mpls_lsr: true + default_mpls_overlay_role: none + default_overlay_routing_protocol: ibgp + default_underlay_routing_protocol: isis-sr + + - key: pe + type: pe + mpls_lsr: true + connected_endpoints: true + default_mpls_overlay_role: client + default_evpn_role: client + network_services: + l1: true + l2: true + l3: true + default_overlay_routing_protocol: ibgp + default_underlay_routing_protocol: isis-sr + default_overlay_address_families: + - vpn-ipv4 + default_evpn_encapsulation: mpls + + - key: rr + type: rr + mpls_lsr: true + default_mpls_overlay_role: server + default_evpn_role: server + default_overlay_routing_protocol: ibgp + default_underlay_routing_protocol: isis-sr + default_overlay_address_families: + - vpn-ipv4 + default_evpn_encapsulation: mpls ``` ??? example "Default value for design `l2ls`" @@ -243,12 +288,12 @@ AVD provides the capability to customize your node types, supporting a variety o - key: l3spine type: l3spine connected_endpoints: true - default_overlay_routing_protocol: none - default_underlay_routing_protocol: none mlag_support: true network_services: l2: true l3: true + default_overlay_routing_protocol: none + default_underlay_routing_protocol: none - key: spine type: spine @@ -276,37 +321,37 @@ AVD provides the capability to customize your node types, supporting a variety o - key: p type: p + mpls_lsr: true default_mpls_overlay_role: none default_overlay_routing_protocol: ibgp default_underlay_routing_protocol: isis-sr - mpls_lsr: true - key: pe type: pe + mpls_lsr: true connected_endpoints: true - default_evpn_encapsulation: mpls - default_evpn_role: client default_mpls_overlay_role: client - default_overlay_address_families: - - vpn-ipv4 - default_overlay_routing_protocol: ibgp - default_underlay_routing_protocol: isis-sr - mpls_lsr: true + default_evpn_role: client network_services: l1: true l2: true l3: true + default_overlay_routing_protocol: ibgp + default_underlay_routing_protocol: isis-sr + default_overlay_address_families: + - vpn-ipv4 + default_evpn_encapsulation: mpls - key: rr type: rr - default_evpn_encapsulation: mpls - default_evpn_role: server + mpls_lsr: true default_mpls_overlay_role: server - default_overlay_address_families: - - vpn-ipv4 + default_evpn_role: server default_overlay_routing_protocol: ibgp default_underlay_routing_protocol: isis-sr - mpls_lsr: true + default_overlay_address_families: + - vpn-ipv4 + default_evpn_encapsulation: mpls ``` --8<-- @@ -384,6 +429,7 @@ underlay_port_channel_interfaces: - `{{ link.channel_description }}` - `{{ link.channel_group_id }}` +- `{{ link.peer }}` - `{{ link.peer_channel_group_id }}` - All group/hostvars @@ -395,20 +441,35 @@ mlag_ethernet_interfaces: mlag_port_channel_interfaces: -- `{{ mlag_interfaces }}` +- `{{ mlag_interfaces }}` (list of strings) - `{{ mlag_peer }}` +- `{{ mlag_port_channel_id }}` - All group/hostvars connected_endpoints_ethernet_interfaces: - `{{ peer }}` - `{{ peer_interface }}` +- `{{ adapter_description }}` - All group/hostvars connected_endpoints_port_channel_interfaces: - `{{ peer }}` +- `{{ adapter_port_channel_id }}` - `{{ adapter_port_channel_description }}` +- `{{ adapter_description }}` +- All group/hostvars + +router_id_loopback_interfaces (replacing overlay_loopback_interface): + +- `{{ router_id_loopback_description }}` +- `{{ overlay_loopback_description }}` (deprecated - use `router_id_loopback_description` instead) +- All group/hostvars + +vtep_loopback_interface: + +- `{{ vtep_loopback_description }}` - All group/hostvars While all templates can leverage the internal switch facts (switch.*) to customize the interface descriptions, @@ -946,7 +1007,6 @@ Both data models support variable inheritance from profiles defined under [`port switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: DB_Clusters port_channel: - description: PortChanne1 mode: active - name: server03 @@ -960,7 +1020,6 @@ Both data models support variable inheritance from profiles defined under [`port switches: [ DC1-SVC3A, DC1-SVC3B ] profile: VM_Servers port_channel: - description: PortChanne1 mode: active # Firewall firewalls: @@ -972,7 +1031,7 @@ Both data models support variable inheritance from profiles defined under [`port switches: [ DC1-LEAF2A, DC1-LEAF2B ] profile: TENANT_A_B port_channel: - description: PortChanne1 + endpoint_port_channel: Bond0 mode: active # Routers @@ -1018,7 +1077,7 @@ Both data models support variable inheritance from profiles defined under [`port switches: [ DC1-SVC3A, DC1-SVC3B ] profile: VM_Servers port_channel: - description: PortChanne1 + endpoint_port_channel: Bond0 mode: active ``` @@ -1056,7 +1115,7 @@ Both data models support variable inheritance from profiles defined under [`port switches: [ DC1-SVC3A, DC1-SVC4A ] profile: VM_Servers port_channel: - description: PortChanne1 + endpoint_port_channel: Bond0 mode: active ethernet_segment: short_esi: 0303:0202:0101 @@ -1066,6 +1125,14 @@ Both data models support variable inheritance from profiles defined under [`port roles/eos_designs/docs/tables/connected-endpoints.md --8<-- +### Connected endpoints default description or description template settings + +Connected endpoints support the customization of generated descriptions with a static value or template. + +--8<-- +roles/eos_designs/docs/tables/default-connected-endpoints-description.md +--8<-- + ### Network ports settings The `network_ports` data model is intended to be used with `port_profiles` and `parent_profiles` to keep the configuration generic and compact, @@ -1108,14 +1175,14 @@ All ranges defined under `switch_ports` will be expanded to individual port conf switch_ports: - Ethernet1-2 profile: pc - description: PCs + endpoint: PCs - switches: - network-ports-tests-2$ switch_ports: - Ethernet1-2 profile: ap_with_port_channel - description: AP1 with port_channel + endpoint: AP1 with port_channel - switches: - network-ports-[est]{5}-.* @@ -1123,7 +1190,7 @@ All ranges defined under `switch_ports` will be expanded to individual port conf - Ethernet3-4 - Ethernet2/1-48 profile: pc - description: PCs + endpoint: PCs ``` ??? example "Example using network ports to configure multiple ports in the same port-channel" @@ -1175,6 +1242,14 @@ All ranges defined under `switch_ports` will be expanded to individual port conf roles/eos_designs/docs/tables/network-ports.md --8<-- +### Network ports default description or description template settings + +Network ports support the customization of generated descriptions with a static value or template. + +--8<-- +roles/eos_designs/docs/tables/default-network-ports-description.md +--8<-- + ### Port profiles settings Optional profiles to share common settings for connected_endpoints and/or network_ports. diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/role-configuration.md b/ansible_collections/arista/avd/roles/eos_designs/docs/role-configuration.md index 2b53a039a7e..1b5ad0a7513 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/role-configuration.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/role-configuration.md @@ -43,13 +43,12 @@ This behavior can be adjusted by setting the variable described below. roles/eos_designs/docs/tables/role-input-validation.md --8<-- -## Documentation output settings +## Generation of facts, structured configuration and documentation -The `documentation_output` settings can be leveraged to control documentation generation. This can be useful -if for instance the project has thousands of endpoints, to be able to disable fabric-wide connected endpoints documentation. +The following settings can be leveraged to control generation of facts, structured configuration and fabric documentation. --8<-- -roles/eos_designs/docs/tables/role-documentation-output-settings.md +roles/eos_designs/docs/tables/role-settings.md --8<-- ## Custom Templates diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints-keys.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints-keys.md index 81ba87a3ee9..48ce2e4bba8 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints-keys.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints-keys.md @@ -33,40 +33,40 @@ ```yaml connected_endpoints_keys: - - description: Server. + - description: Server key: servers type: server - - description: Firewall. + - description: Firewall key: firewalls type: firewall - - description: Router. + - description: Router key: routers type: router - - description: Load Balancer. + - description: Load Balancer key: load_balancers type: load_balancer - - description: Storage Array. + - description: Storage Array key: storage_arrays type: storage_array - - description: CPE. + - description: CPE key: cpes type: cpe - - description: Workstation. + - description: Workstation key: workstations type: workstation - - description: Access Point. + - description: Access Point key: access_points type: access_point - - description: Phone. + - description: Phone key: phones type: phone - - description: Printer. + - description: Printer key: printers type: printer - - description: Camera. + - description: Camera key: cameras type: camera - - description: Generic Device. + - description: Generic Device key: generic_devices type: generic_device ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints.md index d01f481c035..5c8e02f188a 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/connected-endpoints.md @@ -7,7 +7,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [<connected_endpoints_keys.key>](## "") | List, items: Dictionary | | | | This should be applied to group_vars or host_vars where endpoints are connecting.
`connected_endpoints_keys.key` is one of the keys under "connected_endpoints_keys".
The default keys are `servers`, `firewalls`, `routers`, `load_balancers`, and `storage_arrays`.
| + | [<connected_endpoints_keys.key>](## "") | List, items: Dictionary | | | | This should be applied to group_vars or host_vars where endpoints are connecting.
`connected_endpoints_keys.key` is one of the keys under "connected_endpoints_keys".
| | [  - name](## ".[].name") | String | Required, Unique | | | Endpoint name will be used in the switchport description. | | [    rack](## ".[].rack") | String | | | | Rack is used for documentation purposes only. | | [    adapters](## ".[].adapters") | List, items: Dictionary | | | | A list of adapters, group by adapters leveraging the same port-profile. | @@ -16,10 +16,10 @@ | [        switches](## ".[].adapters.[].switches") | List, items: String | Required | | | List of switches.
The lists `endpoint_ports`, `switch_ports`, and `switches` must have the same length.
| | [          - <str>](## ".[].adapters.[].switches.[]") | String | | | | Device. | | [        endpoint_ports](## ".[].adapters.[].endpoint_ports") | List, items: String | | | | Endpoint ports is used for description, required unless `description` or `descriptions` is set.
The lists `endpoint_ports`, `switch_ports`, `descriptions` and `switches` must have the same length.
Each list item is one switchport.
| - | [          - <str>](## ".[].adapters.[].endpoint_ports.[]") | String | | | | Interface name. | - | [        descriptions](## ".[].adapters.[].descriptions") | List | | | | Unique description per port. When set, takes priority over description.
| + | [          - <str>](## ".[].adapters.[].endpoint_ports.[]") | String | | | | Port name on the endpoint. | + | [        descriptions](## ".[].adapters.[].descriptions") | List | | | | Unique description per port. When set, takes priority over description.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port` - The value from `endpoint_ports` for this switch port if set. | | [        speed](## ".[].adapters.[].speed") | String | | | | Set adapter speed in the format `` or `forced ` or `auto `.
If not specified speed will be auto.
| - | [        description](## ".[].adapters.[].description") | String | | | | By default the description is built leveraging `_`.
When set this key will override the default value on the physical ports.
| + | [        description](## ".[].adapters.[].description") | String | | | | Description or description template to be used on all ports.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port` - The value from `endpoint_ports` for this switch port if set.

The default description is set by `default_connected_endpoints_description`.
By default the description is templated from the type, name and port of the endpoint if set. | | [        profile](## ".[].adapters.[].profile") | String | | | | Port-profile name to inherit configuration. | | [        enabled](## ".[].adapters.[].enabled") | Boolean | | `True` | | Administrative state, setting to false will set the port to 'shutdown' in the intended configuration.
| | [        mode](## ".[].adapters.[].mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | Interface mode. | @@ -136,7 +136,8 @@ | [        port_channel](## ".[].adapters.[].port_channel") | Dictionary | | | | Used for port-channel adapter. | | [          mode](## ".[].adapters.[].port_channel.mode") | String | | | Valid Values:
- active
- passive
- on | Port-Channel Mode. | | [          channel_id](## ".[].adapters.[].port_channel.channel_id") | Integer | | | | Port-Channel ID.
If no channel_id is specified, an id is generated from the first switch port in the port channel.
| - | [          description](## ".[].adapters.[].port_channel.description") | String | | | | By default the description is built leveraging `` name or `adapter.description` when defined.
When this key is defined, it will append its content to the physical port description.
| + | [          description](## ".[].adapters.[].port_channel.description") | String | | | | Description or description template to be used on the port-channel interface.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port_channel` - The value from `endpoint_port_channel` if set.
- `port_channel_id` - The port-channel number for the switch.
- `adapter_description` - The adapter's description if set.
- `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint.

The default description is set by `default_connected_endpoints_port_channel_description`.
By default the description is templated from the type, name and port_channel interface of the endpoint if set. | + | [          endpoint_port_channel](## ".[].adapters.[].port_channel.endpoint_port_channel") | String | | | | Name of the port-channel interface on the endpoint.
Used for the port-channel description template with the field name `peer_interface` | | [          enabled](## ".[].adapters.[].port_channel.enabled") | Boolean | | `True` | | Port-Channel administrative state.
Setting to false will set port to 'shutdown' in intended configuration.
| | [          ptp_mpass](## ".[].adapters.[].port_channel.ptp_mpass") | Boolean | | `False` | | When MPASS is enabled on an MLAG port-channel, MLAG peers coordinate to function as a single PTP logical device.
Arista PTP enabled devices always place PTP messages on the same physical link within the port-channel.
Hence, MPASS is needed only on MLAG port-channels connected to non-Arista devices. | | [          lacp_fallback](## ".[].adapters.[].port_channel.lacp_fallback") | Dictionary | | | | LACP fallback configuration. | @@ -165,7 +166,6 @@ ```yaml # This should be applied to group_vars or host_vars where endpoints are connecting. # `connected_endpoints_keys.key` is one of the keys under "connected_endpoints_keys". - # The default keys are `servers`, `firewalls`, `routers`, `load_balancers`, and `storage_arrays`. : # Endpoint name will be used in the switchport description. @@ -196,18 +196,30 @@ # Each list item is one switchport. endpoint_ports: - # Interface name. + # Port name on the endpoint. - # Unique description per port. When set, takes priority over description. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port` - The value from `endpoint_ports` for this switch port if set. descriptions: # Set adapter speed in the format `` or `forced ` or `auto `. # If not specified speed will be auto. speed: - # By default the description is built leveraging `_`. - # When set this key will override the default value on the physical ports. + # Description or description template to be used on all ports. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port` - The value from `endpoint_ports` for this switch port if set. + # + # The default description is set by `default_connected_endpoints_description`. + # By default the description is templated from the type, name and port of the endpoint if set. description: # Port-profile name to inherit configuration. @@ -476,10 +488,24 @@ # If no channel_id is specified, an id is generated from the first switch port in the port channel. channel_id: - # By default the description is built leveraging `` name or `adapter.description` when defined. - # When this key is defined, it will append its content to the physical port description. + # Description or description template to be used on the port-channel interface. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port_channel` - The value from `endpoint_port_channel` if set. + # - `port_channel_id` - The port-channel number for the switch. + # - `adapter_description` - The adapter's description if set. + # - `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint. + # + # The default description is set by `default_connected_endpoints_port_channel_description`. + # By default the description is templated from the type, name and port_channel interface of the endpoint if set. description: + # Name of the port-channel interface on the endpoint. + # Used for the port-channel description template with the field name `peer_interface` + endpoint_port_channel: + # Port-Channel administrative state. # Setting to false will set port to 'shutdown' in intended configuration. enabled: diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-device-documentation.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/custom-node-type-keys.key.md similarity index 68% rename from ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-device-documentation.md rename to ansible_collections/arista/avd/roles/eos_designs/docs/tables/custom-node-type-keys.key.md index a17ea1993f7..168389787e8 100644 --- a/ansible_collections/arista/avd/roles/eos_cli_config_gen/docs/tables/generate-device-documentation.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/custom-node-type-keys.key.md @@ -7,10 +7,10 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [generate_device_documentation](## "generate_device_documentation") | Boolean | | `True` | | | + | [<custom_node_type_keys.key>](## "") | Dictionary | | | | | === "YAML" ```yaml - generate_device_documentation: + : ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-connected-endpoints-description.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-connected-endpoints-description.md new file mode 100644 index 00000000000..0fb4bb015fe --- /dev/null +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-connected-endpoints-description.md @@ -0,0 +1,38 @@ + +=== "Table" + + | Variable | Type | Required | Default | Value Restrictions | Description | + | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [default_connected_endpoints_description](## "default_connected_endpoints_description") | String | | `{endpoint_type!u}_{endpoint}{endpoint_port?<_}` | | Default description or description template to be used on all ports to connected endpoints.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint`: The name of the connected endpoint
- `endpoint_port`: The value from `endpoint_ports` for this switch port if set.

By default the description is templated from the type, name and port of the endpoint if set. | + | [default_connected_endpoints_port_channel_description](## "default_connected_endpoints_port_channel_description") | String | | `{endpoint_type!u}_{endpoint}{endpoint_port_channel?<_}` | | Default description or description template to be used on all port-channels to connected endpoints.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint`: The name of the connected endpoint
- `endpoint_port_channel`: The value of `endpoint_port_channel` if set.
- `port_channel_id`: The port-channel number for the switch.
- `adapter_description`: The adapter's description if set.
- `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint.

By default the description is templated from the type, name and port-channel name of the endpoint if set. | + +=== "YAML" + + ```yaml + # Default description or description template to be used on all ports to connected endpoints. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint`: The name of the connected endpoint + # - `endpoint_port`: The value from `endpoint_ports` for this switch port if set. + # + # By default the description is templated from the type, name and port of the endpoint if set. + default_connected_endpoints_description: + + # Default description or description template to be used on all port-channels to connected endpoints. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint`: The name of the connected endpoint + # - `endpoint_port_channel`: The value of `endpoint_port_channel` if set. + # - `port_channel_id`: The port-channel number for the switch. + # - `adapter_description`: The adapter's description if set. + # - `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint. + # + # By default the description is templated from the type, name and port-channel name of the endpoint if set. + default_connected_endpoints_port_channel_description: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-network-ports-description.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-network-ports-description.md new file mode 100644 index 00000000000..6cd032b6de8 --- /dev/null +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/default-network-ports-description.md @@ -0,0 +1,37 @@ + +=== "Table" + + | Variable | Type | Required | Default | Value Restrictions | Description | + | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [default_network_ports_description](## "default_network_ports_description") | String | | `{endpoint?}` | | Default description or description template to be used on all ports defined under `network_ports`.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type`: Always set to `network_port`.
- `endpoint`: The value of the `endpoint` key if set.

By default the description is templated from the `endpoint` key if set. | + | [default_network_ports_port_channel_description](## "default_network_ports_port_channel_description") | String | | `{endpoint?}{endpoint_port_channel?<_}` | | Default description or description template to be used on all port-channels defined under `network_ports`.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type`: Always set to `network_port`.
- `endpoint`: The value of the `endpoint` key if set.
- `endpoint_port_channel`: The value of `endpoint_port_channel` if set.
- `port_channel_id`: The port-channel number for the switch.
- `adapter_description`: The adapter's description if set.
- `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint.

By default the description is templated from the `endpoint` key if set. | + +=== "YAML" + + ```yaml + # Default description or description template to be used on all ports defined under `network_ports`. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type`: Always set to `network_port`. + # - `endpoint`: The value of the `endpoint` key if set. + # + # By default the description is templated from the `endpoint` key if set. + default_network_ports_description: + + # Default description or description template to be used on all port-channels defined under `network_ports`. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type`: Always set to `network_port`. + # - `endpoint`: The value of the `endpoint` key if set. + # - `endpoint_port_channel`: The value of `endpoint_port_channel` if set. + # - `port_channel_id`: The port-channel number for the switch. + # - `adapter_description`: The adapter's description if set. + # - `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint. + # + # By default the description is templated from the `endpoint` key if set. + default_network_ports_port_channel_description: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/design.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/design.md index fb0bb7fc3a1..3fb92432ded 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/design.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/design.md @@ -7,12 +7,15 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [design](## "design") | Dictionary | | | | | + | [design](## "design") deprecated | Dictionary | | | | This key is deprecated. Support will be removed in AVD version 6.0.0. See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#deprecation_of_design.type) for details. | | [  type](## "design.type") | String | | `l3ls-evpn` | Valid Values:
- l3ls-evpn
- mpls
- l2ls | By setting the design.type variable, the default node-types and templates described in these documents will be used.
| === "YAML" ```yaml + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # See [here](https://avd.arista.com/stable/docs/release-notes/5.x.x.html#deprecation_of_design.type) for details. design: # By setting the design.type variable, the default node-types and templates described in these documents will be used. diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-ip-addressing.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-ip-addressing.md index 5a31cd414eb..a636aad54f2 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-ip-addressing.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-ip-addressing.md @@ -14,6 +14,8 @@ | [    ipv6_prefix_length](## "fabric_ip_addressing.mlag.ipv6_prefix_length") | Integer | | `64` | Min: 1
Max: 127 | IPv6 prefix length used for MLAG peer-vlan and L3 point-to-point SVIs over the MLAG peer-link. | | [  p2p_uplinks](## "fabric_ip_addressing.p2p_uplinks") | Dictionary | | | | | | [    ipv4_prefix_length](## "fabric_ip_addressing.p2p_uplinks.ipv4_prefix_length") | Integer | | `31` | Min: 1
Max: 31 | IPv4 prefix length used for L3 point-to-point uplinks. | + | [  wan_ha](## "fabric_ip_addressing.wan_ha") | Dictionary | | | | Allow to manipulate the IP addressing scheme for WAN HA direct subnets. | + | [    ipv4_prefix_length](## "fabric_ip_addressing.wan_ha.ipv4_prefix_length") | Integer | | `31` | Min: 1
Max: 31 | IPv4 prefix length used for point-to-point interface for direct WAN HA link. | === "YAML" @@ -41,4 +43,10 @@ # IPv4 prefix length used for L3 point-to-point uplinks. ipv4_prefix_length: + + # Allow to manipulate the IP addressing scheme for WAN HA direct subnets. + wan_ha: + + # IPv4 prefix length used for point-to-point interface for direct WAN HA link. + ipv4_prefix_length: ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-settings.md index 9a466d70285..d6a3f1c79f5 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/fabric-settings.md @@ -8,17 +8,27 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [enable_trunk_groups](## "enable_trunk_groups") | Boolean | | `False` | | Enable Trunk Group support across eos_designs.
Warning: Because of the nature of the EOS Trunk Group feature, enabling this is "all or nothing".
*All* vlans and *all* trunks towards connected endpoints must be using trunk groups as well.
If trunk groups are not assigned to a trunk, no vlans will be enabled on that trunk.
See "Details on enable_trunk_groups" below before enabling this feature.
| - | [mlag_on_orphan_port_channel_downlink](## "mlag_on_orphan_port_channel_downlink") | Boolean | | `True` | | If `true` (default) an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair.
If `false` an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches.
Note the default value will change to `false` in AVD version 5.0 | + | [mlag_bgp_peer_description](## "mlag_bgp_peer_description") | String | | `{mlag_peer}_{peer_interface}` | | Description or description template to be used on the MLAG BGP peers including those in VRFs.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The local MLAG L3 VLAN interface.
- `peer_interface`: The MLAG L3 VLAN interface on the MLAG peer.
- `vrf`: The name of the VRF. Not available for the underlay peering.

The default description is built from the name and interface of the MLAG peer and optionally the VRF. | + | [mlag_bgp_peer_group_description](## "mlag_bgp_peer_group_description") | String | | `{mlag_peer}` | | Description or description template to be used on the MLAG BGP peer-group.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.

The default description is the name of the MLAG peers. | + | [mlag_member_description](## "mlag_member_description") | String | | `MLAG_{mlag_peer}_{peer_interface}` | | Description or description template to be used on MLAG peer-link ethernet interfaces.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The local MLAG port-channel interface.
- `peer_interface`: The port-channel interface on the MLAG peer.
- `mlag_port_channel_id`: The local MLAG port-channel ID.
- `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer.

By default the description is templated from the name and interface of the MLAG peer. | + | [mlag_on_orphan_port_channel_downlink](## "mlag_on_orphan_port_channel_downlink") | Boolean | | `False` | | If `true` an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair.
If `false` (default) an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. | + | [mlag_peer_l3_svi_description](## "mlag_peer_l3_svi_description") | String | | `MLAG_L3` | | Description or description template to be used on MLAG L3 peering SVI (Interface Vlan4093 by default).
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The MLAG L3 peering SVI name.
- `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. | + | [mlag_peer_l3_vlan_name](## "mlag_peer_l3_vlan_name") | String | | `MLAG_L3` | | Name or name template to be used on MLAG L3 VLAN (VLAN 4093 by default).
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. | + | [mlag_peer_l3_vrf_svi_description](## "mlag_peer_l3_vrf_svi_description") | String | | `MLAG_L3_VRF_{vrf}` | | Description or description template to be used on MLAG L3 peering SVI for VRFs.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The MLAG L3 VRF peering SVI name.
- `vlan`: The MLAG L3 VRF peering VLAN ID.
- `vrf`: The VRF name. | + | [mlag_peer_l3_vrf_vlan_name](## "mlag_peer_l3_vrf_vlan_name") | String | | `MLAG_L3_VRF_{vrf}` | | Name or name template to be used on MLAG L3 peering VLAN for VRFs.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `vlan`: The MLAG L3 VRF peering VLAN ID.
- `vrf`: The VRF name. | + | [mlag_peer_svi_description](## "mlag_peer_svi_description") | String | | `MLAG` | | Description or description template to be used on MLAG peering SVI (Interface Vlan4094 by default).
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The MLAG peering SVI name.
- `mlag_peer_vlan`: The MLAG peering VLAN ID. | + | [mlag_peer_vlan_name](## "mlag_peer_vlan_name") | String | | `MLAG` | | Name or name template to be used on MLAG peering VLAN (VLAN 4094 by default).
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `mlag_peer_vlan`: The MLAG peering VLAN ID. | + | [mlag_port_channel_description](## "mlag_port_channel_description") | String | | `MLAG_{mlag_peer}_{peer_interface}` | | Description or description template to be used on MLAG peer-link port-channel interfaces.
This can be a template using the format string syntax.
The available template fields are:
- `mlag_peer`: The name of the MLAG peer.
- `interface`: The local MLAG port-channel interface.
- `peer_interface`: The port-channel interface on the MLAG peer.
- `mlag_port_channel_id`: The local MLAG port-channel ID.
- `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer.

By default the description is templated from the name and port-channel interface of the MLAG peer. | | [only_local_vlan_trunk_groups](## "only_local_vlan_trunk_groups") | Boolean | | `False` | | A vlan can have many trunk_groups assigned.
To avoid unneeded configuration changes on all leaf switches when a new trunk group is added,
this feature will only configure the vlan trunk groups matched with local connected_endpoints.
See "Details on only_local_vlan_trunk_groups" below.
Requires "enable_trunk_groups: true".
| - | [p2p_uplinks_mtu](## "p2p_uplinks_mtu") | Integer | | `9214` | Min: 68
Max: 65535 | Point to Point Links MTU. | + | [p2p_uplinks_mtu](## "p2p_uplinks_mtu") | Integer | | `9214` | Min: 68
Max: 65535 | Point to Point Links MTU.
Precedence: .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214 | | [p2p_uplinks_qos_profile](## "p2p_uplinks_qos_profile") | String | | | | QOS Profile assigned on all infrastructure links. | - | [shutdown_bgp_towards_undeployed_peers](## "shutdown_bgp_towards_undeployed_peers") | Boolean | | `False` | | When a device is set undeployed using `is_deployed: false` and `shutdown_bgp_towards_undeployed_peers` key is set to true, the BGP neighborship is shutdown on the peer. | - | [shutdown_interfaces_towards_undeployed_peers](## "shutdown_interfaces_towards_undeployed_peers") | Boolean | | `False` | | - It is possible to provision configurations for a complete topology but flag devices as undeployed using the host level variable `is_deployed: false`.

```yaml
# Use at the host level
is_deployed: < true or false or default -> true >
```

- By default, this will have no impact within the `eos_designs` role. Configs will still be generated by the `eos_cli_config_gen` role and will still be pushed by the `eos_config_deploy_eapi` directly to devices if used.
- However, if the `eos_config_deploy_cvp` role is used to push configurations, CloudVision will ignore the devices flagged as `is_deployed: false` and not attempt to configure them.
- If the device is not present in the network due to CloudVision not configuring the device, `eos_validate_state` role will fail tests on peers of the undeployed device trying to verify that interfaces are up.
- To overcome this and shutdown interfaces towards undeployed peers, the variable `shutdown_interfaces_towards_undeployed_peers` can be used, satisfying the `eos_validate_state` role interface tests.
- Again, this is only an issue if `eos_config_deploy_cvp` is used and the devices are not present in the network.
| + | [shutdown_bgp_towards_undeployed_peers](## "shutdown_bgp_towards_undeployed_peers") | Boolean | | `True` | | When a device is set undeployed using `is_deployed: false` and `shutdown_bgp_towards_undeployed_peers` key is set to true, the BGP neighborship is shutdown on the peer. | + | [shutdown_interfaces_towards_undeployed_peers](## "shutdown_interfaces_towards_undeployed_peers") | Boolean | | `True` | | - It is possible to provision configurations for a complete topology but flag devices as undeployed using the host level variable `is_deployed: false`.

```yaml
# Use at the host level
is_deployed: < true or false or default -> true >
```

- By default, this will have no impact within the `eos_designs` role. Configs will still be generated by the `eos_cli_config_gen` role and will still be pushed by the `eos_config_deploy_eapi` directly to devices if used.
- However, if the `eos_config_deploy_cvp` role is used to push configurations, CloudVision will ignore the devices flagged as `is_deployed: false` and not attempt to configure them.
- If the device is not present in the network due to CloudVision not configuring the device, `eos_validate_state` role will fail tests on peers of the undeployed device trying to verify that interfaces are up.
- To overcome this and shutdown interfaces towards undeployed peers, the variable `shutdown_interfaces_towards_undeployed_peers` can be used, satisfying the `eos_validate_state` role interface tests.
- Again, this is only an issue if `eos_config_deploy_cvp` is used and the devices are not present in the network.
| | [trunk_groups](## "trunk_groups") | Dictionary | | | | | | [  mlag](## "trunk_groups.mlag") | Dictionary | | | | Trunk Group used for MLAG VLAN (Typically VLAN 4094).
| | [    name](## "trunk_groups.mlag.name") | String | | `MLAG` | | | | [  mlag_l3](## "trunk_groups.mlag_l3") | Dictionary | | | | Trunk Group used for MLAG L3 peering VLAN and for VRF L3 peering VLANs (Typically VLAN 4093).
| - | [    name](## "trunk_groups.mlag_l3.name") | String | | `LEAF_PEER_L3` | | | + | [    name](## "trunk_groups.mlag_l3.name") | String | | `MLAG` | | | | [  uplink](## "trunk_groups.uplink") | Dictionary | | | | Trunk Group used on L2 Leaf switches when "enable_trunk_groups" is set.
| | [    name](## "trunk_groups.uplink.name") | String | | `UPLINK` | | | | [underlay_filter_peer_as](## "underlay_filter_peer_as") | Boolean | | `False` | | Configure route-map on eBGP sessions towards underlay peers, where prefixes with the peer's ASN in the AS Path are filtered away.
This is very useful in very large scale networks not using EVPN overlays, where convergence will be quicker by not having to return
all updates received from Spine-1 to Spine-2 just for Spine-2 to throw them away because of AS Path loop detection.
Note that this setting cannot be used while there are EVPN services present in the default VRF.
| @@ -51,10 +61,99 @@ # See "Details on enable_trunk_groups" below before enabling this feature. enable_trunk_groups: - # If `true` (default) an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair. - # If `false` an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. - # Note the default value will change to `false` in AVD version 5.0 - mlag_on_orphan_port_channel_downlink: + # Description or description template to be used on the MLAG BGP peers including those in VRFs. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The local MLAG L3 VLAN interface. + # - `peer_interface`: The MLAG L3 VLAN interface on the MLAG peer. + # - `vrf`: The name of the VRF. Not available for the underlay peering. + # + # The default description is built from the name and interface of the MLAG peer and optionally the VRF. + mlag_bgp_peer_description: + + # Description or description template to be used on the MLAG BGP peer-group. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # + # The default description is the name of the MLAG peers. + mlag_bgp_peer_group_description: + + # Description or description template to be used on MLAG peer-link ethernet interfaces. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The local MLAG port-channel interface. + # - `peer_interface`: The port-channel interface on the MLAG peer. + # - `mlag_port_channel_id`: The local MLAG port-channel ID. + # - `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer. + # + # By default the description is templated from the name and interface of the MLAG peer. + mlag_member_description: + + # If `true` an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair. + # If `false` (default) an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. + mlag_on_orphan_port_channel_downlink: + + # Description or description template to be used on MLAG L3 peering SVI (Interface Vlan4093 by default). + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The MLAG L3 peering SVI name. + # - `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. + mlag_peer_l3_svi_description: + + # Name or name template to be used on MLAG L3 VLAN (VLAN 4093 by default). + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. + mlag_peer_l3_vlan_name: + + # Description or description template to be used on MLAG L3 peering SVI for VRFs. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The MLAG L3 VRF peering SVI name. + # - `vlan`: The MLAG L3 VRF peering VLAN ID. + # - `vrf`: The VRF name. + mlag_peer_l3_vrf_svi_description: + + # Name or name template to be used on MLAG L3 peering VLAN for VRFs. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `vlan`: The MLAG L3 VRF peering VLAN ID. + # - `vrf`: The VRF name. + mlag_peer_l3_vrf_vlan_name: + + # Description or description template to be used on MLAG peering SVI (Interface Vlan4094 by default). + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The MLAG peering SVI name. + # - `mlag_peer_vlan`: The MLAG peering VLAN ID. + mlag_peer_svi_description: + + # Name or name template to be used on MLAG peering VLAN (VLAN 4094 by default). + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `mlag_peer_vlan`: The MLAG peering VLAN ID. + mlag_peer_vlan_name: + + # Description or description template to be used on MLAG peer-link port-channel interfaces. + # This can be a template using the format string syntax. + # The available template fields are: + # - `mlag_peer`: The name of the MLAG peer. + # - `interface`: The local MLAG port-channel interface. + # - `peer_interface`: The port-channel interface on the MLAG peer. + # - `mlag_port_channel_id`: The local MLAG port-channel ID. + # - `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer. + # + # By default the description is templated from the name and port-channel interface of the MLAG peer. + mlag_port_channel_description: # A vlan can have many trunk_groups assigned. # To avoid unneeded configuration changes on all leaf switches when a new trunk group is added, @@ -64,13 +163,14 @@ only_local_vlan_trunk_groups: # Point to Point Links MTU. + # Precedence: .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214 p2p_uplinks_mtu: # QOS Profile assigned on all infrastructure links. p2p_uplinks_qos_profile: # When a device is set undeployed using `is_deployed: false` and `shutdown_bgp_towards_undeployed_peers` key is set to true, the BGP neighborship is shutdown on the peer. - shutdown_bgp_towards_undeployed_peers: + shutdown_bgp_towards_undeployed_peers: # - It is possible to provision configurations for a complete topology but flag devices as undeployed using the host level variable `is_deployed: false`. # @@ -84,7 +184,7 @@ # - If the device is not present in the network due to CloudVision not configuring the device, `eos_validate_state` role will fail tests on peers of the undeployed device trying to verify that interfaces are up. # - To overcome this and shutdown interfaces towards undeployed peers, the variable `shutdown_interfaces_towards_undeployed_peers` can be used, satisfying the `eos_validate_state` role interface tests. # - Again, this is only an issue if `eos_config_deploy_cvp` is used and the devices are not present in the network. - shutdown_interfaces_towards_undeployed_peers: + shutdown_interfaces_towards_undeployed_peers: trunk_groups: # Trunk Group used for MLAG VLAN (Typically VLAN 4094). @@ -93,7 +193,7 @@ # Trunk Group used for MLAG L3 peering VLAN and for VRF L3 peering VLANs (Typically VLAN 4093). mlag_l3: - name: + name: # Trunk Group used on L2 Leaf switches when "enable_trunk_groups" is set. uplink: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/isis-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/isis-settings.md index 6a8ee5f3c6a..279506da878 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/isis-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/isis-settings.md @@ -13,7 +13,7 @@ | [isis_default_is_type](## "isis_default_is_type") | String | | `level-2` | Valid Values:
- level-1-2
- level-1
- level-2 | | | [isis_default_metric](## "isis_default_metric") | Integer | | `50` | | These fabric level parameters can be used with core_interfaces running ISIS, and may be overridden at link profile or link level.
| | [isis_maximum_paths](## "isis_maximum_paths") | Integer | | | | Number of path to configure in ECMP for ISIS. | - | [isis_system_id_format](## "isis_system_id_format") | String | | `node_id` | Valid Values:
- node_id
- underlay_loopback | Configures source for the system-id within the ISIS net id.
By default the `id` and `isis_system_id_prefix` fields configured under the node attributes are used to generate the system-id.

If `underlay_loopback` is selected then all node `isis_system_id_prefix` settings will be ignored and the loopback address will be used to generate the system-id. | + | [isis_system_id_format](## "isis_system_id_format") | String | | `underlay_loopback` | Valid Values:
- node_id
- underlay_loopback | Configures source for the system-id within the ISIS net id.
If this key is set to `node_id`, the fields `id` and `isis_system_id_prefix` configured under the node attributes are used to generate the system-id.
If `underlay_loopback` is selected then all node `isis_system_id_prefix` settings will be ignored and the loopback address will be used to generate the system-id. | | [isis_ti_lfa](## "isis_ti_lfa") | Dictionary | | | | | | [  enabled](## "isis_ti_lfa.enabled") | Boolean | | `False` | | | | [  protection](## "isis_ti_lfa.protection") | String | | | Valid Values:
- link
- node | | @@ -38,10 +38,9 @@ isis_maximum_paths: # Configures source for the system-id within the ISIS net id. - # By default the `id` and `isis_system_id_prefix` fields configured under the node attributes are used to generate the system-id. - # + # If this key is set to `node_id`, the fields `id` and `isis_system_id_prefix` configured under the node attributes are used to generate the system-id. # If `underlay_loopback` is selected then all node `isis_system_id_prefix` settings will be ignored and the loopback address will be used to generate the system-id. - isis_system_id_format: + isis_system_id_format: isis_ti_lfa: enabled: protection: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-flow-tracking-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-flow-tracking-settings.md index 30886c30cec..c0284a1b5fb 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-flow-tracking-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-flow-tracking-settings.md @@ -35,7 +35,7 @@ | [  direct_wan_ha_links](## "fabric_flow_tracking.direct_wan_ha_links") | Dictionary | | | | Enable flow-tracking on all direct WAN HA links. | | [    enabled](## "fabric_flow_tracking.direct_wan_ha_links.enabled") | Boolean | | | | | | [    name](## "fabric_flow_tracking.direct_wan_ha_links.name") | String | | | | Flow tracker name as defined in flow_tracking_settings. | - | [flow_tracking_settings](## "flow_tracking_settings") | Dictionary | | | | PREVIEW: This key is currently not supported

Define the flow tracking parameters for this topology. | + | [flow_tracking_settings](## "flow_tracking_settings") | Dictionary | | | | Define the flow tracking parameters for this topology. | | [  sampled](## "flow_tracking_settings.sampled") | Dictionary | | | | The options relevant only for flow tracker type sampled. | | [    encapsulation](## "flow_tracking_settings.sampled.encapsulation") | Dictionary | | | | | | [      ipv4_ipv6](## "flow_tracking_settings.sampled.encapsulation.ipv4_ipv6") | Boolean | | | | | @@ -138,8 +138,6 @@ # Flow tracker name as defined in flow_tracking_settings. name: - # PREVIEW: This key is currently not supported - # # Define the flow tracking parameters for this topology. flow_tracking_settings: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-interface-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-interface-settings.md index a167532c024..1a986a93e68 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-interface-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-interface-settings.md @@ -12,7 +12,7 @@ | [  - <str>](## "mgmt_destination_networks.[]") | String | | | | IPv4_address/Mask. | | [mgmt_gateway](## "mgmt_gateway") | String | | | | OOB Management interface gateway in IPv4 format.
Used as next-hop for default gateway or static routes defined under 'mgmt_destination_networks'.
| | [mgmt_interface](## "mgmt_interface") | String | | `Management1` | | OOB Management interface. | - | [mgmt_interface_description](## "mgmt_interface_description") | String | | `oob_management` | | Management interface description.
| + | [mgmt_interface_description](## "mgmt_interface_description") | String | | `OOB_MANAGEMENT` | | Management interface description.
| | [mgmt_interface_vrf](## "mgmt_interface_vrf") | String | | `MGMT` | | OOB Management VRF. | | [mgmt_vrf_routing](## "mgmt_vrf_routing") | Boolean | | `False` | | Configure IP routing for the OOB Management VRF. | @@ -44,7 +44,7 @@ mgmt_interface: # Management interface description. - mgmt_interface_description: + mgmt_interface_description: # OOB Management VRF. mgmt_interface_vrf: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-sflow-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-sflow-settings.md index ce39e39b459..05f7fbd98e2 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-sflow-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/management-sflow-settings.md @@ -14,10 +14,11 @@ | [  l3_edge](## "fabric_sflow.l3_edge") | Boolean | | | | Enable sFlow on all p2p_links defined under l3_edge. | | [  core_interfaces](## "fabric_sflow.core_interfaces") | Boolean | | | | Enable sFlow on all p2p_links defined under core_interfaces. | | [  mlag_interfaces](## "fabric_sflow.mlag_interfaces") | Boolean | | | | Enable sFlow on all MLAG peer interfaces. | + | [  l3_interfaces](## "fabric_sflow.l3_interfaces") | Boolean | | | | Enable sFlow on all l3 interfaces. | | [sflow_settings](## "sflow_settings") | Dictionary | | | | sFlow settings.
The sFlow process will only be configured if any interface is enabled for sFlow.
For default enabling of sFlow for various interface types across the fabric see `fabric_sflow`. | | [  sample](## "sflow_settings.sample") | Dictionary | | | | | | [    rate](## "sflow_settings.sample.rate") | Integer | | | Min: 1
Max: 4294967295 | Packet sampling rate that defines the average number of ingress packets that pass through an interface for every packet that is sampled.
A rate of 16384 corresponds to an average sample of one per 16384 packets. | - | [  destinations](## "sflow_settings.destinations") | List, items: Dictionary | | | | | + | [  destinations](## "sflow_settings.destinations") | List, items: Dictionary | Required | | Min Length: 1 | | | [    - destination](## "sflow_settings.destinations.[].destination") | String | Required | | | sFlow destination name or IP address. | | [      port](## "sflow_settings.destinations.[].port") | Integer | | | Min: 1
Max: 65535 | UDP Port number. The default port number for sFlow is 6343. | | [      vrf](## "sflow_settings.destinations.[].vrf") | String | | | | If not set, the VRF is automatically picked up from the global setting `default_mgmt_method`.
The value of `vrf` will be interpreted according to these rules:
- `use_mgmt_interface_vrf` will configure the sFlow destination under the VRF set with `mgmt_interface_vrf` and set the `mgmt_interface` as sFlow source-interface.
An error will be raised if `mgmt_ip` or `ipv6_mgmt_ip` are not configured for the device.
- `use_inband_mgmt_vrf` will configure the sFlow destination under the VRF set with `inband_mgmt_vrf` and set the `inband_mgmt_interface` as sFlow source-interface.
An error will be raised if inband management is not configured for the device.
- Any other string will be used directly as the VRF name. Remember to set the `sflow_settings.vrfs[].source_interface` if needed. | @@ -51,6 +52,9 @@ # Enable sFlow on all MLAG peer interfaces. mlag_interfaces: + # Enable sFlow on all l3 interfaces. + l3_interfaces: + # sFlow settings. # The sFlow process will only be configured if any interface is enabled for sFlow. # For default enabling of sFlow for various interface types across the fabric see `fabric_sflow`. @@ -60,7 +64,7 @@ # Packet sampling rate that defines the average number of ingress packets that pass through an interface for every packet that is sampled. # A rate of 16384 corresponds to an average sample of one per 16384 packets. rate: - destinations: + destinations: # >=1 items; required # sFlow destination name or IP address. - destination: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-ports.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-ports.md index cad2276551f..f4a3090cbd2 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-ports.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-ports.md @@ -12,7 +12,8 @@ | [      - <str>](## "network_ports.[].switches.[]") | String | | | | | | [    switch_ports](## "network_ports.[].switch_ports") | List, items: String | | | | List of ranges using AVD range_expand syntax.
For example:

switch_ports:
- Ethernet1
- Ethernet2-48

All switch_ports ranges are expanded into individual port configurations.

For more details and examples of the `range_expand` syntax, see the [`arista.avd.range_expand` documentation](../../../docs/plugins/Filter_plugins/range_expand.md).
| | [      - <str>](## "network_ports.[].switch_ports.[]") | String | | | | | - | [    description](## "network_ports.[].description") | String | | | | Description to be used on all ports. | + | [    description](## "network_ports.[].description") | String | | | | Description or description template to be used on all ports.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - always set to `network_port`.
- `endpoint` - content of the `endpoint` key if set.

The default description is set by `default_network_ports_description`.
By default the description is templated from the `endpoint` key if set. | + | [    endpoint](## "network_ports.[].endpoint") | String | | | | Name or description of the endpoints connected to these ports. | | [    speed](## "network_ports.[].speed") | String | | | | Set adapter speed in the format `` or `forced ` or `auto `.
If not specified speed will be auto.
| | [    profile](## "network_ports.[].profile") | String | | | | Port-profile name to inherit configuration. | | [    enabled](## "network_ports.[].enabled") | Boolean | | `True` | | Administrative state, setting to false will set the port to 'shutdown' in the intended configuration.
| @@ -130,7 +131,8 @@ | [    port_channel](## "network_ports.[].port_channel") | Dictionary | | | | Used for port-channel adapter. | | [      mode](## "network_ports.[].port_channel.mode") | String | | | Valid Values:
- active
- passive
- on | Port-Channel Mode. | | [      channel_id](## "network_ports.[].port_channel.channel_id") | Integer | | | | Port-Channel ID.
If no channel_id is specified, an id is generated from the first switch port in the port channel.
| - | [      description](## "network_ports.[].port_channel.description") | String | | | | By default the description is built leveraging `` name or `adapter.description` when defined.
When this key is defined, it will append its content to the physical port description.
| + | [      description](## "network_ports.[].port_channel.description") | String | | | | Description or description template to be used on the port-channel interface.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port_channel` - The value from `endpoint_port_channel` if set.
- `port_channel_id` - The port-channel number for the switch.
- `adapter_description` - The adapter's description if set.
- `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint.

The default description is set by `default_connected_endpoints_port_channel_description`.
By default the description is templated from the type, name and port_channel interface of the endpoint if set. | + | [      endpoint_port_channel](## "network_ports.[].port_channel.endpoint_port_channel") | String | | | | Name of the port-channel interface on the endpoint.
Used for the port-channel description template with the field name `peer_interface` | | [      enabled](## "network_ports.[].port_channel.enabled") | Boolean | | `True` | | Port-Channel administrative state.
Setting to false will set port to 'shutdown' in intended configuration.
| | [      ptp_mpass](## "network_ports.[].port_channel.ptp_mpass") | Boolean | | `False` | | When MPASS is enabled on an MLAG port-channel, MLAG peers coordinate to function as a single PTP logical device.
Arista PTP enabled devices always place PTP messages on the same physical link within the port-channel.
Hence, MPASS is needed only on MLAG port-channels connected to non-Arista devices. | | [      lacp_fallback](## "network_ports.[].port_channel.lacp_fallback") | Dictionary | | | | LACP fallback configuration. | @@ -177,9 +179,19 @@ switch_ports: - - # Description to be used on all ports. + # Description or description template to be used on all ports. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - always set to `network_port`. + # - `endpoint` - content of the `endpoint` key if set. + # + # The default description is set by `default_network_ports_description`. + # By default the description is templated from the `endpoint` key if set. description: + # Name or description of the endpoints connected to these ports. + endpoint: + # Set adapter speed in the format `` or `forced ` or `auto `. # If not specified speed will be auto. speed: @@ -450,10 +462,24 @@ # If no channel_id is specified, an id is generated from the first switch port in the port channel. channel_id: - # By default the description is built leveraging `` name or `adapter.description` when defined. - # When this key is defined, it will append its content to the physical port description. + # Description or description template to be used on the port-channel interface. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port_channel` - The value from `endpoint_port_channel` if set. + # - `port_channel_id` - The port-channel number for the switch. + # - `adapter_description` - The adapter's description if set. + # - `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint. + # + # The default description is set by `default_connected_endpoints_port_channel_description`. + # By default the description is templated from the type, name and port_channel interface of the endpoint if set. description: + # Name of the port-channel interface on the endpoint. + # Used for the port-channel description template with the field name `peer_interface` + endpoint_port_channel: + # Port-Channel administrative state. # Setting to false will set port to 'shutdown' in intended configuration. enabled: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-multicast-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-multicast-settings.md index ec3d17f967c..f4601df1a69 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-multicast-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-multicast-settings.md @@ -13,8 +13,9 @@ | [      enabled](## ".[].evpn_l2_multicast.enabled") | Boolean | | | | | | [      underlay_l2_multicast_group_ipv4_pool](## ".[].evpn_l2_multicast.underlay_l2_multicast_group_ipv4_pool") | String | | | | IPv4_address/Mask. | | [      underlay_l2_multicast_group_ipv4_pool_offset](## ".[].evpn_l2_multicast.underlay_l2_multicast_group_ipv4_pool_offset") | Integer | | | | | - | [      fast_leave](## ".[].evpn_l2_multicast.fast_leave") | Boolean | | | | Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within Tenant. | - | [    evpn_l3_multicast](## ".[].evpn_l3_multicast") | Dictionary | | | | Enable L3 Multicast for all SVIs and l3vlans within Tenant.
- In the evpn-l3ls design type, this enables L3 EVPN Multicast (aka OISM)'.
- Multicast group binding for VRF is created only for Multicast traffic. BULL traffic will use ingress-replication.
- Configures binding between VXLAN, VLAN, and multicast group IPv4 address using the following formula:
< l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_vni - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >.
- The recommendation is to assign a /20 block within the 232.0.0.0/8 Source-Specific Multicast range.
- If enabled on an SVI using the anycast default gateway feature, a diagnostic loopback (see below) MUST be configured to source IGMP traffic.
- Enables `evpn multicast` on the router bgp VRF.
- When enabled on an SVI:
- If switch is part of an MLAG pair, enables "pim ipv4 sparse-mode" on the SVI.
- If switch is standalone or A-A MH, enables "ip igmp" on the SVI.
- If "ip address virtual" is configured, enables "pim ipv4 local-interface" and uses the diagnostic Loopback defined in the VRF
- Requires `evpn_multicast` to also be set to `true`.
| + | [      fast_leave](## ".[].evpn_l2_multicast.fast_leave") | Boolean | | | | Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within the Tenant. | + | [      always_redistribute_igmp](## ".[].evpn_l2_multicast.always_redistribute_igmp") | Boolean | | | | Always configure `redistribute igmp` under BGP for all SVIs within the Tenant if `evpn_l2_multicast` is True.
By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False.
Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources,
but it is required to support forwarding of TTL=1 multicast traffic within the VLAN.
This can be overridden per SVI. | + | [    evpn_l3_multicast](## ".[].evpn_l3_multicast") | Dictionary | | | | Enable L3 Multicast for all SVIs and l3vlans within Tenant.
- In the evpn-l3ls design type, this enables L3 EVPN Multicast (aka OISM)'.
- Multicast group binding for VRF is created only for Multicast traffic. BULL traffic will use ingress-replication.
- Configures binding between VXLAN, VLAN, and multicast group IPv4 address using the following formula:
< l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >.
- The recommendation is to assign a /20 block within the 232.0.0.0/8 Source-Specific Multicast range.
- If enabled on an SVI using the anycast default gateway feature, a diagnostic loopback (see below) MUST be configured to source IGMP traffic.
- Enables `evpn multicast` on the router bgp VRF.
- When enabled on an SVI:
- If switch is part of an MLAG pair, enables "pim ipv4 sparse-mode" on the SVI.
- If switch is standalone or A-A MH, enables "ip igmp" on the SVI.
- If "ip address virtual" is configured, enables "pim ipv4 local-interface" and uses the diagnostic Loopback defined in the VRF
- Requires `evpn_multicast` to also be set to `true`.
| | [      enabled](## ".[].evpn_l3_multicast.enabled") | Boolean | | | | | | [      evpn_underlay_l3_multicast_group_ipv4_pool](## ".[].evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool") | String | Required | | | IPv4_address/Mask. | | [      evpn_underlay_l3_multicast_group_ipv4_pool_offset](## ".[].evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset") | Integer | | | | | @@ -38,6 +39,7 @@ | [      - name](## ".[].vrfs.[].name") | String | Required, Unique | | | | | [        evpn_l3_multicast](## ".[].vrfs.[].evpn_l3_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled`.
Allow override of `.[].evpn_l3_multicast` node_settings.
Requires `evpn_multicast` to also be set to `true`.
| | [          enabled](## ".[].vrfs.[].evpn_l3_multicast.enabled") | Boolean | | | | | + | [          evpn_underlay_l3_multicast_group](## ".[].vrfs.[].evpn_l3_multicast.evpn_underlay_l3_multicast_group") | String | | | | IPv4 address of evpn underlay l3 multicast group.
To override multicast range set using the formula < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. | | [          evpn_peg](## ".[].vrfs.[].evpn_l3_multicast.evpn_peg") | List, items: Dictionary | | | | For each group of nodes, allow configuration of EVPN PEG features. | | [            - nodes](## ".[].vrfs.[].evpn_l3_multicast.evpn_peg.[].nodes") | List, items: String | | | | Restrict configuration to specific nodes.
Will apply to all nodes with RP addresses configured if not set.
| | [                - <str>](## ".[].vrfs.[].evpn_l3_multicast.evpn_peg.[].nodes.[]") | String | | | | | @@ -57,6 +59,7 @@ | [              - node](## ".[].vrfs.[].svis.[].nodes.[].node") | String | Required, Unique | | | l3_leaf inventory hostname. | | [                evpn_l2_multicast](## ".[].vrfs.[].svis.[].nodes.[].evpn_l2_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l2_multicast to override setting of `.[].evpn_l2_multicast.enabled`.
When evpn_l2_multicast.enabled is set to true for a vlan or a tenant, "igmp snooping" and "igmp snooping querier" will always be enabled, overriding those individual settings.
Requires `evpn_multicast` to also be set to `true`.
| | [                  enabled](## ".[].vrfs.[].svis.[].nodes.[].evpn_l2_multicast.enabled") | Boolean | | | | | + | [                  always_redistribute_igmp](## ".[].vrfs.[].svis.[].nodes.[].evpn_l2_multicast.always_redistribute_igmp") | Boolean | | | | Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`.
By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False.
Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources,
but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. | | [                evpn_l3_multicast](## ".[].vrfs.[].svis.[].nodes.[].evpn_l3_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`.
Requires `evpn_multicast` to also be set to `true`.
| | [                  enabled](## ".[].vrfs.[].svis.[].nodes.[].evpn_l3_multicast.enabled") | Boolean | | | | | | [                igmp_snooping_enabled](## ".[].vrfs.[].svis.[].nodes.[].igmp_snooping_enabled") | Boolean | | | | Enable IGMP Snooping (Enabled by default on EOS). | @@ -67,6 +70,7 @@ | [                  fast_leave](## ".[].vrfs.[].svis.[].nodes.[].igmp_snooping_querier.fast_leave") | Boolean | | | | Enable IGMP snooping fast-leave feature. | | [            evpn_l2_multicast](## ".[].vrfs.[].svis.[].evpn_l2_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l2_multicast to override setting of `.[].evpn_l2_multicast.enabled`.
When evpn_l2_multicast.enabled is set to true for a vlan or a tenant, "igmp snooping" and "igmp snooping querier" will always be enabled, overriding those individual settings.
Requires `evpn_multicast` to also be set to `true`.
| | [              enabled](## ".[].vrfs.[].svis.[].evpn_l2_multicast.enabled") | Boolean | | | | | + | [              always_redistribute_igmp](## ".[].vrfs.[].svis.[].evpn_l2_multicast.always_redistribute_igmp") | Boolean | | | | Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`.
By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False.
Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources,
but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. | | [            evpn_l3_multicast](## ".[].vrfs.[].svis.[].evpn_l3_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`.
Requires `evpn_multicast` to also be set to `true`.
| | [              enabled](## ".[].vrfs.[].svis.[].evpn_l3_multicast.enabled") | Boolean | | | | | | [            igmp_snooping_enabled](## ".[].vrfs.[].svis.[].igmp_snooping_enabled") | Boolean | | | | Enable IGMP Snooping (Enabled by default on EOS). | @@ -91,6 +95,7 @@ | [      - node](## "svi_profiles.[].nodes.[].node") | String | Required, Unique | | | l3_leaf inventory hostname. | | [        evpn_l2_multicast](## "svi_profiles.[].nodes.[].evpn_l2_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l2_multicast to override setting of `.[].evpn_l2_multicast.enabled`.
When evpn_l2_multicast.enabled is set to true for a vlan or a tenant, "igmp snooping" and "igmp snooping querier" will always be enabled, overriding those individual settings.
Requires `evpn_multicast` to also be set to `true`.
| | [          enabled](## "svi_profiles.[].nodes.[].evpn_l2_multicast.enabled") | Boolean | | | | | + | [          always_redistribute_igmp](## "svi_profiles.[].nodes.[].evpn_l2_multicast.always_redistribute_igmp") | Boolean | | | | Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`.
By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False.
Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources,
but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. | | [        evpn_l3_multicast](## "svi_profiles.[].nodes.[].evpn_l3_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`.
Requires `evpn_multicast` to also be set to `true`.
| | [          enabled](## "svi_profiles.[].nodes.[].evpn_l3_multicast.enabled") | Boolean | | | | | | [        igmp_snooping_enabled](## "svi_profiles.[].nodes.[].igmp_snooping_enabled") | Boolean | | | | Enable IGMP Snooping (Enabled by default on EOS). | @@ -101,6 +106,7 @@ | [          fast_leave](## "svi_profiles.[].nodes.[].igmp_snooping_querier.fast_leave") | Boolean | | | | Enable IGMP snooping fast-leave feature. | | [    evpn_l2_multicast](## "svi_profiles.[].evpn_l2_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l2_multicast to override setting of `.[].evpn_l2_multicast.enabled`.
When evpn_l2_multicast.enabled is set to true for a vlan or a tenant, "igmp snooping" and "igmp snooping querier" will always be enabled, overriding those individual settings.
Requires `evpn_multicast` to also be set to `true`.
| | [      enabled](## "svi_profiles.[].evpn_l2_multicast.enabled") | Boolean | | | | | + | [      always_redistribute_igmp](## "svi_profiles.[].evpn_l2_multicast.always_redistribute_igmp") | Boolean | | | | Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`.
By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False.
Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources,
but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. | | [    evpn_l3_multicast](## "svi_profiles.[].evpn_l3_multicast") | Dictionary | | | | Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`.
Requires `evpn_multicast` to also be set to `true`.
| | [      enabled](## "svi_profiles.[].evpn_l3_multicast.enabled") | Boolean | | | | | | [    igmp_snooping_enabled](## "svi_profiles.[].igmp_snooping_enabled") | Boolean | | | | Enable IGMP Snooping (Enabled by default on EOS). | @@ -135,14 +141,21 @@ underlay_l2_multicast_group_ipv4_pool: underlay_l2_multicast_group_ipv4_pool_offset: - # Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within Tenant. + # Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within the Tenant. fast_leave: + # Always configure `redistribute igmp` under BGP for all SVIs within the Tenant if `evpn_l2_multicast` is True. + # By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + # Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + # but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + # This can be overridden per SVI. + always_redistribute_igmp: + # Enable L3 Multicast for all SVIs and l3vlans within Tenant. # - In the evpn-l3ls design type, this enables L3 EVPN Multicast (aka OISM)'. # - Multicast group binding for VRF is created only for Multicast traffic. BULL traffic will use ingress-replication. # - Configures binding between VXLAN, VLAN, and multicast group IPv4 address using the following formula: - # < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_vni - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. + # < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. # - The recommendation is to assign a /20 block within the 232.0.0.0/8 Source-Specific Multicast range. # - If enabled on an SVI using the anycast default gateway feature, a diagnostic loopback (see below) MUST be configured to source IGMP traffic. # - Enables `evpn multicast` on the router bgp VRF. @@ -220,6 +233,10 @@ evpn_l3_multicast: enabled: + # IPv4 address of evpn underlay l3 multicast group. + # To override multicast range set using the formula < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. + evpn_underlay_l3_multicast_group: + # For each group of nodes, allow configuration of EVPN PEG features. evpn_peg: @@ -278,6 +295,12 @@ evpn_l2_multicast: enabled: + # Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + # By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + # Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + # but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + always_redistribute_igmp: + # Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`. # Requires `evpn_multicast` to also be set to `true`. evpn_l3_multicast: @@ -306,6 +329,12 @@ evpn_l2_multicast: enabled: + # Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + # By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + # Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + # but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + always_redistribute_igmp: + # Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`. # Requires `evpn_multicast` to also be set to `true`. evpn_l3_multicast: @@ -385,6 +414,12 @@ evpn_l2_multicast: enabled: + # Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + # By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + # Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + # but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + always_redistribute_igmp: + # Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`. # Requires `evpn_multicast` to also be set to `true`. evpn_l3_multicast: @@ -413,6 +448,12 @@ evpn_l2_multicast: enabled: + # Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + # By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + # Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + # but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + always_redistribute_igmp: + # Explicitly enable or disable evpn_l3_multicast to override setting of `.[].evpn_l3_multicast.enabled` and `.[].vrfs.[].evpn_l3_multicast.enabled`. # Requires `evpn_multicast` to also be set to `true`. evpn_l3_multicast: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-vrfs-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-vrfs-settings.md index fc5f2d80e87..f73658d5a14 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-vrfs-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/network-services-vrfs-settings.md @@ -59,6 +59,7 @@ | [              - <str>](## ".[].vrfs.[].ipv6_static_routes.[].nodes.[]") | String | | | | | | [        redistribute_static](## ".[].vrfs.[].redistribute_static") | Boolean | | | | Non-selectively enabling or disabling redistribute static inside the VRF. | | [        bgp](## ".[].vrfs.[].bgp") | Dictionary | | | | | + | [          enabled](## ".[].vrfs.[].bgp.enabled") | Boolean | | | | Force (no) configuration of BGP for the VRF.
If not set, BGP will be configured when needed according to the following rules:
- If the VRF is part of an overlay (`evpn` or `mpls`), BGP will be configured for it.
- If any BGP peers are configured under the VRF, BGP will be configured for it. This is useful for L2LS designs with VRFs.
- If uplink type is `p2p-vrfs` *and* the vrf is included in the uplink VRFs, BGP will be configured for it. | | [          raw_eos_cli](## ".[].vrfs.[].bgp.raw_eos_cli") | String | | | | EOS CLI rendered directly on the Router BGP, VRF definition in the final EOS configuration.
| | [          structured_config](## ".[].vrfs.[].bgp.structured_config") | Dictionary | | | | Custom structured config added under router_bgp.vrfs.[name=] for eos_cli_config_gen. | | [        additional_route_targets](## ".[].vrfs.[].additional_route_targets") | List, items: Dictionary | | | | Configuration of extra route-targets for this VRF. Useful for route-leaking or gateway between address families. | @@ -242,6 +243,13 @@ redistribute_static: bgp: + # Force (no) configuration of BGP for the VRF. + # If not set, BGP will be configured when needed according to the following rules: + # - If the VRF is part of an overlay (`evpn` or `mpls`), BGP will be configured for it. + # - If any BGP peers are configured under the VRF, BGP will be configured for it. This is useful for L2LS designs with VRFs. + # - If uplink type is `p2p-vrfs` *and* the vrf is included in the uplink VRFs, BGP will be configured for it. + enabled: + # EOS CLI rendered directly on the Router BGP, VRF definition in the final EOS configuration. raw_eos_cli: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/new-network-services-bgp-vrf-config.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/new-network-services-bgp-vrf-config.md index 5f95924e2e1..9fc30faf3f1 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/new-network-services-bgp-vrf-config.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/new-network-services-bgp-vrf-config.md @@ -7,17 +7,10 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [new_network_services_bgp_vrf_config](## "new_network_services_bgp_vrf_config") | Boolean | | | | Set this key to `true` in the node type to generate full BGP configuration
for network services even when `evpn` is not in the address families
(`evpn` is the default address family for `l3ls-evpn` but not for `l2ls`).

This is `false` by default except if `uplink_type` is set to `p2p-vrfs`, then the default value is `true`.

This may introduce breaking changes to your configuration. | + | [new_network_services_bgp_vrf_config](## "new_network_services_bgp_vrf_config") removed | Boolean | | `True` | | This key was used to generate BGP configuration for network services even when `evpn` is not in the address families for the node as well as the VRF.
This is now part of the default behavior so this key has been removed.This key was removed. Support was removed in AVD version 5.0.0. See [here](https://avd.arista.com/devel/porting-guides/5.x.x.html#new-improved-logic-for-bgp-configuration-of-network-services-vrfs) for details. | === "YAML" ```yaml - # Set this key to `true` in the node type to generate full BGP configuration - # for network services even when `evpn` is not in the address families - # (`evpn` is the default address family for `l3ls-evpn` but not for `l2ls`). - # - # This is `false` by default except if `uplink_type` is set to `p2p-vrfs`, then the default value is `true`. - # - # This may introduce breaking changes to your configuration. - new_network_services_bgp_vrf_config: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-keys.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-keys.md index e95c297009a..c6d1aca5cf2 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-keys.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-keys.md @@ -19,7 +19,7 @@ | [    default_overlay_address_families](## "custom_node_type_keys.[].default_overlay_address_families") | List, items: String | | | | Set the default overlay address families.
| | [      - <str>](## "custom_node_type_keys.[].default_overlay_address_families.[]") | String | | | Value is converted to lower case.
Valid Values:
- evpn
- vpn-ipv4
- vpn-ipv6 | | | [    default_evpn_encapsulation](## "custom_node_type_keys.[].default_evpn_encapsulation") | String | | | Value is converted to lower case.
Valid Values:
- mpls
- vxlan | Set the default evpn encapsulation.
| - | [    default_wan_role](## "custom_node_type_keys.[].default_wan_role") | String | | | Valid Values:
- client
- server | Set the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`.
| + | [    default_wan_role](## "custom_node_type_keys.[].default_wan_role") | String | | | Valid Values:
- client
- server | Set the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`.
| | [    default_flow_tracker_type](## "custom_node_type_keys.[].default_flow_tracker_type") | String | | `sampled` | Valid Values:
- sampled
- hardware | Set the default flow tracker type. | | [    mlag_support](## "custom_node_type_keys.[].mlag_support") | Boolean | | `False` | | Can this node type support mlag. | | [    network_services](## "custom_node_type_keys.[].network_services") | Dictionary | | | | Will network services be deployed on this node type. | @@ -54,8 +54,9 @@ | [      mlag_port_channel_interfaces](## "custom_node_type_keys.[].interface_descriptions.mlag_port_channel_interfaces") | String | | | | Path to Custom J2 template. | | [      connected_endpoints_ethernet_interfaces](## "custom_node_type_keys.[].interface_descriptions.connected_endpoints_ethernet_interfaces") | String | | | | Path to Custom J2 template. | | [      connected_endpoints_port_channel_interfaces](## "custom_node_type_keys.[].interface_descriptions.connected_endpoints_port_channel_interfaces") | String | | | | Path to Custom J2 template. | - | [      overlay_loopback_interface](## "custom_node_type_keys.[].interface_descriptions.overlay_loopback_interface") | String | | | | Path to Custom J2 template. | + | [      router_id_loopback_interface](## "custom_node_type_keys.[].interface_descriptions.router_id_loopback_interface") | String | | | | Path to Custom J2 template. | | [      vtep_loopback_interface](## "custom_node_type_keys.[].interface_descriptions.vtep_loopback_interface") | String | | | | Path to Custom J2 template. | + | [      overlay_loopback_interface](## "custom_node_type_keys.[].interface_descriptions.overlay_loopback_interface") deprecated | String | | | | Path to Custom J2 template.This key is deprecated. Support will be removed in AVD version 6.0.0. Use router_id_loopback_interface instead. | | [node_type_keys](## "node_type_keys") | List, items: Dictionary | | | | Define Node Type Keys, to specify the properties of each node type in the fabric.
This allows for complete customization of the fabric layout and functionality.
`node_type_keys` should be defined in top level group_var for the fabric.

The default values will be overridden if this key is defined.
If you need to change all the existing `node_type_keys`, it is recommended to copy the defaults and modify them.
If you need to add custom `node_type_keys`, create them under `custom_node_type_keys` - if named identically to default `node_type_keys` entries,
custom entries will replace the equivalent default entry. | | [  - key](## "node_type_keys.[].key") | String | Required, Unique | | | | | [    type](## "node_type_keys.[].type") | String | | | | Type value matching this node_type_key. | @@ -68,7 +69,7 @@ | [    default_overlay_address_families](## "node_type_keys.[].default_overlay_address_families") | List, items: String | | | | Set the default overlay address families.
| | [      - <str>](## "node_type_keys.[].default_overlay_address_families.[]") | String | | | Value is converted to lower case.
Valid Values:
- evpn
- vpn-ipv4
- vpn-ipv6 | | | [    default_evpn_encapsulation](## "node_type_keys.[].default_evpn_encapsulation") | String | | | Value is converted to lower case.
Valid Values:
- mpls
- vxlan | Set the default evpn encapsulation.
| - | [    default_wan_role](## "node_type_keys.[].default_wan_role") | String | | | Valid Values:
- client
- server | Set the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`.
| + | [    default_wan_role](## "node_type_keys.[].default_wan_role") | String | | | Valid Values:
- client
- server | Set the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`.
| | [    default_flow_tracker_type](## "node_type_keys.[].default_flow_tracker_type") | String | | `sampled` | Valid Values:
- sampled
- hardware | Set the default flow tracker type. | | [    mlag_support](## "node_type_keys.[].mlag_support") | Boolean | | `False` | | Can this node type support mlag. | | [    network_services](## "node_type_keys.[].network_services") | Dictionary | | | | Will network services be deployed on this node type. | @@ -103,8 +104,9 @@ | [      mlag_port_channel_interfaces](## "node_type_keys.[].interface_descriptions.mlag_port_channel_interfaces") | String | | | | Path to Custom J2 template. | | [      connected_endpoints_ethernet_interfaces](## "node_type_keys.[].interface_descriptions.connected_endpoints_ethernet_interfaces") | String | | | | Path to Custom J2 template. | | [      connected_endpoints_port_channel_interfaces](## "node_type_keys.[].interface_descriptions.connected_endpoints_port_channel_interfaces") | String | | | | Path to Custom J2 template. | - | [      overlay_loopback_interface](## "node_type_keys.[].interface_descriptions.overlay_loopback_interface") | String | | | | Path to Custom J2 template. | + | [      router_id_loopback_interface](## "node_type_keys.[].interface_descriptions.router_id_loopback_interface") | String | | | | Path to Custom J2 template. | | [      vtep_loopback_interface](## "node_type_keys.[].interface_descriptions.vtep_loopback_interface") | String | | | | Path to Custom J2 template. | + | [      overlay_loopback_interface](## "node_type_keys.[].interface_descriptions.overlay_loopback_interface") deprecated | String | | | | Path to Custom J2 template.This key is deprecated. Support will be removed in AVD version 6.0.0. Use router_id_loopback_interface instead. | === "YAML" @@ -151,7 +153,7 @@ # Set the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -275,11 +277,17 @@ connected_endpoints_port_channel_interfaces: # Path to Custom J2 template. - overlay_loopback_interface: + router_id_loopback_interface: # Path to Custom J2 template. vtep_loopback_interface: + # Path to Custom J2 template. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use router_id_loopback_interface instead. + overlay_loopback_interface: + # Define Node Type Keys, to specify the properties of each node type in the fabric. # This allows for complete customization of the fabric layout and functionality. # `node_type_keys` should be defined in top level group_var for the fabric. @@ -325,7 +333,7 @@ # Set the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -449,8 +457,14 @@ connected_endpoints_port_channel_interfaces: # Path to Custom J2 template. - overlay_loopback_interface: + router_id_loopback_interface: # Path to Custom J2 template. vtep_loopback_interface: + + # Path to Custom J2 template. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use router_id_loopback_interface instead. + overlay_loopback_interface: ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-wan-configuration.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-wan-configuration.md index 2572d29d37c..1a1a0a5d0ea 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-wan-configuration.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/node-type-wan-configuration.md @@ -9,17 +9,20 @@ | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [<node_type_keys.key>](## "") | Dictionary | | | | | | [  defaults](## ".defaults") | Dictionary | | | | Define variables for all nodes of this type. | - | [    wan_role](## ".defaults.wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | + | [    wan_role](## ".defaults.wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | | [    cv_pathfinder_transit_mode](## ".defaults.cv_pathfinder_transit_mode") | String | | | Valid Values:
- region
- zone | Configure the transit mode for a WAN client for CV Pathfinder designs
only when the `wan_mode` root key is set to `cv_pathfinder`.

'zone' is currently not supported. | | [    cv_pathfinder_region](## ".defaults.cv_pathfinder_region") | String | | | | The CV Pathfinder region name.
This key is required for WAN routers but optional for pathfinders.
The region name must be defined under 'cv_pathfinder_regions'. | | [    cv_pathfinder_site](## ".defaults.cv_pathfinder_site") | String | | | | The CV Pathfinder site name.
This key is required for WAN routers but optional for pathfinders.
For WAN routers and pathfinders with `cv_pathfinder_region`, the site name must be defined for the relevant region under 'cv_pathfinder_regions'.
For pathfinders without `cv_pathfinder_region` set, the site must be defined under `cv_pathfinder_global_sites`. | | [    wan_ha](## ".defaults.wan_ha") | Dictionary | | | | PREVIEW: This key is currently not supported

The key is supported only if `wan_mode` == `cv-pathfinder`.
AutoVPN support is still to be determined.

Maximum 2 devices supported by group for HA. | | [      enabled](## ".defaults.wan_ha.enabled") | Boolean | | `True` | | Enable / Disable auto CV-Pathfinder HA, when two nodes are defined in the same node_group. | | [      ipsec](## ".defaults.wan_ha.ipsec") | Boolean | | `True` | | Enable / Disable IPsec over HA path-group when HA is enabled. | + | [      mtu](## ".defaults.wan_ha.mtu") | Integer | | `9194` | Min: 68
Max: 65535 | Set MTU on WAN HA interfaces. | | [      ha_interfaces](## ".defaults.wan_ha.ha_interfaces") | List, items: String | | | | Local WAN HA interfaces
Overwrite the default behavior which is to pick all the `uplink_interfaces`.
Can be used to filter uplink interfaces when there are multiple uplinks.
Limitations:
Either all interfaces must be uplinks or all interfaces must not be uplinks.
Only one interface is supported for non uplinks. | | [        - <str>](## ".defaults.wan_ha.ha_interfaces.[]") | String | | | Pattern: `Ethernet[\d/]+` | | | [      ha_ipv4_pool](## ".defaults.wan_ha.ha_ipv4_pool") | String | | | Format: ipv4_cidr | IP address pool used for WAN HA connectivity.
IP is derived from the node ID.
Not used for uplink interfaces. | | [      max_ha_interfaces](## ".defaults.wan_ha.max_ha_interfaces") | Integer | | | | Number of parallel links towards HA switches.
Can be used to reserve IP addresses for future parallel HA links. | + | [      port_channel_id](## ".defaults.wan_ha.port_channel_id") | Integer | | | | Port-channel ID to use for direct HA. | + | [      use_port_channel_for_direct_ha](## ".defaults.wan_ha.use_port_channel_for_direct_ha") | Boolean | | `True` | | Enable or disable using a port-channel interface for direct HA when there is only one interface.
This feature was introduced in EOS 4.33.0F. | | [      flow_tracking](## ".defaults.wan_ha.flow_tracking") | Dictionary | | | | Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. | | [        enabled](## ".defaults.wan_ha.flow_tracking.enabled") | Boolean | | | | | | [        name](## ".defaults.wan_ha.flow_tracking.name") | String | | | | Flow tracker name as defined in flow_tracking_settings. | @@ -28,49 +31,58 @@ | [    - group](## ".node_groups.[].group") | String | Required, Unique | | | The Node Group Name is used for MLAG domain unless set with 'mlag_domain_id'.
The Node Group Name is also used for peer description on downstream switches' uplinks.
| | [      nodes](## ".node_groups.[].nodes") | List, items: Dictionary | | | | Define variables per node. | | [        - name](## ".node_groups.[].nodes.[].name") | String | Required, Unique | | | The Node Name is used as "hostname". | - | [          wan_role](## ".node_groups.[].nodes.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | + | [          wan_role](## ".node_groups.[].nodes.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | | [          cv_pathfinder_transit_mode](## ".node_groups.[].nodes.[].cv_pathfinder_transit_mode") | String | | | Valid Values:
- region
- zone | Configure the transit mode for a WAN client for CV Pathfinder designs
only when the `wan_mode` root key is set to `cv_pathfinder`.

'zone' is currently not supported. | | [          cv_pathfinder_region](## ".node_groups.[].nodes.[].cv_pathfinder_region") | String | | | | The CV Pathfinder region name.
This key is required for WAN routers but optional for pathfinders.
The region name must be defined under 'cv_pathfinder_regions'. | | [          cv_pathfinder_site](## ".node_groups.[].nodes.[].cv_pathfinder_site") | String | | | | The CV Pathfinder site name.
This key is required for WAN routers but optional for pathfinders.
For WAN routers and pathfinders with `cv_pathfinder_region`, the site name must be defined for the relevant region under 'cv_pathfinder_regions'.
For pathfinders without `cv_pathfinder_region` set, the site must be defined under `cv_pathfinder_global_sites`. | | [          wan_ha](## ".node_groups.[].nodes.[].wan_ha") | Dictionary | | | | PREVIEW: This key is currently not supported

The key is supported only if `wan_mode` == `cv-pathfinder`.
AutoVPN support is still to be determined.

Maximum 2 devices supported by group for HA. | | [            enabled](## ".node_groups.[].nodes.[].wan_ha.enabled") | Boolean | | `True` | | Enable / Disable auto CV-Pathfinder HA, when two nodes are defined in the same node_group. | | [            ipsec](## ".node_groups.[].nodes.[].wan_ha.ipsec") | Boolean | | `True` | | Enable / Disable IPsec over HA path-group when HA is enabled. | + | [            mtu](## ".node_groups.[].nodes.[].wan_ha.mtu") | Integer | | `9194` | Min: 68
Max: 65535 | Set MTU on WAN HA interfaces. | | [            ha_interfaces](## ".node_groups.[].nodes.[].wan_ha.ha_interfaces") | List, items: String | | | | Local WAN HA interfaces
Overwrite the default behavior which is to pick all the `uplink_interfaces`.
Can be used to filter uplink interfaces when there are multiple uplinks.
Limitations:
Either all interfaces must be uplinks or all interfaces must not be uplinks.
Only one interface is supported for non uplinks. | | [              - <str>](## ".node_groups.[].nodes.[].wan_ha.ha_interfaces.[]") | String | | | Pattern: `Ethernet[\d/]+` | | | [            ha_ipv4_pool](## ".node_groups.[].nodes.[].wan_ha.ha_ipv4_pool") | String | | | Format: ipv4_cidr | IP address pool used for WAN HA connectivity.
IP is derived from the node ID.
Not used for uplink interfaces. | | [            max_ha_interfaces](## ".node_groups.[].nodes.[].wan_ha.max_ha_interfaces") | Integer | | | | Number of parallel links towards HA switches.
Can be used to reserve IP addresses for future parallel HA links. | + | [            port_channel_id](## ".node_groups.[].nodes.[].wan_ha.port_channel_id") | Integer | | | | Port-channel ID to use for direct HA. | + | [            use_port_channel_for_direct_ha](## ".node_groups.[].nodes.[].wan_ha.use_port_channel_for_direct_ha") | Boolean | | `True` | | Enable or disable using a port-channel interface for direct HA when there is only one interface.
This feature was introduced in EOS 4.33.0F. | | [            flow_tracking](## ".node_groups.[].nodes.[].wan_ha.flow_tracking") | Dictionary | | | | Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. | | [              enabled](## ".node_groups.[].nodes.[].wan_ha.flow_tracking.enabled") | Boolean | | | | | | [              name](## ".node_groups.[].nodes.[].wan_ha.flow_tracking.name") | String | | | | Flow tracker name as defined in flow_tracking_settings. | | [          dps_mss_ipv4](## ".node_groups.[].nodes.[].dps_mss_ipv4") | String | | `auto` | | IPv4 MSS value configured under "router path-selection" on WAN Devices. | - | [      wan_role](## ".node_groups.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | + | [      wan_role](## ".node_groups.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | | [      cv_pathfinder_transit_mode](## ".node_groups.[].cv_pathfinder_transit_mode") | String | | | Valid Values:
- region
- zone | Configure the transit mode for a WAN client for CV Pathfinder designs
only when the `wan_mode` root key is set to `cv_pathfinder`.

'zone' is currently not supported. | | [      cv_pathfinder_region](## ".node_groups.[].cv_pathfinder_region") | String | | | | The CV Pathfinder region name.
This key is required for WAN routers but optional for pathfinders.
The region name must be defined under 'cv_pathfinder_regions'. | | [      cv_pathfinder_site](## ".node_groups.[].cv_pathfinder_site") | String | | | | The CV Pathfinder site name.
This key is required for WAN routers but optional for pathfinders.
For WAN routers and pathfinders with `cv_pathfinder_region`, the site name must be defined for the relevant region under 'cv_pathfinder_regions'.
For pathfinders without `cv_pathfinder_region` set, the site must be defined under `cv_pathfinder_global_sites`. | | [      wan_ha](## ".node_groups.[].wan_ha") | Dictionary | | | | PREVIEW: This key is currently not supported

The key is supported only if `wan_mode` == `cv-pathfinder`.
AutoVPN support is still to be determined.

Maximum 2 devices supported by group for HA. | | [        enabled](## ".node_groups.[].wan_ha.enabled") | Boolean | | `True` | | Enable / Disable auto CV-Pathfinder HA, when two nodes are defined in the same node_group. | | [        ipsec](## ".node_groups.[].wan_ha.ipsec") | Boolean | | `True` | | Enable / Disable IPsec over HA path-group when HA is enabled. | + | [        mtu](## ".node_groups.[].wan_ha.mtu") | Integer | | `9194` | Min: 68
Max: 65535 | Set MTU on WAN HA interfaces. | | [        ha_interfaces](## ".node_groups.[].wan_ha.ha_interfaces") | List, items: String | | | | Local WAN HA interfaces
Overwrite the default behavior which is to pick all the `uplink_interfaces`.
Can be used to filter uplink interfaces when there are multiple uplinks.
Limitations:
Either all interfaces must be uplinks or all interfaces must not be uplinks.
Only one interface is supported for non uplinks. | | [          - <str>](## ".node_groups.[].wan_ha.ha_interfaces.[]") | String | | | Pattern: `Ethernet[\d/]+` | | | [        ha_ipv4_pool](## ".node_groups.[].wan_ha.ha_ipv4_pool") | String | | | Format: ipv4_cidr | IP address pool used for WAN HA connectivity.
IP is derived from the node ID.
Not used for uplink interfaces. | | [        max_ha_interfaces](## ".node_groups.[].wan_ha.max_ha_interfaces") | Integer | | | | Number of parallel links towards HA switches.
Can be used to reserve IP addresses for future parallel HA links. | + | [        port_channel_id](## ".node_groups.[].wan_ha.port_channel_id") | Integer | | | | Port-channel ID to use for direct HA. | + | [        use_port_channel_for_direct_ha](## ".node_groups.[].wan_ha.use_port_channel_for_direct_ha") | Boolean | | `True` | | Enable or disable using a port-channel interface for direct HA when there is only one interface.
This feature was introduced in EOS 4.33.0F. | | [        flow_tracking](## ".node_groups.[].wan_ha.flow_tracking") | Dictionary | | | | Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. | | [          enabled](## ".node_groups.[].wan_ha.flow_tracking.enabled") | Boolean | | | | | | [          name](## ".node_groups.[].wan_ha.flow_tracking.name") | String | | | | Flow tracker name as defined in flow_tracking_settings. | | [      dps_mss_ipv4](## ".node_groups.[].dps_mss_ipv4") | String | | `auto` | | IPv4 MSS value configured under "router path-selection" on WAN Devices. | | [  nodes](## ".nodes") | List, items: Dictionary | | | | Define variables per node. | | [    - name](## ".nodes.[].name") | String | Required, Unique | | | The Node Name is used as "hostname". | - | [      wan_role](## ".nodes.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | + | [      wan_role](## ".nodes.[].wan_role") | String | | | Valid Values:
- client
- server | Override the default WAN role.

This is used both for AutoVPN and Pathfinder designs.
That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`.
`server` indicates that the router is a route-reflector.

Only supported if `overlay_routing_protocol` is set to `ibgp`. | | [      cv_pathfinder_transit_mode](## ".nodes.[].cv_pathfinder_transit_mode") | String | | | Valid Values:
- region
- zone | Configure the transit mode for a WAN client for CV Pathfinder designs
only when the `wan_mode` root key is set to `cv_pathfinder`.

'zone' is currently not supported. | | [      cv_pathfinder_region](## ".nodes.[].cv_pathfinder_region") | String | | | | The CV Pathfinder region name.
This key is required for WAN routers but optional for pathfinders.
The region name must be defined under 'cv_pathfinder_regions'. | | [      cv_pathfinder_site](## ".nodes.[].cv_pathfinder_site") | String | | | | The CV Pathfinder site name.
This key is required for WAN routers but optional for pathfinders.
For WAN routers and pathfinders with `cv_pathfinder_region`, the site name must be defined for the relevant region under 'cv_pathfinder_regions'.
For pathfinders without `cv_pathfinder_region` set, the site must be defined under `cv_pathfinder_global_sites`. | | [      wan_ha](## ".nodes.[].wan_ha") | Dictionary | | | | PREVIEW: This key is currently not supported

The key is supported only if `wan_mode` == `cv-pathfinder`.
AutoVPN support is still to be determined.

Maximum 2 devices supported by group for HA. | | [        enabled](## ".nodes.[].wan_ha.enabled") | Boolean | | `True` | | Enable / Disable auto CV-Pathfinder HA, when two nodes are defined in the same node_group. | | [        ipsec](## ".nodes.[].wan_ha.ipsec") | Boolean | | `True` | | Enable / Disable IPsec over HA path-group when HA is enabled. | + | [        mtu](## ".nodes.[].wan_ha.mtu") | Integer | | `9194` | Min: 68
Max: 65535 | Set MTU on WAN HA interfaces. | | [        ha_interfaces](## ".nodes.[].wan_ha.ha_interfaces") | List, items: String | | | | Local WAN HA interfaces
Overwrite the default behavior which is to pick all the `uplink_interfaces`.
Can be used to filter uplink interfaces when there are multiple uplinks.
Limitations:
Either all interfaces must be uplinks or all interfaces must not be uplinks.
Only one interface is supported for non uplinks. | | [          - <str>](## ".nodes.[].wan_ha.ha_interfaces.[]") | String | | | Pattern: `Ethernet[\d/]+` | | | [        ha_ipv4_pool](## ".nodes.[].wan_ha.ha_ipv4_pool") | String | | | Format: ipv4_cidr | IP address pool used for WAN HA connectivity.
IP is derived from the node ID.
Not used for uplink interfaces. | | [        max_ha_interfaces](## ".nodes.[].wan_ha.max_ha_interfaces") | Integer | | | | Number of parallel links towards HA switches.
Can be used to reserve IP addresses for future parallel HA links. | + | [        port_channel_id](## ".nodes.[].wan_ha.port_channel_id") | Integer | | | | Port-channel ID to use for direct HA. | + | [        use_port_channel_for_direct_ha](## ".nodes.[].wan_ha.use_port_channel_for_direct_ha") | Boolean | | `True` | | Enable or disable using a port-channel interface for direct HA when there is only one interface.
This feature was introduced in EOS 4.33.0F. | | [        flow_tracking](## ".nodes.[].wan_ha.flow_tracking") | Dictionary | | | | Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. | | [          enabled](## ".nodes.[].wan_ha.flow_tracking.enabled") | Boolean | | | | | | [          name](## ".nodes.[].wan_ha.flow_tracking.name") | String | | | | Flow tracker name as defined in flow_tracking_settings. | @@ -87,7 +99,7 @@ # Override the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -124,6 +136,9 @@ # Enable / Disable IPsec over HA path-group when HA is enabled. ipsec: + # Set MTU on WAN HA interfaces. + mtu: + # Local WAN HA interfaces # Overwrite the default behavior which is to pick all the `uplink_interfaces`. # Can be used to filter uplink interfaces when there are multiple uplinks. @@ -142,6 +157,13 @@ # Can be used to reserve IP addresses for future parallel HA links. max_ha_interfaces: + # Port-channel ID to use for direct HA. + port_channel_id: + + # Enable or disable using a port-channel interface for direct HA when there is only one interface. + # This feature was introduced in EOS 4.33.0F. + use_port_channel_for_direct_ha: + # Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. flow_tracking: enabled: @@ -168,7 +190,7 @@ # Override the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -205,6 +227,9 @@ # Enable / Disable IPsec over HA path-group when HA is enabled. ipsec: + # Set MTU on WAN HA interfaces. + mtu: + # Local WAN HA interfaces # Overwrite the default behavior which is to pick all the `uplink_interfaces`. # Can be used to filter uplink interfaces when there are multiple uplinks. @@ -223,6 +248,13 @@ # Can be used to reserve IP addresses for future parallel HA links. max_ha_interfaces: + # Port-channel ID to use for direct HA. + port_channel_id: + + # Enable or disable using a port-channel interface for direct HA when there is only one interface. + # This feature was introduced in EOS 4.33.0F. + use_port_channel_for_direct_ha: + # Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. flow_tracking: enabled: @@ -236,7 +268,7 @@ # Override the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -273,6 +305,9 @@ # Enable / Disable IPsec over HA path-group when HA is enabled. ipsec: + # Set MTU on WAN HA interfaces. + mtu: + # Local WAN HA interfaces # Overwrite the default behavior which is to pick all the `uplink_interfaces`. # Can be used to filter uplink interfaces when there are multiple uplinks. @@ -291,6 +326,13 @@ # Can be used to reserve IP addresses for future parallel HA links. max_ha_interfaces: + # Port-channel ID to use for direct HA. + port_channel_id: + + # Enable or disable using a port-channel interface for direct HA when there is only one interface. + # This feature was introduced in EOS 4.33.0F. + use_port_channel_for_direct_ha: + # Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. flow_tracking: enabled: @@ -310,7 +352,7 @@ # Override the default WAN role. # # This is used both for AutoVPN and Pathfinder designs. - # That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + # That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. # `server` indicates that the router is a route-reflector. # # Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -347,6 +389,9 @@ # Enable / Disable IPsec over HA path-group when HA is enabled. ipsec: + # Set MTU on WAN HA interfaces. + mtu: + # Local WAN HA interfaces # Overwrite the default behavior which is to pick all the `uplink_interfaces`. # Can be used to filter uplink interfaces when there are multiple uplinks. @@ -365,6 +410,13 @@ # Can be used to reserve IP addresses for future parallel HA links. max_ha_interfaces: + # Port-channel ID to use for direct HA. + port_channel_id: + + # Enable or disable using a port-channel interface for direct HA when there is only one interface. + # This feature was introduced in EOS 4.33.0F. + use_port_channel_for_direct_ha: + # Configures flow-tracking on the HA interfaces. Overrides `fabric_flow_tracking.wan_ha_links` setting. flow_tracking: enabled: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/overlay-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/overlay-settings.md index f348ef9ffa0..961ac389d23 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/overlay-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/overlay-settings.md @@ -8,16 +8,17 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | | [bgp_mesh_pes](## "bgp_mesh_pes") | Boolean | | `False` | | Configure an iBGP full mesh between PEs, either because there is no RR used or other reasons.
Only supported in combination with MPLS overlay.
| + | [overlay_bgp_peer_description](## "overlay_bgp_peer_description") | String | | `{peer}{peer_interface?<_}` | | Description or description template to be used on the overlay BGP peers.
This can be a template using the format string syntax.
The available template fields are:
- `peer`: The name of the BGP peer.
- `peer_interface`: The interface on the BGP peer if available.

The default description is built from the name and interface of the BGP peer. | | [overlay_cvx_servers](## "overlay_cvx_servers") | List, items: String | | | | List of CVX vxlan overlay controllers.
Required if overlay_routing_protocol == CVX.
CVX servers (VMs) are peering using their management interface, so mgmt_ip must be set for all CVX servers.
| | [  - <str>](## "overlay_cvx_servers.[]") | String | | | | 'inventory_hostname' of CVX server.
| | [overlay_her_flood_list_per_vni](## "overlay_her_flood_list_per_vni") | Boolean | | `False` | | When using Head-End Replication, configure flood-lists per VNI.
By default HER will be configured with a common flood-list containing all VTEPs.
This behavior can be changed to per-VNI flood-lists by setting `overlay_her_flood_list_per_vni: true`.
This will make `eos_designs` consider configured VLANs per VTEP, and only include the relevant VTEPs to each VNI's flood-list.
| | [overlay_her_flood_list_scope](## "overlay_her_flood_list_scope") | String | | `fabric` | Valid Values:
- fabric
- dc | When using Head-End Replication, set the scope of flood-lists to Fabric or DC.
By default all VTEPs in the Fabric (part of the inventory group referenced by "fabric_name") are added to the flood-lists.
This can be changed to all VTEPs in the DC (sharing the same "dc_name" value).
This is useful if Border Leaf switches are dividing the VXLAN overlay into separate domains.
| - | [overlay_loopback_description](## "overlay_loopback_description") | String | | | | Customize the description on overlay interface Loopback0. | + | [overlay_loopback_description](## "overlay_loopback_description") deprecated | String | | | | Customize the description on overlay interface Loopback0.This key is deprecated. Support will be removed in AVD version 6.0.0. Use router_id_loopback_description instead. | | [overlay_mlag_rfc5549](## "overlay_mlag_rfc5549") | Boolean | | `False` | | IPv6 Unnumbered for MLAG iBGP connections.
Requires "underlay_rfc5549: true".
| | [overlay_rd_type](## "overlay_rd_type") | Dictionary | | | | Configuration options for the Administrator subfield (first part of RD) and the Assigned Number subfield (second part of RD).

By default Route Distinguishers (RD) are set to:
- `:` for VLANs and VLAN-Aware Bundles with L2 vlans.
- `:` for VLAN-Aware Bundles with SVIs.
- `:` for VLAN-Aware Bundles defined under 'evpn_vlan_bundles'.
- `:` for VRFs.

Note:
RD is a 48-bit value which is split into <16-bit>:<32-bit> or <32-bit>:<16-bit>.
When using loopback or 32-bit ASN/number the assigned number can only be a 16-bit number. This may be a problem with large VNIs.
For 16-bit ASN/number the assigned number can be a 32-bit number.
| - | [  admin_subfield](## "overlay_rd_type.admin_subfield") | String | | `overlay_loopback_ip` | | The method for deriving RD Administrator subfield (first part of RD):
- 'overlay_loopback_ip' means the IP address of Loopback0.
- 'vtep_loopback' means the IP address of the VTEP loopback interface.
- 'bgp_as' means the AS number of the device.
- 'switch_id' means the 'id' value of the device.
- Any without mask.
- Integer between <0-65535>.
- Integer between <0-4294967295>.
| + | [  admin_subfield](## "overlay_rd_type.admin_subfield") | String | | `router_id` | | The method for deriving RD Administrator subfield (first part of RD):
- 'router_id' means the IP address of Loopback0.
- 'vtep_loopback' means the IP address of the VTEP loopback interface.
- 'bgp_as' means the AS number of the device.
- 'switch_id' means the 'id' value of the device.
- Any without mask.
- Integer between <0-65535>.
- Integer between <0-4294967295>.
- 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead)
| | [  admin_subfield_offset](## "overlay_rd_type.admin_subfield_offset") | String | | | | Offset can only be used if admin_subfield is an integer between <0-4294967295> or 'switch_id'.
Total value of admin_subfield + admin_subfield_offset must be <= 4294967295.
| - | [  vrf_admin_subfield](## "overlay_rd_type.vrf_admin_subfield") | String | | | | The method for deriving RD Administrator subfield (first part of RD) for VRF services:
- 'overlay_loopback_ip' means the IP address of Loopback0.
- 'vtep_loopback' means the IP address of the VTEP loopback interface.
- 'bgp_as' means the AS number of the device.
- 'switch_id' means the 'id' value of the device.
- Any without mask.
- Integer between <0-65535>.
- Integer between <0-4294967295>.

'vrf_admin_subfield' takes precedence for VRF RDs if set. Otherwise the 'admin_subfield' value will be used.
| + | [  vrf_admin_subfield](## "overlay_rd_type.vrf_admin_subfield") | String | | | | The method for deriving RD Administrator subfield (first part of RD) for VRF services:
- 'router_id' means the IP address of Loopback0.
- 'vtep_loopback' means the IP address of the VTEP loopback interface.
- 'bgp_as' means the AS number of the device.
- 'switch_id' means the 'id' value of the device.
- Any without mask.
- Integer between <0-65535>.
- Integer between <0-4294967295>.
- 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead)

'vrf_admin_subfield' takes precedence for VRF RDs if set. Otherwise the 'admin_subfield' value will be used.
| | [  vrf_admin_subfield_offset](## "overlay_rd_type.vrf_admin_subfield_offset") | String | | | | Offset can only be used if 'vrf_admin_subfield' is an integer between <0-4294967295> or 'switch_id'.
Total value of 'vrf_admin_subfield' + 'vrf_admin_subfield_offset' must be <= 4294967295.
| | [  vlan_assigned_number_subfield](## "overlay_rd_type.vlan_assigned_number_subfield") | String | | `mac_vrf_id` | Valid Values:
- mac_vrf_id
- mac_vrf_vni
- vlan_id | The method for deriving RD Assigned Number subfield for VLAN services (second part of RD):
- 'mac_vrf_id' means `(mac_vrf_id_base or mac_vrf_vni_base) + vlan_id`.
- 'mac_vrf_vni' means `(mac_vrf_vni_base or mac_vrf_id_base) + vlan_id`.
- 'vlan_id' will only use the 'vlan_id' and ignores all base values.

These methods can be overridden per VLAN if either 'rd_override', 'rt_override' or 'vni_override' is set (preferred in this order).
| | [overlay_routing_protocol](## "overlay_routing_protocol") | String | | `ebgp` | Value is converted to lower case.
Valid Values:
- ebgp
- ibgp
- cvx
- her
- none | - The following overlay routing protocols are supported:
- eBGP: Configures fabric with eBGP, default for l3ls-evpn design.
- iBGP: Configured fabric with iBGP, only supported with OSPF or ISIS variants in underlay, default for mpls design.
- CVX: Configures fabric to leverage CloudVision eXchange as the overlay controller.
- HER: Configures fabric with Head-End Replication, configures static VXLAN flood-lists instead of using a dynamic overlay protocol.
- none: No overlay configuration will be generated, default for l2ls design.
| @@ -26,6 +27,8 @@ | [  admin_subfield](## "overlay_rt_type.admin_subfield") | String | | `vrf_id` | | The method for deriving RT Administrator subfield (first part of RT):
- 'vrf_id' means `(mac_vrf_id_base or mac_vrf_vni_base) + vlan_id` for VLANs, `(vrf_id or vrf_vni)` for VRFs and `id` for bundles defined under 'evpn_vlan_bundles'.
- 'vrf_vni' means `(mac_vrf_vni_base or mac_vrf_id_base) + vlan_id` for VLANs, `(vrf_vni or vrf_id)` for VRFs and `id` for bundles defined under 'evpn_vlan_bundles'.
- 'id' means `vlan_id` for VLANs, `(vrf_id or vrf_vni)` for VRFs and `id` for bundles defined under 'evpn_vlan_bundles'.
- 'bgp_as' means the AS number of the device.
- Integer between <0-65535>.
- Integer between <0-4294967295>.

The 'vrf_id' and 'vrf_vni' methods can be overridden per VLAN if either 'rt_override' or 'vni_override' is set (preferred in this order).
The 'vrf_id', 'vrf_vni' and 'id' methods can be overridden per bundle defined under `evpn_vlan_bundles` using 'rt_override'.
| | [  vrf_admin_subfield](## "overlay_rt_type.vrf_admin_subfield") | String | | `vrf_id` | | The method for deriving RT Administrator subfield (first part of RT) for VRF services:
- 'id' means `(vrf_id or vrf_vni)`.
- 'vrf_id' means `(vrf_id or vrf_vni)`.
- 'vrf_vni' means `(vrf_vni or vrf_id)`.
- 'bgp_as' means the AS number of the device.
- Integer between <0-65535>.
- Integer between <0-4294967295>.

'vrf_admin_subfield' takes precedence for VRF RDs if set. Otherwise the 'admin_subfield' value will be used.
| | [  vlan_assigned_number_subfield](## "overlay_rt_type.vlan_assigned_number_subfield") | String | | `mac_vrf_id` | Valid Values:
- mac_vrf_id
- mac_vrf_vni
- vlan_id | The method for deriving RT Assigned Number subfield for VLAN services (second part of RT):
- 'mac_vrf_id' means `(mac_vrf_id_base or mac_vrf_vni_base) + vlan_id`.
- 'mac_vrf_vni' means `(mac_vrf_vni_base or mac_vrf_id_base) + vlan_id`.
- 'vlan_id' will only use the 'vlan_id' and ignores all base values.

These methods can be overridden per VLAN if either 'rt_override' or 'vni_override' is set (preferred in this order).
| + | [router_id_loopback_description](## "router_id_loopback_description") | String | | `ROUTER_ID` | | Customize the description on Router ID interface Loopback0. | + | [vtep_loopback_description](## "vtep_loopback_description") | String | | `VXLAN_TUNNEL_SOURCE` | | Customize the description on the VTEP interface, typically Loopback1. | | [vtep_vvtep_ip](## "vtep_vvtep_ip") | String | | | | IP Address used as Virtual VTEP. Will be configured as secondary IP on Loopback1.
This is only needed for centralized routing designs.
| === "YAML" @@ -35,6 +38,15 @@ # Only supported in combination with MPLS overlay. bgp_mesh_pes: + # Description or description template to be used on the overlay BGP peers. + # This can be a template using the format string syntax. + # The available template fields are: + # - `peer`: The name of the BGP peer. + # - `peer_interface`: The interface on the BGP peer if available. + # + # The default description is built from the name and interface of the BGP peer. + overlay_bgp_peer_description: + # List of CVX vxlan overlay controllers. # Required if overlay_routing_protocol == CVX. # CVX servers (VMs) are peering using their management interface, so mgmt_ip must be set for all CVX servers. @@ -56,6 +68,9 @@ overlay_her_flood_list_scope: # Customize the description on overlay interface Loopback0. + # This key is deprecated. + # Support will be removed in AVD version 6.0.0. + # Use router_id_loopback_description instead. overlay_loopback_description: # IPv6 Unnumbered for MLAG iBGP connections. @@ -77,27 +92,29 @@ overlay_rd_type: # The method for deriving RD Administrator subfield (first part of RD): - # - 'overlay_loopback_ip' means the IP address of Loopback0. + # - 'router_id' means the IP address of Loopback0. # - 'vtep_loopback' means the IP address of the VTEP loopback interface. # - 'bgp_as' means the AS number of the device. # - 'switch_id' means the 'id' value of the device. # - Any without mask. # - Integer between <0-65535>. # - Integer between <0-4294967295>. - admin_subfield: + # - 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead) + admin_subfield: # Offset can only be used if admin_subfield is an integer between <0-4294967295> or 'switch_id'. # Total value of admin_subfield + admin_subfield_offset must be <= 4294967295. admin_subfield_offset: # The method for deriving RD Administrator subfield (first part of RD) for VRF services: - # - 'overlay_loopback_ip' means the IP address of Loopback0. + # - 'router_id' means the IP address of Loopback0. # - 'vtep_loopback' means the IP address of the VTEP loopback interface. # - 'bgp_as' means the AS number of the device. # - 'switch_id' means the 'id' value of the device. # - Any without mask. # - Integer between <0-65535>. # - Integer between <0-4294967295>. + # - 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead) # # 'vrf_admin_subfield' takes precedence for VRF RDs if set. Otherwise the 'admin_subfield' value will be used. vrf_admin_subfield: @@ -171,6 +188,12 @@ # These methods can be overridden per VLAN if either 'rt_override' or 'vni_override' is set (preferred in this order). vlan_assigned_number_subfield: + # Customize the description on Router ID interface Loopback0. + router_id_loopback_description: + + # Customize the description on the VTEP interface, typically Loopback1. + vtep_loopback_description: + # IP Address used as Virtual VTEP. Will be configured as secondary IP on Loopback1. # This is only needed for centralized routing designs. vtep_vvtep_ip: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/platform-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/platform-settings.md index 69cecedda0e..6d54ae14ce0 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/platform-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/platform-settings.md @@ -17,6 +17,7 @@ | [    tcam_profile](## "custom_platform_settings.[].tcam_profile") | String | | | | | | [    lag_hardware_only](## "custom_platform_settings.[].lag_hardware_only") | Boolean | | | | | | [    default_interface_mtu](## "custom_platform_settings.[].default_interface_mtu") | Integer | | | Min: 68
Max: 65535 | Default interface MTU configured on EOS under "interface defaults".
Takes precedence over the root key "default_interface_mtu".
| + | [    p2p_uplinks_mtu](## "custom_platform_settings.[].p2p_uplinks_mtu") | Integer | | | Min: 68
Max: 65535 | Set MTU on point to point uplink interfaces.
Takes precedence over the root key "p2p_uplinks_mtu".
.uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214.
| | [    feature_support](## "custom_platform_settings.[].feature_support") | Dictionary | | | | | | [      queue_monitor_length_notify](## "custom_platform_settings.[].feature_support.queue_monitor_length_notify") | Boolean | | `True` | | | | [      interface_storm_control](## "custom_platform_settings.[].feature_support.interface_storm_control") | Boolean | | `True` | | | @@ -42,6 +43,7 @@ | [    tcam_profile](## "platform_settings.[].tcam_profile") | String | | | | | | [    lag_hardware_only](## "platform_settings.[].lag_hardware_only") | Boolean | | | | | | [    default_interface_mtu](## "platform_settings.[].default_interface_mtu") | Integer | | | Min: 68
Max: 65535 | Default interface MTU configured on EOS under "interface defaults".
Takes precedence over the root key "default_interface_mtu".
| + | [    p2p_uplinks_mtu](## "platform_settings.[].p2p_uplinks_mtu") | Integer | | | Min: 68
Max: 65535 | Set MTU on point to point uplink interfaces.
Takes precedence over the root key "p2p_uplinks_mtu".
.uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214.
| | [    feature_support](## "platform_settings.[].feature_support") | Dictionary | | | | | | [      queue_monitor_length_notify](## "platform_settings.[].feature_support.queue_monitor_length_notify") | Boolean | | `True` | | | | [      interface_storm_control](## "platform_settings.[].feature_support.interface_storm_control") | Boolean | | `True` | | | @@ -87,6 +89,11 @@ # Default interface MTU configured on EOS under "interface defaults". # Takes precedence over the root key "default_interface_mtu". default_interface_mtu: + + # Set MTU on point to point uplink interfaces. + # Takes precedence over the root key "p2p_uplinks_mtu". + # .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214. + p2p_uplinks_mtu: feature_support: queue_monitor_length_notify: interface_storm_control: @@ -148,6 +155,11 @@ # Default interface MTU configured on EOS under "interface defaults". # Takes precedence over the root key "default_interface_mtu". default_interface_mtu: + + # Set MTU on point to point uplink interfaces. + # Takes precedence over the root key "p2p_uplinks_mtu". + # .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214. + p2p_uplinks_mtu: feature_support: queue_monitor_length_notify: interface_storm_control: @@ -271,6 +283,7 @@ reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - lag_hardware_only: true management_interface: Management0 platforms: @@ -287,6 +300,7 @@ reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - feature_support: bgp_update_wait_for_convergence: true bgp_update_wait_install: false @@ -345,6 +359,7 @@ interface_storm_control: false queue_monitor_length_notify: false management_interface: Management1/1 + p2p_uplinks_mtu: 9194 platforms: - AWE-5310 - AWE-5510 @@ -357,6 +372,7 @@ poe: true queue_monitor_length_notify: false management_interface: Management1 + p2p_uplinks_mtu: 9194 platforms: - AWE-7220R ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/port-profiles.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/port-profiles.md index 4fcb302b6c5..7322c74c9a5 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/port-profiles.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/port-profiles.md @@ -11,7 +11,7 @@ | [  - profile](## "port_profiles.[].profile") | String | Required, Unique | | | Port profile name. | | [    parent_profile](## "port_profiles.[].parent_profile") | String | | | | Parent profile is optional.
Port_profiles can refer to another port_profile to inherit settings in up to two levels (adapter->profile->parent_profile).
| | [    speed](## "port_profiles.[].speed") | String | | | | Set adapter speed in the format `` or `forced ` or `auto `.
If not specified speed will be auto.
| - | [    description](## "port_profiles.[].description") | String | | | | By default the description is built leveraging `_`.
When set this key will override the default value on the physical ports.
| + | [    description](## "port_profiles.[].description") | String | | | | Description or description template to be used on all ports.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port` - The value from `endpoint_ports` for this switch port if set.

The default description is set by `default_connected_endpoints_description`.
By default the description is templated from the type, name and port of the endpoint if set. | | [    enabled](## "port_profiles.[].enabled") | Boolean | | `True` | | Administrative state, setting to false will set the port to 'shutdown' in the intended configuration.
| | [    mode](## "port_profiles.[].mode") | String | | | Valid Values:
- access
- dot1q-tunnel
- trunk
- trunk phone | Interface mode. | | [    mtu](## "port_profiles.[].mtu") | Integer | | | Min: 68
Max: 65535 | | @@ -127,7 +127,8 @@ | [    port_channel](## "port_profiles.[].port_channel") | Dictionary | | | | Used for port-channel adapter. | | [      mode](## "port_profiles.[].port_channel.mode") | String | | | Valid Values:
- active
- passive
- on | Port-Channel Mode. | | [      channel_id](## "port_profiles.[].port_channel.channel_id") | Integer | | | | Port-Channel ID.
If no channel_id is specified, an id is generated from the first switch port in the port channel.
| - | [      description](## "port_profiles.[].port_channel.description") | String | | | | By default the description is built leveraging `` name or `adapter.description` when defined.
When this key is defined, it will append its content to the physical port description.
| + | [      description](## "port_profiles.[].port_channel.description") | String | | | | Description or description template to be used on the port-channel interface.
This can be a template using the format string syntax.
The available template fields are:
- `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc.
- `endpoint` - The name of the connected endpoint
- `endpoint_port_channel` - The value from `endpoint_port_channel` if set.
- `port_channel_id` - The port-channel number for the switch.
- `adapter_description` - The adapter's description if set.
- `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint.

The default description is set by `default_connected_endpoints_port_channel_description`.
By default the description is templated from the type, name and port_channel interface of the endpoint if set. | + | [      endpoint_port_channel](## "port_profiles.[].port_channel.endpoint_port_channel") | String | | | | Name of the port-channel interface on the endpoint.
Used for the port-channel description template with the field name `peer_interface` | | [      enabled](## "port_profiles.[].port_channel.enabled") | Boolean | | `True` | | Port-Channel administrative state.
Setting to false will set port to 'shutdown' in intended configuration.
| | [      ptp_mpass](## "port_profiles.[].port_channel.ptp_mpass") | Boolean | | `False` | | When MPASS is enabled on an MLAG port-channel, MLAG peers coordinate to function as a single PTP logical device.
Arista PTP enabled devices always place PTP messages on the same physical link within the port-channel.
Hence, MPASS is needed only on MLAG port-channels connected to non-Arista devices. | | [      lacp_fallback](## "port_profiles.[].port_channel.lacp_fallback") | Dictionary | | | | LACP fallback configuration. | @@ -169,8 +170,15 @@ # If not specified speed will be auto. speed: - # By default the description is built leveraging `_`. - # When set this key will override the default value on the physical ports. + # Description or description template to be used on all ports. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port` - The value from `endpoint_ports` for this switch port if set. + # + # The default description is set by `default_connected_endpoints_description`. + # By default the description is templated from the type, name and port of the endpoint if set. description: # Administrative state, setting to false will set the port to 'shutdown' in the intended configuration. @@ -436,10 +444,24 @@ # If no channel_id is specified, an id is generated from the first switch port in the port channel. channel_id: - # By default the description is built leveraging `` name or `adapter.description` when defined. - # When this key is defined, it will append its content to the physical port description. + # Description or description template to be used on the port-channel interface. + # This can be a template using the format string syntax. + # The available template fields are: + # - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + # - `endpoint` - The name of the connected endpoint + # - `endpoint_port_channel` - The value from `endpoint_port_channel` if set. + # - `port_channel_id` - The port-channel number for the switch. + # - `adapter_description` - The adapter's description if set. + # - `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint. + # + # The default description is set by `default_connected_endpoints_port_channel_description`. + # By default the description is templated from the type, name and port_channel interface of the endpoint if set. description: + # Name of the port-channel interface on the endpoint. + # Used for the port-channel description template with the field name `peer_interface` + endpoint_port_channel: + # Port-Channel administrative state. # Setting to false will set port to 'shutdown' in intended configuration. enabled: diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-documentation-output-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-documentation-output-settings.md deleted file mode 100644 index 79ac0635b15..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-documentation-output-settings.md +++ /dev/null @@ -1,21 +0,0 @@ - -=== "Table" - - | Variable | Type | Required | Default | Value Restrictions | Description | - | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [eos_designs_documentation](## "eos_designs_documentation") | Dictionary | | | | Control fabric documentation generation.
| - | [  connected_endpoints](## "eos_designs_documentation.connected_endpoints") | Boolean | | `False` | | Generate fabric-wide documentation for connected endpoints.
| - -=== "YAML" - - ```yaml - # Control fabric documentation generation. - eos_designs_documentation: - - # Generate fabric-wide documentation for connected endpoints. - connected_endpoints: - ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-settings.md new file mode 100644 index 00000000000..701155cc9e0 --- /dev/null +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/role-settings.md @@ -0,0 +1,46 @@ + +=== "Table" + + | Variable | Type | Required | Default | Value Restrictions | Description | + | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [avd_eos_designs_debug](## "avd_eos_designs_debug") | Boolean | | `False` | | Dump all vars and facts per device after generating `avd_switch_facts`. | + | [avd_eos_designs_structured_config](## "avd_eos_designs_structured_config") | Boolean | | `True` | | Generate structured configuration per device. | + | [avd_eos_designs_unset_facts](## "avd_eos_designs_unset_facts") | Boolean | | `True` | | Unset `avd_switch_facts` to gain a small performance improvement since Ansible needs to handle fewer variables. | + | [eos_designs_documentation](## "eos_designs_documentation") | Dictionary | | | | Control fabric documentation generation.
| + | [  enable](## "eos_designs_documentation.enable") | Boolean | | `True` | | Generate fabric-wide documentation. | + | [  connected_endpoints](## "eos_designs_documentation.connected_endpoints") | Boolean | | `False` | | Include connected endpoints in the fabric-wide documentation.
This is `false` by default to avoid cluttering documentation for projects with thousands of endpoints. | + | [  topology_csv](## "eos_designs_documentation.topology_csv") | Boolean | | `False` | | Generate Topology CSV with all interfaces towards other devices. | + | [  p2p_links_csv](## "eos_designs_documentation.p2p_links_csv") | Boolean | | `False` | | Generate P2P links CSV with all routed point-to-point links between devices. | + +=== "YAML" + + ```yaml + # Dump all vars and facts per device after generating `avd_switch_facts`. + avd_eos_designs_debug: + + # Generate structured configuration per device. + avd_eos_designs_structured_config: + + # Unset `avd_switch_facts` to gain a small performance improvement since Ansible needs to handle fewer variables. + avd_eos_designs_unset_facts: + + # Control fabric documentation generation. + eos_designs_documentation: + + # Generate fabric-wide documentation. + enable: + + # Include connected endpoints in the fabric-wide documentation. + # This is `false` by default to avoid cluttering documentation for projects with thousands of endpoints. + connected_endpoints: + + # Generate Topology CSV with all interfaces towards other devices. + topology_csv: + + # Generate P2P links CSV with all routed point-to-point links between devices. + p2p_links_csv: + ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/type-setting.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/type-setting.md index ce8e58d01b8..f9c422de72e 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/type-setting.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/type-setting.md @@ -7,12 +7,12 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [type](## "type") | String | | | Valid Values:
- | The `type:` variable needs to be defined for each device in the fabric.
This is leveraged to load the appropriate template to generate the configuration.
| + | [type](## "type") | String | | | Valid Values:
-
- | The `type:` variable needs to be defined for each device in the fabric.
This is leveraged to load the appropriate template to generate the configuration.
| === "YAML" ```yaml # The `type:` variable needs to be defined for each device in the fabric. # This is leveraged to load the appropriate template to generate the configuration. - type: "> + type: " | ""> ``` diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-route-servers.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-route-servers.md index cb09c828b5d..c2af8f11f96 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-route-servers.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-route-servers.md @@ -7,7 +7,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | - | [wan_route_servers](## "wan_route_servers") | List, items: Dictionary | | | | List of the AutoVPN RRs when using `wan_mode`=`autovpn`, or the Pathfinders
when using `wan_mode`=`cv-pathfinder`, to which the device should connect to.
This is also used to establish iBGP sessions between WAN route servers.

When the route server is part of the same inventory as the WAN routers,
only the name is required. | + | [wan_route_servers](## "wan_route_servers") | List, items: Dictionary | | | | List of the AutoVPN RRs when using `wan_mode: legacy-autovpn`, or the Pathfinders
when using `wan_mode: cv-pathfinder`, to which the device should connect to.
This is also used to establish iBGP sessions between WAN route servers.

When the route server is part of the same inventory as the WAN routers,
only the name is required. | | [  - hostname](## "wan_route_servers.[].hostname") | String | Required, Unique | | | Route-Reflector hostname. | | [    vtep_ip](## "wan_route_servers.[].vtep_ip") | String | | | | Route-Reflector VTEP IP Address. This is usually the IP address under `interface Dps1`. | | [    path_groups](## "wan_route_servers.[].path_groups") | List, items: Dictionary | | | | Path-groups through which the Route Reflector/Pathfinder is reached. | @@ -19,8 +19,8 @@ === "YAML" ```yaml - # List of the AutoVPN RRs when using `wan_mode`=`autovpn`, or the Pathfinders - # when using `wan_mode`=`cv-pathfinder`, to which the device should connect to. + # List of the AutoVPN RRs when using `wan_mode: legacy-autovpn`, or the Pathfinders + # when using `wan_mode: cv-pathfinder`, to which the device should connect to. # This is also used to establish iBGP sessions between WAN route servers. # # When the route server is part of the same inventory as the WAN routers, diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-settings.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-settings.md index 854b4be0c49..5e6cb5c6206 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-settings.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-settings.md @@ -7,6 +7,7 @@ | Variable | Type | Required | Default | Value Restrictions | Description | | -------- | ---- | -------- | ------- | ------------------ | ----------- | + | [wan_encapsulation](## "wan_encapsulation") | String | | `path-selection` | Valid Values:
- path-selection
- vxlan | Select the encapsulation to use for EVPN peerings for WAN BGP peers. | | [wan_ha](## "wan_ha") | Dictionary | | | | PREVIEW: The `wan_ha` key is currently not supported. | | [  lan_ha_path_group_name](## "wan_ha.lan_ha_path_group_name") | String | | `LAN_HA` | | When WAN HA is enabled for a site if `wan_mode: cv-pathfinder`, a default path-group is injected to form DPS tunnels over LAN.
This key allows to overwrite the default LAN HA path-group name. | | [wan_ipsec_profiles](## "wan_ipsec_profiles") | Dictionary | | | | Define IPsec profiles parameters for WAN configuration. | @@ -20,13 +21,16 @@ | [    sa_policy_name](## "wan_ipsec_profiles.data_plane.sa_policy_name") | String | | `DP-SA-POLICY` | | Name of the SA policy. | | [    profile_name](## "wan_ipsec_profiles.data_plane.profile_name") | String | | `DP-PROFILE` | | Name of the IPSec profile. | | [    shared_key](## "wan_ipsec_profiles.data_plane.shared_key") | String | Required | | | The type 7 encrypted IPSec shared key.
This variable is sensitive and should be configured using some vault mechanism. | - | [wan_mode](## "wan_mode") | String | | `cv-pathfinder` | Valid Values:
- autovpn
- cv-pathfinder | Select if the WAN should be run using CV Pathfinder or AutoVPN only. | + | [wan_mode](## "wan_mode") | String | | `cv-pathfinder` | Valid Values:
- legacy-autovpn
- cv-pathfinder | Select if the WAN should be run using CV Pathfinder or Legacy AutoVPN only. | | [wan_stun_dtls_disable](## "wan_stun_dtls_disable") | Boolean | | `False` | | WAN STUN connections are authenticated and secured with DTLS by default.
For CV Pathfinder deployments CloudVision will automatically deploy certificates on the devices.
In case of AutoVPN the certificates must be deployed manually to all devices.

For LAB environments this can be disabled, if there are no certificates available.
This should NOT be disabled for a WAN network connected to the internet, since it will leave the STUN service exposed with no authentication. | | [wan_stun_dtls_profile_name](## "wan_stun_dtls_profile_name") | String | | `STUN-DTLS` | | Name of the SSL profile used for DTLS on WAN STUN connections.
When using automatic ceritficate deployment via CloudVision this name must be the same on all WAN routers. | === "YAML" ```yaml + # Select the encapsulation to use for EVPN peerings for WAN BGP peers. + wan_encapsulation: + # PREVIEW: The `wan_ha` key is currently not supported. wan_ha: @@ -67,8 +71,8 @@ # This variable is sensitive and should be configured using some vault mechanism. shared_key: - # Select if the WAN should be run using CV Pathfinder or AutoVPN only. - wan_mode: + # Select if the WAN should be run using CV Pathfinder or Legacy AutoVPN only. + wan_mode: # WAN STUN connections are authenticated and secured with DTLS by default. # For CV Pathfinder deployments CloudVision will automatically deploy certificates on the devices. diff --git a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-virtual-topologies.md b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-virtual-topologies.md index 8cfdbda184d..89023d0012f 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-virtual-topologies.md +++ b/ansible_collections/arista/avd/roles/eos_designs/docs/tables/wan-virtual-topologies.md @@ -28,7 +28,7 @@ | [        preference](## "wan_virtual_topologies.control_plane_virtual_topology.path_groups.[].preference") | String | | | | Valid values are 1-65535 | "preferred" | "alternate".

"preferred" is converted to priority 1.
"alternate" is converted to priority 2.

If not set, each path-group in `names` will be attributed its `default_preference`. | | [    internet_exit](## "wan_virtual_topologies.control_plane_virtual_topology.internet_exit") | Dictionary | | | | | | [      policy](## "wan_virtual_topologies.control_plane_virtual_topology.internet_exit.policy") | String | | | | PREVIEW: This key is in preview mode.

Internet-exit policy name associated with this virtual_topology.
The policy must be defined under `cv_pathfinder_internet_exit_policies`. | - | [  policies](## "wan_virtual_topologies.policies") | List, items: Dictionary | | | | List of virtual toplogies policies.

For AutoVPN, each item in the list creates:
* one policy with:
* one `match` entry per `application_virtual_topologies` item
they are indexed using `10 * ` where `list_index` starts at `1`.
* one `default-match`
* one load-balance policy per `application_virtual_topologies` and one for the `default_virtual_topology`.
* if the policy is associated with the default VRF, a special control-plane rule is injected
in the policy with index `1` referring to a control-plane load-balance policy as defined under
`control_plane_virtual_topology` or if not set, the default one.

For CV Pathfinder, each item in the list creates:
* one policy with:
* one `match` entry per `application_virtual_topologies` item ordered as in the data.
* one last match entry for the `default` application-profile using `default_virtual_topology` information.
* one profile per `application_virtual_topologies` item.
* one profile for the `default_virtual_topology`.
* one load-balance policy per `application_virtual_topologies`.
* one load_balance policy for the `default_virtual_topology`.
* if the policy is associated with the default VRF, a special control-plane profile is configured
and injected first in the policy assigned to the `default` VRF. This profile points to a
control-plane load-balance policy as defined under `control_plane_virtual_topology` or if not set, the default one. | + | [  policies](## "wan_virtual_topologies.policies") | List, items: Dictionary | | | | List of virtual toplogies policies.

For Legacy AutoVPN, each item in the list creates:
* one policy with:
* one `match` entry per `application_virtual_topologies` item
they are indexed using `10 * ` where `list_index` starts at `1`.
* one `default-match`
* one load-balance policy per `application_virtual_topologies` and one for the `default_virtual_topology`.
* if the policy is associated with the default VRF, a special control-plane rule is injected
in the policy with index `1` referring to a control-plane load-balance policy as defined under
`control_plane_virtual_topology` or if not set, the default one.

For CV Pathfinder, each item in the list creates:
* one policy with:
* one `match` entry per `application_virtual_topologies` item ordered as in the data.
* one last match entry for the `default` application-profile using `default_virtual_topology` information.
* one profile per `application_virtual_topologies` item.
* one profile for the `default_virtual_topology`.
* one load-balance policy per `application_virtual_topologies`.
* one load_balance policy for the `default_virtual_topology`.
* if the policy is associated with the default VRF, a special control-plane profile is configured
and injected first in the policy assigned to the `default` VRF. This profile points to a
control-plane load-balance policy as defined under `control_plane_virtual_topology` or if not set, the default one. | | [    - name](## "wan_virtual_topologies.policies.[].name") | String | Required, Unique | | | Name of the AVT policy. | | [      application_virtual_topologies](## "wan_virtual_topologies.policies.[].application_virtual_topologies") | List, items: Dictionary | | | | List of application specific virtual topologies. | | [        - application_profile](## "wan_virtual_topologies.policies.[].application_virtual_topologies.[].application_profile") | String | Required, Unique | | | The application profile to use for this virtual topology. It must be a defined `application_classification.application_profile`. | @@ -154,7 +154,7 @@ # List of virtual toplogies policies. # - # For AutoVPN, each item in the list creates: + # For Legacy AutoVPN, each item in the list creates: # * one policy with: # * one `match` entry per `application_virtual_topologies` item # they are indexed using `10 * ` where `list_index` starts at `1`. diff --git a/ansible_collections/arista/avd/roles/eos_designs/python_modules/MOVED_TO_PYAVD.txt b/ansible_collections/arista/avd/roles/eos_designs/python_modules/MOVED_TO_PYAVD.txt index b48ae49ac62..bd17c30c390 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/python_modules/MOVED_TO_PYAVD.txt +++ b/ansible_collections/arista/avd/roles/eos_designs/python_modules/MOVED_TO_PYAVD.txt @@ -1 +1,3 @@ All Python modules have been moved to PyAVD in the folder /python-avd/pyavd/_eos_designs/structured_config/ + +Base classes from ip_addressing and interface_descriptions can be imported from pyavd.api.ip_addressing and pyavd.api.interface_descriptions. diff --git a/ansible_collections/arista/avd/roles/eos_designs/python_modules/ip_addressing/__init__.py b/ansible_collections/arista/avd/roles/eos_designs/python_modules/ip_addressing/__init__.py deleted file mode 100644 index 4a62f2fe9a4..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/python_modules/ip_addressing/__init__.py +++ /dev/null @@ -1,19 +0,0 @@ -# Copyright (c) 2023-2024 Arista Networks, Inc. -# Use of this source code is governed by the Apache License 2.0 -# that can be found in the LICENSE file. -from ansible.errors import AnsibleActionFail - -from ansible_collections.arista.avd.plugins.plugin_utils.pyavd_wrappers import RaiseOnUse - -try: - from pyavd._eos_designs.ip_addressing import AvdIpAddressing -except ImportError as e: - AvdIpAddressing = RaiseOnUse( - AnsibleActionFail( - "The 'arista.avd.eos_designs' collection requires the 'pyavd' Python library. Got import error", - orig_exc=e, - ), - ) - - -__all__ = ["AvdIpAddressing"] diff --git a/ansible_collections/arista/avd/roles/eos_designs/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_designs/tasks/main.yml index 23c6a61e4b2..389ef399d14 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_designs/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -15,7 +14,7 @@ register: avd_requirements - name: Create required output directories if not present - tags: [build, provision] + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -27,7 +26,6 @@ run_once: true - name: Set eos_designs facts - tags: [build, provision, facts] arista.avd.eos_designs_facts: avd_switch_facts: true # cprofile_file: "eos_designs_facts.prof" @@ -37,7 +35,7 @@ run_once: true - name: Generate YAML file with hostvars (only for debugging) - tags: [debug, never] + when: avd_eos_designs_debug | arista.avd.default(false) ansible.builtin.template: src: debug/generate-debug-vars.j2 dest: "{{ structured_dir }}/{{ inventory_hostname }}-debug-vars.yml" @@ -46,7 +44,7 @@ changed_when: false - name: Generate device configuration in structured format - tags: [build, provision] + when: avd_eos_designs_structured_config | arista.avd.default(true) arista.avd.eos_designs_structured_config: eos_designs_custom_templates: "{{ eos_designs_custom_templates | arista.avd.default([]) }}" dest: "{{ structured_dir }}/{{ inventory_hostname }}.{{ avd_structured_config_file_format }}" @@ -58,37 +56,26 @@ register: structured_config - name: Generate fabric documentation - tags: [build, provision, documentation] - run_once: true - delegate_to: localhost - check_mode: false - ansible.builtin.copy: - content: "{{ lookup('template', 'documentation/fabric-documentation.j2') | arista.avd.add_md_toc(skip_lines=3) }}" - dest: "{{ fabric_dir }}/{{ fabric_name }}-documentation.md" - mode: "0o664" - -- name: Generate fabric point-to-point links summary in csv format. - tags: [build, provision, documentation] - ansible.builtin.template: - src: documentation/fabric-p2p-links.j2 - dest: "{{ fabric_dir }}/{{ fabric_name }}-p2p-links.csv" + when: eos_designs_documentation.enable | arista.avd.default(true) + or eos_designs_documentation.topology_csv | arista.avd.default(false) + or eos_designs_documentation.p2p_links_csv | arista.avd.default(false) + arista.avd.eos_designs_documentation: + structured_config_dir: "{{ structured_dir }}" + structured_config_suffix: "{{ avd_structured_config_file_format }}" + fabric_documentation_file: "{{ fabric_dir }}/{{ fabric_name }}-documentation.md" + fabric_documentation: "{{ eos_designs_documentation.enable | arista.avd.default(true) }}" + include_connected_endpoints: "{{ eos_designs_documentation.connected_endpoints | arista.avd.default(false) }}" + topology_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" + topology_csv: "{{ eos_designs_documentation.topology_csv | arista.avd.default(false) }}" + p2p_links_csv_file: "{{ fabric_dir }}/{{ fabric_name }}-p2p-links.csv" + p2p_links_csv: "{{ eos_designs_documentation.p2p_links_csv | arista.avd.default(false) }}" mode: "0o664" delegate_to: localhost - run_once: true check_mode: false - -- name: Generate fabric topology in csv format. - tags: [build, provision, documentation] - ansible.builtin.template: - src: documentation/fabric-topology.j2 - dest: "{{ fabric_dir }}/{{ fabric_name }}-topology.csv" - mode: "0o664" - delegate_to: localhost run_once: true - check_mode: false - name: Remove avd_switch_facts - tags: [build, provision, facts, remove_avd_switch_facts] + when: avd_eos_designs_unset_facts | arista.avd.default(true) arista.avd.set_vars: avd_switch_facts: null avd_overlay_peers: null diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/connected-endpoints.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/connected-endpoints.j2 deleted file mode 100644 index f5eeaf97f37..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/connected-endpoints.j2 +++ /dev/null @@ -1,104 +0,0 @@ -{# - Copyright (c) 2023-2024 Arista Networks, Inc. - Use of this source code is governed by the Apache License 2.0 - that can be found in the LICENSE file. -#} -## Connected Endpoints -{# Need to merge all values of connected endpoints for each device! And keys could be conflicting between them ...#} -{% set default_connected_endpoints_keys = [ - {"key": "servers", "type": "server", "description": "Server"}, - {"key": "firewalls", "type": "firewall", "description": "Firewall"}, - {"key": "routers", "type": "router", "description": "Router"}, - {"key": "load_balancers", "type": "load_balancer", "description": "Load Balancer"}, - {"key": "storage_arrays", "type": "storage_array", "description": "Storage Array"}, - {"key": "cpes", "type": "cpe", "description": "CPE"}, - {"key": "workstations", "type": "workstation", "description": "Workstation"}, - {"key": "access_points", "type": "access_point", "description": "Access Point"}, - {"key": "phones", "type": "phone", "description": "Phone"}, - {"key": "printers", "type": "printer", "description": "Printer"}, - {"key": "cameras", "type": "camera", "description": "Camera"}, - {"key": "generic_devices", "type": "generic_device", "description": "Generic Device"}] %} -{% set all_connected_endpoints_keys = [] %} -{% set all_connected_endpoints = {} %} -{% set all_profiles = [] %} -{# This is a repeat of the loop in the main file so should probably do all at once.. or somewhere else? #} -{% for node in groups[fabric_name] | arista.avd.natural_sort %} -{% set node_hostvars = hostvars[node] %} -{% set node_facts = avd_switch_facts[node] %} -{% do all_connected_endpoints_keys.extend(node_hostvars.connected_endpoints_keys | arista.avd.default(default_connected_endpoints_keys)) %} -{# Populate profiles #} -{% do all_profiles.extend(node_hostvars.port_profiles | arista.avd.default([])) %} -{# Populate endpoints #} -{% for ethernet_interface in node_hostvars.ethernet_interfaces | arista.avd.natural_sort("name") %} -{% set peer_type = ethernet_interface.peer_type | arista.avd.default('undefined') %} -{% if peer_type in all_connected_endpoints_keys | map(attribute='type') | list %} -{% if ethernet_interface.channel_group.id is arista.avd.defined %} -{% set port_channel_interface = (node_hostvars.port_channel_interfaces | selectattr("name", "eq", "Port-Channel" ~ ethernet_interface.channel_group.id))[0] | arista.avd.default %} -{% endif %} -{% set connected_endpoint_key = all_connected_endpoints_keys | selectattr("type", "equalto", peer_type) | map(attribute="key") | first %} -{% set connected_endpoint = namespace() %} -{% set connected_endpoint.fabric_switch = node %} -{% set connected_endpoint.fabric_port = ethernet_interface.name %} -{% set connected_endpoint.peer_type = peer_type %} -{% set connected_endpoint.peer = ethernet_interface.peer | arista.avd.default("-") %} -{% set connected_endpoint.peer_interface = ethernet_interface.peer_interface | arista.avd.default("-") %} -{% set connected_endpoint.description = ethernet_interface.description | arista.avd.default("-") %} -{% set connected_endpoint.shutdown = ethernet_interface.shutdown | arista.avd.default(port_channel_interface.shutdown, "-") %} -{% if ethernet_interface.type is arista.avd.defined("port-channel-member") %} -{% set connected_endpoint.type = port_channel_interface.type | arista.avd.default("-") %} -{% else %} -{% set connected_endpoint.type = ethernet_interface.type | arista.avd.default(port_channel_interface.type, "-") %} -{% endif %} -{% set connected_endpoint.mode = ethernet_interface.mode | arista.avd.default(port_channel_interface.mode, "-") %} -{% set connected_endpoint.vlans = ethernet_interface.vlans | arista.avd.default(port_channel_interface.vlans, "-") %} -{% set connected_endpoint.profile = ethernet_interface.port_profile | arista.avd.default("-") %} -{% do all_connected_endpoints.setdefault(connected_endpoint_key, []).append(connected_endpoint) %} -{% endif %} -{% endfor %} -{% endfor %} -{% set all_connected_endpoints_keys = all_connected_endpoints_keys | unique %} -{% if all_connected_endpoints | length == 0 %} - -No connected endpoint configured! -{% else %} - -### Connected Endpoint Keys - -| Key | Type | Description | -| --- | ---- | ----------- | -{% for connected_endpoints_key in all_connected_endpoints_keys | arista.avd.natural_sort("key") %} -{% set key = connected_endpoints_key.key %} -{% set type = connected_endpoints_key.type %} -{% set description = connected_endpoints_key.description | arista.avd.default("-") %} -| {{ key }} | {{ type }} | {{ description }} | -{% endfor %} -{% endif %} -{% for key in all_connected_endpoints | arista.avd.natural_sort %} - -### {{ key | replace("_", " ") | capitalize }} - -| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Type | Mode | VLANs | Profile | -| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ---- | ----- | ------- | -{% for connected_endpoint in all_connected_endpoints[key] | arista.avd.natural_sort('peer') %} -{% set port = connected_endpoint.peer_interface %} -{% set fabric_port = connected_endpoint.fabric_port %} -{% set profile = connected_endpoint.profile | arista.avd.default("-") %} -{% set description = connected_endpoint.description | arista.avd.default("-") %} -{% set shutdown = connected_endpoint.shutdown | arista.avd.default("-") %} -{% set type = connected_endpoint.type | arista.avd.default("-") %} -{% set mode = connected_endpoint.mode | arista.avd.default("-") %} -{% set vlans = connected_endpoint.vlans | arista.avd.default("-") %} -| {{ connected_endpoint.peer }} | {{ port }} | {{ connected_endpoint.fabric_switch }} | {{ fabric_port }} | {{ description }} | {{ shutdown }} | {{ type }} | {{ mode }} | {{ vlans }} | {{ profile }} | -{% endfor %} -{% endfor %} -{% if all_profiles | length > 0 %} - -### Port Profiles - -| Profile Name | Parent Profile | -| ------------ | -------------- | -{% for profile in all_profiles | unique %} -{% set parent = profile.parent_profile | arista.avd.default("-") %} -| {{ profile.profile }} | {{ parent }} | -{% endfor %} -{% endif %} diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-documentation.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-documentation.j2 deleted file mode 100644 index ed2d2f1a055..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-documentation.j2 +++ /dev/null @@ -1,212 +0,0 @@ -{# - Copyright (c) 2023-2024 Arista Networks, Inc. - Use of this source code is governed by the Apache License 2.0 - that can be found in the LICENSE file. -#} -{% if node_type_keys is arista.avd.defined %} -{% set node_types = node_type_keys | map(attribute="type") %} -{% else %} -{% set default_node_types = { - "l3ls-evpn": ["spine", "l3leaf", "l2leaf", "super-spine", "overlay-controller", "wan_router", "wan_rr"], - "mpls": ["p", "pe", "rr"], - "l2ls": ["l3spine", "spine", "leaf"] - } %} -{% set node_types = default_node_types[design.type | arista.avd.default("l3ls-evpn")] %} -{% endif %} -{% set fabric_switches = [] %} -{% set topology_links = [] %} -{% set uplink_ipv4_pools = [] %} -{% set loopback_ipv4_pools = [] %} -{% set vtep_loopback_ipv4_pools = [] %} -{% set assigned_ip_addresses = [] %} -{% set interfaces_done = [] %} -{% set isis_nets = [] %} -{% for node in groups[fabric_name] | arista.avd.natural_sort %} -{% set node_hostvars = hostvars[node] %} -{% set node_facts = avd_switch_facts[node] %} -{% if node_facts.switch.type | arista.avd.default('undefined') in node_types %} -{# Populate network summaries #} -{% do uplink_ipv4_pools.append(node_facts.switch.uplink_ipv4_pool | arista.avd.default()) %} -{% do loopback_ipv4_pools.append(node_facts.switch.loopback_ipv4_pool | arista.avd.default()) %} -{% do vtep_loopback_ipv4_pools.append(node_facts.switch.vtep_loopback_ipv4_pool | arista.avd.default()) %} -{# Populate fabric_switch #} -{% set fabric_switch = namespace() %} -{% set fabric_switch.pod = node_hostvars.pod_name | arista.avd.default(node_hostvars.dc_name, fabric_name) %} -{% set fabric_switch.type = node_facts.switch.type %} -{% set fabric_switch.node = node %} -{% set fabric_switch.mgmt_ip = node_facts.switch.mgmt_ip | arista.avd.default('-') %} -{% do assigned_ip_addresses.append(node_facts.switch.mgmt_ip) if node_facts.switch.mgmt_ip is arista.avd.defined %} -{% if node_facts.switch.inband_mgmt_vlan is arista.avd.defined %} -{% set fabric_switch.inband_mgmt_interface = "Vlan" ~ node_facts.switch.inband_mgmt_vlan %} -{% set fabric_switch.inband_mgmt_ip = node_hostvars.vlan_interfaces | selectattr("name", "eq", fabric_switch.inband_mgmt_interface) | map(attribute="ip_address") | first %} -{% endif %} -{% set fabric_switch.platform = node_facts.switch.platform | arista.avd.default('-') %} -{% set fabric_switch.provisioned = 'Not Available' if node_hostvars.is_deployed is arista.avd.defined(false) else 'Provisioned' %} -{% set fabric_switch.serial_number = node_facts.switch.serial_number | arista.avd.default("-") %} -{% if node_hostvars.loopback_interfaces is arista.avd.defined %} -{% set loopback0 = (node_hostvars.loopback_interfaces | selectattr("name", "arista.avd.defined", "Loopback0"))[0] | arista.avd.default %} -{% if loopback0.ip_address is arista.avd.defined %} -{% set fabric_switch.loopback0_ip_address = loopback0.ip_address %} -{% do assigned_ip_addresses.append(fabric_switch.loopback0_ip_address) %} -{% endif %} -{% endif %} -{% if node_hostvars.loopback_interfaces is arista.avd.defined %} -{% set loopback1 = (node_hostvars.loopback_interfaces | selectattr("name", "arista.avd.defined", "Loopback1"))[0] | arista.avd.default %} -{% if loopback1.ip_address is arista.avd.defined %} -{% set fabric_switch.loopback1_ip_address = loopback1.ip_address %} -{% do assigned_ip_addresses.append(fabric_switch.loopback1_ip_address) %} -{% endif %} -{% endif %} -{% if node_hostvars.router_isis is arista.avd.defined and node_hostvars.router_isis.net is arista.avd.defined %} -{% set fabric_switch.router_isis_net = node_hostvars.router_isis.net %} -{% do isis_nets.append(node_hostvars.router_isis.net) %} -{% endif %} -{% do fabric_switches.append(fabric_switch) %} -{# Populate topology_links #} -{% for ethernet_interface in node_hostvars.ethernet_interfaces | arista.avd.natural_sort("name") %} -{% if ethernet_interface.peer_type | arista.avd.default('undefined') in node_types + ['mlag_peer'] %} -{% do interfaces_done.append(node ~ "," ~ ethernet_interface.name) %} -{% set peer = ethernet_interface.peer %} -{% set peer_interface = ethernet_interface.peer_interface %} -{% if peer is arista.avd.defined and peer_interface is arista.avd.defined and peer ~ "," ~ peer_interface not in interfaces_done %} -{% set topology_link = namespace() %} -{% set topology_link.type = node_facts.switch.type %} -{% set topology_link.node = node %} -{% set topology_link.node_interface = ethernet_interface.name %} -{% set topology_link.node_ip_address = ethernet_interface.ip_address %} -{% if topology_link.node_ip_address is arista.avd.defined %} -{% do assigned_ip_addresses.append(topology_link.node_ip_address) %} -{% endif %} -{% set topology_link.peer_type = ethernet_interface.peer_type %} -{% set topology_link.peer = peer %} -{% set topology_link.peer_interface = peer_interface %} -{% set topology_link.peer_ip_address = none %} -{% set peer_hostvars = hostvars[peer] | arista.avd.default %} -{% if peer_hostvars.ethernet_interfaces is arista.avd.defined %} -{% set peer_ethernet_interface = (peer_hostvars.ethernet_interfaces | selectattr("name", "arista.avd.defined", peer_interface))[0] | arista.avd.default %} -{% if peer_ethernet_interface.ip_address is arista.avd.defined %} -{% set topology_link.peer_ip_address = peer_ethernet_interface.ip_address %} -{% do assigned_ip_addresses.append(topology_link.peer_ip_address) %} -{% endif %} -{% endif %} -{% do topology_links.append(topology_link) %} -{% endif %} -{% endif %} -{% endfor %} -{% endif %} -{% endfor %} -{% set uplink_ipv4_pools = uplink_ipv4_pools | unique | reject("none") %} -{% set loopback_ipv4_pools = loopback_ipv4_pools | unique | reject("none") %} -{% set vtep_loopback_ipv4_pools = vtep_loopback_ipv4_pools | unique | reject("none") %} -# {{ fabric_name }} - -## Table of Contents - - - - -## Fabric Switches and Management IP - -| POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | Serial Number | -| --- | ---- | ---- | ------------- | -------- | -------------------------- | ------------- | -{% for fabric_switch in fabric_switches %} -| {{ fabric_switch.pod }} | {{ fabric_switch.type }} | {{ fabric_switch.node }} | {{ fabric_switch.mgmt_ip }} | {{ fabric_switch.platform }} | {{ fabric_switch.provisioned }} | {{ fabric_switch.serial_number }} | -{% endfor %} - -> Provision status is based on Ansible inventory declaration and do not represent real status from CloudVision. - -### Fabric Switches with inband Management IP - -| POD | Type | Node | Management IP | Inband Interface | -| --- | ---- | ---- | ------------- | ---------------- | -{% for fabric_switch in fabric_switches %} -{% if fabric_switch.inband_mgmt_ip is arista.avd.defined and fabric_switch.inband_mgmt_interface is arista.avd.defined %} -| {{ fabric_switch.pod }} | {{ fabric_switch.type }} | {{ fabric_switch.node }} | {{ fabric_switch.inband_mgmt_ip }} | {{ fabric_switch.inband_mgmt_interface }} | -{% endif %} -{% endfor %} - -## Fabric Topology - -| Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | -| ---- | ---- | -------------- | --------- | ----------| -------------- | -{% for topology_link in topology_links %} -| {{ topology_link.type }} | {{ topology_link.node }} | {{ topology_link.node_interface }} | {{ topology_link.peer_type }} | {{ topology_link.peer }} | {{ topology_link.peer_interface }} | -{% endfor %} - -## Fabric IP Allocation - -### Fabric Point-To-Point Links - -| Uplink IPv4 Pool | Available Addresses | Assigned addresses | Assigned Address % | -| ---------------- | ------------------- | ------------------ | ------------------ | -{% for uplink_ipv4_pool in uplink_ipv4_pools | arista.avd.natural_sort %} -{% set size = uplink_ipv4_pool | ansible.utils.ipaddr('size') %} -{% set used = assigned_ip_addresses | ansible.utils.ipaddr(uplink_ipv4_pool) | length %} -| {{ uplink_ipv4_pool }} | {{ size }} | {{ used }} | {{ (used / size * 100) | round(2,'ceil') }} % | -{% endfor %} - -### Point-To-Point Links Node Allocation - -| Node | Node Interface | Node IP Address | Peer Node | Peer Interface | Peer IP Address | -| ---- | -------------- | --------------- | --------- | -------------- | --------------- | -{% for topology_link in topology_links %} -{% if topology_link.node_ip_address is arista.avd.defined and topology_link.peer_ip_address is arista.avd.defined %} -| {{ topology_link.node }} | {{ topology_link.node_interface }} | {{ topology_link.node_ip_address }} | {{ topology_link.peer }} | {{ topology_link.peer_interface }} | {{ topology_link.peer_ip_address }} | -{% endif %} -{% endfor %} - -### Loopback Interfaces (BGP EVPN Peering) - -| Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| ------------- | ------------------- | ------------------ | ------------------ | -{% for overlay_loopback_network_summary in loopback_ipv4_pools | arista.avd.natural_sort %} -{% set size = overlay_loopback_network_summary | ansible.utils.ipaddr('size') %} -{% set used = assigned_ip_addresses | ansible.utils.ipaddr(overlay_loopback_network_summary) | length %} -| {{ overlay_loopback_network_summary }} | {{ size }} | {{ used }} | {{ (used / size * 100) | round(2,'ceil') }} % | -{% endfor %} - -### Loopback0 Interfaces Node Allocation - -| POD | Node | Loopback0 | -| --- | ---- | --------- | -{% for fabric_switch in fabric_switches %} -{% if fabric_switch.loopback0_ip_address is arista.avd.defined %} -| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.loopback0_ip_address }} | -{% endif %} -{% endfor %} - -{% if isis_nets %} -### ISIS CLNS interfaces - -| POD | Node | CLNS Address | -| --- | ---- | ------------ | -{% for fabric_switch in fabric_switches %} -{% if fabric_switch.router_isis_net is arista.avd.defined %} -| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.router_isis_net }} | -{% endif %} -{% endfor %} - -{% endif %} -### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) - -| VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | -| --------------------- | ------------------- | ------------------ | ------------------ | -{% for vtep_loopback_network_summary in vtep_loopback_ipv4_pools | arista.avd.natural_sort %} -{% set size = vtep_loopback_network_summary | ansible.utils.ipaddr('size') %} -{% set used = assigned_ip_addresses | ansible.utils.ipaddr(vtep_loopback_network_summary) | length %} -| {{ vtep_loopback_network_summary }} | {{ size }} | {{ used }} | {{ (used / size * 100) | round(2,'ceil') }} % | -{% endfor %} - -### VTEP Loopback Node allocation - -| POD | Node | Loopback1 | -| --- | ---- | --------- | -{% for fabric_switch in fabric_switches %} -{% if fabric_switch.loopback1_ip_address is arista.avd.defined %} -| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.loopback1_ip_address }} | -{% endif %} -{% endfor %} -{% if eos_designs_documentation.connected_endpoints is arista.avd.defined(true) %} - -{% include 'documentation/connected-endpoints.j2' %} -{% endif %} diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-p2p-links.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-p2p-links.j2 deleted file mode 100644 index a013792c783..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-p2p-links.j2 +++ /dev/null @@ -1,50 +0,0 @@ -{# - Copyright (c) 2023-2024 Arista Networks, Inc. - Use of this source code is governed by the Apache License 2.0 - that can be found in the LICENSE file. -#} -Type,Node,Node Interface,Leaf IP Address,Peer Type,Peer Node,Peer Interface,Peer IP Address -{% set interfaces_done = [] %} -{% if node_type_keys is arista.avd.defined %} -{% set node_types = node_type_keys | map(attribute="type") %} -{% else %} -{% set default_node_types = { - "l3ls-evpn": ["spine", "l3leaf", "l2leaf", "super-spine", "overlay-controller"], - "mpls": ["p", "pe", "rr"], - "l2ls": ["l3spine", "spine", "leaf"] - } %} -{% set node_types = default_node_types[design.type | arista.avd.default("l3ls-evpn")] %} -{% endif %} -{% for node in groups[fabric_name] | arista.avd.natural_sort %} -{% set node_hostvars = hostvars[node] %} -{% set node_facts = avd_switch_facts[node] %} -{% if node_facts.switch.type | arista.avd.default('undefined') in node_types %} -{% for ethernet_interface in node_hostvars.ethernet_interfaces | arista.avd.natural_sort("name") %} -{% if ethernet_interface.type is arista.avd.defined('routed') %} -{% if ethernet_interface.peer_type | arista.avd.default('undefined') in node_types %} -{% do interfaces_done.append(node ~ "," ~ ethernet_interface.name) %} -{% set peer = ethernet_interface.peer %} -{% set peer_interface = ethernet_interface.peer_interface %} -{% if peer is arista.avd.defined and peer_interface is arista.avd.defined and peer ~ "," ~ peer_interface not in interfaces_done %} -{% set csv_line = [] %} -{% do csv_line.append(node_facts.switch.type) %} -{% do csv_line.append(node) %} -{% do csv_line.append(ethernet_interface.name) %} -{% do csv_line.append(ethernet_interface.ip_address | arista.avd.default("")) %} -{% do csv_line.append(ethernet_interface.peer_type) %} -{% do csv_line.append(peer) %} -{% do csv_line.append(peer_interface) %} -{% set peer_ip_address = "" %} -{% set peer_hostvars = hostvars[peer] | arista.avd.default %} -{% if peer_hostvars.ethernet_interfaces is arista.avd.defined %} -{% set peer_ethernet_interface = (peer_hostvars.ethernet_interfaces | selectattr("name", "arista.avd.defined", peer_interface))[0] | arista.avd.default %} -{% set peer_ip_address = peer_ethernet_interface.ip_address | arista.avd.default("") %} -{% endif %} -{% do csv_line.append(peer_ip_address) %} -{{ csv_line | join(",") }} -{% endif %} -{% endif %} -{% endif %} -{% endfor %} -{% endif %} -{% endfor %} diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-topology.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-topology.j2 deleted file mode 100644 index 4a3ae8c6fee..00000000000 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/documentation/fabric-topology.j2 +++ /dev/null @@ -1,33 +0,0 @@ -{# - Copyright (c) 2023-2024 Arista Networks, Inc. - Use of this source code is governed by the Apache License 2.0 - that can be found in the LICENSE file. -#} -Node Type,Node,Node Interface,Peer Type,Peer Node,Peer Interface,Node Interface Enabled -{% if node_type_keys is arista.avd.defined %} -{% set node_types = node_type_keys | map(attribute="type") %} -{% else %} -{% set default_node_types = { - "l3ls-evpn": ["spine", "l3leaf", "l2leaf", "super-spine", "overlay-controller"], - "mpls": ["p", "pe", "rr"], - "l2ls": ["l3spine", "spine", "leaf"] - } %} -{% set node_types = default_node_types[design.type | arista.avd.default("l3ls-evpn")] %} -{% endif %} -{% for node in groups[fabric_name] | arista.avd.natural_sort %} -{% set node_hostvars = hostvars[node] %} -{% set node_facts = avd_switch_facts[node] %} -{% if node_facts.switch.type | arista.avd.default('undefined') in node_types %} -{% for ethernet_interface in node_hostvars.ethernet_interfaces | arista.avd.natural_sort("name") %} -{% set csv_line = [] %} -{% do csv_line.append(node_facts.switch.type) %} -{% do csv_line.append(node) %} -{% do csv_line.append(ethernet_interface.name) %} -{% do csv_line.append(ethernet_interface.peer_type | arista.avd.default("")) %} -{% do csv_line.append(ethernet_interface.peer | arista.avd.default("")) %} -{% do csv_line.append(ethernet_interface.peer_interface | arista.avd.default("")) %} -{% do csv_line.append(not ethernet_interface.shutdown | arista.avd.default(false)) %} -{{ csv_line | join(",") }} -{% endfor %} -{% endif %} -{% endfor %} diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/ethernet-interfaces.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/ethernet-interfaces.j2 index b10c20756ab..e151bfa6af3 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/ethernet-interfaces.j2 +++ b/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/ethernet-interfaces.j2 @@ -3,4 +3,4 @@ Use of this source code is governed by the Apache License 2.0 that can be found in the LICENSE file. #} -MLAG_PEER_{{ switch.mlag_peer }}_{{ mlag_interface }} +MLAG_PEER_{{ mlag_peer }}_{{ mlag_interface }} diff --git a/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/port-channel-interfaces.j2 b/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/port-channel-interfaces.j2 index 89c72c2a55d..d39aaa22c38 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/port-channel-interfaces.j2 +++ b/ansible_collections/arista/avd/roles/eos_designs/templates/interface_descriptions/mlag/port-channel-interfaces.j2 @@ -3,4 +3,4 @@ Use of this source code is governed by the Apache License 2.0 that can be found in the LICENSE file. #} -MLAG_PEER_{{ switch.mlag_peer }}_Po{{ switch.mlag_port_channel_id }} +MLAG_PEER_{{ mlag_peer }}_Po{{ mlag_port_channel_id }} diff --git a/ansible_collections/arista/avd/roles/eos_designs/vars/main.yml b/ansible_collections/arista/avd/roles/eos_designs/vars/main.yml index 025f1d1503d..a971d9ee394 100644 --- a/ansible_collections/arista/avd/roles/eos_designs/vars/main.yml +++ b/ansible_collections/arista/avd/roles/eos_designs/vars/main.yml @@ -11,9 +11,6 @@ role_schema_fragments_dir: "{{ role_schema_dir }}/{{ role_schema_fragments_dir_n # Schema fragments glob role_schema_fragments_file_glob: "*.schema.yml" role_schema_fragments_glob: "{{ role_schema_fragments_dir }}/{{ role_schema_fragments_file_glob }}" -# JSON Schema file -role_schema_json_schema_file_name: "{{ role_name }}.jsonschema.json" -role_schema_json_schema_path: "{{ role_schema_dir }}/{{ role_schema_json_schema_file_name }}" # Documentation folder role_documentation_dir_name: "docs" diff --git a/ansible_collections/arista/avd/roles/eos_snapshot/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_snapshot/tasks/main.yml index f4150284cac..f27b57458f8 100644 --- a/ansible_collections/arista/avd/roles/eos_snapshot/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_snapshot/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -16,6 +15,7 @@ - name: Create required output directories if not present delegate_to: localhost + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -30,8 +30,8 @@ path: "{{ snapshots_backup_dir }}/{{ inventory_hostname }}" state: directory mode: "0o775" - when: ('text' in output_format) or - ('markdown' in output_format) + when: avd_create_directories | arista.avd.default(true) and + (('text' in output_format) or ('markdown' in output_format)) - name: Run show commands on remote EOS devices with text output arista.eos.eos_command: diff --git a/ansible_collections/arista/avd/roles/eos_validate_state/README.md b/ansible_collections/arista/avd/roles/eos_validate_state/README.md index 2a5a2c865da..2f12e381cd6 100644 --- a/ansible_collections/arista/avd/roles/eos_validate_state/README.md +++ b/ansible_collections/arista/avd/roles/eos_validate_state/README.md @@ -17,14 +17,16 @@ title: Ansible Collection Role eos_validate_state **eos_validate_state** role: - Consumes structured EOS configuration file, the same input as the role [eos_cli_config_gen](../eos_cli_config_gen/README.md). This input is considered the system of record (the desired state). -- Connects to EOS devices via eAPI to collect operational states (actual state). **This requires access to the configured devices.** -- Compares the actual states against the desired state. +- Leverages [Arista Network Test Automation (ANTA)](https://anta.arista.com/stable/) framework to: + - Connect to EOS devices via eAPI to collect operational states (actual state). **This requires access to the configured devices.** + - Compare the actual states against the desired state. - Generates CSV and Markdown reports of the results. -- Supports Ansible `check` mode. When running in `check` mode, `eos_validate_state` produces a report of tests that would be performed without running the tests on your network. Tests will be marked as `NOT RUN` in the final reports. This can be useful to inspect which tests are going to be run, +- Supports Ansible `check` mode. When running in `check` mode, `eos_validate_state` produces a report of tests that would be performed without running the tests on your network. Tests will be marked as `NOT RUN` in the final reports. This can be useful to inspect which tests are going to be run. + +```shell +ansible-playbook playbooks/fabric-validate.yaml --check +``` - ```shell - ansible-playbook playbooks/fabric-validate.yaml --check - ``` - This role supports additional level of verbosity in Ansible. In particular, when run with `-v`, logs gives visibility on which [test categories](#test-categories) are being removed from a device catalog by AVD according to the structured configurations. ## Role Inputs and Outputs @@ -36,20 +38,24 @@ Figure 1 below provides a visualization of the role's inputs, outputs, and tasks **Inputs:** -- Device structured configuration generated by abstraction role. -- Device state with `eos_command` module. -- CSV report, leveraged to generate Markdown summary report. +- Devices' structured configurations generated by abstraction role. +- Device state (collected during ANTA test execution). **Outputs:** +- JSON test results (per device). +- ANTA test catalog (per device, optional). - CSV report. -- Markdown summary report. +- Markdown report. **Tasks:** -1. Include device structured configuration. -2. Generate per device test catalog (optionally store them), run the tests against each device using the test catalogs. The results are stored as json files. -3. Create CSV report and Markdown reports. +1. Include devices' structured configurations. +2. Generate per-device test catalogs: + - Optionally store catalogs + - Execute tests using ANTA + - Store results as JSON +3. Generate CSV and Markdown reports. !!! tip You can provide your own custom ANTA catalogs using any of the available [ANTA tests](https://anta.arista.com/stable/api/tests/) to the AVD `eos_validate_state` role. Please refer to the [Custom ANTA catalog](#custom-anta-catalog) section for more details. @@ -83,6 +89,9 @@ Figure 1 below provides a visualization of the role's inputs, outputs, and tasks - AvdTestLoopback0Reachability - VerifyReachability: Validate loopback reachability between devices. +- AvdTestDpsReachability + - VerifyReachability: Validate DPS reachability between devices. + - AvdTestLLDPTopology - VerifyLLDPNeighbors: Validate LLDP topology. @@ -197,9 +206,9 @@ The default accepted manufacturers are "Arastra, Inc." and "Arista Networks." To By default, all fans and power supplies are expected to be in the `ok` state. However chassis switches may intentionally be missing some fans or power supplies as they are not fully populated. In this case, `accepted_fan_states` and `accepted_pwr_supply_states` can be updated to include the `notInserted` state to avoid failures on missing fans/power supplies. -Two user-defined variables control the generation of CSV and MD reports. These are `validation_role.validation_report_csv` and `validation_role.validation_report_md` respectively. +Two user-defined variables control the generation of CSV and MD reports. These are `validation_report_csv` and `validation_report_md` respectively. -The variable `validation_role.only_failed_tests` is used to limit the number of tests shown in the reports. When set, all reports will only show failed tests. +The variable `only_failed_tests` is used to limit the number of tests shown in the reports. When set, all reports will only show failed tests. ## Requirements @@ -232,7 +241,7 @@ When specifying a group, it must be a group from the Ansible inventory. The cust ansible.builtin.import_role: name: arista.avd.eos_validate_state vars: - # To save catalogs + # Optionally save catalogs save_catalog: true ``` @@ -267,11 +276,13 @@ all: ### inventory/group_vars/DC1.yml ```yaml -ansible_user: 'arista' -ansible_password: 'arista' +ansible_user: arista +ansible_password: arista ansible_network_os: eos ansible_become: yes ansible_become_method: enable +ansible_become_password: arista +ansible_connection: httpapi fabric_name: "DC1" diff --git a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/constants.py b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/constants.py index a05aa0fcac6..34b35b7e8b7 100644 --- a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/constants.py +++ b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/constants.py @@ -8,6 +8,7 @@ from .tests import ( AvdTestAPIHttpsSSL, AvdTestBGP, + AvdTestDpsReachability, AvdTestHardware, AvdTestInbandReachability, AvdTestInterfacesState, @@ -42,6 +43,7 @@ AvdTestAPIHttpsSSL: {}, AvdTestIPSecurity: {}, AvdTestStun: {}, + AvdTestDpsReachability: {}, } """ A dict of all AVD eos_validate_state test classes. diff --git a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/__init__.py b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/__init__.py index 19ecb642c46..05313ea6f02 100644 --- a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/__init__.py +++ b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/__init__.py @@ -1,7 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from .avdtestconnectivity import AvdTestInbandReachability, AvdTestLLDPTopology, AvdTestLoopback0Reachability, AvdTestP2PIPReachability +from .avdtestconnectivity import AvdTestDpsReachability, AvdTestInbandReachability, AvdTestLLDPTopology, AvdTestLoopback0Reachability, AvdTestP2PIPReachability from .avdtesthardware import AvdTestHardware from .avdtestinterfaces import AvdTestInterfacesState from .avdtestmlag import AvdTestMLAG @@ -25,4 +25,5 @@ "AvdTestAPIHttpsSSL", "AvdTestStun", "AvdTestIPSecurity", + "AvdTestDpsReachability", ] diff --git a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/avdtestconnectivity.py b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/avdtestconnectivity.py index f44f518f0ce..12c6d42bc48 100644 --- a/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/avdtestconnectivity.py +++ b/ansible_collections/arista/avd/roles/eos_validate_state/python_modules/tests/avdtestconnectivity.py @@ -36,7 +36,7 @@ def test_definition(self) -> dict | None: for idx, interface in enumerate(ethernet_interfaces): self.update_interface_shutdown(interface) - if not self.validate_data(data=interface, data_path=f"ethernet_interfaces.[{idx}]", required_keys=required_keys, type="routed", shutdown=False): + if not self.validate_data(data=interface, data_path=f"ethernet_interfaces.[{idx}]", required_keys=required_keys, shutdown=False): continue if not self.is_peer_available(peer := interface["peer"]): @@ -126,16 +126,12 @@ def test_definition(self) -> dict | None: anta_tests = [] # Skip the test if the host is not a VTEP (no VXLAN interface) - if get(self.structured_config, "vxlan_interface") is None: + if not self.is_vtep(): LOGGER.info("Host is not a VTEP since it doesn't have a VXLAN interface. %s is skipped.", self.__class__.__name__) return None # TODO: For now, we exclude WAN VTEPs from testing - # TODO: Remove the support of Vxlan1 in AVD 6.0.0 version - if "Dps" in default( - get(self.structured_config, "vxlan_interface.vxlan1.vxlan.source_interface"), - get(self.structured_config, "vxlan_interface.Vxlan1.vxlan.source_interface"), - ): + if self.is_wan_vtep(): LOGGER.info("Host is a VTEP with a DPS source interface for VXLAN. For now, WAN VTEPs are excluded. %s is skipped.", self.__class__.__name__) return None @@ -161,6 +157,52 @@ def test_definition(self) -> dict | None: return {self.anta_module: anta_tests} if anta_tests else None +class AvdTestDpsReachability(AvdTestBase): + """AvdTestDpsReachability class for DPS reachability tests.""" + + anta_module = "anta.tests.connectivity" + + @cached_property + def test_definition(self) -> dict | None: + """ + Generates the proper ANTA test definition for all DPS reachability tests. + + Returns: + dict | None: ANTA test definition if there are tests to run, otherwise None. + """ + anta_tests = [] + + # Skip the test if the host is not a WAN VTEP + if not self.is_wan_vtep(): + LOGGER.info("Host is not a WAN VTEP. %s is skipped.", self.__class__.__name__) + return None + + # TODO: Remove the support of Vxlan1 in AVD 6.0.0 version + dps_source_interface = default( + get(self.structured_config, "vxlan_interface.vxlan1.vxlan.source_interface"), + get(self.structured_config, "vxlan_interface.Vxlan1.vxlan.source_interface"), + ) + dps_ip = self.get_interface_ip("dps_interfaces", dps_source_interface) + if not dps_ip: + return None + src_ip = str(ip_interface(dps_ip).ip) + for dst_node, dst_ip in self.dps_mapping: + if not self.is_peer_available(dst_node): + continue + + custom_field = f"Source: {dps_source_interface} (IP: {src_ip}) - Destination: {dst_node} {dps_source_interface} (IP: {dst_ip})" + anta_tests.append( + { + "VerifyReachability": { + "hosts": [{"source": src_ip, "destination": dst_ip, "vrf": "default", "repeat": 1}], + "result_overwrite": {"custom_field": custom_field}, + } + } + ) + + return {self.anta_module: anta_tests} if anta_tests else None + + class AvdTestLLDPTopology(AvdTestBase): """AvdTestLLDPTopology class for the LLDP topology tests.""" diff --git a/ansible_collections/arista/avd/roles/eos_validate_state/tasks/main.yml b/ansible_collections/arista/avd/roles/eos_validate_state/tasks/main.yml index ca3fcb1a7a6..fd588a8a3fd 100644 --- a/ansible_collections/arista/avd/roles/eos_validate_state/tasks/main.yml +++ b/ansible_collections/arista/avd/roles/eos_validate_state/tasks/main.yml @@ -3,9 +3,8 @@ # that can be found in the LICENSE file. --- - name: Verify Requirements - tags: [always, avd_req] delegate_to: localhost - when: avd_requirements is not defined + when: avd_requirements is not defined and avd_verify_requirements | default(true) arista.avd.verify_requirements: requirements: "{{ lookup('file', requirements_path ~ '/requirements.txt').splitlines() }}" avd_ignore_requirements: "{{ avd_ignore_requirements | default(false) }}" @@ -15,6 +14,7 @@ register: avd_requirements - name: Create required output directories if not present + when: avd_create_directories | arista.avd.default(true) ansible.builtin.file: path: "{{ item }}" state: directory @@ -62,5 +62,3 @@ check_mode: false when: - validation_report_csv | bool or validation_report_md | bool - tags: - - reports diff --git a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_all_parameters.yml b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_all_parameters.yml index 2cdfbfb0b99..577ff37c9d7 100644 --- a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_all_parameters.yml +++ b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_all_parameters.yml @@ -1,15 +1,14 @@ changed: false cvp_configlets: - Prefix_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-L2LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -22,21 +21,20 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ \ no shutdown\n!\nend\n" - Prefix_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-L2LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -49,21 +47,21 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF2B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server02_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.18/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ \ no shutdown\n!\nend\n" - Prefix_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -106,7 +104,7 @@ cvp_configlets: \ address 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -256,16 +254,16 @@ cvp_configlets: \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -308,7 +306,7 @@ cvp_configlets: \ address 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -458,16 +456,16 @@ cvp_configlets: \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -510,7 +508,7 @@ cvp_configlets: \ address 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -660,16 +658,16 @@ cvp_configlets: \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -712,7 +710,7 @@ cvp_configlets: \ address 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -862,15 +860,15 @@ cvp_configlets: \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE1\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-SPINE1: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-SPINE1\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode none\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15\ + \ role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n\ @@ -882,7 +880,7 @@ cvp_configlets: \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n\ \ no switchport\n ip address 172.31.255.12/31\n!\ninterface Loopback0\n \ \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.1/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ + !\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf\ \ MGMT\n ip address 10.255.0.11/24\n!\nip routing\nno ip routing vrf MGMT\n\ !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ @@ -918,15 +916,15 @@ cvp_configlets: \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ \ !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE2\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_DC1-SPINE2: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-SPINE2\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode none\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15\ + \ role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n\ @@ -938,7 +936,7 @@ cvp_configlets: \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n\ \ no switchport\n ip address 172.31.255.14/31\n!\ninterface Loopback0\n \ \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.2/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ + !\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf\ \ MGMT\n ip address 10.255.0.12/24\n!\nip routing\nno ip routing vrf MGMT\n\ !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ @@ -974,16 +972,15 @@ cvp_configlets: \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ \ !\n vrf MGMT\n no shutdown\n!\nend\n" - Prefix_default_filter: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec\ - \ /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_default_filter: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -996,7 +993,7 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ diff --git a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_blank_prefix.yml b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_blank_prefix.yml index 1dbdcfd838f..71391f7a92c 100644 --- a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_blank_prefix.yml +++ b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_with_blank_prefix.yml @@ -1,15 +1,14 @@ changed: false cvp_configlets: - _DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-L2LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -22,21 +21,20 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ \ no shutdown\n!\nend\n" - _DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-L2LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -49,21 +47,21 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF2B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server02_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.18/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ \ no shutdown\n!\nend\n" - _DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -106,7 +104,7 @@ cvp_configlets: \ address 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -256,16 +254,16 @@ cvp_configlets: \ router-id 192.168.255.3\n neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - _DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -308,7 +306,7 @@ cvp_configlets: \ address 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -458,16 +456,16 @@ cvp_configlets: \ router-id 192.168.255.4\n neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - _DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -510,7 +508,7 @@ cvp_configlets: \ address 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -660,16 +658,16 @@ cvp_configlets: \ router-id 192.168.255.5\n neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - _DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id\ - \ 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ - !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree mst 0 priority\ + \ 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role\ + \ network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -712,7 +710,7 @@ cvp_configlets: \ address 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n\ \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n \ \ description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n\ - \ ip address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n\ + \ ip address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n\ \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n\ \ ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n\ @@ -862,15 +860,15 @@ cvp_configlets: \ router-id 192.168.255.6\n neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n\ \ redistribute connected\n!\nmanagement api http-commands\n protocol https\n\ \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - _DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE1\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-SPINE1: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-SPINE1\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode none\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15\ + \ role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n\ @@ -882,7 +880,7 @@ cvp_configlets: \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n\ \ no switchport\n ip address 172.31.255.12/31\n!\ninterface Loopback0\n \ \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.1/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ + !\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf\ \ MGMT\n ip address 10.255.0.11/24\n!\nip routing\nno ip routing vrf MGMT\n\ !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ @@ -918,15 +916,15 @@ cvp_configlets: \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ \ !\n vrf MGMT\n no shutdown\n!\nend\n" - _DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-SPINE2\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable\ - \ password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _DC1-SPINE2: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-SPINE2\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT\ + \ 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf MGMT\ + \ 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode none\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15\ + \ role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n\ @@ -938,7 +936,7 @@ cvp_configlets: \ description P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n\ \ no switchport\n ip address 172.31.255.14/31\n!\ninterface Loopback0\n \ \ description EVPN_Overlay_Peering\n no shutdown\n ip address 192.168.255.2/32\n\ - !\ninterface Management1\n description oob_management\n no shutdown\n vrf\ + !\ninterface Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf\ \ MGMT\n ip address 10.255.0.12/24\n!\nip routing\nno ip routing vrf MGMT\n\ !\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n seq 10 permit 192.168.255.0/24\ \ eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP\ @@ -974,16 +972,15 @@ cvp_configlets: \ no neighbor EVPN-OVERLAY-PEERS activate\n neighbor IPv4-UNDERLAY-PEERS\ \ activate\n!\nmanagement api http-commands\n protocol https\n no shutdown\n\ \ !\n vrf MGMT\n no shutdown\n!\nend\n" - _default_filter: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr\ - \ -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + _default_filter: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -996,7 +993,7 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ diff --git a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_without_extension.yml b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_without_extension.yml index 629f1b0d14c..01a82b76056 100644 --- a/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_without_extension.yml +++ b/ansible_collections/arista/avd/tests/inventory/configlet_build_config/expected_output/expected_without_extension.yml @@ -1,15 +1,14 @@ changed: false cvp_configlets: - Prefix_default_extension: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n\ - \ exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata\ - \ -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n\ - !\nvlan internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode\ - \ 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\n\ - ip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface\ - \ vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server\ - \ vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0\ - \ priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege\ - \ 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ + Prefix_default_extension: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910\ + \ -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent\ + \ -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n\ + !\ntransceiver qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n\ + !\nhostname DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf\ + \ MGMT 192.168.2.1\n!\nntp local-interface vrf MGMT Management1\nntp server vrf\ + \ MGMT 0.fr.pool.ntp.org prefer\nntp server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree\ + \ mode mstp\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable password\n\ + !\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\n\ username ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\n\ username cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n\ !\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n\ @@ -22,7 +21,7 @@ cvp_configlets: \ 1 mode active\n!\ninterface Ethernet2\n description DC1-LEAF1B_Ethernet5\n\ \ no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description\ \ server01_Eth0\n no shutdown\n switchport\n switchport access vlan 110\n\ - \ switchport mode access\n!\ninterface Management1\n description oob_management\n\ + \ switchport mode access\n!\ninterface Management1\n description OOB_MANAGEMENT\n\ \ no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno\ \ ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement\ \ api http-commands\n protocol https\n no shutdown\n !\n vrf MGMT\n \ diff --git a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_ansible_facts.yml b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_ansible_facts.yml index 81939ce68f7..0bb0276f7e5 100644 --- a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_ansible_facts.yml +++ b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_ansible_facts.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.json b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.json index 94425ef17f1..9e84050112b 100644 --- a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.json +++ b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.json @@ -1 +1 @@ -{"hostname": "testhost", "is_deployed": true, "service_routing_protocols_model": "multi-agent", "vlan_internal_order": {"allocation": "ascending", "range": {"beginning": 1006, "ending": 1199}}, "vrfs": [{"name": "MGMT", "ip_routing": false}], "management_api_http": {"enable_vrfs": [{"name": "MGMT"}], "enable_https": true}, "ip_igmp_snooping": {"globally_enabled": true}} \ No newline at end of file +{"hostname": "testhost", "is_deployed": true, "service_routing_protocols_model": "multi-agent", "vlan_internal_order": {"allocation": "ascending", "range": {"beginning": 1006, "ending": 1199}}, "aaa_root": {"disabled": true}, "config_end": true, "enable_password": {"disabled": true}, "transceiver_qsfp_default_mode_4x10": true, "vrfs": [{"name": "MGMT", "ip_routing": false}], "management_api_http": {"enable_vrfs": [{"name": "MGMT"}], "enable_https": true}, "ip_igmp_snooping": {"globally_enabled": true}} \ No newline at end of file diff --git a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.yml b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.yml index e32a80c6c7e..321c5208f17 100644 --- a/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.yml +++ b/ansible_collections/arista/avd/tests/inventory/eos_designs_structured_config/expected_output/eos_designs_structured_config_test_with_dest.yml @@ -6,6 +6,12 @@ vlan_internal_order: range: beginning: 1006 ending: 1199 +aaa_root: + disabled: true +config_end: true +enable_password: + disabled: true +transceiver_qsfp_default_mode_4x10: true vrfs: - name: MGMT ip_routing: false diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF1A.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF1A.cfg index 465a314628d..6b0e2392855 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF1A.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF1A.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -76,7 +75,7 @@ interface Ethernet5 switchport mode access ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.17/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF2A.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF2A.cfg index 52a85eb8087..99f4e390d12 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF2A.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-L2LEAF2A.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -76,7 +75,7 @@ interface Ethernet5 switchport mode access ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.18/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1A.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1A.cfg index 9b2651712f3..e01551eb6ce 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1A.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1A.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -210,7 +209,7 @@ interface Loopback100 ip address 10.255.1.3/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.13/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1B.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1B.cfg index ced0b9a8ecf..865936ca5ce 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1B.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF1B.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -210,7 +209,7 @@ interface Loopback100 ip address 10.255.1.4/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.14/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2A.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2A.cfg index ada0dd7913d..94bd3da685d 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2A.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2A.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -210,7 +209,7 @@ interface Loopback100 ip address 10.255.1.5/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.15/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2B.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2B.cfg index 178d1df4930..c750c9da949 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2B.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-LEAF2B.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -210,7 +209,7 @@ interface Loopback100 ip address 10.255.1.6/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.16/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE1.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE1.cfg index f76715fe277..6c33fdfffc8 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE1.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE1.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -63,7 +62,7 @@ interface Loopback0 ip address 192.168.255.1/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.11/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE2.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE2.cfg index d8a47a98cd6..9a05a51e15a 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE2.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/DC1-SPINE2.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -63,7 +62,7 @@ interface Loopback0 ip address 192.168.255.2/32 ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.12/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/default_extension.conf b/ansible_collections/arista/avd/tests/inventory/intended/configs/default_extension.conf index 465a314628d..6b0e2392855 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/default_extension.conf +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/default_extension.conf @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -76,7 +75,7 @@ interface Ethernet5 switchport mode access ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.17/24 diff --git a/ansible_collections/arista/avd/tests/inventory/intended/configs/default_filter.cfg b/ansible_collections/arista/avd/tests/inventory/intended/configs/default_filter.cfg index 465a314628d..6b0e2392855 100644 --- a/ansible_collections/arista/avd/tests/inventory/intended/configs/default_filter.cfg +++ b/ansible_collections/arista/avd/tests/inventory/intended/configs/default_filter.cfg @@ -1,4 +1,3 @@ -!RANCID-CONTENT-TYPE: arista ! daemon TerminAttr exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs @@ -76,7 +75,7 @@ interface Ethernet5 switchport mode access ! interface Management1 - description oob_management + description OOB_MANAGEMENT no shutdown vrf MGMT ip address 10.255.0.17/24 diff --git a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_all_param.yml b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_all_param.yml index b2940b253b3..24fb44828e5 100644 --- a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_all_param.yml +++ b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_all_param.yml @@ -1,14 +1,13 @@ cvp_configlets: - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -51,7 +50,7 @@ cvp_configlets: 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -197,16 +196,15 @@ cvp_configlets: \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -249,7 +247,7 @@ cvp_configlets: 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -395,16 +393,15 @@ cvp_configlets: \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -447,7 +444,7 @@ cvp_configlets: 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -593,16 +590,15 @@ cvp_configlets: \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -645,7 +641,7 @@ cvp_configlets: 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n diff --git a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_as_string.yml b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_as_string.yml index b2940b253b3..24fb44828e5 100644 --- a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_as_string.yml +++ b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_as_string.yml @@ -1,14 +1,13 @@ cvp_configlets: - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -51,7 +50,7 @@ cvp_configlets: 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -197,16 +196,15 @@ cvp_configlets: \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -249,7 +247,7 @@ cvp_configlets: 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -395,16 +393,15 @@ cvp_configlets: \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -447,7 +444,7 @@ cvp_configlets: 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -593,16 +590,15 @@ cvp_configlets: \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -645,7 +641,7 @@ cvp_configlets: 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n diff --git a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_empty_string.yml b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_empty_string.yml index cf42b79d7d6..177a2b0f63d 100644 --- a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_empty_string.yml +++ b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_with_device_filter_empty_string.yml @@ -1,14 +1,13 @@ cvp_configlets: - AVD_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-L2LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -21,20 +20,19 @@ cvp_configlets: Ethernet2\n description DC1-LEAF1B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server01_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF2A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-L2LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -47,20 +45,19 @@ cvp_configlets: Ethernet2\n description DC1-LEAF2B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server02_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.18/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -103,7 +100,7 @@ cvp_configlets: 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -249,16 +246,15 @@ cvp_configlets: \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -301,7 +297,7 @@ cvp_configlets: 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -447,16 +443,15 @@ cvp_configlets: \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -499,7 +494,7 @@ cvp_configlets: 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -645,16 +640,15 @@ cvp_configlets: \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -697,7 +691,7 @@ cvp_configlets: 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -843,15 +837,15 @@ cvp_configlets: \ neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-SPINE1\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable - password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-SPINE1: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-SPINE1\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno + enable password\n!\nusername admin privilege 15 role network-admin secret sha512 + $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n @@ -863,7 +857,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.12/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 192.168.255.1/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 10.255.0.11/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.11/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter @@ -897,15 +891,15 @@ cvp_configlets: activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement api http-commands\n \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-SPINE2\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable - password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-SPINE2: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-SPINE2\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno + enable password\n!\nusername admin privilege 15 role network-admin secret sha512 + $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n @@ -917,7 +911,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.14/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 192.168.255.2/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 10.255.0.12/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.12/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter @@ -951,16 +945,15 @@ cvp_configlets: activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement api http-commands\n \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_default_filter: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec - /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_default_filter: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -973,7 +966,7 @@ cvp_configlets: Ethernet2\n description DC1-LEAF1B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server01_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" diff --git a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_device_filter.yml b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_device_filter.yml index cf42b79d7d6..177a2b0f63d 100644 --- a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_device_filter.yml +++ b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_device_filter.yml @@ -1,14 +1,13 @@ cvp_configlets: - AVD_DC1-L2LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-L2LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -21,20 +20,19 @@ cvp_configlets: Ethernet2\n description DC1-LEAF1B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server01_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-L2LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF2A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-L2LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -47,20 +45,19 @@ cvp_configlets: Ethernet2\n description DC1-LEAF2B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server02_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.18/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -103,7 +100,7 @@ cvp_configlets: 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -249,16 +246,15 @@ cvp_configlets: \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -301,7 +297,7 @@ cvp_configlets: 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -447,16 +443,15 @@ cvp_configlets: \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -499,7 +494,7 @@ cvp_configlets: 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -645,16 +640,15 @@ cvp_configlets: \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -697,7 +691,7 @@ cvp_configlets: 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -843,15 +837,15 @@ cvp_configlets: \ neighbor 10.255.251.4 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE1: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-SPINE1\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable - password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-SPINE1: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-SPINE1\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno + enable password\n!\nusername admin privilege 15 role network-admin secret sha512 + $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet1\n @@ -863,7 +857,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet1\n no shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.12/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 192.168.255.1/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 10.255.0.11/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.11/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter @@ -897,15 +891,15 @@ cvp_configlets: activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement api http-commands\n \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-SPINE2: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-SPINE2\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno enable - password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-SPINE2: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-SPINE2\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode none\n!\nno aaa root\nno + enable password\n!\nusername admin privilege 15 role network-admin secret sha512 + $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvrf instance MGMT\n!\ninterface Ethernet1\n description P2P_LINK_TO_DC1-LEAF1A_Ethernet2\n @@ -917,7 +911,7 @@ cvp_configlets: P2P_LINK_TO_DC1-LEAF2B_Ethernet2\n no shutdown\n mtu 1500\n no switchport\n \ ip address 172.31.255.14/31\n!\ninterface Loopback0\n description EVPN_Overlay_Peering\n \ no shutdown\n ip address 192.168.255.2/32\n!\ninterface Management1\n description - oob_management\n no shutdown\n vrf MGMT\n ip address 10.255.0.12/24\n!\nip + OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.12/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n \ seq 10 permit 192.168.255.0/24 eq 32\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nroute-map RM-CONN-2-BGP permit 10\n match ip address prefix-list PL-LOOPBACKS-EVPN-OVERLAY\n!\nrouter @@ -951,16 +945,15 @@ cvp_configlets: activate\n !\n address-family ipv4\n no neighbor EVPN-OVERLAY-PEERS activate\n \ neighbor IPv4-UNDERLAY-PEERS activate\n!\nmanagement api http-commands\n \ protocol https\n no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_default_filter: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec - /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-L2LEAF1A\nip name-server - vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface - vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server - vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst 0 priority - 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege 15 role - network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_default_filter: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-L2LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nspanning-tree mst + 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege + 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -973,7 +966,7 @@ cvp_configlets: Ethernet2\n description DC1-LEAF1B_Ethernet5\n no shutdown\n channel-group 1 mode active\n!\ninterface Ethernet5\n description server01_Eth0\n no shutdown\n \ switchport\n switchport access vlan 110\n switchport mode access\n!\ninterface - Management1\n description oob_management\n no shutdown\n vrf MGMT\n ip + Management1\n description OOB_MANAGEMENT\n no shutdown\n vrf MGMT\n ip address 10.255.0.17/24\n!\nip routing\nno ip routing vrf MGMT\n!\nip route vrf MGMT 0.0.0.0/0 10.255.0.1\n!\nmanagement api http-commands\n protocol https\n \ no shutdown\n !\n vrf MGMT\n no shutdown\n!\nend\n" diff --git a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_inventory.yml b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_inventory.yml index ac71e377af9..ef728381beb 100644 --- a/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_inventory.yml +++ b/ansible_collections/arista/avd/tests/inventory/inventory_to_container/expected_output/expected_without_inventory.yml @@ -1,14 +1,13 @@ cvp_configlets: - AVD_DC1-LEAF1A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -51,7 +50,7 @@ cvp_configlets: 192.168.255.3/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.3/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.3/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.13/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -197,16 +196,15 @@ cvp_configlets: \ neighbor 10.255.251.1 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF1B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF1B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF1B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF1B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -249,7 +247,7 @@ cvp_configlets: 192.168.255.4/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.3/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.4/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.4/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.14/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -395,16 +393,15 @@ cvp_configlets: \ neighbor 10.255.251.0 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2A: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2A\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2A: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2A\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -447,7 +444,7 @@ cvp_configlets: 192.168.255.5/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.5/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.5/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.15/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n @@ -593,16 +590,15 @@ cvp_configlets: \ neighbor 10.255.251.5 peer group MLAG-IPv4-UNDERLAY-PEER\n redistribute connected\n!\nmanagement api http-commands\n protocol https\n no shutdown\n \ !\n vrf MGMT\n no shutdown\n!\nend\n" - AVD_DC1-LEAF2B: "!RANCID-CONTENT-TYPE: arista\n!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr - -cvaddr=10.255.0.1:9910 -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata - -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent -taillogs\n no shutdown\n!\nvlan - internal order ascending range 1006 1199\n!\ntransceiver qsfp default-mode 4x10G\n!\nservice - routing protocols model multi-agent\n!\nhostname DC1-LEAF2B\nip name-server vrf - MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp local-interface vrf - MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp server vrf - MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree vlan-id 4093-4094\nspanning-tree - mst 0 priority 16384\n!\nno aaa root\nno enable password\n!\nusername admin privilege - 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername + AVD_DC1-LEAF2B: "!\ndaemon TerminAttr\n exec /usr/bin/TerminAttr -cvaddr=10.255.0.1:9910 + -cvvrf=MGMT -smashexcludes=ale,flexCounter,hardware,kni,pulse,strata -ingestexclude=/Sysdb/cell/1/agent,/Sysdb/cell/2/agent + -taillogs\n no shutdown\n!\nvlan internal order ascending range 1006 1199\n!\ntransceiver + qsfp default-mode 4x10G\n!\nservice routing protocols model multi-agent\n!\nhostname + DC1-LEAF2B\nip name-server vrf MGMT 8.8.8.8\nip name-server vrf MGMT 192.168.2.1\n!\nntp + local-interface vrf MGMT Management1\nntp server vrf MGMT 0.fr.pool.ntp.org prefer\nntp + server vrf MGMT 1.fr.pool.ntp.org\n!\nspanning-tree mode mstp\nno spanning-tree + vlan-id 4093-4094\nspanning-tree mst 0 priority 16384\n!\nno aaa root\nno enable + password\n!\nusername admin privilege 15 role network-admin secret sha512 $6$Df86J4/SFMDE3/1K$Hef4KstdoxNDaami37cBquTWOTplC.miMPjXVgQxMe92.e5wxlnXOLlebgPj8Fz1KO0za/RCO7ZIs4Q6Eiq1g1\nusername ansible privilege 15 role network-admin secret sha512 $6$Dzu11L7yp9j3nCM9$FSptxMPyIL555OMO.ldnjDXgwZmrfMYwHSr0uznE5Qoqvd9a6UdjiFcJUhGLtvXVZR1r.A/iF5aAt50hf/EK4/\nusername cvpadmin privilege 15 role network-admin secret sha512 $6$rZKcbIZ7iWGAWTUM$TCgDn1KcavS0s.OV8lacMTUkxTByfzcGlFlYUWroxYuU7M/9bIodhRO7nXGzMweUxvbk8mJmQl8Bh44cRktUj.\n!\nvlan 110\n name Tenant_A_OP_Zone_1\n!\nvlan 111\n name Tenant_A_OP_Zone_2\n!\nvlan @@ -645,7 +641,7 @@ cvp_configlets: 192.168.255.6/32\n!\ninterface Loopback1\n description VTEP_VXLAN_Tunnel_Source\n \ no shutdown\n ip address 192.168.254.5/32\n!\ninterface Loopback100\n description Tenant_A_OP_Zone_VTEP_DIAGNOSTICS\n no shutdown\n vrf Tenant_A_OP_Zone\n ip - address 10.255.1.6/32\n!\ninterface Management1\n description oob_management\n + address 10.255.1.6/32\n!\ninterface Management1\n description OOB_MANAGEMENT\n \ no shutdown\n vrf MGMT\n ip address 10.255.0.16/24\n!\ninterface Vlan110\n \ description Tenant_A_OP_Zone_1\n no shutdown\n vrf Tenant_A_OP_Zone\n ip address virtual 10.1.10.1/24\n!\ninterface Vlan111\n description Tenant_A_OP_Zone_2\n diff --git a/ansible_collections/arista/avd/tests/sanity/ignore-2.15.txt b/ansible_collections/arista/avd/tests/sanity/ignore-2.15.txt index b90f14fba84..e8001781352 100644 --- a/ansible_collections/arista/avd/tests/sanity/ignore-2.15.txt +++ b/ansible_collections/arista/avd/tests/sanity/ignore-2.15.txt @@ -1,4 +1,5 @@ plugins/modules/configlet_build_config.py validate-modules:missing-gplv3-license +plugins/modules/eos_designs_documentation.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_facts.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_structured_config.py validate-modules:missing-gplv3-license plugins/modules/inventory_to_container.py validate-modules:missing-gplv3-license diff --git a/ansible_collections/arista/avd/tests/sanity/ignore-2.16.txt b/ansible_collections/arista/avd/tests/sanity/ignore-2.16.txt index b90f14fba84..e8001781352 100644 --- a/ansible_collections/arista/avd/tests/sanity/ignore-2.16.txt +++ b/ansible_collections/arista/avd/tests/sanity/ignore-2.16.txt @@ -1,4 +1,5 @@ plugins/modules/configlet_build_config.py validate-modules:missing-gplv3-license +plugins/modules/eos_designs_documentation.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_facts.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_structured_config.py validate-modules:missing-gplv3-license plugins/modules/inventory_to_container.py validate-modules:missing-gplv3-license diff --git a/ansible_collections/arista/avd/tests/sanity/ignore-2.17.txt b/ansible_collections/arista/avd/tests/sanity/ignore-2.17.txt index b90f14fba84..e8001781352 100644 --- a/ansible_collections/arista/avd/tests/sanity/ignore-2.17.txt +++ b/ansible_collections/arista/avd/tests/sanity/ignore-2.17.txt @@ -1,4 +1,5 @@ plugins/modules/configlet_build_config.py validate-modules:missing-gplv3-license +plugins/modules/eos_designs_documentation.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_facts.py validate-modules:missing-gplv3-license plugins/modules/eos_designs_structured_config.py validate-modules:missing-gplv3-license plugins/modules/inventory_to_container.py validate-modules:missing-gplv3-license diff --git a/development/compare.py b/development/compare.py new file mode 100755 index 00000000000..3198df8aea1 --- /dev/null +++ b/development/compare.py @@ -0,0 +1,117 @@ +#!/usr/bin/python +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from __future__ import annotations + +import argparse +from dataclasses import dataclass, field +from itertools import groupby +from pathlib import Path + + +@dataclass(frozen=True, eq=True) +class ConfigLine: + config: str + config_source: str = field(compare=False) + line_number: int = field(compare=False) + indentation: int + parent: ConfigLine | None + + +def parse_config(config: str, config_source: str) -> set[ConfigLine]: + parsed_config = set() + last_config_line = ConfigLine(config="", config_source="", line_number=0, indentation=0, parent=None) + for line_number, config_line in enumerate(config.splitlines(), start=1): + indentation = len(config_line) - len(config_line.lstrip(" ")) + if indentation == last_config_line.indentation: + parent = last_config_line.parent + elif indentation > last_config_line.indentation: + parent = last_config_line + else: + # We may be jumping out multiple levels at once + parent = last_config_line.parent.parent + while indentation <= getattr(parent, "indentation", -1): + parent = parent.parent + + new_config_line = ConfigLine( + config=config_line, + config_source=config_source, + line_number=line_number, + indentation=indentation, + parent=parent, + ) + parsed_config.add(new_config_line) + last_config_line = new_config_line + return parsed_config + + +def get_line_number(stuff: tuple[bool, ConfigLine]) -> int: + return stuff[1].line_number + + +def get_family_line(config_line: ConfigLine) -> set[tuple[bool, ConfigLine]]: + """ + Return set of tuples (is_config_diff: bool, config_line: ConfigLine). + + Diff config lines are marked with true. + Their ancestors are marked with false. + """ + parent = config_line.parent + family = {(True, config_line)} + while parent is not None: + family.add((False, parent)) + parent = parent.parent + return family + + +def main() -> None: + """Diff two config files and print out the changes with context awareness and ignoring reordering.""" + parser = argparse.ArgumentParser() + parser.add_argument("path") + parser.add_argument("old_file") + parser.add_argument("old_hex") + parser.add_argument("old_mode") + parser.add_argument("new_file") + parser.add_argument("new_hex") + parser.add_argument("new_mode") + args = parser.parse_args() + + old = Path(args.old_file).read_text() + new = Path(args.new_file).read_text() + + # Build set of diffs + diffs = parse_config(old, "old").symmetric_difference(parse_config(new, "new")) + + # Build set of lines including diffs and all their ancestors + # Each entry is a tuple with a boolean indicating if this is a diff or just a parent. + interesting_lines: set[tuple[bool, ConfigLine]] = set() + for diff in diffs: + interesting_lines.update(get_family_line(diff)) + + # Print filename if we have some diffs. + if interesting_lines: + print(args.path) # noqa: T201 + + # Group lines together in case a context like Ethernet1 is both a parent as well as being added/removed itself. + for line_number, lines_gen in groupby(sorted(interesting_lines, key=get_line_number), get_line_number): + lines = list(lines_gen) + if len(lines) > 1: + # We have a line with no +/- that is a parent and a line with +/- that is the actual diff. + # Remove the one without +/- - [0] is the boolean signalling this is a diff + lines = [line for line in lines if line[0]] + + is_diff, config_line = lines[0] + if not is_diff: + # Print line for parent + print(f" {line_number:5} {config_line.config}") # noqa: T201 + elif config_line.config_source == "old": + # Print line for removal + print(f"-{line_number:5} {config_line.config}") # noqa: T201 + else: + # Print line for addition + print(f"+{line_number:5} {config_line.config}") # noqa: T201 + + +if __name__ == "__main__": + main() diff --git a/pylintrc b/pylintrc index 8452c7b8ede..e303d44f9b7 100644 --- a/pylintrc +++ b/pylintrc @@ -25,6 +25,7 @@ disable= too-few-public-methods, too-many-ancestors, too-many-arguments, + too-many-positional-arguments, too-many-branches, too-many-instance-attributes, too-many-locals, diff --git a/pyproject.toml b/pyproject.toml index 154a9fd339d..0cfa4db8dd9 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -19,7 +19,6 @@ known_first_party = ["pyavd", "schema_tools"] line-length = 160 extend-exclude = [ "python-avd/pyavd/_cv/api/**/*", - "python-avd/tests/**/*", "ansible_collections/arista/avd/tests/**/*", ] target-version = "py310" @@ -55,6 +54,7 @@ ignore = [ "PLR2004", # Magic value used in comparison - TODO: Evaluate "DTZ005", # `datetime.datetime.now()` called without a `tz` argument - TODO: Improve code "UP038", # UP038 Use `X | Y` in `isinstance` call instead of `(X, Y)` - Why would I? It impacts performance. + "ASYNC109",# async-function-with-timeout: Our async functions call several other async functions and we need each of those calls to be governed by the configurable timeout. ] [tool.ruff.lint.pydocstyle] @@ -78,9 +78,14 @@ convention = "google" "python-avd/pyavd/_cv/client/*.py" = [ "B904", # Within an `except` clause, raise exceptions with `raise - TODO: Improve code ] +"python-avd/tests/**/*" = [ + "S101", # Accept 'assert' in pytest. + "INP001", # implicit namespace package. Add an `__init__.py` - Tests are not in packages +] + [tool.ruff.lint.pylint] -max-args = 12 +max-args = 14 max-branches = 54 max-returns = 10 max-statements = 148 diff --git a/python-avd/.gitignore b/python-avd/.gitignore index d44ae8b1621..84c9a373c18 100644 --- a/python-avd/.gitignore +++ b/python-avd/.gitignore @@ -9,3 +9,4 @@ __pycache__/ *.prof /site/ /pyavd/_eos_cli_config_gen/j2templates/compiled_templates +/pyavd/_eos_designs/j2templates/compiled_templates diff --git a/python-avd/pyavd/__init__.py b/python-avd/pyavd/__init__.py index 07452ae672d..1084aa0d509 100644 --- a/python-avd/pyavd/__init__.py +++ b/python-avd/pyavd/__init__.py @@ -17,7 +17,7 @@ __author__ = "Arista Networks" __copyright__ = "Copyright 2023-2024 Arista Networks" __license__ = "Apache 2.0" -__version__ = "5.0.0.dev2" +__version__ = "5.0.0.dev8" __all__ = [ "get_avd_facts", diff --git a/python-avd/pyavd/_cv/client/__init__.py b/python-avd/pyavd/_cv/client/__init__.py index 947826a136e..547ff6299cf 100644 --- a/python-avd/pyavd/_cv/client/__init__.py +++ b/python-avd/pyavd/_cv/client/__init__.py @@ -7,7 +7,7 @@ from typing import TYPE_CHECKING from grpclib.client import Channel -from requests import JSONDecodeError, post +from requests import JSONDecodeError, get, post from .change_control import ChangeControlMixin from .configlet import ConfigletMixin @@ -17,6 +17,7 @@ from .swg import SwgMixin from .tag import TagMixin from .utils import UtilsMixin +from .versioning import CvVersion from .workspace import WorkspaceMixin if TYPE_CHECKING: @@ -42,6 +43,7 @@ class CVClient( _token: str | None _username: str | None _password: str | None + _cv_version: CvVersion | None = None def __init__( self, @@ -89,10 +91,28 @@ async def __aexit__(self, _exc_type: type[BaseException] | None, _exc_val: BaseE def _connect(self) -> None: # TODO: Verify connection # TODO: Handle multinode clusters - # TODO: Detect supported API versions and set instance properties accordingly. + + # Ensure that the default ssl context is initialized before doing any requests. + ssl_context = self._ssl_context() + if not self._token: self._set_token() + self._set_version() + + if self._channel is None: + self._channel = Channel(host=self._servers[0], port=self._port, ssl=ssl_context) + + self._metadata = {"authorization": "Bearer " + self._token} + + def _ssl_context(self) -> ssl.SSLContext | bool: + """ + Initialize the default SSL context with relaxed verification if needed. + + Otherwise we just return True. + The return value (The default ssl context or True) will be passed to grpclib. + Requests will pick it up from ssl lib itself. + """ if not self._verify_certs: # Accepting SonarLint issue: We are purposely implementing no verification of certs. context = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH) # NOSONAR @@ -101,11 +121,7 @@ def _connect(self) -> None: context.set_alpn_protocols(["h2"]) else: context = True - - if self._channel is None: - self._channel = Channel(host=self._servers[0], port=self._port, ssl=context) - - self._metadata = {"authorization": "Bearer " + self._token} + return context def _set_token(self) -> None: """ @@ -122,15 +138,6 @@ def _set_token(self) -> None: msg = "Unable to authenticate. Missing token or username/password." raise CVClientException(msg) - if not self._verify_certs: - # Accepting SonarLint issue: We are purposely implementing no verification of certs. - context = ssl.create_default_context(purpose=ssl.Purpose.SERVER_AUTH) # NOSONAR - context.verify_mode = ssl.CERT_NONE # NOSONAR - context.check_hostname = False - else: - # None means default context which will verify certs. - context = None - try: response = post( # noqa: S113 TODO: Add configurable timeout "https://" + self._servers[0] + "/cvpservice/login/authenticate.do", @@ -143,3 +150,28 @@ def _set_token(self) -> None: except (KeyError, JSONDecodeError) as e: msg = "Unable to get token from CloudVision server. Please supply service account token instead of username/password." raise CVClientException(msg) from e + + def _set_version(self) -> None: + """ + Fetch the CloudVision version via REST and set self._cv_version. + + This version is used to decide which APIs to use later. + + TODO: Handle multinode clusters + """ + if not self._token: + msg = "Unable to get version from CloudVision server. Missing token." + raise CVClientException(msg) + + try: + response = get( # noqa: S113 TODO: Add configurable timeout + "https://" + self._servers[0] + "/cvpservice/cvpInfo/getCvpInfo.do", + headers={"Authorization": f"Bearer {self._token}"}, + verify=self._verify_certs, + json={}, + ) + + self._cv_version = CvVersion(response.json()["version"]) + except (KeyError, JSONDecodeError) as e: + msg = f"Unable to get version from CloudVision server. Got {response.text}" + raise CVClientException(msg) from e diff --git a/python-avd/pyavd/_cv/client/async_decorators.py b/python-avd/pyavd/_cv/client/async_decorators.py new file mode 100644 index 00000000000..9a3a1bb5aa3 --- /dev/null +++ b/python-avd/pyavd/_cv/client/async_decorators.py @@ -0,0 +1,152 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from __future__ import annotations + +from functools import wraps +from inspect import signature +from logging import getLogger +from typing import TYPE_CHECKING, Any, ClassVar, get_origin + +from pyavd._utils import batch + +from .constants import CVAAS_VERSION_STRING +from .exceptions import CVMessageSizeExceeded +from .versioning import CvVersion + +if TYPE_CHECKING: + from collections.abc import Callable + +LOGGER = getLogger(__name__) + + +def grpc_msg_size_handler(list_field: str) -> Callable: + def decorator_grpc_msg_size_handler(func: Callable) -> Callable: + func_signature = signature(func) + # Sometimes the return_annotation is a proper type, and sometimes - when using forward references - it is a string. Here we normalize to type. + return_annotation = ( + list if type(func_signature.return_annotation) is str and func_signature.return_annotation.startswith("list") else func_signature.return_annotation + ) + if return_annotation is not list and get_origin(return_annotation) is not list: + msg = ( + f"grpc_msg_size_handler decorator is unable to bind to the function '{func.__name__}'. " + f"Expected a return type of 'list'. Got '{return_annotation}'." + ) + raise TypeError(msg) + + @wraps(func) + async def wrapper_grpc_msg_size_handler(*args: Any, **kwargs: Any) -> list: + bound_arguments = func_signature.bind(*args, **kwargs) + arguments = bound_arguments.arguments + if list_field not in arguments: + msg = f"grpc_msg_size_handler decorator is unable to find the list_field '{list_field}' in the given arguments to '{func.__name__}'." + raise KeyError(msg) + + list_value: list = arguments[list_field] + if not isinstance(list_value, list): + msg = f"grpc_msg_size_handler decorator expected the value of the list_field '{list_field}' to be a list. Got '{type(list_value)}'" + raise TypeError(msg) + + LOGGER.info("wrapper_grpc_msg_size_handler: Called '%s' with '%s' items", func.__name__, len(list_value)) + + if len(list_value) < 2: + # No need to try/except if we cannot split the list. + return await func(*args, **kwargs) + + try: + return await func(*args, **kwargs) + except CVMessageSizeExceeded as e: + # At minimum try to split in two. + # The double negatives make // round up instead of down. + ratio = max(2, -(-e.size // e.max_size)) + chunk_size = len(list_value) // ratio + LOGGER.info( + "wrapper_grpc_msg_size_handler: Message size %s exceeded the max of %s. Splitting into %s smaller calls with up to %s items each.", + e.size, + e.max_size, + ratio, + chunk_size, + ) + # For every chunk we call ourselves recursively, so we can catch any further needs of splitting. + result = [] + for chunk in batch(list_value, chunk_size): + arguments[list_field] = chunk + result.extend(await wrapper_grpc_msg_size_handler(*bound_arguments.args, **bound_arguments.kwargs)) + return result + + return wrapper_grpc_msg_size_handler + + return decorator_grpc_msg_size_handler + + +class LimitCvVersion: + """ + Decorator used to limit the supported CloudVision versions for a certain method. + + The decorator will maintain a map of decorated function variants and their supported versions. + + The decorator will only work in CvClient class methods since it expects the _cv_client attribute on 'self'. + """ + + versioned_funcs: ClassVar[dict[str, dict[tuple[CvVersion, CvVersion], Callable]]] = {} + """ + Map of versioned functions keyed by function name. + + { + : { + (, ): , + (, ): , + } + } + """ + + def __init__(self, min_ver: str = "2024.1.0", max_ver: str = CVAAS_VERSION_STRING) -> None: + """__init__ is called with the arguments of the decorator.""" + # Storing these on the instance so it can be read in the __call__ method. + self.min_version = CvVersion(min_ver) + self.max_version = CvVersion(max_ver) + + if self.max_version < self.min_version: + msg = ( + "Invalid min and max versions passed to 'cv_version' decorator. Min version must be larger than max version. " + f"Got min_ver '{self.min_version}', max_var '{self.max_version}'." + ) + raise ValueError(msg) + + def __call__(self, func: Callable) -> Callable: + """ + Store the method in the map of versioned functions after checking for overlapping decorators for the same method. + + __call__ is called with the method being decorated. + """ + for existing_min_version, existing_max_version in LimitCvVersion.versioned_funcs.get(func.__name__, []): + if existing_min_version <= self.max_version and existing_max_version >= self.min_version: + msg = ( + "Overlapping min and max versions passed to 'cv_version' decorator." + f"{self.min_version}-{self.max_version} overlaps with {existing_min_version}-{existing_max_version}." + ) + raise ValueError(msg) + + LimitCvVersion.versioned_funcs.setdefault(func.__name__, {})[(self.min_version, self.max_version)] = func + + @wraps(func) + async def wrapper_cv_version(*args: Any, **kwargs: Any) -> list: + """ + Call the appropriate original method depending on the _cv_version attribute of 'self'. + + The wrapper is being called by regular method calls with the args and kwargs given by the calling code (including 'self'). + """ + # Extract the version of the connected CloudVision server from the 'self' object passed to the method. + # Defaulting to 'CVaaS' which means newest versions. + cv_version: CvVersion = getattr(args[0], "_cv_version", CvVersion("CVaaS")) + LOGGER.info("wrapper_cv_version: Called '%s' with version '%s'", func.__name__, cv_version) + + for min_max_versions, versioned_func in LimitCvVersion.versioned_funcs[func.__name__].items(): + min_version, max_version = min_max_versions + if min_version <= cv_version <= max_version: + return await versioned_func(*args, **kwargs) + + msg = f"Unsupported version of CloudVision: '{cv_version}'." + raise LookupError(msg) + + return wrapper_cv_version diff --git a/python-avd/pyavd/_cv/client/change_control.py b/python-avd/pyavd/_cv/client/change_control.py index bff0152b7fe..21ac94b340d 100644 --- a/python-avd/pyavd/_cv/client/change_control.py +++ b/python-avd/pyavd/_cv/client/change_control.py @@ -24,6 +24,7 @@ FlagConfig, ) +from .constants import DEFAULT_API_TIMEOUT from .exceptions import get_cv_client_exception if TYPE_CHECKING: @@ -52,7 +53,7 @@ async def get_change_control( self: CVClient, change_control_id: str, time: datetime | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> ChangeControl: """ Get Change Control using arista.changecontrol.v1.ChangeControlService.GetOne API. @@ -83,7 +84,7 @@ async def set_change_control( change_control_id: str, name: str | None = None, description: str | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> ChangeControlConfigSetResponse: """ Set Change Control details using arista.changecontrol.v1.ChangeControlConfigService.Set API. @@ -118,7 +119,7 @@ async def approve_change_control( change_control_id: str, timestamp: _DateTime, description: str | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> ApproveConfig: """ Get Change Control using arista.changecontrol.v1.ChangeControlService.GetOne API. @@ -154,7 +155,7 @@ async def start_change_control( self: CVClient, change_control_id: str, description: str | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> ChangeControlConfig: """ Set Change Control details using arista.changecontrol.v1.ChangeControlConfigService.Set API. diff --git a/python-avd/pyavd/_cv/client/configlet.py b/python-avd/pyavd/_cv/client/configlet.py index 641fa8d37e3..d0045406caf 100644 --- a/python-avd/pyavd/_cv/client/configlet.py +++ b/python-avd/pyavd/_cv/client/configlet.py @@ -3,6 +3,8 @@ # that can be found in the LICENSE file. from __future__ import annotations +from asyncio import gather +from logging import getLogger from pathlib import Path from typing import TYPE_CHECKING, Literal @@ -27,7 +29,9 @@ ) from pyavd._cv.api.arista.time import TimeBounds from pyavd._cv.api.fmp import RepeatedString +from pyavd._utils import batch +from .async_decorators import LimitCvVersion, grpc_msg_size_handler from .constants import DEFAULT_API_TIMEOUT from .exceptions import get_cv_client_exception @@ -36,12 +40,14 @@ from . import CVClient - ASSIGNMENT_MATCH_POLICY_MAP = { "match_first": MatchPolicy.MATCH_FIRST, "match_all": MatchPolicy.MATCH_ALL, None: MatchPolicy.UNSPECIFIED, } +PARALLEL_COROUTINES = 20 + +LOGGER = getLogger(__name__) class ConfigletMixin: @@ -119,7 +125,7 @@ async def set_configlet_container( configlet_ids=RepeatedString(values=configlet_ids), query=query, child_assignment_ids=RepeatedString(values=child_assignment_ids), - match_policy=ASSIGNMENT_MATCH_POLICY_MAP.get(match_policy), + match_policy=ASSIGNMENT_MATCH_POLICY_MAP.get(match_policy or "match_all"), ), ) client = ConfigletAssignmentConfigServiceStub(self._channel) @@ -130,6 +136,8 @@ async def set_configlet_container( return response.value + @LimitCvVersion(min_ver="2024.2.0") + @grpc_msg_size_handler("containers") async def set_configlet_containers( self: CVClient, workspace_id: str, @@ -137,13 +145,13 @@ async def set_configlet_containers( timeout: float = DEFAULT_API_TIMEOUT, ) -> list[ConfigletAssignmentKey]: """ - Create/update a Configlet Container (a.k.a. Assignment) using arista.configlet.v1.ConfigletAssignmentServiceStub.Set API. + Create/update a Configlet Container (a.k.a. Assignment) using arista.configlet.v1.ConfigletAssignmentServiceStub.SetSome API. Parameters: workspace_id: Unique identifier of the Workspace for which the information is fetched. containers: List of Tuples with the format\ - (container_id, display_name, description, configlet_ids, query, list_of_configlet_ids, match_policy). - timeout: Base timeout in seconds. 0.5 second will be added per container. + (container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy). + timeout: Timeout in seconds. Returns: ConfigletAssignmentKey objects after being set including any server-generated values. @@ -157,20 +165,69 @@ async def set_configlet_containers( configlet_ids=RepeatedString(values=configlet_ids), query=query, child_assignment_ids=RepeatedString(values=child_assignment_ids), - match_policy=ASSIGNMENT_MATCH_POLICY_MAP.get(match_policy), + match_policy=ASSIGNMENT_MATCH_POLICY_MAP.get(match_policy or "match_all"), ) for container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy in containers ], ) client = ConfigletAssignmentConfigServiceStub(self._channel) try: - responses = client.set_some(request, metadata=self._metadata, timeout=timeout + len(request.values) * 0.5) + responses = client.set_some(request, metadata=self._metadata, timeout=timeout) assignment_keys = [response.key async for response in responses] except Exception as e: raise get_cv_client_exception(e, f"Workspace ID '{workspace_id}', Containers '{containers}'") or e return assignment_keys + # Use this variant for versions below 2024.2.0 (still respecting overall min version) + @LimitCvVersion(max_ver="2024.1.99") + async def set_configlet_containers( # noqa: F811 - Redefining with decorator. + self: CVClient, + workspace_id: str, + containers: list[tuple[str, str | None, str | None, list[str] | None, str | None, list[str] | None, str | None]], + timeout: float = DEFAULT_API_TIMEOUT, + ) -> list[ConfigletAssignmentKey]: + """ + Create batches of containers and do parallel calls to set_configlet_container for each batch. + + Parameters: + workspace_id: Unique identifier of the Workspace for which the information is fetched. + containers: List of Tuples with the format\ + (container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy). + timeout: Timeout in seconds. + + Returns: + ConfigletAssignmentKey objects after being set including any server-generated values. + """ + coroutines = [ + self.set_configlet_container( + workspace_id=workspace_id, + container_id=container_id, + display_name=display_name, + description=description, + configlet_ids=configlet_ids, + query=query, + child_assignment_ids=child_assignment_ids, + match_policy=match_policy, + timeout=timeout, + ) + for container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy in containers + ] + + configlet_configs = [] + + LOGGER.info("set_configlet_containers: Deploying %s configlet assignments / containers in batches of %s.", len(coroutines), PARALLEL_COROUTINES) + for index, batch_coroutines in enumerate(batch(coroutines, PARALLEL_COROUTINES), start=1): + LOGGER.info("set_configlet_containers: Batch %s", index) + configlet_configs.extend(await gather(*batch_coroutines)) + + return [ + await self.set_configlet_container( + workspace_id, container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy, timeout + ) + for container_id, display_name, description, configlet_ids, query, child_assignment_ids, match_policy in containers + ] + async def delete_configlet_container( self: CVClient, workspace_id: str, @@ -201,6 +258,7 @@ async def delete_configlet_container( return response.value + @grpc_msg_size_handler("configlet_ids") async def get_configlets( self: CVClient, workspace_id: str, @@ -317,6 +375,86 @@ async def set_configlet_from_file( return response.value + @LimitCvVersion(min_ver="2024.2.0") + @grpc_msg_size_handler("configlets") + async def set_configlets_from_files( + self: CVClient, + workspace_id: str, + configlets: list[tuple[str, str]], + timeout: float = DEFAULT_API_TIMEOUT, + ) -> list[ConfigletKey]: + """ + Create/update multiple Configlets using arista.configlet.v1.ConfigletServiceStub.SetSome API. + + Parameters: + workspace_id: Unique identifier of the Workspace for which the information is fetched. + configlets: List of Tuples with the format `(configlet_id, display_name, description, path_to_config_file)`. + timeout: Timeout in seconds. + + Returns: + List of ConfigletConfig objects after being set including any server-generated values. + """ + request = ConfigletConfigSetSomeRequest(values=[]) + for configlet in configlets: + configlet_id, display_name, description, file = configlet + request.values.append( + ConfigletConfig( + key=ConfigletKey(workspace_id=workspace_id, configlet_id=configlet_id), + display_name=display_name, + description=description, + body=Path(file).read_text(encoding="UTF-8"), + ) + ) + client = ConfigletConfigServiceStub(self._channel) + + try: + responses = client.set_some(request, metadata=self._metadata, timeout=timeout) + configlet_configs = [response.key async for response in responses] + + except Exception as e: + raise get_cv_client_exception(e, f"Workspace ID '{workspace_id}', Configlets '{configlets}'") or e + + return configlet_configs + + # Use this variant for versions below 2024.2.0 (still respecting overall min version) + @LimitCvVersion(max_ver="2024.1.99") + async def set_configlets_from_files( # noqa: F811 - Redefining with decorator. + self: CVClient, + workspace_id: str, + configlets: list[tuple[str, str]], + timeout: float = DEFAULT_API_TIMEOUT, + ) -> list[ConfigletKey]: + """ + Create batches of configlets and do parallel calls to set_configlet_from_file for each batch. + + Parameters: + workspace_id: Unique identifier of the Workspace for which the information is fetched. + configlets: List of Tuples with the format `(configlet_id, display_name, description, path_to_config_file)`. + timeout: Timeout in seconds. + + Returns: + List of ConfigletConfig objects after being set including any server-generated values. + """ + coroutines = [ + self.set_configlet_from_file( + workspace_id=workspace_id, + configlet_id=configlet_id, + file=file, + display_name=display_name, + description=description, + timeout=timeout, + ) + for configlet_id, display_name, description, file in configlets + ] + + configlet_configs = [] + + LOGGER.info("set_configlets_from_files: Deploying %s configlets in batches of %s.", len(coroutines), PARALLEL_COROUTINES) + for index, batch_coroutines in enumerate(batch(coroutines, PARALLEL_COROUTINES), start=1): + LOGGER.info("set_configlets_from_files: Batch %s", index) + configlet_configs.extend(await gather(*batch_coroutines)) + + @grpc_msg_size_handler("configlet_ids") async def delete_configlets( self: CVClient, workspace_id: str, diff --git a/python-avd/pyavd/_cv/client/constants.py b/python-avd/pyavd/_cv/client/constants.py index 5be833746b0..959e68df6e1 100644 --- a/python-avd/pyavd/_cv/client/constants.py +++ b/python-avd/pyavd/_cv/client/constants.py @@ -4,3 +4,5 @@ DEFAULT_API_TIMEOUT = 600.0 """Default API timeout in seconds""" + +CVAAS_VERSION_STRING = "CVaaS" diff --git a/python-avd/pyavd/_cv/client/exceptions.py b/python-avd/pyavd/_cv/client/exceptions.py index b7b5bd6ad3e..06afa9bf4ff 100644 --- a/python-avd/pyavd/_cv/client/exceptions.py +++ b/python-avd/pyavd/_cv/client/exceptions.py @@ -4,10 +4,13 @@ from __future__ import annotations from asyncio.exceptions import TimeoutError +from re import compile, fullmatch from grpclib.const import Status from grpclib.exceptions import GRPCError +MSG_SIZE_EXCEEDED_REGEX = compile(r"grpc: received message larger than max \((?P\d+) vs\. (?P\d+)\)") + def get_cv_client_exception(exception: Exception, cv_client_details: str | None = None) -> Exception | None: """ @@ -25,6 +28,11 @@ def get_cv_client_exception(exception: Exception, cv_client_details: str | None return CVResourceNotFound(cv_client_details, *exception.args) if status == Status.CANCELLED: return CVTimeoutError(cv_client_details, *exception.args) + if status == Status.RESOURCE_EXHAUSTED and (matches := fullmatch(MSG_SIZE_EXCEEDED_REGEX, exception.message)): + new_exception = CVMessageSizeExceeded(*exception.args) + new_exception.max_size = int(matches.group("max")) + new_exception.size = int(matches.group("size")) + return new_exception if isinstance(exception, TimeoutError): return CVTimeoutError(cv_client_details, *exception.args) @@ -66,3 +74,12 @@ class CVWorkspaceStateTimeout(CVClientException): class CVChangeControlFailed(CVClientException): """CloudVision ChangeControl failed during execution.""" + + +class CVMessageSizeExceeded(CVClientException): + """GRPC message to CloudVision exceeded the allowed message size.""" + + max_size: int + """Maximum GRPC message size""" + size: int + """Actual GRPC message size""" diff --git a/python-avd/pyavd/_cv/client/inventory.py b/python-avd/pyavd/_cv/client/inventory.py index 831e7967f9d..70922cb7b79 100644 --- a/python-avd/pyavd/_cv/client/inventory.py +++ b/python-avd/pyavd/_cv/client/inventory.py @@ -8,6 +8,7 @@ from pyavd._cv.api.arista.inventory.v1 import Device, DeviceKey, DeviceServiceStub, DeviceStreamRequest from pyavd._cv.api.arista.time import TimeBounds +from .constants import DEFAULT_API_TIMEOUT from .exceptions import get_cv_client_exception if TYPE_CHECKING: @@ -25,7 +26,7 @@ async def get_inventory_devices( self: CVClient, devices: list[tuple[str, str, str]] | None = None, time: datetime | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> list[Device]: """ Get Devices using arista.inventory.v1.DeviceService.GetAll API. diff --git a/python-avd/pyavd/_cv/client/studio.py b/python-avd/pyavd/_cv/client/studio.py index f4cbf57bd88..17a3151011c 100644 --- a/python-avd/pyavd/_cv/client/studio.py +++ b/python-avd/pyavd/_cv/client/studio.py @@ -52,7 +52,7 @@ async def get_studio( studio_id: str, workspace_id: str, time: datetime | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> Studio: """ Get Studio definition using arista.studio.v1.StudioService.GetOne. diff --git a/python-avd/pyavd/_cv/client/tag.py b/python-avd/pyavd/_cv/client/tag.py index 03a73d7051e..63465e25559 100644 --- a/python-avd/pyavd/_cv/client/tag.py +++ b/python-avd/pyavd/_cv/client/tag.py @@ -27,6 +27,7 @@ ) from pyavd._cv.api.arista.time import TimeBounds +from .constants import DEFAULT_API_TIMEOUT from .exceptions import get_cv_client_exception if TYPE_CHECKING: @@ -129,7 +130,7 @@ async def set_tags( workspace_id: str, tags: list[tuple[str, str]], element_type: Literal["device", "interface"], - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> list[TagKey]: """ Set Tags using arista.tag.v2.TagConfigServiceStub.SetSome API. @@ -174,7 +175,7 @@ async def get_tag_assignments( element_type: Literal["device", "interface"] | None = None, creator_type: Literal["user", "system", "external"] | None = None, time: datetime | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> list[TagAssignment]: """ Get Tags using arista.tag.v2.TagAssignmentServiceStub.GetAll arista.tag.v2.TagAssignmentConfigServiceStub.GetAll APIs. @@ -243,7 +244,7 @@ async def set_tag_assignments( workspace_id: str, tag_assignments: list[tuple[str, str, str, str | None]], element_type: Literal["device", "interface"], - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> list[TagAssignment]: """ Set Tags using arista.tag.v2.TagConfigServiceStub.SetSome API. diff --git a/python-avd/pyavd/_cv/client/versioning.py b/python-avd/pyavd/_cv/client/versioning.py new file mode 100644 index 00000000000..bd752b39bf8 --- /dev/null +++ b/python-avd/pyavd/_cv/client/versioning.py @@ -0,0 +1,68 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from re import compile, fullmatch + +from .constants import CVAAS_VERSION_STRING + +# The double braces are escaping braces for the f-string. The regex pattern will get a single brace. +VERSION_PATTERN = compile(rf"(\d{{4}}\.\d{{1,2}}\.\d{{1,2}}|{CVAAS_VERSION_STRING})") + + +class CvVersion: + version: str + version_value: int + + def __init__(self, version: str) -> None: + if not fullmatch(VERSION_PATTERN, version): + msg = f"Invalid CV Version '{version}'. The version must conform to the pattern '{VERSION_PATTERN.pattern}'" + raise ValueError(msg) + + self.version = version + self.version_value = self._version_as_value() + + def __str__(self) -> str: + return self.version + + def __repr__(self) -> str: + return f"" + + def __hash__(self) -> int: + return self.version_value + + def _version_as_value(self) -> int: + if self.version == CVAAS_VERSION_STRING: + return 99999999 + + elements = self.version.split(".", maxsplit=2) + return int(f"{elements[0]:04}{elements[1]:02}{elements[2]:02}") + + def __eq__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value == other.version_value + + def __neq__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value != other.version_value + + def __lt__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value < other.version_value + + def __le__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value <= other.version_value + + def __gt__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value > other.version_value + + def __ge__(self, other: object) -> bool: + if not isinstance(other, CvVersion): + return False + return self.version_value >= other.version_value diff --git a/python-avd/pyavd/_cv/client/workspace.py b/python-avd/pyavd/_cv/client/workspace.py index 4564d974502..6bebced5ef6 100644 --- a/python-avd/pyavd/_cv/client/workspace.py +++ b/python-avd/pyavd/_cv/client/workspace.py @@ -22,6 +22,7 @@ WorkspaceStreamRequest, ) +from .constants import DEFAULT_API_TIMEOUT from .exceptions import get_cv_client_exception if TYPE_CHECKING: @@ -50,7 +51,7 @@ async def get_workspace( self: CVClient, workspace_id: str, time: datetime | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> Workspace: """ Get Workspace using arista.workspace.v1.WorkspaceService.GetOne API. @@ -83,7 +84,7 @@ async def create_workspace( workspace_id: str, display_name: str | None = None, description: str | None = None, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> WorkspaceConfig: """ Create Workspace using arista.workspace.v1.WorkspaceConfigService.Set API. @@ -111,7 +112,7 @@ async def create_workspace( async def abandon_workspace( self: CVClient, workspace_id: str, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> WorkspaceConfig: """ Abandon Workspace using arista.workspace.v1.WorkspaceConfigService.Set API. @@ -139,7 +140,7 @@ async def abandon_workspace( async def build_workspace( self: CVClient, workspace_id: str, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> WorkspaceConfig: """ Request a build of the Workspace using arista.workspace.v1.WorkspaceConfigService.Set API. @@ -167,7 +168,7 @@ async def build_workspace( async def delete_workspace( self: CVClient, workspace_id: str, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> WorkspaceKey: """ Delete Workspace using arista.workspace.v1.WorkspaceConfigService.Delete API. @@ -188,7 +189,7 @@ async def submit_workspace( self: CVClient, workspace_id: str, force: bool = False, - timeout: float = 10.0, + timeout: float = DEFAULT_API_TIMEOUT, ) -> WorkspaceConfig: """ Request submission of the Workspace using arista.workspace.v1.WorkspaceConfigService.Set API. diff --git a/python-avd/pyavd/_cv/workflows/deploy_configs_to_cv.py b/python-avd/pyavd/_cv/workflows/deploy_configs_to_cv.py index c7b423d3ea7..2e612ab90f1 100644 --- a/python-avd/pyavd/_cv/workflows/deploy_configs_to_cv.py +++ b/python-avd/pyavd/_cv/workflows/deploy_configs_to_cv.py @@ -3,12 +3,9 @@ # that can be found in the LICENSE file. from __future__ import annotations -from asyncio import gather from logging import getLogger from typing import TYPE_CHECKING -from pyavd._utils import batch - if TYPE_CHECKING: from pyavd._cv.client import CVClient @@ -20,7 +17,6 @@ CONFIGLET_NAME_PREFIX = "AVD_" CONFIGLET_CONTAINER_ID = f"{CONFIGLET_ID_PREFIX}configlets" STATIC_CONFIGLET_STUDIO_ID = "studio-static-configlet" -PARALLEL_COROUTINES = 20 async def deploy_configs_to_cv(configs: list[CVEosConfig], result: DeployToCvResult, cv_client: CVClient) -> None: @@ -31,18 +27,17 @@ async def deploy_configs_to_cv(configs: list[CVEosConfig], result: DeployToCvRes - Upload Configlets and assign to devices. TODO: See if this can be optimized to check if the configlets are already in place and correct. A hash would have been nice. - TODO: Split long configs into multiple configlets for 990KB chunks. Need to figure out how to batch it. """ LOGGER.info("deploy_configs_to_cv: %s", len(configs)) if not configs: return - # Build TODO: with CVEosConfig objects that exist on CloudVision. Add the rest to skipped. + # Build todo with CVEosConfig objects that exist on CloudVision. Add the rest to skipped. result.skipped_configs.extend(config for config in configs if not config.device._exists_on_cv) LOGGER.info("deploy_configs_to_cv: %s skipped configs because the devices are missing from CloudVision.", len(result.skipped_configs)) todo_configs = [config for config in configs if config.device._exists_on_cv] - LOGGER.info("deploy_configs_to_cv: %s TODO: configs.", len(todo_configs)) + LOGGER.info("deploy_configs_to_cv: %s todo configs.", len(todo_configs)) # No need to continue if we have nothing to do. if not todo_configs: @@ -62,23 +57,17 @@ async def deploy_configlets_to_cv(configs: list[CVEosConfig], workspace_id: str, TODO: Fetch config checksums for existing configs and only upload what is needed. """ - configlet_coroutines = [] - for config in configs: - configlet_id = f"{CONFIGLET_ID_PREFIX}{config.device.serial_number}" - configlet_coroutines.append( - cv_client.set_configlet_from_file( - workspace_id=workspace_id, - configlet_id=configlet_id, - file=config.file, - display_name=config.configlet_name or f"{CONFIGLET_NAME_PREFIX}{config.device.hostname}", - description=f"Configuration created and uploaded by AVD for {config.device.hostname}", - ), + configlets = [ + ( + f"{CONFIGLET_ID_PREFIX}{config.device.serial_number}", + config.configlet_name or f"{CONFIGLET_NAME_PREFIX}{config.device.hostname}", + f"Configuration created and uploaded by AVD for {config.device.hostname}", + config.file, ) - - LOGGER.info("deploy_configs_to_cv: Deploying %s configlets in batches of %s.", len(configlet_coroutines), PARALLEL_COROUTINES) - for index, coroutines in enumerate(batch(configlet_coroutines, PARALLEL_COROUTINES), start=1): - LOGGER.info("deploy_configs_to_cv: Batch %s", index) - await gather(*coroutines) + for config in configs + ] + LOGGER.info("deploy_configs_to_cv: Deploying %s configlets.", len(configlets)) + await cv_client.set_configlets_from_files(workspace_id=workspace_id, configlets=configlets) async def get_existing_device_container_ids_from_root_container(workspace_id: str, cv_client: CVClient) -> list[str]: @@ -110,8 +99,9 @@ async def get_existing_device_container_ids_from_root_container(workspace_id: st ) LOGGER.info("deploy_configs_to_cv: Found %s root containers.", len(root_containers)) if CONFIGLET_CONTAINER_ID not in root_containers: - LOGGER.info("deploy_configs_to_cv: AVD root container not assigned as root container in Static Config Studio. Fixing...") - root_containers.append(CONFIGLET_CONTAINER_ID) + LOGGER.info("deploy_configs_to_cv: AVD root container not assigned as root container in Static Config Studio. Inserting AVD container at the top.") + # Inserting our container first, to allow reconcile and other static config containers to override the AVD config. + root_containers.insert(0, CONFIGLET_CONTAINER_ID) await cv_client.set_studio_inputs( studio_id=STATIC_CONFIGLET_STUDIO_ID, workspace_id=workspace_id, @@ -149,7 +139,7 @@ async def deploy_configlet_containers_to_cv(configs: list[CVEosConfig], workspac existing_device_containers = [] existing_device_containers_by_id = {} - container_coroutines = [] + update_device_containers = [] update_device_container_ids = set() for config in configs: # For now we reuse configlet_id as container_id. @@ -160,21 +150,11 @@ async def deploy_configlet_containers_to_cv(configs: list[CVEosConfig], workspac configlet_ids = [configlet_id] if existing_device_containers_by_id.get(container_id) != (display_name, description, query, configlet_ids): update_device_container_ids.add(container_id) - container_coroutines.append( - cv_client.set_configlet_container( - workspace_id=workspace_id, - container_id=container_id, - display_name=display_name, - description=description, - query=query, - configlet_ids=configlet_ids, - ), - ) + update_device_containers.append((container_id, display_name, description, configlet_ids, query, None, None)) - LOGGER.info("deploy_configs_to_cv: Deploying %s configlet assignments / containers in batches of %s.", len(container_coroutines), PARALLEL_COROUTINES) - for index, coroutines in enumerate(batch(container_coroutines, PARALLEL_COROUTINES), start=1): - LOGGER.info("deploy_configs_to_cv: Batch %s", index) - await gather(*coroutines) + if update_device_containers: + LOGGER.info("deploy_configs_to_cv: Deploying %s configlet assignments.", len(update_device_containers)) + await cv_client.set_configlet_containers(workspace_id=workspace_id, containers=update_device_containers) # Update any missing update_device_container_ids on the root level container. if not update_device_container_ids.issubset(existing_device_containers_by_id): diff --git a/python-avd/pyavd/_cv/workflows/deploy_to_cv.py b/python-avd/pyavd/_cv/workflows/deploy_to_cv.py index 9a972bb5d06..905d8094a8a 100644 --- a/python-avd/pyavd/_cv/workflows/deploy_to_cv.py +++ b/python-avd/pyavd/_cv/workflows/deploy_to_cv.py @@ -50,7 +50,6 @@ async def deploy_to_cv( For any device referred under `configs`, `device_tags` and `interface_tags` the device: - The device must be present in the CloudVision Inventory and onboarded to the "Inventory & Topology Studio". - - TODO: See if we can relax the I&T requirement and add the device if it is missing. - TODO: See if we can onboard ZTP devices and/or preprovision. - The hostname will we updated in the I&T Studio. - The `serial_number` and `system_mac_address` properties will be inplace updated in the given CVDevice objects. diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/aaa-server-groups.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/aaa-server-groups.j2 index a151c5033ec..fe3ce75a5de 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/aaa-server-groups.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/aaa-server-groups.j2 @@ -22,6 +22,8 @@ #### AAA Server Groups Device Configuration ```eos -{% include 'eos/aaa-server-groups.j2' %} +{% include 'eos/aaa-server-groups-ldap.j2' %} +{% include 'eos/aaa-server-groups-radius.j2' %} +{% include 'eos/aaa-server-groups-tacacs-plus.j2' %} ``` {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/arp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/arp.j2 index 5372f73d1f3..c69a9071c81 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/arp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/arp.j2 @@ -20,18 +20,12 @@ Global ARP timeout: {{ arp.aging.timeout_default }} {% endif %} {% if arp.static_entries is arista.avd.defined %} -{# TODO - remove when dropping support for ansible 2.12.6 and its jinja2 hack #} -{% for entry in arp.static_entries %} -{% if entry.vrf is not arista.avd.defined %} -{% do entry.update({"vrf": "default"}) %} -{% endif %} -{% endfor %} #### ARP Static Entries | VRF | IPv4 address | MAC address | | --- | ------------ | ----------- | -{% for vrf, entries in arp.static_entries | groupby("vrf") | arista.avd.natural_sort %} +{% for vrf, entries in arp.static_entries | groupby("vrf", default="default") | arista.avd.natural_sort %} {% for entry in entries | arista.avd.natural_sort("ipv4_address") %} | {{ vrf }} | {{ entry.ipv4_address }} | {{ entry.mac_address }} | {% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/class-maps.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/class-maps.j2 index 32140f2bfe3..fdf25085721 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/class-maps.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/class-maps.j2 @@ -34,5 +34,6 @@ ```eos {% include 'eos/class-maps.j2' %} +{% include 'eos/class-maps-pbr.j2' %} ``` {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/enable-password.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/enable-password.j2 index b46754bfbe2..98500472dad 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/enable-password.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/enable-password.j2 @@ -7,7 +7,10 @@ {% if enable_password is arista.avd.defined %} ### Enable Password -{% if enable_password.key is arista.avd.defined %} +{% if enable_password.disabled is arista.avd.defined(true) %} + +Enable password has been disabled +{% elif enable_password.key is arista.avd.defined %} {% if enable_password.hash_algorithm is arista.avd.defined("md5") %} md5 encrypted enable password is configured diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ethernet-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ethernet-interfaces.j2 index d7a43d4e661..35beb2db573 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ethernet-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ethernet-interfaces.j2 @@ -20,48 +20,103 @@ {% set port_channel_interface = port_channel_interfaces | arista.avd.default([]) | selectattr('name', 'arista.avd.defined', port_channel_interface_name) | first %} -{% if port_channel_interface.type is arista.avd.defined('switched') %} +{# Below if condition is added to keep the existing support for rendering switchport attributes on the basis of port_channel_interface.type == switched #} +{# TODO: AVD6.0 this if condition should be removed once the port_channel_interface.type key is removed in AVD6.0 #} +{% if (port_channel_interface.switchport.mode is arista.avd.defined or + port_channel_interface.switchport.access_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) or + port_channel_interface.switchport.trunk.native_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.groups is arista.avd.defined or + port_channel_interface.switchport.enabled is arista.avd.defined(true)) and + (port_channel_interface.type is not arista.avd.defined or (port_channel_interface.type is arista.avd.defined and port_channel_interface.type not in ["switched", "routed"])) %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set mode = port_channel_interface.mode | arista.avd.default("access") %} -{% set vlans = port_channel_interface.vlans | arista.avd.default('-') %} +{% set mode = port_channel_interface.switchport.mode | arista.avd.default('-') %} +{% if port_channel_interface.switchport.access_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% set switchport_vlans = [] %} +{% if port_channel_interface.switchport.access_vlan is arista.avd.defined %} +{% do switchport_vlans.append(port_channel_interface.switchport.access_vlan) %} +{% endif %} +{% if port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% do switchport_vlans.extend(port_channel_interface.switchport.trunk.allowed_vlan | arista.avd.range_expand | map('int')) %} +{% endif %} +{% if switchport_vlans %} +{% set switchport_vlans = switchport_vlans | arista.avd.list_compress %} +{% else %} +{% set switchport_vlans = port_channel_interface.switchport.trunk.allowed_vlan %} +{% endif %} +{% endif %} +{% if port_channel_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) %} +{% set native_vlan = "tag" %} +{% else %} +{% set native_vlan = port_channel_interface.switchport.trunk.native_vlan | arista.avd.default('-') %} +{% endif %} +{% set channel_group = ethernet_interface.channel_group.id %} +{% set trunk_groups = port_channel_interface.switchport.trunk.groups | arista.avd.default(['-']) | join(', ') %} +| {{ ethernet_interface.name }} | {{ description }} | *{{ mode }} | *{{ switchport_vlans | arista.avd.default('-') }} | *{{ native_vlan }} | *{{ trunk_groups }} | {{ channel_group }} | +{# TODO: AVD6.0 Below elif block should be removed once the deprecated keys are removed in AVD6.0 #} +{% elif port_channel_interface.type is arista.avd.defined('switched') %} +{% set description = ethernet_interface.description | arista.avd.default("-") %} +{% set mode = port_channel_interface.mode | arista.avd.default('-') %} +{% set switchport_vlans = port_channel_interface.vlans | arista.avd.default('-') %} {% if port_channel_interface.native_vlan_tag is arista.avd.defined(true) %} {% set native_vlan = "tag" %} {% else %} {% set native_vlan = port_channel_interface.native_vlan | arista.avd.default('-') %} {% endif %} {% set channel_group = ethernet_interface.channel_group.id %} -{% if port_channel_interface.trunk_groups is arista.avd.defined %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = [] %} -{% for trunk_group in port_channel_interface.trunk_groups | arista.avd.natural_sort %} -{% do l2.trunk_groups.append(trunk_group) %} -{% endfor %} +{% set trunk_groups = port_channel_interface.trunk_groups | arista.avd.default(['-']) | join(', ') %} +| {{ ethernet_interface.name }} | {{ description }} | *{{ mode }} | *{{ switchport_vlans }} | *{{ native_vlan }} | *{{ trunk_groups }} | {{ channel_group }} | +{% endif %} +{% else %} +{# Below if condition is added to keep the existing support for rendering switchport attributes on the basis of port_channel_interface.type == switched #} +{# TODO: AVD6.0 this if condition should be removed once the port_channel_interface.type key is removed in AVD6.0 #} +{% if (ethernet_interface.switchport.mode is arista.avd.defined or + ethernet_interface.switchport.access_vlan is arista.avd.defined or + ethernet_interface.switchport.trunk.allowed_vlan is arista.avd.defined or + ethernet_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) or + ethernet_interface.switchport.trunk.native_vlan is arista.avd.defined or + ethernet_interface.switchport.trunk.groups is arista.avd.defined or + ethernet_interface.switchport.enabled is arista.avd.defined(true)) and + (ethernet_interface.type is not arista.avd.defined or (ethernet_interface.type is arista.avd.defined and ethernet_interface.type not in ["switched", "routed"])) %} +{% set description = ethernet_interface.description | arista.avd.default("-") %} +{% set mode = ethernet_interface.switchport.mode | arista.avd.default('-') %} +{% if ethernet_interface.switchport.access_vlan is arista.avd.defined or + ethernet_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% set switchport_vlans = [] %} +{% if ethernet_interface.switchport.access_vlan is arista.avd.defined %} +{% do switchport_vlans.append(ethernet_interface.switchport.access_vlan) %} +{% endif %} +{% if ethernet_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% do switchport_vlans.extend(ethernet_interface.switchport.trunk.allowed_vlan | arista.avd.range_expand | map('int')) %} +{% endif %} +{% if switchport_vlans %} +{% set switchport_vlans = switchport_vlans | arista.avd.list_compress %} +{% elif ethernet_interface.switchport.trunk.allowed_vlan is arista.avd.defined("none") %} +{% set switchport_vlans = ethernet_interface.switchport.trunk.allowed_vlan %} +{% endif %} +{% endif %} +{% if ethernet_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) %} +{% set native_vlan = "tag" %} {% else %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = "-" %} +{% set native_vlan = ethernet_interface.switchport.trunk.native_vlan | arista.avd.default('-') %} {% endif %} -| {{ ethernet_interface.name }} | {{ description }} | *{{ mode }} | *{{ vlans }} | *{{ native_vlan }} | *{{ l2.trunk_groups }} | {{ channel_group }} | -{% endif %} -{% elif ethernet_interface.type is arista.avd.defined('switched') %} -{% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set mode = ethernet_interface.mode | arista.avd.default("access") %} -{% set vlans = ethernet_interface.vlans | arista.avd.default('-') %} -{% if ethernet_interface.native_vlan_tag is arista.avd.defined(true) %} -{% set native_vlan = "tag" %} -{% else %} -{% set native_vlan = ethernet_interface.native_vlan | arista.avd.default('-') %} -{% endif %} -{% if ethernet_interface.trunk_groups is defined %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = [] %} -{% for trunk_group in ethernet_interface.trunk_groups | arista.avd.natural_sort %} -{% do l2.trunk_groups.append(trunk_group) %} -{% endfor %} -{% else %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = "-" %} +{% set trunk_groups = ethernet_interface.switchport.trunk.groups | arista.avd.default(['-']) | join(', ') %} +| {{ ethernet_interface.name }} | {{ description }} | {{ mode }} | {{ switchport_vlans | arista.avd.default('-') }} | {{ native_vlan }} | {{ trunk_groups }} | - | +{# TODO: AVD6.0 Below elif block should be removed once the deprecated keys are removed in AVD6.0 #} +{% elif ethernet_interface.type is arista.avd.defined('switched') %} +{% set description = ethernet_interface.description | arista.avd.default("-") %} +{% set mode = ethernet_interface.mode | arista.avd.default('-') %} +{% set switchport_vlans = ethernet_interface.vlans | arista.avd.default('-') %} +{% if ethernet_interface.native_vlan_tag is arista.avd.defined(true) %} +{% set native_vlan = "tag" %} +{% else %} +{% set native_vlan = ethernet_interface.native_vlan | arista.avd.default('-') %} +{% endif %} +{% set trunk_groups = ethernet_interface.trunk_groups | arista.avd.default(['-']) | join(', ') %} +| {{ ethernet_interface.name }} | {{ description }} | {{ mode }} | {{ switchport_vlans }} | {{ native_vlan }} | {{ trunk_groups }} | - | {% endif %} -| {{ ethernet_interface.name }} | {{ description }} | {{ mode }} | {{ vlans }} | {{ native_vlan }} | {{ l2.trunk_groups }} | - | {% endif %} {% endfor %} @@ -70,7 +125,11 @@ {% set encapsulation_dot1q_interfaces = [] %} {% set flexencap_interfaces = [] %} {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.type | arista.avd.default in ['l3dot1q', 'l2dot1q'] %} +{% if ethernet_interface.encapsulation_dot1q.vlan is arista.avd.defined %} +{% do encapsulation_dot1q_interfaces.append(ethernet_interface) %} +{% elif ethernet_interface.encapsulation_vlan.client.encapsulation is arista.avd.defined %} +{% do flexencap_interfaces.append(ethernet_interface) %} +{% elif ethernet_interface.type | arista.avd.default in ['l3dot1q', 'l2dot1q'] %} {% if ethernet_interface.encapsulation_dot1q_vlan is arista.avd.defined %} {% do encapsulation_dot1q_interfaces.append(ethernet_interface) %} {% elif ethernet_interface.encapsulation_vlan is arista.avd.defined %} @@ -82,35 +141,58 @@ ##### Encapsulation Dot1q Interfaces -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | {% for ethernet_interface in encapsulation_dot1q_interfaces %} {% set description = ethernet_interface.description | arista.avd.default('-') %} -{% set type = ethernet_interface.type %} {% set vlan_id = ethernet_interface.vlan_id | arista.avd.default('-') %} -{% set encapsulation_dot1q_vlan = ethernet_interface.encapsulation_dot1q_vlan | arista.avd.default('-') %} -| {{ ethernet_interface.name }} | {{ description }} | {{ type }} | {{ vlan_id }} | {{ encapsulation_dot1q_vlan }} | +{% set encapsulation_dot1q_vlan = ethernet_interface.encapsulation_dot1q.vlan | arista.avd.default(ethernet_interface.encapsulation_dot1q_vlan, '-') %} +{% set encapsulation_dot1q_inner_vlan = ethernet_interface.encapsulation_dot1q.inner_vlan | arista.avd.default('-') %} +| {{ ethernet_interface.name }} | {{ description }} | {{ vlan_id }} | {{ encapsulation_dot1q_vlan }} | {{ encapsulation_dot1q_inner_vlan }} | {% endfor %} {% endif %} {% if flexencap_interfaces | length > 0 %} ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- |------------ | ---------------------- | ---------------------- | {% for ethernet_interface in flexencap_interfaces %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set type = ethernet_interface.type %} {% set vlan_id = ethernet_interface.vlan_id | arista.avd.default('-') %} -{% set client_unmatched = ethernet_interface.encapsulation_vlan.client.unmatched | arista.avd.default(false) %} -{% set client_dot1q_vlan = ethernet_interface.encapsulation_vlan.client.dot1q.vlan | arista.avd.default("-") %} -{% set client_dot1q_outer = ethernet_interface.encapsulation_vlan.client.dot1q.outer | arista.avd.default("-") %} -{% set client_dot1q_inner = ethernet_interface.encapsulation_vlan.client.dot1q.inner | arista.avd.default("-") %} -{% set network_client = ethernet_interface.encapsulation_vlan.network.client | arista.avd.default(false) %} -{% set network_dot1q_vlan = ethernet_interface.encapsulation_vlan.network.dot1q.vlan | arista.avd.default("-") %} -{% set network_dot1q_outer = ethernet_interface.encapsulation_vlan.network.dot1q.outer | arista.avd.default("-") %} -{% set network_dot1q_inner = ethernet_interface.encapsulation_vlan.network.dot1q.inner | arista.avd.default("-") %} -| {{ ethernet_interface.name }} | {{ description }} | {{ type }} | {{ vlan_id }} | {{ client_unmatched }} | {{ client_dot1q_vlan }} | {{ client_dot1q_outer }} | {{ client_dot1q_inner }} | {{ network_client }} | {{ network_dot1q_vlan }} | {{ network_dot1q_outer }} | {{ network_dot1q_inner }} | +{% set client_encapsulation = ethernet_interface.encapsulation_vlan.client.encapsulation | arista.avd.default('-') %} +{# The below if condition is to get client encapsulation from deprecated keys #} +{# TODO: AVD6.0 below if block should be removed once the 'ethernet_interface.encapsulation_vlan.client.dot1q' and 'ethernet_interface.encapsulation_vlan.client.unmatched' are removed in AVD6.0 #} +{% if client_encapsulation == '-' %} +{% if ethernet_interface.encapsulation_vlan.client.dot1q is arista.avd.defined %} +{% set client_encapsulation = 'dot1q' %} +{% elif ethernet_interface.encapsulation_vlan.client.unmatched is arista.avd.defined(true) %} +{% set client_encapsulation = 'unmatched' %} +{% endif %} +{% endif %} +{% if client_encapsulation in ['dot1q', 'dot1ad'] %} +{% set client_inner_encapsulation = ethernet_interface.encapsulation_vlan.client.inner_encapsulation | arista.avd.default('-') %} +{% set client_vlan = ethernet_interface.encapsulation_vlan.client.vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.client.dot1q.vlan) %} +{% set client_outer_vlan = ethernet_interface.encapsulation_vlan.client.outer_vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.client.dot1q.outer) %} +{% set client_inner_vlan = ethernet_interface.encapsulation_vlan.client.inner_vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.client.dot1q.inner) %} +{% endif %} +{% set network_encapsulation = ethernet_interface.encapsulation_vlan.network.encapsulation | arista.avd.default('-') %} +{# The below if condition is to get network encapsulation from deprecated keys #} +{# TODO: AVD6.0 below if block should be removed once the 'ethernet_interface.encapsulation_vlan.network.dot1q' and 'ethernet_interface.encapsulation_vlan.network.client' are removed in AVD6.0 #} +{% if network_encapsulation == '-' %} +{% if ethernet_interface.encapsulation_vlan.network.dot1q is arista.avd.defined %} +{% set network_encapsulation = 'dot1q' %} +{% elif ethernet_interface.encapsulation_vlan.network.client is arista.avd.defined(true) %} +{% set network_encapsulation = 'client' %} +{% endif %} +{% endif %} +{% if network_encapsulation in ['dot1q', 'dot1ad'] %} +{% set network_inner_encapsulation = ethernet_interface.encapsulation_vlan.network.inner_encapsulation | arista.avd.default('-') %} +{% set network_vlan = ethernet_interface.encapsulation_vlan.network.vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.network.dot1q.vlan) %} +{% set network_outer_vlan = ethernet_interface.encapsulation_vlan.network.outer_vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.network.dot1q.outer) %} +{% set network_inner_vlan = ethernet_interface.encapsulation_vlan.network.inner_vlan | arista.avd.default(ethernet_interface.encapsulation_vlan.network.dot1q.inner) %} +{% endif %} +| {{ ethernet_interface.name }} | {{ description }} | {{ vlan_id }} | {{ client_encapsulation }} | {{ client_inner_encapsulation | arista.avd.default('-') }} | {{ client_vlan | arista.avd.default('-') }} | {{ client_outer_vlan | arista.avd.default('-') }} | {{ client_inner_vlan | arista.avd.default('-') }} | {{ network_encapsulation }} | {{ network_inner_encapsulation | arista.avd.default('-') }} | {{ network_vlan | arista.avd.default('-') }} | {{ network_outer_vlan | arista.avd.default('-') }} | {{ network_inner_vlan | arista.avd.default('-') }} | {% endfor %} {% endif %} {# PVLAN #} @@ -118,7 +200,9 @@ {% set ethernet_interface_pvlan.configured = false %} {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} {% if ethernet_interface.pvlan_mapping is arista.avd.defined or - ethernet_interface.trunk_private_vlan_secondary is arista.avd.defined %} + ethernet_interface.trunk_private_vlan_secondary is arista.avd.defined or + ethernet_interface.switchport.pvlan_mapping is arista.avd.defined or + ethernet_interface.switchport.trunk.private_vlan_secondary is arista.avd.defined %} {% set ethernet_interface_pvlan.configured = true %} {% break %} {% endif %} @@ -130,10 +214,9 @@ | Interface | PVLAN Mapping | Secondary Trunk | | --------- | ------------- | ----------------| {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.pvlan_mapping is arista.avd.defined or - ethernet_interface.trunk_private_vlan_secondary is arista.avd.defined %} -{% set row_pvlan_mapping = ethernet_interface.pvlan_mapping | arista.avd.default('-') %} -{% set row_trunk_private_vlan_secondary = ethernet_interface.trunk_private_vlan_secondary | arista.avd.default('-') %} +{% set row_pvlan_mapping = ethernet_interface.switchport.pvlan_mapping | arista.avd.default(ethernet_interface.pvlan_mapping, '-') %} +{% set row_trunk_private_vlan_secondary = ethernet_interface.switchport.trunk.private_vlan_secondary | arista.avd.default(ethernet_interface.trunk_private_vlan_secondary, '-') %} +{% if row_pvlan_mapping != '-' or row_trunk_private_vlan_secondary != '-' %} | {{ ethernet_interface.name }} | {{ row_pvlan_mapping }} | {{ row_trunk_private_vlan_secondary }} | {% endif %} {% endfor %} @@ -142,7 +225,8 @@ {% set ethernet_interface_vlan_xlate = namespace() %} {% set ethernet_interface_vlan_xlate.configured = false %} {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.vlan_translations is arista.avd.defined %} +{% if ethernet_interface.switchport.vlan_translations is arista.avd.defined or + ethernet_interface.vlan_translations is arista.avd.defined %} {% set ethernet_interface_vlan_xlate.configured = true %} {% break %} {% endif %} @@ -151,14 +235,30 @@ ##### VLAN Translations -| Interface | From VLAN ID(s) | To VLAN ID | Direction | -| --------- | --------------- | -----------| --------- | +| Interface | Direction | From VLAN ID(s) | To VLAN ID | From Inner VLAN ID | To Inner VLAN ID | Network | Dot1q-tunnel | +| --------- | --------- | --------------- | ---------- | ------------------ | ---------------- | ------- | ------------ | {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.vlan_translations is arista.avd.defined %} +{% if ethernet_interface.switchport.vlan_translations is arista.avd.defined %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_both | arista.avd.natural_sort('from') %} +| {{ ethernet_interface.name }} | both | {{ vlan_translation.from }} | {{ vlan_translation.to }} | {{ vlan_translation.inner_vlan_from | arista.avd.default('-') }} | - | {{ vlan_translation.network | arista.avd.default('-') }} | {{ vlan_translation.dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_in | arista.avd.natural_sort('from') %} +| {{ ethernet_interface.name }} | in | {{ vlan_translation.from }} | {{ vlan_translation.to }} | {{ vlan_translation.inner_vlan_from | arista.avd.default('-') }} | - | {{ vlan_translation.network | arista.avd.default('-') }} | {{ vlan_translation.dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_out | arista.avd.natural_sort('from') %} +{% if vlan_translation.dot1q_tunnel_to is arista.avd.defined %} +{% set dot1q_tunnel = "True" %} +{% set to_vlan_id = vlan_translation.dot1q_tunnel_to %} +{% else %} +{% set to_vlan_id = vlan_translation.to | arista.avd.default("-") %} +{% endif %} +| {{ ethernet_interface.name }} | out | {{ vlan_translation.from }} | {{ to_vlan_id }} | - | {{ vlan_translation.inner_vlan_to | arista.avd.default('-') }} | {{ vlan_translation.network | arista.avd.default('-') }} | {{ dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% elif ethernet_interface.vlan_translations is arista.avd.defined %} {% for vlan_translation in ethernet_interface.vlan_translations | arista.avd.natural_sort %} {% if vlan_translation.from is arista.avd.defined and vlan_translation.to is arista.avd.defined %} {% set row_direction = vlan_translation.direction | arista.avd.default('both') %} -| {{ ethernet_interface.name }} | {{ vlan_translation.from }} | {{ vlan_translation.to }} | {{ row_direction }} | +| {{ ethernet_interface.name }} | {{ row_direction }} | {{ vlan_translation.from }} | {{ vlan_translation.to }} | - | - | - | - | {% endif %} {% endfor %} {% endif %} @@ -239,7 +339,7 @@ {# Phone Interfaces #} {% set phone_interfaces = [] %} {% for interface in ethernet_interfaces | arista.avd.natural_sort('name') + port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if interface.phone is arista.avd.defined %} +{% if interface.switchport.phone is arista.avd.defined or interface.phone is arista.avd.defined %} {% do phone_interfaces.append(interface) %} {% endif %} {% endfor %} @@ -250,7 +350,11 @@ | Interface | Mode | Native VLAN | Phone VLAN | Phone VLAN Mode | | --------- | ---- | ----------- | ---------- | --------------- | {% for phone_interface in phone_interfaces %} -| {{ phone_interface.name }} | {{ phone_interface.mode }} | {{ phone_interface.native_vlan | arista.avd.default(1) }} | {{ phone_interface.phone.vlan | arista.avd.default('-') }} | {{ phone_interface.phone.trunk | arista.avd.default('-') }} | +{% set mode = phone_interface.switchport.mode | arista.avd.default(phone_interface.mode, '-') %} +{% set native_vlan = phone_interface.switchport.trunk.native_vlan | arista.avd.default(phone_interface.native_vlan, '-') %} +{% set phone_vlan = phone_interface.switchport.phone.vlan | arista.avd.default(phone_interface.phone.vlan, '-') %} +{% set phone_vlan_mode = phone_interface.switchport.phone.trunk | arista.avd.default(phone_interface.phone.trunk, '-') %} +| {{ phone_interface.name }} | {{ mode }} | {{ native_vlan }} | {{ phone_vlan }} | {{ phone_vlan_mode }} | {% endfor %} {% endif %} {# Multicast Routing #} @@ -295,9 +399,7 @@ {% set ethernet_interface_ipv4 = namespace() %} {% set ethernet_interface_ipv4.configured = false %} {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.type is arista.avd.defined - and ethernet_interface.type in ['routed', 'l3dot1q'] - and ethernet_interface.ip_address is arista.avd.defined %} +{% if ethernet_interface.ip_address is arista.avd.defined %} {% set ethernet_interface_ipv4.configured = true %} {% break %} {% endif %} @@ -305,9 +407,7 @@ {% set port_channel_interface_ipv4 = namespace() %} {% set port_channel_interface_ipv4.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is arista.avd.defined - and port_channel_interface.type in ['routed', 'l3dot1q'] - and port_channel_interface.ip_address is arista.avd.defined %} +{% if port_channel_interface.ip_address is arista.avd.defined %} {% set port_channel_interface_ipv4.configured = true %} {% break %} {% endif %} @@ -316,8 +416,8 @@ ##### IPv4 -| Interface | Description | Type | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | -----| ------------- | ---------- | ----| ---- | -------- | ------ | ------- | +| Interface | Description | Channel Group | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------------- | ---------- | ----| ---- | -------- | ------ | ------- | {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} {% if ethernet_interface.channel_group.id is arista.avd.defined %} {% set port_channel_interface_name = 'Port-Channel' ~ ethernet_interface.channel_group.id %} @@ -326,7 +426,6 @@ first %} {% if port_channel_interface.ip_address is arista.avd.defined %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set type = port_channel_interface.type | arista.avd.default("-") %} {% set channel_group = ethernet_interface.channel_group.id | arista.avd.default("-") %} {% set ip_address = port_channel_interface.ip_address | arista.avd.default("-") %} {% set vrf = port_channel_interface.vrf | arista.avd.default("*default") %} @@ -334,19 +433,18 @@ {% set shutdown = port_channel_interface.shutdown | arista.avd.default("*-") %} {% set acl_in = port_channel_interface.access_group_in | arista.avd.default("*-") %} {% set acl_out = port_channel_interface.access_group_out | arista.avd.default("*-") %} -| {{ ethernet_interface.name }} | {{ description }} | *{{ type }} | {{ channel_group }} | *{{ ip_address }} | *{{ vrf }} | *{{ mtu }} | *{{ shutdown }} | *{{ acl_in }} | *{{ acl_out }} | +| {{ ethernet_interface.name }} | {{ description }} | {{ channel_group }} | *{{ ip_address }} | *{{ vrf }} | *{{ mtu }} | *{{ shutdown }} | *{{ acl_in }} | *{{ acl_out }} | {% endif %} {% else %} {% if ethernet_interface.ip_address is arista.avd.defined %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set type = ethernet_interface.type | arista.avd.default("-") %} {% set ip_address = ethernet_interface.ip_address | arista.avd.default("-") %} {% set vrf = ethernet_interface.vrf | arista.avd.default("default") %} {% set mtu = ethernet_interface.mtu | arista.avd.default("-") %} {% set shutdown = ethernet_interface.shutdown | arista.avd.default("-") %} {% set acl_in = ethernet_interface.access_group_in | arista.avd.default("-") %} {% set acl_out = ethernet_interface.access_group_out | arista.avd.default("-") %} -| {{ ethernet_interface.name }} | {{ description }} | {{ type }} | - | {{ ip_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ acl_in }} | {{ acl_out }} | +| {{ ethernet_interface.name }} | {{ description }} | - | {{ ip_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ acl_in }} | {{ acl_out }} | {% endif %} {% endif %} {% endfor %} @@ -362,9 +460,7 @@ {% set ethernet_interface_ipv6 = namespace() %} {% set ethernet_interface_ipv6.configured = false %} {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} -{% if ethernet_interface.type is arista.avd.defined - and ethernet_interface.type in ['routed', 'l3dot1q'] - and (ethernet_interface.ipv6_address is arista.avd.defined or ethernet_interface.ipv6_enable is arista.avd.defined(true)) %} +{% if ethernet_interface.ipv6_address is arista.avd.defined or ethernet_interface.ipv6_enable is arista.avd.defined(true) %} {% set ethernet_interface_ipv6.configured = true %} {% break %} {% endif %} @@ -372,9 +468,7 @@ {% set port_channel_interface_ipv6 = namespace() %} {% set port_channel_interface_ipv6.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is arista.avd.defined - and port_channel_interface.type in ['routed', 'l3dot1q'] - and (port_channel_interface.ipv6_address is arista.avd.defined or port_channel_interface.ipv6_enable is arista.avd.defined(true)) %} +{% if port_channel_interface.ipv6_address is arista.avd.defined or port_channel_interface.ipv6_enable is arista.avd.defined(true) %} {% set port_channel_interface_ipv6.configured = true %} {% break %} {% endif %} @@ -383,8 +477,8 @@ ##### IPv6 -| Interface | Description | Type | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | +| Interface | Description | Channel Group | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | --------------| ------------ | --- | --- | -------- | -------------- | -------------------| ----------- | ------------ | {% for ethernet_interface in ethernet_interfaces | arista.avd.natural_sort('name') %} {% if ethernet_interface.channel_group.id is arista.avd.defined %} {% set port_channel_interface_name = 'Port-Channel' ~ ethernet_interface.channel_group.id %} @@ -393,7 +487,6 @@ first %} {% if port_channel_interface.ipv6_address is arista.avd.defined or port_channel_interface.ipv6_enable is arista.avd.defined(true) %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set type = port_channel_interface.type | arista.avd.default("-") %} {% set channel_group = ethernet_interface.channel_group.id | arista.avd.default("-") %} {% set ipv6_address = port_channel_interface.ipv6_address | arista.avd.default("-") %} {% set vrf = port_channel_interface.vrf | arista.avd.default("default") %} @@ -403,12 +496,11 @@ {% set managed_config_flag = port_channel_interface.ipv6_nd_managed_config_flag | arista.avd.default("-") %} {% set ipv6_acl_in = port_channel_interface.ipv6_access_group_in | arista.avd.default("-") %} {% set ipv6_acl_out = port_channel_interface.ipv6_access_group_out | arista.avd.default("-") %} -| {{ ethernet_interface.name }} | {{ description }} | *{{ type }} | {{ channel_group }} | *{{ ipv6_address }} | *{{ vrf }} | *{{ mtu }} | *{{ shutdown }} | *{{ nd_ra_disabled }} | *{{ managed_config_flag }} | *{{ ipv6_acl_in }} | *{{ ipv6_acl_out }} | +| {{ ethernet_interface.name }} | {{ description }} | {{ channel_group }} | *{{ ipv6_address }} | *{{ vrf }} | *{{ mtu }} | *{{ shutdown }} | *{{ nd_ra_disabled }} | *{{ managed_config_flag }} | *{{ ipv6_acl_in }} | *{{ ipv6_acl_out }} | {% endif %} {% else %} {% if ethernet_interface.ipv6_address is arista.avd.defined or ethernet_interface.ipv6_enable is arista.avd.defined(true) %} {% set description = ethernet_interface.description | arista.avd.default("-") %} -{% set type = ethernet_interface.type | arista.avd.default("-") %} {% set ipv6_address = ethernet_interface.ipv6_address | arista.avd.default("-") %} {% set vrf = ethernet_interface.vrf | arista.avd.default("default") %} {% set mtu = ethernet_interface.mtu | arista.avd.default("-") %} @@ -417,7 +509,7 @@ {% set managed_config_flag = ethernet_interface.ipv6_nd_managed_config_flag | arista.avd.default("-") %} {% set ipv6_acl_in = ethernet_interface.ipv6_access_group_in | arista.avd.default("-") %} {% set ipv6_acl_out = ethernet_interface.ipv6_access_group_out | arista.avd.default("-") %} -| {{ ethernet_interface.name }} | {{ description }} | {{ type }} | - | {{ ipv6_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ nd_ra_disabled }} | {{ managed_config_flag }} | {{ ipv6_acl_in }} | {{ ipv6_acl_out }} | +| {{ ethernet_interface.name }} | {{ description }} | - | {{ ipv6_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ nd_ra_disabled }} | {{ managed_config_flag }} | {{ ipv6_acl_in }} | {{ ipv6_acl_out }} | {% endif %} {% endif %} {% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/filters.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/filters.j2 index 05e96f594b9..44b9d3c6102 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/filters.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/filters.j2 @@ -18,7 +18,7 @@ ## Filters {## Community-lists #} {% include 'documentation/community-lists.j2' %} -{## Community-lists, improved data model #} +{## IP Community Lists #} {% include 'documentation/ip-community-lists.j2' %} {## Peer Filters #} {% include 'documentation/peer-filters.j2' %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ip-security.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ip-security.j2 index aabcc77660b..d6753c834f7 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ip-security.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/ip-security.j2 @@ -17,7 +17,7 @@ | Policy name | IKE lifetime | Encryption | DH group | Local ID | | ----------- | ------------ | ---------- | -------- | -------- | -{% for ike_policy in ip_security.ike_policies | arista.avd.default([]) %} +{% for ike_policy in ip_security.ike_policies | arista.avd.natural_sort('name') %} | {{ ike_policy.name }} | {{ ike_policy.ike_lifetime | arista.avd.default("-") }} | {{ ike_policy.encryption | arista.avd.default("-") }} | {{ ike_policy.dh_group | arista.avd.default("-") }} | {{ ike_policy.local_id_fqdn | arista.avd.default(ike_policy.local_id, "-") }} | {% endfor %} {% endif %} @@ -27,7 +27,7 @@ | Policy name | ESP Integrity | ESP Encryption | Lifetime | PFS DH Group | | ----------- | ------------- | -------------- | -------- | ------------ | -{% for sa_policy in ip_security.sa_policies | arista.avd.default([]) %} +{% for sa_policy in ip_security.sa_policies | arista.avd.natural_sort('name') %} {% if sa_policy.sa_lifetime.value is arista.avd.defined %} {% set lifetime = sa_policy.sa_lifetime.value ~ " " ~ sa_policy.sa_lifetime.unit | arista.avd.default("hours") %} {% endif %} @@ -40,7 +40,7 @@ | Profile name | IKE policy | SA policy | Connection | DPD Interval | DPD Time | DPD action | Mode | Flow Parallelization | | ------------ | ---------- | ----------| ---------- | ------------ | -------- | ---------- | ---- | -------------------- | -{% for profile in ip_security.profiles | arista.avd.default([]) %} +{% for profile in ip_security.profiles | arista.avd.natural_sort('name') %} {% set ike_policy = profile.ike_policy | arista.avd.default("-") %} {% set sa_policy = profile.sa_policy | arista.avd.default("-") %} {% set connection = profile.connection | arista.avd.default("-") %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/logging.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/logging.j2 index 0f8c7d0273a..bbdd8a4cacd 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/logging.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/logging.j2 @@ -87,6 +87,8 @@ #### Logging Servers and Features Device Configuration ```eos +{% include 'eos/logging-event-storm-control.j2' %} +{% include 'eos/logging-event-congestion-drops.j2' %} {% include 'eos/logging.j2' %} ``` {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/management-ssh.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/management-ssh.j2 index 84e00836228..9fe10435bfc 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/management-ssh.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/management-ssh.j2 @@ -7,6 +7,20 @@ {% if management_ssh is arista.avd.defined %} ### Management SSH +{% if management_ssh.authentication is arista.avd.defined %} + +#### Authentication Settings + +| Authentication protocols | Empty passwords | +| ------------------------ | --------------- | +{% if management_ssh.authentication.protocols is arista.avd.defined %} +{% set protocols = management_ssh.authentication.protocols | join(", ") %} +{% else %} +{% set protocols = 'keyboard-interactive, public-key' %} +{% endif %} +{% set empty_passwords = management_ssh.authentication.empty_passwords | arista.avd.default('auto') %} +| {{ protocols }} | {{ empty_passwords }} | +{% endif %} {% if management_ssh.access_groups is arista.avd.defined %} #### IPv4 ACL diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitor-sessions.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitor-sessions.j2 index e9071f14dc1..f228d328690 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitor-sessions.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitor-sessions.j2 @@ -4,13 +4,12 @@ that can be found in the LICENSE file. #} {# doc - monitor sessions #} -{% if monitor_sessions is arista.avd.defined %} +{% if monitor_sessions is arista.avd.defined or monitor_session_default_encapsulation_gre is arista.avd.defined %} ### Monitor Sessions #### Monitor Sessions Summary -{% for monitor_session in monitor_sessions | arista.avd.natural_sort('name') if monitor_session.name is arista.avd.defined %} -{% if monitor_session.sources is arista.avd.defined and monitor_session.destinations is arista.avd.defined %} +{% for monitor_session in monitor_sessions | arista.avd.natural_sort('name') %} ##### {{ monitor_session.name }} @@ -18,46 +17,54 @@ | Sources | Direction | Access Group Type | Access Group Name | Access Group Priority | | ------- | --------- | ----------------- | ----------------- | --------------------- | -{% for source in monitor_session.sources | arista.avd.natural_sort('name') if source.name is arista.avd.defined %} +{% for source in monitor_session.sources | arista.avd.natural_sort('name') %} | {{ source.name }} | {{ source.direction | arista.avd.default('both') }} | {{ source.access_group.type | arista.avd.default('-') }} | {{ source.access_group.name | arista.avd.default('-') }} | {{ source.access_group.priority | arista.avd.default('-') }} | -{% endfor %} +{% endfor %} ####### {{ monitor_session.name }} Destinations and Session Settings | Settings | Values | | -------- | ------ | -| Destinations | {{ monitor_session.destinations | join(', ') }} | -{% if monitor_session.encapsulation_gre_metadata_tx is arista.avd.defined(true) %} +| Destinations | {{ monitor_session.destinations | arista.avd.default(["-"]) | join(', ') }} | +{% if monitor_session.encapsulation_gre_metadata_tx is arista.avd.defined(true) %} | Encapsulation Gre Metadata Tx | {{ monitor_session.encapsulation_gre_metadata_tx }} | -{% endif %} -{% if monitor_session.header_remove_size is arista.avd.defined %} +{% endif %} +{% if monitor_session.header_remove_size is arista.avd.defined %} | Header Remove Size | {{ monitor_session.header_remove_size }} | -{% endif %} -{% if monitor_session.access_group.type is arista.avd.defined and monitor_session.access_group.name is arista.avd.defined %} +{% endif %} +{% if monitor_session.access_group.type is arista.avd.defined and monitor_session.access_group.name is arista.avd.defined %} | Access Group Type | {{ monitor_session.access_group.type }} | | Access Group Name | {{ monitor_session.access_group.name }} | -{% endif %} -{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} +{% endif %} +{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} | Rate Limit per Ingress Chip | {{ monitor_session.rate_limit_per_ingress_chip }} | -{% endif %} -{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} +{% endif %} +{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} | Rate Limit per Egress Chip | {{ monitor_session.rate_limit_per_egress_chip }} | -{% endif %} -{% if monitor_session.sample is arista.avd.defined %} +{% endif %} +{% if monitor_session.sample is arista.avd.defined %} | Sample | {{ monitor_session.sample }} | -{% endif %} -{% if monitor_session.truncate.enabled is arista.avd.defined(true) %} +{% endif %} +{% if monitor_session.truncate.enabled is arista.avd.defined(true) %} | Truncate Enabled | {{ monitor_session.truncate.enabled }} | -{% if monitor_session.truncate.size is arista.avd.defined %} +{% if monitor_session.truncate.size is arista.avd.defined %} | Truncate Size | {{ monitor_session.truncate.size }} | -{% endif %} {% endif %} {% endif %} {% endfor %} +{% if monitor_session_default_encapsulation_gre.payload is arista.avd.defined %} + +##### Monitor Session Default Settings + +| Settings | Values | +| -------- | ------ | +| Encapsulation GRE Payload | {{ monitor_session_default_encapsulation_gre.payload }} | +{% endif %} #### Monitor Sessions Device Configuration ```eos {% include 'eos/monitor-sessions.j2' %} +{% include 'eos/monitor-session-default-encapsulation-gre.j2' %} ``` {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitoring.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitoring.j2 index 1169bf394ce..9e5178e9b42 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitoring.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/monitoring.j2 @@ -21,6 +21,7 @@ or mcs_client is arista.avd.defined or snmp_server is arista.avd.defined or monitor_sessions is arista.avd.defined + or monitor_session_default_encapsulation_gre is arista.avd.defined or tap_aggregation is arista.avd.defined or sflow is arista.avd.defined or hardware_counters is arista.avd.defined diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/port-channel-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/port-channel-interfaces.j2 index 8e57ec49074..0f4beb36ce1 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/port-channel-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/port-channel-interfaces.j2 @@ -12,41 +12,74 @@ ##### L2 -| Interface | Description | Type | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | -| --------- | ----------- | ---- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | +| Interface | Description | Mode | VLANs | Native VLAN | Trunk Group | LACP Fallback Timeout | LACP Fallback Mode | MLAG ID | EVPN ESI | +| --------- | ----------- | ---- | ----- | ----------- | ------------| --------------------- | ------------------ | ------- | -------- | {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is arista.avd.defined("switched") %} +{# Below if condition is added to keep the existing support for rendering switchport attributes on the basis of port_channel_interface.type == switched #} +{# TODO: AVD6.0 this if condition should be removed once the port_channel_interface.type key is removed in AVD6.0 #} +{% if (port_channel_interface.switchport.mode is arista.avd.defined or + port_channel_interface.switchport.access_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) or + port_channel_interface.switchport.trunk.native_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.groups is arista.avd.defined or + port_channel_interface.switchport.enabled is arista.avd.defined(true)) and + (port_channel_interface.type is not arista.avd.defined or (port_channel_interface.type is arista.avd.defined and port_channel_interface.type not in ["switched", "routed"])) %} {% set description = port_channel_interface.description | arista.avd.default("-") %} -{% set type = port_channel_interface.type %} -{% set mode = port_channel_interface.mode | arista.avd.default("access") %} -{% set vlans = port_channel_interface.vlans | arista.avd.default("-") %} -{% if port_channel_interface.native_vlan_tag is arista.avd.defined(true) %} +{% set mode = port_channel_interface.switchport.mode | arista.avd.default('-') %} +{% if port_channel_interface.switchport.access_vlan is arista.avd.defined or + port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% set switchport_vlans = [] %} +{% if port_channel_interface.switchport.access_vlan is arista.avd.defined %} +{% do switchport_vlans.append(port_channel_interface.switchport.access_vlan) %} +{% endif %} +{% if port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} +{% do switchport_vlans.extend(port_channel_interface.switchport.trunk.allowed_vlan | arista.avd.range_expand | map('int')) %} +{% endif %} +{% if switchport_vlans %} +{% set switchport_vlans = switchport_vlans | arista.avd.list_compress %} +{% else %} +{% set switchport_vlans = port_channel_interface.switchport.trunk.allowed_vlan %} +{% endif %} +{% endif %} +{% if port_channel_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) %} {% set native_vlan = "tag" %} {% else %} -{% set native_vlan = port_channel_interface.native_vlan | arista.avd.default("-") %} +{% set native_vlan = port_channel_interface.switchport.trunk.native_vlan | arista.avd.default('-') %} {% endif %} -{% if port_channel_interface.trunk_groups is defined %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = [] %} -{% for trunk_group in port_channel_interface.trunk_groups | arista.avd.natural_sort %} -{% do l2.trunk_groups.append(trunk_group) %} -{% endfor %} +{% set trunk_groups = port_channel_interface.switchport.trunk.groups | arista.avd.default(['-']) | join(', ') %} +{% set lacp_fallback_timeout = port_channel_interface.lacp_fallback_timeout | arista.avd.default("-") %} +{% set lacp_fallback_mode = port_channel_interface.lacp_fallback_mode | arista.avd.default("-") %} +{% set mlag = port_channel_interface.mlag | arista.avd.default("-") %} +{% set esi = port_channel_interface.evpn_ethernet_segment.identifier | arista.avd.default("-") %} +| {{ port_channel_interface.name }} | {{ description }} | {{ mode }} | {{ switchport_vlans | arista.avd.default('-') }} | {{ native_vlan }} | {{ trunk_groups }} | {{ lacp_fallback_timeout }} | {{ lacp_fallback_mode }} | {{ mlag }} | {{ esi }} | +{# TODO: AVD6.0 Below elif block should be removed once the deprecated keys are removed in AVD6.0 #} +{% elif port_channel_interface.type is arista.avd.defined("switched") %} +{% set description = port_channel_interface.description | arista.avd.default("-") %} +{% set mode = port_channel_interface.mode | arista.avd.default('-') %} +{% set switchport_vlans = port_channel_interface.vlans | arista.avd.default('-') %} +{% if port_channel_interface.native_vlan_tag is arista.avd.defined(true) %} +{% set native_vlan = "tag" %} {% else %} -{% set l2 = namespace() %} -{% set l2.trunk_groups = "-" %} +{% set native_vlan = port_channel_interface.native_vlan | arista.avd.default('-') %} {% endif %} +{% set trunk_groups = port_channel_interface.trunk_groups | arista.avd.default(['-']) | join(', ') %} {% set lacp_fallback_timeout = port_channel_interface.lacp_fallback_timeout | arista.avd.default("-") %} {% set lacp_fallback_mode = port_channel_interface.lacp_fallback_mode | arista.avd.default("-") %} {% set mlag = port_channel_interface.mlag | arista.avd.default("-") %} {% set esi = port_channel_interface.evpn_ethernet_segment.identifier | arista.avd.default("-") %} -| {{ port_channel_interface.name }} | {{ description }} | {{ type }} | {{ mode }} | {{ vlans }} | {{ native_vlan }} | {{ l2.trunk_groups }} | {{ lacp_fallback_timeout }} | {{ lacp_fallback_mode }} | {{ mlag }} | {{ esi }} | +| {{ port_channel_interface.name }} | {{ description }} | {{ mode }} | {{ switchport_vlans }} | {{ native_vlan }} | {{ trunk_groups }} | {{ lacp_fallback_timeout }} | {{ lacp_fallback_mode }} | {{ mlag }} | {{ esi }} | {% endif %} {% endfor %} {# Encapsulation #} {% set encapsulation_dot1q_interfaces = [] %} {% set flexencap_interfaces = [] %} {% for port_channel_interface in port_channel_interfaces %} -{% if port_channel_interface.type | arista.avd.default in ['l3dot1q', 'l2dot1q'] %} +{% if port_channel_interface.encapsulation_dot1q.vlan is arista.avd.defined %} +{% do encapsulation_dot1q_interfaces.append(port_channel_interface) %} +{% elif port_channel_interface.encapsulation_vlan.client.encapsulation is arista.avd.defined %} +{% do flexencap_interfaces.append(port_channel_interface) %} +{% elif port_channel_interface.type | arista.avd.default in ['l3dot1q', 'l2dot1q'] %} {% if port_channel_interface.encapsulation_dot1q_vlan is arista.avd.defined %} {% do encapsulation_dot1q_interfaces.append(port_channel_interface) %} {% elif port_channel_interface.encapsulation_vlan is arista.avd.defined %} @@ -58,35 +91,58 @@ ##### Encapsulation Dot1q -| Interface | Description | Type | Vlan ID | Dot1q VLAN Tag | -| --------- | ----------- | -----| ------- | -------------- | +| Interface | Description | Vlan ID | Dot1q VLAN Tag | Dot1q Inner VLAN Tag | +| --------- | ----------- | ------- | -------------- | -------------------- | {% for port_channel_interface in encapsulation_dot1q_interfaces | arista.avd.natural_sort('name') %} {% set description = port_channel_interface.description | arista.avd.default('-') %} -{% set type = port_channel_interface.type %} {% set vlan_id = port_channel_interface.vlan_id | arista.avd.default('-') %} -{% set encapsulation_dot1q_vlan = port_channel_interface.encapsulation_dot1q_vlan | arista.avd.default('-') %} -| {{ port_channel_interface.name }} | {{ description }} | {{ type }} | {{ vlan_id }} | {{ encapsulation_dot1q_vlan }} | +{% set encapsulation_dot1q_vlan = port_channel_interface.encapsulation_dot1q.vlan | arista.avd.default(port_channel_interface.encapsulation_dot1q_vlan, '-') %} +{% set encapsulation_dot1q_inner_vlan = port_channel_interface.encapsulation_dot1q.inner_vlan | arista.avd.default('-') %} +| {{ port_channel_interface.name }} | {{ description }} | {{ vlan_id }} | {{ encapsulation_dot1q_vlan }} | {{ encapsulation_dot1q_inner_vlan }} | {% endfor %} {% endif %} {% if flexencap_interfaces | length > 0 %} ##### Flexible Encapsulation Interfaces -| Interface | Description | Type | Vlan ID | Client Unmatched | Client Dot1q VLAN | Client Dot1q Outer Tag | Client Dot1q Inner Tag | Network Retain Client Encapsulation | Network Dot1q VLAN | Network Dot1q Outer Tag | Network Dot1q Inner Tag | -| --------- | ----------- | ---- | ------- | -----------------| ----------------- | ---------------------- | ---------------------- | ----------------------------------- | ------------------ | ----------------------- | ----------------------- | -{% for port_channel_interface in flexencap_interfaces | arista.avd.natural_sort('name') %} +| Interface | Description | Vlan ID | Client Encapsulation | Client Inner Encapsulation | Client VLAN | Client Outer VLAN Tag | Client Inner VLAN Tag | Network Encapsulation | Network Inner Encapsulation | Network VLAN | Network Outer VLAN Tag | Network Inner VLAN Tag | +| --------- | ----------- | ------- | --------------- | --------------------- | ----------- | --------------------- | --------------------- | ---------------- | ---------------------- | ------------ | ---------------------- | ---------------------- | +{% for port_channel_interface in flexencap_interfaces %} {% set description = port_channel_interface.description | arista.avd.default("-") %} -{% set type = port_channel_interface.type %} {% set vlan_id = port_channel_interface.vlan_id | arista.avd.default('-') %} -{% set client_unmatched = port_channel_interface.encapsulation_vlan.client.unmatched | arista.avd.default(false) %} -{% set client_dot1q_vlan = port_channel_interface.encapsulation_vlan.client.dot1q.vlan | arista.avd.default("-") %} -{% set client_dot1q_outer = port_channel_interface.encapsulation_vlan.client.dot1q.outer | arista.avd.default("-") %} -{% set client_dot1q_inner = port_channel_interface.encapsulation_vlan.client.dot1q.inner | arista.avd.default("-") %} -{% set network_client = port_channel_interface.encapsulation_vlan.network.client | arista.avd.default(false) %} -{% set network_dot1q_vlan = port_channel_interface.encapsulation_vlan.network.dot1q.vlan | arista.avd.default("-") %} -{% set network_dot1q_outer = port_channel_interface.encapsulation_vlan.network.dot1q.outer | arista.avd.default("-") %} -{% set network_dot1q_inner = port_channel_interface.encapsulation_vlan.network.dot1q.inner | arista.avd.default("-") %} -| {{ port_channel_interface.name }} | {{ description }} | {{ type }} | {{ vlan_id }} | {{ client_unmatched }} | {{ client_dot1q_vlan }} | {{ client_dot1q_outer }} | {{ client_dot1q_inner }} | {{ network_client }} | {{ network_dot1q_vlan }} | {{ network_dot1q_outer }} | {{ network_dot1q_inner }} | +{% set client_encapsulation = port_channel_interface.encapsulation_vlan.client.encapsulation | arista.avd.default('-') %} +{# The below if condition is to get client encapsulation from deprecated keys #} +{# TODO: AVD6.0 below if block should be removed once the 'port_channel_interface.encapsulation_vlan.client.dot1q' and 'port_channel_interface.encapsulation_vlan.client.unmatched' are removed in AVD6.0 #} +{% if client_encapsulation == '-' %} +{% if port_channel_interface.encapsulation_vlan.client.dot1q is arista.avd.defined %} +{% set client_encapsulation = 'dot1q' %} +{% elif port_channel_interface.encapsulation_vlan.client.unmatched is arista.avd.defined(true) %} +{% set client_encapsulation = 'unmatched' %} +{% endif %} +{% endif %} +{% if client_encapsulation in ['dot1q', 'dot1ad'] %} +{% set client_inner_encapsulation = port_channel_interface.encapsulation_vlan.client.inner_encapsulation | arista.avd.default('-') %} +{% set client_vlan = port_channel_interface.encapsulation_vlan.client.vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.client.dot1q.vlan) %} +{% set client_outer_vlan = port_channel_interface.encapsulation_vlan.client.outer_vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.client.dot1q.outer) %} +{% set client_inner_vlan = port_channel_interface.encapsulation_vlan.client.inner_vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.client.dot1q.inner) %} +{% endif %} +{% set network_encapsulation = port_channel_interface.encapsulation_vlan.network.encapsulation | arista.avd.default('-') %} +{# The below if condition is to get network encapsulation from deprecated keys #} +{# TODO: AVD6.0 below if block should be removed once the 'port_channel_interface.encapsulation_vlan.network.dot1q' and 'port_channel_interface.encapsulation_vlan.network.client' are removed in AVD6.0 #} +{% if network_encapsulation == '-' %} +{% if port_channel_interface.encapsulation_vlan.network.dot1q is arista.avd.defined %} +{% set network_encapsulation = 'dot1q' %} +{% elif port_channel_interface.encapsulation_vlan.network.client is arista.avd.defined(true) %} +{% set network_encapsulation = 'client' %} +{% endif %} +{% endif %} +{% if network_encapsulation in ['dot1q', 'dot1ad'] %} +{% set network_inner_encapsulation = port_channel_interface.encapsulation_vlan.network.inner_encapsulation | arista.avd.default('-') %} +{% set network_vlan = port_channel_interface.encapsulation_vlan.network.vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.network.dot1q.vlan) %} +{% set network_outer_vlan = port_channel_interface.encapsulation_vlan.network.outer_vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.network.dot1q.outer) %} +{% set network_inner_vlan = port_channel_interface.encapsulation_vlan.network.inner_vlan | arista.avd.default(port_channel_interface.encapsulation_vlan.network.dot1q.inner) %} +{% endif %} +| {{ port_channel_interface.name }} | {{ description }} | {{ vlan_id }} | {{ client_encapsulation }} | {{ client_inner_encapsulation | arista.avd.default('-') }} | {{ client_vlan | arista.avd.default('-') }} | {{ client_outer_vlan | arista.avd.default('-') }} | {{ client_inner_vlan | arista.avd.default('-') }} | {{ network_encapsulation }} | {{ network_inner_encapsulation | arista.avd.default('-') }} | {{ network_vlan | arista.avd.default('-') }} | {{ network_outer_vlan | arista.avd.default('-') }} | {{ network_inner_vlan | arista.avd.default('-') }} | {% endfor %} {% endif %} {# PVLAN #} @@ -94,7 +150,9 @@ {% set port_channel_interface_pvlan.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} {% if port_channel_interface.pvlan_mapping is arista.avd.defined or - port_channel_interface.trunk_private_vlan_secondary is arista.avd.defined %} + port_channel_interface.trunk_private_vlan_secondary is arista.avd.defined or + port_channel_interface.switchport.pvlan_mapping is arista.avd.defined or + port_channel_interface.switchport.trunk.private_vlan_secondary is arista.avd.defined %} {% set port_channel_interface_pvlan.configured = true %} {% break %} {% endif %} @@ -106,10 +164,9 @@ | Interface | PVLAN Mapping | Secondary Trunk | | --------- | ------------- | ----------------| {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.pvlan_mapping is arista.avd.defined or - port_channel_interface.trunk_private_vlan_secondary is arista.avd.defined %} -{% set row_pvlan_mapping = port_channel_interface.pvlan_mapping | arista.avd.default('-') %} -{% set row_trunk_private_vlan_secondary = port_channel_interface.trunk_private_vlan_secondary | arista.avd.default('-') %} +{% set row_pvlan_mapping = port_channel_interface.switchport.pvlan_mapping | arista.avd.default(port_channel_interface.pvlan_mapping, '-') %} +{% set row_trunk_private_vlan_secondary = port_channel_interface.switchport.trunk.private_vlan_secondary | arista.avd.default(port_channel_interface.trunk_private_vlan_secondary, '-') %} +{% if row_pvlan_mapping != '-' or row_trunk_private_vlan_secondary != '-' %} | {{ port_channel_interface.name }} | {{ row_pvlan_mapping }} | {{ row_trunk_private_vlan_secondary }} | {% endif %} {% endfor %} @@ -118,7 +175,8 @@ {% set port_channel_interface_vlan_xlate = namespace() %} {% set port_channel_interface_vlan_xlate.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.vlan_translations is arista.avd.defined %} +{% if port_channel_interface.switchport.vlan_translations is arista.avd.defined or + port_channel_interface.vlan_translations is arista.avd.defined %} {% set port_channel_interface_vlan_xlate.configured = true %} {% break %} {% endif %} @@ -127,14 +185,30 @@ ##### VLAN Translations -| Interface | From VLAN ID(s) | To VLAN ID | Direction | -| --------- | --------------- | -----------| --------- | +| Interface | Direction | From VLAN ID(s) | To VLAN ID | From Inner VLAN ID | To Inner VLAN ID | Network | Dot1q-tunnel | +| --------- | --------- | --------------- | ---------- | ------------------ | ---------------- | ------- | ------------ | {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.vlan_translations is arista.avd.defined %} +{% if port_channel_interface.switchport.vlan_translations is arista.avd.defined %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_both | arista.avd.natural_sort('from') %} +| {{ port_channel_interface.name }} | both | {{ vlan_translation.from }} | {{ vlan_translation.to }} | {{ vlan_translation.inner_vlan_from | arista.avd.default('-') }} | - | {{ vlan_translation.network | arista.avd.default('-') }} | {{ vlan_translation.dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_in | arista.avd.natural_sort('from') %} +| {{ port_channel_interface.name }} | in | {{ vlan_translation.from }} | {{ vlan_translation.to }} | - | {{ vlan_translation.inner_vlan_from | arista.avd.default('-') }} | {{ vlan_translation.network | arista.avd.default('-') }} | {{ vlan_translation.dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_out | arista.avd.natural_sort('from') %} +{% if vlan_translation.dot1q_tunnel_to is arista.avd.defined %} +{% set dot1q_tunnel = "True" %} +{% set to_vlan_id = vlan_translation.dot1q_tunnel_to %} +{% else %} +{% set to_vlan_id = vlan_translation.to | arista.avd.default("-") %} +{% endif %} +| {{ port_channel_interface.name }} | out | {{ vlan_translation.from }} | {{ to_vlan_id }} | - | {{ vlan_translation.inner_vlan_to | arista.avd.default('-') }} | {{ vlan_translation.network | arista.avd.default('-') }} | {{ dot1q_tunnel | arista.avd.default('-') }} | +{% endfor %} +{% elif port_channel_interface.vlan_translations is arista.avd.defined %} {% for vlan_translation in port_channel_interface.vlan_translations | arista.avd.natural_sort %} {% if vlan_translation.from is arista.avd.defined and vlan_translation.to is arista.avd.defined %} {% set row_direction = vlan_translation.direction | arista.avd.default('both') %} -| {{ port_channel_interface.name }} | {{ vlan_translation.from }} | {{ vlan_translation.to }} | {{ row_direction }} | +| {{ port_channel_interface.name }} | {{ row_direction }} | {{ vlan_translation.from }} | {{ vlan_translation.to }} | - | - | - | - | {% endif %} {% endfor %} {% endif %} @@ -223,20 +297,20 @@ {% set port_channel_interface_ipv4 = namespace() %} {% set port_channel_interface_ipv4.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is defined and port_channel_interface.type in ['routed', 'l3dot1q'] and port_channel_interface.ip_address is defined %} +{% if port_channel_interface.ip_address is defined %} {% set port_channel_interface_ipv4.configured = true %} +{% break %} {% endif %} {% endfor %} {% if port_channel_interface_ipv4.configured %} ##### IPv4 -| Interface | Description | Type | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | -| --------- | ----------- | ---- | ------- | ---------- | --- | --- | -------- | ------ | ------- | +| Interface | Description | MLAG ID | IP Address | VRF | MTU | Shutdown | ACL In | ACL Out | +| --------- | ----------- | ------- | ---------- | --- | --- | -------- | ------ | ------- | {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is defined and port_channel_interface.type in ['routed', 'l3dot1q'] and port_channel_interface.ip_address is arista.avd.defined %} +{% if port_channel_interface.ip_address is arista.avd.defined %} {% set description = port_channel_interface.description | arista.avd.default("-") %} -{% set type = "routed" %} {% set mlag = port_channel_interface.mlag | arista.avd.default("-") %} {% set ip_address = port_channel_interface.ip_address | arista.avd.default("-") %} {% set vrf = port_channel_interface.vrf | arista.avd.default("default") %} @@ -244,7 +318,7 @@ {% set shutdown = port_channel_interface.shutdown | arista.avd.default("-") %} {% set acl_in = port_channel_interface.access_group_in | arista.avd.default("-") %} {% set acl_out = port_channel_interface.access_group_out | arista.avd.default("-") %} -| {{ port_channel_interface.name }} | {{ description }} | {{ type }} | {{ mlag }} | {{ ip_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ acl_in }} | {{ acl_out }} | +| {{ port_channel_interface.name }} | {{ description }} | {{ mlag }} | {{ ip_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ acl_in }} | {{ acl_out }} | {% endif %} {% endfor %} {% endif %} @@ -255,20 +329,20 @@ {% set port_channel_interface_ipv6 = namespace() %} {% set port_channel_interface_ipv6.configured = false %} {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is defined and port_channel_interface.type in ['routed', 'l3dot1q'] and port_channel_interface.ipv6_address is defined %} +{% if port_channel_interface.ipv6_address is defined %} {% set port_channel_interface_ipv6.configured = true %} +{% break %} {% endif %} {% endfor %} {% if port_channel_interface_ipv6.configured %} ##### IPv6 -| Interface | Description | Type | MLAG ID | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | -| --------- | ----------- | ---- | ------- | -------------| --- | --- | -------- | -------------- | ------------------- | ----------- | ------------ | +| Interface | Description | MLAG ID | IPv6 Address | VRF | MTU | Shutdown | ND RA Disabled | Managed Config Flag | IPv6 ACL In | IPv6 ACL Out | +| --------- | ----------- | ------- | -------------| --- | --- | -------- | -------------- | ------------------- | ----------- | ------------ | {% for port_channel_interface in port_channel_interfaces | arista.avd.natural_sort('name') %} -{% if port_channel_interface.type is defined and port_channel_interface.type in ['routed', 'l3dot1q'] and port_channel_interface.ipv6_address is arista.avd.defined %} +{% if port_channel_interface.ipv6_address is arista.avd.defined %} {% set description = port_channel_interface.description | arista.avd.default("-") %} -{% set type = "routed" %} {% set mlag = port_channel_interface.mlag | arista.avd.default("-") %} {% set ipv6_address = port_channel_interface.ipv6_address | arista.avd.default("-") %} {% set vrf = port_channel_interface.vrf | arista.avd.default("default") %} @@ -282,7 +356,7 @@ {% endif %} {% set ipv6_acl_in = port_channel_interface.ipv6_access_group_in | arista.avd.default("-") %} {% set ipv6_acl_out = port_channel_interface.ipv6_access_group_out | arista.avd.default("-") %} -| {{ port_channel_interface.name }} | {{ description }} | {{ type }} | {{ mlag }} | {{ ipv6_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ ipv6_nd_ra_disabled }} | {{ ipv6_nd_managed_config_flag }} | {{ ipv6_acl_in }} | {{ ipv6_acl_out }} | +| {{ port_channel_interface.name }} | {{ description }} | {{ mlag }} | {{ ipv6_address }} | {{ vrf }} | {{ mtu }} | {{ shutdown }} | {{ ipv6_nd_ra_disabled }} | {{ ipv6_nd_managed_config_flag }} | {{ ipv6_acl_in }} | {{ ipv6_acl_out }} | {% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-adaptive-virtual-topology.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-adaptive-virtual-topology.j2 index 5010ce0f733..cd0bf4760d3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-adaptive-virtual-topology.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-adaptive-virtual-topology.j2 @@ -12,6 +12,10 @@ {% if router_adaptive_virtual_topology.topology_role is arista.avd.defined %} Topology role: {{ router_adaptive_virtual_topology.topology_role }} +{% if router_adaptive_virtual_topology.gateway_vxlan is arista.avd.defined(true) and router_adaptive_virtual_topology.topology_role in ["edge", "transit zone", "transit region"] %} + +VXLAN gateway: Enabled +{% endif %} {% endif %} {% if router_adaptive_virtual_topology.region is arista.avd.defined or router_adaptive_virtual_topology.zone is arista.avd.defined or router_adaptive_virtual_topology.site is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-bgp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-bgp.j2 index 6a36641a316..49a4adf0130 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-bgp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-bgp.j2 @@ -531,7 +531,7 @@ ASN Notation: {{ router_bgp.as_notation | arista.avd.default('asplain') }} {% set rib_position = ["Primary", "Secondary", "Tertiary" ] %} {% for rib in router_bgp.address_family_evpn.next_hop_mpls_resolution_ribs %} {% if rib.rib_type is arista.avd.defined("tunnel-rib-colored") %} -{% set evpn_mpls_resolution_rib = "tunnel-rib-colored system-colored-tunnel-rib" %} +{% set evpn_mpls_resolution_rib = "tunnel-rib colored system-colored-tunnel-rib" %} {% elif rib.rib_type is arista.avd.defined("tunnel-rib") and rib.rib_name is arista.avd.defined %} {% set evpn_mpls_resolution_rib = "tunnel-rib " ~ rib.rib_name %} {% elif rib.rib_type is arista.avd.defined %} @@ -557,6 +557,16 @@ ASN Notation: {{ router_bgp.as_notation | arista.avd.default('asplain') }} | {{ peer_group.name }} | {{ peer_group.activate | arista.avd.default(false) }} | {{ peer_group.encapsulation | arista.avd.default("default") }} | {% endfor %} {% endif %} +{% if router_bgp.address_family_evpn.neighbors is arista.avd.defined %} + +##### EVPN Neighbors + +| Neighbor | Activate | Encapsulation | +| -------- | -------- | ------------- | +{% for neighbor in router_bgp.address_family_evpn.neighbors | arista.avd.natural_sort('ip_address') %} +| {{ neighbor.ip_address }} | {{ neighbor.activate | arista.avd.default(false) }} | {{ neighbor.encapsulation | arista.avd.default("default") }} | +{% endfor %} +{% endif %} {% if router_bgp.address_family_evpn.neighbor_default.encapsulation is arista.avd.defined %} ##### EVPN Neighbor Default Encapsulation @@ -624,6 +634,61 @@ ASN Notation: {{ router_bgp.as_notation | arista.avd.default('asplain') }} | L3 Gateway Inter-domain | True | {% endif %} {% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast is arista.avd.defined %} + +#### Router BGP IPv4 Labeled Unicast + +##### General Settings + +| Settings | Value | +| -------- | ----- | +{% if router_bgp.address_family_ipv4_labeled_unicast.update_wait_for_convergence is arista.avd.defined(true) %} +| Update wait-for-convergence | Enabled | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.next_hop_unchanged is arista.avd.defined(true) %} +| Next-hop Unchanged | True | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.lfib_entry_installation_skipped is arista.avd.defined(true) %} +| LFIB entry installation skipped | True | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.label_local_termination is arista.avd.defined %} +| Label local-termination | {{ router_bgp.address_family_ipv4_labeled_unicast.label_local_termination }} | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.graceful_restart is arista.avd.defined(true) %} +| Graceful-restart | Enabled | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.neighbor_default.next_hop_self is arista.avd.defined(true) %} +| Neighbor default next-hop-self | True | +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.peer_groups is arista.avd.defined %} + +##### IPv4 BGP-LU Peer-groups + +| Peer-group | Activate | Route-map In | Route-map Out | RCF In | RCF Out | +| ---------- | -------- | ------------ | ------------- | ------ | ------- | +{% for peer in router_bgp.address_family_ipv4_labeled_unicast.peer_groups | arista.avd.natural_sort('name') %} +{% set route_map_in = peer.route_map_in | arista.avd.default("-") %} +{% set route_map_out = peer.route_map_out | arista.avd.default("-") %} +{% set rcf_in = peer.rcf_in | arista.avd.default("-") %} +{% set rcf_out = peer.rcf_out | arista.avd.default("-") %} +| {{ peer.name }} | {{ peer.activate | arista.avd.default(false) }} | {{ route_map_in }} | {{ route_map_out }} | {{ rcf_in }} | {{ rcf_out }} | +{% endfor %} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.neighbors is arista.avd.defined %} + +##### IPv4 BGP-LU Neighbors + +| Neighbor | Activate | Route-map In | Route-map Out | RCF In | RCF Out | +| -------- | -------- | ------------ | ------------- | ------ | ------- | +{% for neighbor in router_bgp.address_family_ipv4_labeled_unicast.neighbors | arista.avd.natural_sort('ip_address') %} +{% set route_map_in = neighbor.route_map_in | arista.avd.default("-") %} +{% set route_map_out = neighbor.route_map_out | arista.avd.default("-") %} +{% set rcf_in = neighbor.rcf_in | arista.avd.default("-") %} +{% set rcf_out = neighbor.rcf_out | arista.avd.default("-") %} +| {{ neighbor.ip_address }} | {{ neighbor.activate | arista.avd.default(false) }} | {{ route_map_in }} | {{ route_map_out }} | {{ rcf_in }} | {{ rcf_out }} | +{% endfor %} +{% endif %} +{% endif %} {% if router_bgp.address_family_ipv4_sr_te is arista.avd.defined %} #### Router BGP IPv4 SR-TE Address Family diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-isis.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-isis.j2 index 10c2a97efca..9acdfb4691a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-isis.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-isis.j2 @@ -171,7 +171,7 @@ {% endif %} {% endfor %} {% endif %} -{% if router_isis.address_family_ipv4 is arista.avd.defined %} +{% if router_isis.address_family_ipv4.enabled is arista.avd.defined(true) %} #### ISIS IPv4 Address Family Summary @@ -196,17 +196,17 @@ | TI-LFA SRLG Strict Mode | {{ router_isis.address_family_ipv4.fast_reroute_ti_lfa.srlg.strict }} | {% endif %} {% endif %} -{% endif %} -{% if router_isis.address_family_ipv4.tunnel_source_labeled_unicast.enabled is arista.avd.defined(true) %} +{% if router_isis.address_family_ipv4.tunnel_source_labeled_unicast.enabled is arista.avd.defined(true) %} #### Tunnel Source | Source Protocol | RCF | | --------------- | --- | -{% set rcf = router_isis.address_family_ipv4.tunnel_source_labeled_unicast.rcf | arista.avd.default('-') %} +{% set rcf = router_isis.address_family_ipv4.tunnel_source_labeled_unicast.rcf | arista.avd.default('-') %} | BGP Labeled-Unicast | {{ rcf }} | +{% endif %} {% endif %} -{% if router_isis.address_family_ipv6 is arista.avd.defined %} +{% if router_isis.address_family_ipv6.enabled is arista.avd.defined(true) %} #### ISIS IPv6 Address Family Summary diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-ospf.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-ospf.j2 index 347f6b033bf..b4a94383d13 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-ospf.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-ospf.j2 @@ -98,7 +98,7 @@ {% for process_id in router_ospf.process_ids | arista.avd.natural_sort('id') %} {% if process_id.redistribute is arista.avd.defined %} {% set source_protocols = [] %} -{% if process_id.redistribute.connected is defined %} +{% if process_id.redistribute.connected.enabled is arista.avd.defined(true) %} {% if process_id.redistribute.connected.include_leaked is arista.avd.defined(true) %} {% set include_leaked = 'enabled' %} {% else %} @@ -106,7 +106,7 @@ {% endif %} {% do source_protocols.append(('connected', include_leaked, process_id.redistribute.connected.route_map | arista.avd.default('-'))) %} {% endif %} -{% if process_id.redistribute.static is defined %} +{% if process_id.redistribute.static.enabled is arista.avd.defined(true) %} {% if process_id.redistribute.static.include_leaked is arista.avd.defined(true) %} {% set include_leaked = 'enabled' %} {% else %} @@ -114,7 +114,7 @@ {% endif %} {% do source_protocols.append(('static', include_leaked, process_id.redistribute.static.route_map | arista.avd.default('-'))) %} {% endif %} -{% if process_id.redistribute.bgp is defined %} +{% if process_id.redistribute.bgp.enabled is arista.avd.defined(true) %} {% if process_id.redistribute.bgp.include_leaked is arista.avd.defined(true) %} {% set include_leaked = 'enabled' %} {% else %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-traffic-engineering.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-traffic-engineering.j2 index eaca60f4a77..6f6f6fce37a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-traffic-engineering.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/router-traffic-engineering.j2 @@ -4,14 +4,11 @@ that can be found in the LICENSE file. #} {# doc - router traffic engineering #} -{# for AVD 5.0.0, the first part of the if statement will be removed #} -{% if router_traffic_engineering is arista.avd.defined or router_traffic_engineering.enabled is arista.avd.defined(true) %} +{% if router_traffic_engineering.enabled is arista.avd.defined(true) %} ### Router Traffic-Engineering -{% if router_traffic_engineering.enabled is arista.avd.defined(true) %} - Traffic Engineering is enabled. -{% endif %} {% if router_traffic_engineering.segment_routing is arista.avd.defined %} #### Segment Routing Summary diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/traffic-policies.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/traffic-policies.j2 index 460397d4a05..e1a818bc92a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/traffic-policies.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/traffic-policies.j2 @@ -12,40 +12,36 @@ #### IPv4 Field Sets -| Field Set Name | Values | -| -------------- | ------ | -{% for field_set_ipv4 in traffic_policies.field_sets.ipv4 %} -{% if field_set_ipv4 | length > 1 %} -{% set value = field_set_ipv4.prefixes | join('
') %} -{% else %} -{% set value = field_set_ipv4[0].prefixes %} +| Field Set Name | IPv4 Prefixes | +| -------------- | ------------- | +{% for field_set_ipv4 in traffic_policies.field_sets.ipv4 | arista.avd.natural_sort('name') %} +{% if field_set_ipv4.prefixes is arista.avd.defined %} +{% set value = field_set_ipv4.prefixes | arista.avd.natural_sort | join('
') %} {% endif %} -| {{ field_set_ipv4.name }} | {{ value }} | +| {{ field_set_ipv4.name }} | {{ value | arista.avd.default("-") }} | {% endfor %} {% endif %} {% if traffic_policies.field_sets.ipv6 is arista.avd.defined %} #### IPv6 Field Sets -| Field Set Name | Values | -| -------------- | ------ | -{% for field_set_ipv6 in traffic_policies.field_sets.ipv6 %} -{% if field_set_ipv6 | length > 1 %} -{% set value = field_set_ipv6.prefixes | join('
') %} -{% else %} -{% set value = field_set_ipv6[0].prefixes %} +| Field Set Name | IPv6 Prefixes | +| -------------- | ------------- | +{% for field_set_ipv6 in traffic_policies.field_sets.ipv6 | arista.avd.natural_sort('name') %} +{% if field_set_ipv6.prefixes is arista.avd.defined %} +{% set value = field_set_ipv6.prefixes | arista.avd.natural_sort | join('
') %} {% endif %} -| {{ field_set_ipv6.name }} | {{ value }} | +| {{ field_set_ipv6.name }} | {{ value | arista.avd.default("-") }} | {% endfor %} {% endif %} {% if traffic_policies.field_sets.ports is arista.avd.defined %} #### L4 Port Field Sets -| Field Set Name | Values | -| -------------- | ------ | -{% for field_set_port in traffic_policies.field_sets.ports %} -| {{ field_set_port.name }} | {{ field_set_port.port_range }}| +| Field Set Name | L4 Ports | +| -------------- | -------- | +{% for field_set_port in traffic_policies.field_sets.ports | arista.avd.natural_sort('name') %} +| {{ field_set_port.name }} | {{ field_set_port.port_range | arista.avd.default("-") }} | {% endfor %} {% endif %} {% endif %} @@ -55,10 +51,10 @@ {% for policy in traffic_policies.policies | arista.avd.natural_sort('name') %} ##### {{ policy.name }} - {% if policy.matches is arista.avd.defined %} -| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Destination port(s) | Action | -| --------- | ---- | ------- | ------------ | -------- | -------------- | ------------------- | ------ | + +| Match set | Type | Sources | Destinations | Protocol | Source Port(s) | Source Field(s) | Destination port(s) | Destination Field(s) | Action | +| --------- | ---- | ------- | ------------ | -------- | -------------- | --------------- | ------------------- | -------------------- | ------ | {% for match in policy.matches | arista.avd.natural_sort('name') %} {% set row = namespace() %} {% set row.match_set = match.name %} @@ -66,55 +62,53 @@ {# -- Source Prefix #} {% set row.src_net = "" %} {% if match.source.prefix_lists is arista.avd.defined %} -{% set row.src_net = match.source.prefix_lists | join('
') %} +{% set row.src_net = match.source.prefix_lists | arista.avd.natural_sort | join('
') %} {% elif match.source.prefixes is arista.avd.defined %} -{% set row.src_net = match.source.prefixes | join('
') %} +{% set row.src_net = match.source.prefixes | arista.avd.natural_sort | join('
') %} {% else %} -{% set row.src_net = "ANY" %} +{% set row.src_net = "any" %} {% endif %} {# -- Destination Prefix #} {% set row.dst_net = "" %} {% if match.destination.prefix_lists is arista.avd.defined %} -{% set row.dst_net = match.destination.prefix_lists | join('
') %} +{% set row.dst_net = match.destination.prefix_lists | arista.avd.natural_sort | join('
') %} {% elif match.destination.prefixes is arista.avd.defined %} -{% set row.dst_net = match.destination.prefixes | join('
') %} +{% set row.dst_net = match.destination.prefixes | arista.avd.natural_sort | join('
') %} {% else %} -{% set row.dst_net = "ANY" %} +{% set row.dst_net = "any" %} {% endif %} {# -- Protocol #} {% set row.protocols = "" %} +{% set row.src_port = [] %} +{% set row.dst_port = [] %} +{% set row.src_field = [] %} +{% set row.dst_field = [] %} {% if match.protocols is arista.avd.defined %} {% set row.protocols = match.protocols | map(attribute='protocol') | join('
') %} -{% else %} -{% set row.protocols = "ANY" %} -{% endif %} -{# -- Source Port #} -{% set row.src_port = "" %} -{% if match.protocols is arista.avd.defined %} +{# -- Source/Destination Port #} {% for protocol in match.protocols %} -{% if protocol.src_field is arista.avd.defined %} -{% set row.src_port = protocol.src_field %} -{% elif protocol.src_port is arista.avd.defined %} -{% set row.src_port = protocol.src_port %} +{% if protocol.protocol | lower in ['tcp','udp'] %} +{% do row.src_port.append(protocol.src_port | arista.avd.default("any")) %} +{% do row.src_field.append(protocol.src_field | arista.avd.default("-")) %} +{% do row.dst_port.append(protocol.dst_port | arista.avd.default("any")) %} +{% do row.dst_field.append(protocol.dst_field | arista.avd.default("-")) %} +{% else %} +{% do row.src_port.append("-") %} +{% do row.src_field.append("-") %} +{% do row.dst_port.append("-") %} +{% do row.dst_field.append("-") %} {% endif %} {% endfor %} -{% if row.src_port == "" %} -{% set row.src_port = "ANY" %} -{% endif %} -{% endif %} -{# -- Destination Port #} -{% set row.dst_port = "" %} -{% if match.protocols is arista.avd.defined %} -{% for protocol in match.protocols %} -{% if protocol.dst_field is arista.avd.defined %} -{% set row.dst_port = protocol.dst_field %} -{% elif protocol.dst_port is arista.avd.defined %} -{% set row.dst_port = protocol.dst_port %} -{% endif %} -{% endfor %} -{% if row.dst_port == "" %} -{% set row.dst_port = "ANY" %} -{% endif %} +{% set row.src_port = row.src_port | join('
') %} +{% set row.dst_port = row.dst_port | join('
') %} +{% set row.src_field = row.src_field | join('
') %} +{% set row.dst_field = row.dst_field | join('
') %} +{% else %} +{% set row.protocols = "-" %} +{% set row.src_port = "-" %} +{% set row.src_field = "-" %} +{% set row.dst_port = "-" %} +{% set row.dst_field = "-" %} {% endif %} {# -- Action management #} {% set row.actions = [] %} @@ -140,7 +134,7 @@ {% do row.actions.append("default action: PASS") %} {% endif %} {# -- Table rendering #} -| {{ row.match_set }} | {{ row.type }} | {{ row.src_net }} | {{ row.dst_net }} | {{ row.protocols }} | {{ row.src_port }} | {{ row.dst_port }} | {{ row.actions | join('
') }} | +| {{ row.match_set }} | {{ row.type }} | {{ row.src_net }} | {{ row.dst_net }} | {{ row.protocols }} | {{ row.src_port }} | {{ row.src_field }} | {{ row.dst_port }} | {{ row.dst_field }} | {{ row.actions | join('
') }} | {% endfor %} {% endif %} {% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/vlan-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/vlan-interfaces.j2 index 87d994c6dd3..a5e71268ab4 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/vlan-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/documentation/vlan-interfaces.j2 @@ -139,9 +139,18 @@ ##### ISIS -| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | -| --------- | ------------- | -------- | ----------- | ---- | +| Interface | ISIS Instance | ISIS BFD | ISIS Metric | Mode | ISIS Authentication Mode | +| --------- | ------------- | -------- | ----------- | ---- | ------------------------ | {% for vlan_interface in vlan_interfaces | arista.avd.natural_sort('name') %} +{% if vlan_interface.isis_authentication.both.mode is arista.avd.defined %} +{% set isis_authentication_mode = vlan_interface.isis_authentication.both.mode %} +{% elif vlan_interface.isis_authentication.level_1.mode is arista.avd.defined and vlan_interface.isis_authentication.level_2.mode is arista.avd.defined %} +{% set isis_authentication_mode = "Level-1: " ~ vlan_interface.isis_authentication.level_1.mode ~ "
" ~ "Level-2: " ~ vlan_interface.isis_authentication.level_2.mode %} +{% elif vlan_interface.isis_authentication.level_1.mode is arista.avd.defined %} +{% set isis_authentication_mode = "Level-1: " ~ vlan_interface.isis_authentication.level_1.mode %} +{% elif vlan_interface.isis_authentication.level_2.mode is arista.avd.defined %} +{% set isis_authentication_mode = "Level-2: " ~ vlan_interface.isis_authentication.level_2.mode %} +{% endif %} {% if vlan_interface.isis_enable is arista.avd.defined %} {% set isis_metric = vlan_interface.isis_metric | arista.avd.default('-') %} {% if vlan_interface.isis_network_point_to_point is arista.avd.defined %} @@ -151,7 +160,7 @@ {% else %} {% set mode = "-" %} {% endif %} -| {{ vlan_interface.name }} | {{ vlan_interface.isis_enable }} | {{ vlan_interface.isis_bfd | arista.avd.default("-") }} | {{ isis_metric }} | {{ mode }} | +| {{ vlan_interface.name }} | {{ vlan_interface.isis_enable }} | {{ vlan_interface.isis_bfd | arista.avd.default("-") }} | {{ isis_metric }} | {{ mode }} | {{ isis_authentication_mode | arista.avd.default("-") }} | {% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos-intended-config.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos-intended-config.j2 index d93fb78b20d..edac5637306 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos-intended-config.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos-intended-config.j2 @@ -10,18 +10,30 @@ {% include 'eos/config-comment.j2' %} {# System Boot Configuration #} {% include 'eos/boot.j2' %} +{# enable password #} +{% include 'eos/enable-password.j2' %} +{# aaa root #} +{% include 'eos/aaa-root.j2' %} +{# users #} +{% include 'eos/local-users.j2' %} +{# address locking #} +{% include 'eos/address-locking.j2' %} {# Agents #} {% include 'eos/agents.j2' %} -{# terminal settings #} -{% include 'eos/terminal.j2' %} -{# cli prompt #} -{% include 'eos/prompt.j2' %} -{# aliases #} -{% include 'eos/aliases.j2' %} {# hardware counters #} {% include 'eos/hardware-counters.j2' %} {# service routing configuration #} {% include 'eos/service-routing-configuration-bgp.j2' %} +{# management api http #} +{% include 'eos/management-api-http.j2' %} +{# cli prompt #} +{% include 'eos/prompt.j2' %} +{# terminal settings #} +{% include 'eos/terminal.j2' %} +{# aliases #} +{% include 'eos/aliases.j2' %} +{# logging event storm-control #} +{% include 'eos/logging-event-storm-control.j2' %} {# daemon TerminAttr #} {% include 'eos/daemon-terminattr.j2' %} {# daemons #} @@ -32,56 +44,56 @@ {% include 'eos/ip-dhcp-relay.j2' %} {# IPv6 DHCP Relay #} {% include 'eos/ipv6-dhcp-relay.j2' %} -{# IP DHCP Snooping #} -{% include 'eos/ip-dhcp-snooping.j2' %} {# dhcp servers #} {% include 'eos/dhcp-servers.j2' %} +{# IP DHCP Snooping #} +{% include 'eos/ip-dhcp-snooping.j2' %} {# switchport default #} {% include 'eos/switchport-default.j2' %} {# internal vlan allocation policy #} {% include 'eos/vlan-internal-order.j2' %} -{# ip igmp snooping #} -{% include 'eos/ip-igmp-snooping.j2' %} +{# errdisable #} +{% include 'eos/errdisable.j2' %} {# event monitor #} {% include 'eos/event-monitor.j2' %} {# flow tracking #} {% include 'eos/flow-tracking.j2' %} +{# ip igmp snooping #} +{% include 'eos/ip-igmp-snooping.j2' %} +{# logging event congestion-drops #} +{% include 'eos/logging-event-congestion-drops.j2' %} {# load-interval #} {% include 'eos/load-interval.j2' %} -{# interface defaults #} -{% include 'eos/interface-defaults.j2' %} -{# interface profiles #} -{% include 'eos/interface-profiles.j2' %} +{# hardware configuration #} +{% include 'eos/hardware.j2' %} {# transceiver qsfp default mode #} {% include 'eos/transceiver-qsfp-default-mode.j2' %} -{# errdisable #} -{% include 'eos/errdisable.j2' %} +{# interface defaults #} +{% include 'eos/interface-defaults.j2' %} {# service routing protocols model #} {% include 'eos/service-routing-protocols-model.j2' %} +{# l2 protocol forwarding #} +{% include 'eos/l2-protocol-forwarding.j2' %} +{# lacp #} +{% include 'eos/lacp.j2' %} {# queue monitor length #} {% include 'eos/queue-monitor-length.j2' %} {# monitor layer1 #} {% include 'eos/monitor-layer1.j2' %} +{# Link Tracking #} +{% include 'eos/link-tracking-groups.j2' %} {# lldp #} {% include 'eos/lldp.j2' %} -{# l2 protocol forwarding #} -{% include 'eos/l2-protocol-forwarding.j2' %} -{# lacp #} -{% include 'eos/lacp.j2' %} {# logging #} {% include 'eos/logging.j2' %} -{# mcs client #} -{% include 'eos/mcs-client.j2' %} {# match-list #} {% include 'eos/match-list-input.j2' %} -{# as-paths #} -{% include 'eos/as-path.j2' %} -{# macsec #} -{% include 'eos/mac-security.j2' %} -{# IP NAT - Part 1#} -{% include 'eos/ip-nat-part1.j2' %} +{# mcs client #} +{% include 'eos/mcs-client.j2' %} {# platform - trident#} {% include 'eos/platform-trident.j2' %} +{# IP NAT - Part 1#} +{% include 'eos/ip-nat-part1.j2' %} {# hostname #} {% include 'eos/hostname.j2' %} {# domain lookup #} @@ -92,10 +104,20 @@ {% include 'eos/dns-domain.j2' %} {# domain-list #} {% include 'eos/domain-list.j2' %} +{# aaa server groups ldap #} +{% include 'eos/aaa-server-groups-ldap.j2' %} {# Object Tracking #} {% include 'eos/trackers.j2' %} +{# poe #} +{% include 'eos/poe.j2' %} {# switchport port-security #} {% include 'eos/switchport-port-security.j2' %} +{# ptp #} +{% include 'eos/ptp.j2' %} +{# qos-profiles #} +{% include 'eos/qos-profiles.j2' %} +{# redundancy #} +{% include 'eos/redundancy.j2' %} {# router adaptive-virtual-topology #} {% include 'eos/router-adaptive-virtual-topology.j2' %} {# router internet-exit configuration #} @@ -104,48 +126,20 @@ {% include 'eos/router-l2-vpn.j2' %} {# router path-selection #} {% include 'eos/router-path-selection.j2' %} -{# ntp #} -{% include 'eos/ntp.j2' %} -{# poe #} -{% include 'eos/poe.j2' %} -{# ptp #} -{% include 'eos/ptp.j2' %} -{# radius server #} -{% include 'eos/radius-server.j2' %} -{# sflow #} -{% include 'eos/sflow.j2' %} -{# redundancy #} -{% include 'eos/redundancy.j2' %} -{# qos-profiles #} -{% include 'eos/qos-profiles.j2' %} {# router service-inserion #} {% include 'eos/router-service-insertion.j2' %} +{# platform #} +{% include 'eos/platform.j2' %} +{# sflow #} +{% include 'eos/sflow.j2' %} {# snmp settings #} {% include 'eos/snmp-server.j2' %} -{# hardware configuration #} -{% include 'eos/hardware.j2' %} {# spanning-tree #} {% include 'eos/spanning-tree.j2' %} {# sync-e #} {% include 'eos/sync-e.j2' %} -{# platform #} -{% include 'eos/platform.j2' %} {# service unsupported-transceiver #} {% include 'eos/service-unsupported-transceiver.j2' %} -{# tacacs servers #} -{% include 'eos/tacacs-servers.j2' %} -{# aaa #} -{% include 'eos/aaa.j2' %} -{# enable password #} -{% include 'eos/enable-password.j2' %} -{# aaa root #} -{% include 'eos/aaa-root.j2' %} -{# users #} -{% include 'eos/local-users.j2' %} -{# roles #} -{% include 'eos/roles.j2' %} -{# address locking #} -{% include 'eos/address-locking.j2' %} {# system l1 #} {% include 'eos/system-l1.j2' %} {# Tap Aggregation #} @@ -156,14 +150,46 @@ {% include 'eos/vlans.j2' %} {# VRF Instances #} {% include 'eos/vrfs.j2' %} -{# Link Tracking #} -{% include 'eos/link-tracking-groups.j2' %} +{# BGP Groups configuration #} +{% include 'eos/bgp-groups.j2' %} +{# queue monitor streaming #} +{% include 'eos/queue-monitor-streaming.j2' %} +{# banner #} +{% include 'eos/banners.j2' %} +{# management accounts #} +{% include 'eos/management-accounts.j2' %} +{# management console #} +{% include 'eos/management-console.j2' %} +{# management cvx #} +{% include 'eos/management-cvx.j2' %} +{# management defaults #} +{% include 'eos/management-defaults.j2' %} +{# management api gnmi #} +{% include 'eos/management-api-gnmi.j2' %} +{# management api models #} +{% include 'eos/management-api-models.j2' %} +{# management security #} +{% include 'eos/management-security.j2' %} +{# radius server #} +{% include 'eos/radius-server.j2' %} +{# aaa server groups radius #} +{% include 'eos/aaa-server-groups-radius.j2' %} +{# tacacs servers #} +{% include 'eos/tacacs-servers.j2' %} +{# aaa server groups tacacs+ #} +{% include 'eos/aaa-server-groups-tacacs-plus.j2' %} +{# aaa #} +{% include 'eos/aaa.j2' %} {# CVX #} {% include 'eos/cvx.j2' %} +{# 802.1x Global #} +{% include 'eos/dot1x.j2' %} {# influxDB Telemetry #} {% include 'eos/monitor-telemetry-influx.j2' %} {# IP Security #} {% include 'eos/ip-security.j2' %} +{# macsec #} +{% include 'eos/mac-security.j2' %} {# Port-Channel Interfaces #} {% include 'eos/port-channel-interfaces.j2' %} {# DPS Interfaces #} @@ -188,16 +214,18 @@ {% include 'eos/monitor-connectivity.j2' %} {# MAC address-table aging #} {% include 'eos/mac-address-table-aging-time.j2' %} -{# Router virtual mac address #} -{% include 'eos/ip-virtual-router-mac-address.j2' %} -{# Router virtual source nat #} -{% include 'eos/virtual-source-nat-vrfs.j2' %} {# event handler #} {% include 'eos/event-handlers.j2' %} -{# BGP Groups configuration #} -{% include 'eos/bgp-groups.j2' %} +{# router segment-security #} +{% include 'eos/router-segment-security.j2' %} {# Interface Groups configuration #} {% include 'eos/interface-groups.j2' %} +{# interface profiles #} +{% include 'eos/interface-profiles.j2' %} +{# Router virtual mac address #} +{% include 'eos/ip-virtual-router-mac-address.j2' %} +{# Router virtual source nat #} +{% include 'eos/virtual-source-nat-vrfs.j2' %} {# IPv6 Extended Access-lists #} {% include 'eos/ipv6-access-lists.j2' %} {# IPv6 Standard Access-lists #} @@ -206,10 +234,10 @@ {% include 'eos/access-lists.j2' %} {# Extended Access-lists, improved data model #} {% include 'eos/ip-access-lists.j2' %} +{# PBR class-map #} +{% include 'eos/class-maps-pbr.j2' %} {# Standard Access-lists #} {% include 'eos/standard-access-lists.j2' %} -{# MAC Access-lists #} -{% include 'eos/mac-access-lists.j2' %} {# IP Routing #} {% include 'eos/ip-routing.j2' %} {# IP ICMP Redirects #} @@ -218,24 +246,14 @@ {% include 'eos/ip-hardware.j2' %} {# IP Routing VRFs #} {% include 'eos/ip-routing-vrfs.j2' %} -{# IPv6 Unicast Routing #} -{% include 'eos/ipv6-unicast-routing.j2' %} -{# eos - IPv6 Unicast Routing VRFs #} -{% include 'eos/ipv6-unicast-routing-vrfs.j2' %} {# eos - IPv6 ICMP Redirect #} {% include 'eos/ipv6-icmp-redirect.j2' %} -{# eos - IPv6 Hardware #} -{% include 'eos/ipv6-hardware.j2' %} -{# Monitor Sessions #} -{% include 'eos/monitor-sessions.j2' %} -{# qos #} -{% include 'eos/qos.j2' %} -{# eos - priority flow control #} -{% include 'eos/priority-flow-control.j2' %} -{# Community-lists #} -{% include 'eos/community-lists.j2' %} +{# as-paths #} +{% include 'eos/as-path.j2' %} {# Community-lists, improved data model #} {% include 'eos/ip-community-lists.j2' %} +{# Community-lists #} +{% include 'eos/community-lists.j2' %} {# IP Extended Community Lists #} {% include 'eos/ip-extcommunity-lists.j2' %} {# IP Extended Community Lists Regexp #} @@ -246,104 +264,101 @@ {% include 'eos/prefix-lists.j2' %} {# IPv6 Prefix-lists #} {% include 'eos/ipv6-prefix-lists.j2' %} +{# IPv6 Unicast Routing #} +{% include 'eos/ipv6-unicast-routing.j2' %} +{# eos - IPv6 Hardware #} +{% include 'eos/ipv6-hardware.j2' %} +{# eos - IPv6 Unicast Routing VRFs #} +{% include 'eos/ipv6-unicast-routing-vrfs.j2' %} +{# IPv6 Neighbors #} +{% include 'eos/ipv6-neighbors.j2' %} +{# MAC Access-lists #} +{% include 'eos/mac-access-lists.j2' %} {# System Control-Plane#} {% include 'eos/system.j2' %} {# mac address-table notification #} {% include 'eos/mac-address-table-notification.j2' %} {# maintenance #} {% include 'eos/maintenance.j2' %} +{# Monitor Sessions #} +{% include 'eos/monitor-sessions.j2' %} +{% include 'eos/monitor-session-default-encapsulation-gre.j2' %} {# mlag configuration #} {% include 'eos/mlag-configuration.j2' %} -{# IPv6 Neighbors #} -{% include 'eos/ipv6-neighbors.j2' %} {# Static Route #} {% include 'eos/static-routes.j2' %} +{# ARP #} +{% include 'eos/arp.j2' %} {# IPv6 Static Route #} {% include 'eos/ipv6-static-routes.j2' %} +{# MPLS #} +{% include 'eos/mpls.j2' %} {# IP NAT - Part 2#} {% include 'eos/ip-nat-part2.j2' %} -{# QOS class-map #} -{% include 'eos/class-maps.j2' %} -{# COPP policy-map #} -{% include 'eos/policy-maps-copp.j2' %} +{# ip client source interfaces #} +{% include 'eos/ip-client-source-interfaces.j2' %} +{# ntp #} +{% include 'eos/ntp.j2' %} +{# Patch Panel #} +{% include 'eos/patch-panel.j2' %} {# PBR policy-map #} {% include 'eos/policy-maps-pbr.j2' %} {# Monitor telemetry postcard #} {% include 'eos/monitor-telemetry-postcard-policy.j2' %} +{# qos #} +{% include 'eos/qos.j2' %} +{# QOS class-map #} +{% include 'eos/class-maps.j2' %} +{# COPP policy-map #} +{% include 'eos/policy-maps-copp.j2' %} {# QOS policy-map #} {% include 'eos/policy-maps-qos.j2' %} -{# ARP #} -{% include 'eos/arp.j2' %} +{# eos - priority flow control #} +{% include 'eos/priority-flow-control.j2' %} +{# ip radius source interfaces #} +{% include 'eos/ip-radius-source-interfaces.j2' %} +{# roles #} +{% include 'eos/roles.j2' %} {# route-maps #} {% include 'eos/route-maps.j2' %} -{# router bfd #} -{% include 'eos/router-bfd.j2' %} {# peer-filters #} {% include 'eos/peer-filters.j2' %} +{# router bfd #} +{% include 'eos/router-bfd.j2' %} {# router bgp configuration #} {% include 'eos/router-bgp.j2' %} -{# router igmp configuration #} -{% include 'eos/router-igmp.j2' %} -{# router multicast configuration #} -{% include 'eos/router-multicast.j2' %} {# router general configuration #} {% include 'eos/router-general.j2' %} -{# router segment-security #} -{% include 'eos/router-segment-security.j2' %} {# router traffic-engineering configuration #} {% include 'eos/router-traffic-engineering.j2' %} +{# router igmp configuration #} +{% include 'eos/router-igmp.j2' %} +{# router isis configuration #} +{% include 'eos/router-isis.j2' %} +{# router multicast configuration #} +{% include 'eos/router-multicast.j2' %} {# router ospf configuration #} {% include 'eos/router-ospf.j2' %} {# router pim sparse mode configuration #} {% include 'eos/router-pim-sparse-mode.j2' %} -{# router isis configuration #} -{% include 'eos/router-isis.j2' %} {# router msdp #} {% include 'eos/router-msdp.j2' %} -{# MPLS #} -{% include 'eos/mpls.j2' %} -{# Patch Panel #} -{% include 'eos/patch-panel.j2' %} -{# queue monitor streaming #} -{% include 'eos/queue-monitor-streaming.j2' %} +{# stun #} +{% include 'eos/stun.j2' %} {# ip tacacs+ source interfaces #} {% include 'eos/ip-tacacs-source-interfaces.j2' %} -{# ip radius source interfaces #} -{% include 'eos/ip-radius-source-interfaces.j2' %} -{# vmtracer sessions #} -{% include 'eos/vmtracer-sessions.j2' %} {# traffic policies #} {% include 'eos/traffic-policies.j2' %} -{# banner #} -{% include 'eos/banners.j2' %} -{# ip client source interfaces #} -{% include 'eos/ip-client-source-interfaces.j2' %} -{# management accounts #} -{% include 'eos/management-accounts.j2' %} -{# management api http #} -{% include 'eos/management-api-http.j2' %} -{# management console #} -{% include 'eos/management-console.j2' %} -{# management cvx #} -{% include 'eos/management-cvx.j2' %} -{# management defaults #} -{% include 'eos/management-defaults.j2' %} -{# management api gnmi #} -{% include 'eos/management-api-gnmi.j2' %} -{# management api models #} -{% include 'eos/management-api-models.j2' %} -{# management security #} -{% include 'eos/management-security.j2' %} -{# stun #} -{% include 'eos/stun.j2' %} -{# 802.1x Global #} -{% include 'eos/dot1x.j2' %} +{# platform apply #} +{% include 'eos/platform-apply.j2' %} +{# vmtracer sessions #} +{% include 'eos/vmtracer-sessions.j2' %} +{# dot1x part2 #} +{% include 'eos/dot1x_part2.j2' %} {# management ssh #} {% include 'eos/management-ssh.j2' %} {# management tech-support #} {% include 'eos/management-tech-support.j2' %} -{# platform apply #} -{% include 'eos/platform-apply.j2' %} {# EOS CLI #} {% include 'eos/eos-cli.j2' %} {# end #} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-root.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-root.j2 index 0c011f5c813..6ffd3d36dbc 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-root.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-root.j2 @@ -4,10 +4,10 @@ that can be found in the LICENSE file. #} {# eos - aaa root #} -{% if aaa_root is arista.avd.defined %} -{% if aaa_root.secret.sha512_password is arista.avd.defined %} +{% if aaa_root.disabled is arista.avd.defined(true) %} +no aaa root +{% elif aaa_root.secret.sha512_password is arista.avd.defined %} aaa root secret sha512 {{ aaa_root.secret.sha512_password | arista.avd.hide_passwords(hide_passwords) }} -{% endif %} -{% elif not generate_default_config is arista.avd.defined(false) %} +{% elif generate_default_config is arista.avd.defined(true) %} no aaa root {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-ldap.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-ldap.j2 new file mode 100644 index 00000000000..e527bee455e --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-ldap.j2 @@ -0,0 +1,23 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - aaa server groups ldap #} +{% for aaa_server_group in aaa_server_groups | arista.avd.natural_sort('name') %} +{% if aaa_server_group.type == 'ldap' %} +! +aaa group server {{ aaa_server_group.type }} {{ aaa_server_group.name }} +{% if aaa_server_group.servers is arista.avd.defined %} +{% for server in aaa_server_group.servers %} +{% if server.server is arista.avd.defined %} +{% set server_cli = "server " ~ server.server %} +{% if server.vrf is arista.avd.defined %} +{% set server_cli = server_cli ~ " vrf " ~ server.vrf %} +{% endif %} + {{ server_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% endif %} +{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-radius.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-radius.j2 new file mode 100644 index 00000000000..986e7bbfc8c --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-radius.j2 @@ -0,0 +1,23 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - aaa server groups #} +{% for aaa_server_group in aaa_server_groups | arista.avd.natural_sort('name') | arista.avd.natural_sort('type') %} +{% if aaa_server_group.type == 'radius' %} +! +aaa group server {{ aaa_server_group.type }} {{ aaa_server_group.name }} +{% if aaa_server_group.servers is arista.avd.defined %} +{% for server in aaa_server_group.servers %} +{% if server.server is arista.avd.defined %} +{% set server_cli = "server " ~ server.server %} +{% if server.vrf is arista.avd.defined %} +{% set server_cli = server_cli ~ " vrf " ~ server.vrf %} +{% endif %} + {{ server_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% endif %} +{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-tacacs-plus.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-tacacs-plus.j2 new file mode 100644 index 00000000000..8ca367ae8e9 --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups-tacacs-plus.j2 @@ -0,0 +1,23 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - aaa server groups #} +{% for aaa_server_group in aaa_server_groups | arista.avd.natural_sort('name') | arista.avd.natural_sort('type') %} +{% if aaa_server_group.type == 'tacacs+' %} +! +aaa group server {{ aaa_server_group.type }} {{ aaa_server_group.name }} +{% if aaa_server_group.servers is arista.avd.defined %} +{% for server in aaa_server_group.servers %} +{% if server.server is arista.avd.defined %} +{% set server_cli = "server " ~ server.server %} +{% if server.vrf is arista.avd.defined %} +{% set server_cli = server_cli ~ " vrf " ~ server.vrf %} +{% endif %} + {{ server_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% endif %} +{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups.j2 deleted file mode 100644 index 84a3a5fe307..00000000000 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa-server-groups.j2 +++ /dev/null @@ -1,25 +0,0 @@ -{# - Copyright (c) 2023-2024 Arista Networks, Inc. - Use of this source code is governed by the Apache License 2.0 - that can be found in the LICENSE file. -#} -{# eos - aaa server groups #} -{% if aaa_server_groups is arista.avd.defined %} -{% for aaa_server_group in aaa_server_groups %} -{% if aaa_server_group.type is arista.avd.defined and aaa_server_group.name is arista.avd.defined %} -! -aaa group server {{ aaa_server_group.type }} {{ aaa_server_group.name }} -{% if aaa_server_group.servers is arista.avd.defined %} -{% for server in aaa_server_group.servers %} -{% if server.server is arista.avd.defined %} -{% set server_cli = "server " ~ server.server %} -{% if server.vrf is arista.avd.defined %} -{% set server_cli = server_cli ~ " vrf " ~ server.vrf %} -{% endif %} - {{ server_cli }} -{% endif %} -{% endfor %} -{% endif %} -{% endif %} -{% endfor %} -{% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa.j2 index 53762df41e6..f4d2d324cc3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/aaa.j2 @@ -4,7 +4,6 @@ that can be found in the LICENSE file. #} {# eos - aaa #} -{% include 'eos/aaa-server-groups.j2' %} {% if aaa_authentication is arista.avd.defined or aaa_authorization is arista.avd.defined or aaa_accounting is arista.avd.defined %} ! {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/arp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/arp.j2 index 840e86e5ce1..1be1574ba7a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/arp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/arp.j2 @@ -17,14 +17,7 @@ arp aging timeout default {{ arp.aging.timeout_default }} {% endif %} {% if arp.static_entries is arista.avd.defined %} -{# TODO - remove when dropping support for ansible 2.12.6 and its jinja2 hack #} -{% for entry in arp.static_entries %} -{% if entry.vrf is not arista.avd.defined %} -{% do entry.update({"vrf": "default"}) %} -{% endif %} -{% endfor %} -{% for vrf, entries in arp.static_entries | groupby("vrf") | arista.avd.natural_sort %} -{# TODO {% for vrf, entries in arp.static_entries | arista.avd.default([]) | groupby("vrf", default="default") | arista.avd.natural_sort %} #} +{% for vrf, entries in arp.static_entries | groupby("vrf", default="default") | arista.avd.natural_sort %} {% for entry in entries | arista.avd.natural_sort("ipv4_address") %} {% set arp_entry_prefix = "arp" %} {% if vrf != "default" %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/as-path.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/as-path.j2 index 88038fc0230..6f692a206ed 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/as-path.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/as-path.j2 @@ -10,14 +10,10 @@ ip as-path regex-mode {{ as_path.regex_mode }} {% endif %} {% for as_path_access_list in as_path.access_lists | arista.avd.natural_sort('name') %} -{% if as_path_access_list.name is arista.avd.defined and as_path_access_list.entries is arista.avd.defined %} +{% if as_path_access_list.entries is arista.avd.defined %} {% for as_path_access_list_entry in as_path_access_list.entries %} {% if as_path_access_list_entry.type is arista.avd.defined and as_path_access_list_entry.match is arista.avd.defined %} -{% set as_path_access_list_cli = "ip as-path access-list " ~ as_path_access_list.name %} -{% set as_path_access_list_cli = as_path_access_list_cli ~ " " ~ as_path_access_list_entry.type %} -{% set as_path_access_list_cli = as_path_access_list_cli ~ " " ~ as_path_access_list_entry.match %} -{% set as_path_access_list_cli = as_path_access_list_cli ~ " " ~ as_path_access_list_entry.origin | arista.avd.default('any') %} -{{ as_path_access_list_cli }} +ip as-path access-list {{ as_path_access_list.name }} {{ as_path_access_list_entry.type }} {{ as_path_access_list_entry.match }} {{ as_path_access_list_entry.origin | arista.avd.default('any') }} {% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps-pbr.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps-pbr.j2 new file mode 100644 index 00000000000..641a5ebb19f --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps-pbr.j2 @@ -0,0 +1,13 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# PBR class-map #} +{% for class_map in class_maps.pbr | arista.avd.natural_sort('name') %} +! +class-map type pbr match-any {{ class_map.name }} +{% if class_map.ip.access_group is arista.avd.defined %} + match ip access-group {{ class_map.ip.access_group }} +{% endif %} +{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps.j2 index 88f54d66b13..faac4a33a01 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/class-maps.j2 @@ -17,11 +17,3 @@ class-map type qos match-any {{ class_map.name }} match ipv6 access-group {{ class_map.ipv6.access_group }} {% endif %} {% endfor %} -{# PBR class-map #} -{% for class_map in class_maps.pbr | arista.avd.natural_sort('name') %} -! -class-map type pbr match-any {{ class_map.name }} -{% if class_map.ip.access_group is arista.avd.defined %} - match ip access-group {{ class_map.ip.access_group }} -{% endif %} -{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/cvx.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/cvx.j2 index bade3935a01..43c75362529 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/cvx.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/cvx.j2 @@ -15,28 +15,28 @@ cvx {% for peer_host in cvx.peer_hosts | arista.avd.natural_sort %} peer host {{ peer_host }} {% endfor %} -{% if cvx.services is arista.avd.defined %} -{% if cvx.services.mcs is arista.avd.defined %} +{% if cvx.services.mcs is arista.avd.defined %} + ! service mcs -{% if cvx.services.mcs.redis.password is arista.avd.defined %} +{% if cvx.services.mcs.redis.password is arista.avd.defined %} redis password {{ cvx.services.mcs.redis.password_type | arista.avd.default("7") }} {{ cvx.services.mcs.redis.password | arista.avd.hide_passwords(hide_passwords) }} -{% endif %} -{% if cvx.services.mcs.shutdown is arista.avd.defined(false) %} +{% endif %} +{% if cvx.services.mcs.shutdown is arista.avd.defined(false) %} no shutdown -{% elif cvx.services.mcs.shutdown is arista.avd.defined(true) %} +{% elif cvx.services.mcs.shutdown is arista.avd.defined(true) %} shutdown -{% endif %} {% endif %} -{% if cvx.services.vxlan is arista.avd.defined %} +{% endif %} +{% if cvx.services.vxlan is arista.avd.defined %} + ! service vxlan -{% if cvx.services.vxlan.shutdown is arista.avd.defined(false) %} +{% if cvx.services.vxlan.shutdown is arista.avd.defined(false) %} no shutdown -{% elif cvx.services.vxlan.shutdown is arista.avd.defined(true) %} +{% elif cvx.services.vxlan.shutdown is arista.avd.defined(true) %} shutdown -{% endif %} -{% if cvx.services.vxlan.vtep_mac_learning is arista.avd.defined %} +{% endif %} +{% if cvx.services.vxlan.vtep_mac_learning is arista.avd.defined %} vtep mac-learning {{ cvx.services.vxlan.vtep_mac_learning }} -{% endif %} {% endif %} {% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/daemons.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/daemons.j2 index 1b297aeee30..6c67c80e710 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/daemons.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/daemons.j2 @@ -4,17 +4,15 @@ that can be found in the LICENSE file. #} {# eos - daemons #} -{% if daemons is arista.avd.defined %} -{% for daemon in daemons | arista.avd.natural_sort('name') %} +{% for daemon in daemons | arista.avd.natural_sort('name') %} ! daemon {{ daemon.name }} -{% if daemon.exec is arista.avd.defined %} +{% if daemon.exec is arista.avd.defined %} exec {{ daemon.exec }} -{% endif %} -{% if daemon.enabled is arista.avd.defined(false) %} +{% endif %} +{% if daemon.enabled is arista.avd.defined(false) %} shutdown -{% else %} +{% else %} no shutdown -{% endif %} -{% endfor %} -{% endif %} +{% endif %} +{% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-relay.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-relay.j2 index ab995c7e023..ed9a73d943b 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-relay.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-relay.j2 @@ -7,13 +7,13 @@ {% if dhcp_relay is arista.avd.defined %} ! dhcp relay -{% for server in dhcp_relay.servers | arista.avd.natural_sort %} - server {{ server }} -{% endfor %} {% if dhcp_relay.tunnel_requests_disabled is arista.avd.defined(true) %} tunnel requests disabled {% endif %} {% if dhcp_relay.mlag_peerlink_requests_disabled is arista.avd.defined(true) %} mlag peer-link requests disabled {% endif %} +{% for server in dhcp_relay.servers | arista.avd.natural_sort %} + server {{ server }} +{% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-servers.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-servers.j2 index 5c145867a09..d21b1d691b3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-servers.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dhcp-servers.j2 @@ -20,6 +20,9 @@ {% if dhcp_server.dns_domain_name_ipv4 is arista.avd.defined %} dns domain name ipv4 {{ dhcp_server.dns_domain_name_ipv4 }} {% endif %} +{% if dhcp_server.dns_servers_ipv4 is arista.avd.defined %} + dns server ipv4 {{ dhcp_server.dns_servers_ipv4 | arista.avd.natural_sort | join(" ") }} +{% endif %} {% if dhcp_server.lease_time_ipv6.days is arista.avd.defined and dhcp_server.lease_time_ipv6.hours is arista.avd.defined and dhcp_server.lease_time_ipv6.minutes is arista.avd.defined %} @@ -28,9 +31,6 @@ {% if dhcp_server.dns_domain_name_ipv6 is arista.avd.defined %} dns domain name ipv6 {{ dhcp_server.dns_domain_name_ipv6 }} {% endif %} -{% if dhcp_server.dns_servers_ipv4 is arista.avd.defined %} - dns server ipv4 {{ dhcp_server.dns_servers_ipv4 | arista.avd.natural_sort | join(" ") }} -{% endif %} {% if dhcp_server.dns_servers_ipv6 is arista.avd.defined %} dns server ipv6 {{ dhcp_server.dns_servers_ipv6 | arista.avd.natural_sort | join(" ") }} {% endif %} @@ -46,17 +46,15 @@ {% if subnet.reservations is arista.avd.defined %} reservations {% for reservation in subnet.reservations | arista.avd.natural_sort("mac_address") %} -{% if reservation.mac_address is arista.avd.defined %} mac-address {{ reservation.mac_address }} -{% if reservation.ipv4_address is arista.avd.defined %} +{% if reservation.ipv4_address is arista.avd.defined %} ipv4-address {{ reservation.ipv4_address }} -{% endif %} -{% if reservation.ipv6_address is arista.avd.defined %} +{% endif %} +{% if reservation.ipv6_address is arista.avd.defined %} ipv6-address {{ reservation.ipv6_address }} -{% endif %} -{% if reservation.hostname is arista.avd.defined %} +{% endif %} +{% if reservation.hostname is arista.avd.defined %} hostname {{ reservation.hostname }} -{% endif %} {% endif %} {% if not loop.last %} ! diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x.j2 index 0984da4544e..0e206c75f8c 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x.j2 @@ -5,22 +5,9 @@ #} {# eos - dot1x #} {% if dot1x is arista.avd.defined %} -! -{% if dot1x.system_auth_control is arista.avd.defined(true) %} -dot1x system-auth-control -{% endif %} -{% if dot1x.protocol_lldp_bypass is arista.avd.defined(true) %} -dot1x protocol lldp bypass -{% endif %} -{% if dot1x.protocol_bpdu_bypass is arista.avd.defined(true) %} -dot1x protocol bpdu bypass -{% endif %} -{% if dot1x.dynamic_authorization is arista.avd.defined(true) %} -dot1x dynamic-authorization -{% endif %} {% if dot1x.mac_based_authentication is arista.avd.defined or dot1x.radius_av_pair is arista.avd.defined or dot1x.aaa.unresponsive is arista.avd.defined or dot1x.captive_portal is arista.avd.defined - or dot1x.supplicant is arista.avd.defined %} + or dot1x.supplicant is arista.avd.defined or dot1x.radius_av_pair_username_format is arista.avd.defined %} dot1x {% for profile in dot1x.supplicant.profiles | arista.avd.natural_sort("name") %} supplicant profile {{ profile.name }} @@ -76,9 +63,6 @@ dot1x {% if dot1x.aaa.unresponsive.eap_response is arista.avd.defined %} {{ aaa_config }} eap response {{ dot1x.aaa.unresponsive.eap_response }} {% endif %} -{% if dot1x.aaa.unresponsive.recovery_action_reauthenticate is arista.avd.defined(true) %} - {{ aaa_config }} recovery action reauthenticate -{% endif %} {% endif %} {% if dot1x.aaa.accounting_update_interval is arista.avd.defined %} aaa accounting update interval {{ dot1x.aaa.accounting_update_interval }} seconds @@ -99,6 +83,12 @@ dot1x radius av-pair framed-mtu {{ dot1x.radius_av_pair.framed_mtu }} {% endif %} {% endif %} +{% if dot1x.radius_av_pair_username_format.delimiter is arista.avd.defined and dot1x.radius_av_pair_username_format.mac_string_case is arista.avd.defined %} + mac-based-auth radius av-pair user-name delimiter {{ dot1x.radius_av_pair_username_format.delimiter }} {{ dot1x.radius_av_pair_username_format.mac_string_case }} +{% endif %} +{% if dot1x.aaa.unresponsive.recovery_action_reauthenticate is arista.avd.defined(true) %} + {{ aaa_config }} recovery action reauthenticate +{% endif %} {% if dot1x.supplicant.disconnect_cached_results_timeout is arista.avd.defined %} supplicant disconnect cached-results timeout {{ dot1x.supplicant.disconnect_cached_results_timeout }} seconds {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x_part2.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x_part2.j2 new file mode 100644 index 00000000000..d50a488db47 --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/dot1x_part2.j2 @@ -0,0 +1,22 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - dot1x part2 #} +{% if dot1x.system_auth_control is arista.avd.defined(true) or dot1x.protocol_lldp_bypass is arista.avd.defined(true) + or dot1x.protocol_bpdu_bypass is arista.avd.defined(true) or dot1x.dynamic_authorization is arista.avd.defined(true) %} +! +{% endif %} +{% if dot1x.system_auth_control is arista.avd.defined(true) %} +dot1x system-auth-control +{% endif %} +{% if dot1x.protocol_lldp_bypass is arista.avd.defined(true) %} +dot1x protocol lldp bypass +{% endif %} +{% if dot1x.protocol_bpdu_bypass is arista.avd.defined(true) %} +dot1x protocol bpdu bypass +{% endif %} +{% if dot1x.dynamic_authorization is arista.avd.defined(true) %} +dot1x dynamic-authorization +{% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/enable-password.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/enable-password.j2 index 3de63ed4f1f..2e697aabdee 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/enable-password.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/enable-password.j2 @@ -5,7 +5,10 @@ #} {# eos - enable password #} {% if enable_password is arista.avd.defined %} -{% if enable_password.key is arista.avd.defined %} +{% if enable_password.disabled is arista.avd.defined(true) %} +! +no enable password +{% elif enable_password.key is arista.avd.defined %} ! {% if enable_password.hash_algorithm is arista.avd.defined('md5') %} enable password 5 {{ enable_password.key | arista.avd.hide_passwords(hide_passwords) }} @@ -13,7 +16,7 @@ enable password 5 {{ enable_password.key | arista.avd.hide_passwords(hide_passwo enable password sha512 {{ enable_password.key | arista.avd.hide_passwords(hide_passwords) }} {% endif %} {% endif %} -{% elif not generate_default_config is arista.avd.defined(false) %} +{% elif generate_default_config is arista.avd.defined(true) %} ! no enable password {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/end.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/end.j2 index 534d7e2bf4d..91af982c592 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/end.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/end.j2 @@ -4,7 +4,7 @@ that can be found in the LICENSE file. #} {# eos - end #} -{% if not generate_default_config is arista.avd.defined(false) %} +{% if config_end is arista.avd.defined(true) or generate_default_config is arista.avd.defined(true) %} ! end {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ethernet-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ethernet-interfaces.j2 index 731f71dc928..65c06c45376 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ethernet-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ethernet-interfaces.j2 @@ -138,7 +138,7 @@ interface {{ ethernet_interface.name }} {% elif ethernet_interface.encapsulation_vlan.client.dot1q.inner is arista.avd.defined and ethernet_interface.encapsulation_vlan.client.dot1q.outer is arista.avd.defined %} {% set encapsulation_cli = "client dot1q outer " ~ ethernet_interface.encapsulation_vlan.client.dot1q.outer ~ " inner " ~ ethernet_interface.encapsulation_vlan.client.dot1q.inner %} {% if ethernet_interface.encapsulation_vlan.network.dot1q.inner is arista.avd.defined and ethernet_interface.encapsulation_vlan.network.dot1q.outer is arista.avd.defined %} -{% set encapsulation_cli = encapsulation_cli ~ " network dot1q outer " ~ ethernet_interface.encapsulation_vlan.network.dot1q.inner ~ " inner " ~ ethernet_interface.encapsulation_vlan.network.dot1q.outer %} +{% set encapsulation_cli = encapsulation_cli ~ " network dot1q outer " ~ ethernet_interface.encapsulation_vlan.network.dot1q.outer ~ " inner " ~ ethernet_interface.encapsulation_vlan.network.dot1q.inner %} {% elif ethernet_interface.encapsulation_vlan.network.dot1q.client is arista.avd.defined(true) %} {% set encapsulation_cli = encapsulation_cli ~ " network client" %} {% endif %} @@ -160,110 +160,149 @@ interface {{ ethernet_interface.name }} {% if ethernet_interface.pvlan_mapping is arista.avd.defined %} switchport pvlan mapping {{ ethernet_interface.pvlan_mapping }} {% endif %} -{% if ethernet_interface.switchport.tap.native_vlan is arista.avd.defined %} - switchport tap native vlan {{ ethernet_interface.switchport.tap.native_vlan }} -{% endif %} -{% if ethernet_interface.switchport.tap.identity.port_id is arista.avd.defined %} -{% set tap_identity_cli = "switchport tap identity " ~ ethernet_interface.switchport.tap.identity.port_id %} -{% if ethernet_interface.switchport.tap.identity.inner_port_id is arista.avd.defined %} -{% set tap_identity_cli = tap_identity_cli ~ " inner " ~ ethernet_interface.switchport.tap.identity.inner_port_id %} -{% endif %} - {{ tap_identity_cli }} -{% endif %} -{% if ethernet_interface.switchport.tap.mac_address.dest is arista.avd.defined %} -{% set tap_mac_address_cli = "switchport tap mac-address dest " ~ ethernet_interface.switchport.tap.mac_address.dest %} -{% if ethernet_interface.switchport.tap.mac_address.src is arista.avd.defined %} -{% set tap_mac_address_cli = tap_mac_address_cli ~ " src " ~ ethernet_interface.switchport.tap.mac_address.src %} -{% endif %} - {{ tap_mac_address_cli }} -{% endif %} -{# The position of "mpls_pop_all" does not match the EOS CLI to implement this "elif" with "vxlan_strip" #} -{% if ethernet_interface.switchport.tap.mpls_pop_all is arista.avd.defined(true) %} - switchport tap mpls pop all -{% elif ethernet_interface.switchport.tap.encapsulation.vxlan_strip is arista.avd.defined(true) %} - switchport tap encapsulation vxlan strip +{% if ethernet_interface.vlan_id is arista.avd.defined and ethernet_interface.type | arista.avd.default != 'l2dot1q' %} + vlan id {{ ethernet_interface.vlan_id }} {% endif %} -{% if ethernet_interface.switchport.tap.encapsulation.gre is arista.avd.defined %} -{% for gre_strip_config in ethernet_interface.switchport.tap.encapsulation.gre %} -{% if gre_strip_config.strip is arista.avd.defined(true) %} -{% set tap_encapsulation_cli = "switchport tap encapsulation gre" %} -{% if gre_strip_config.destination is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " destination " ~ gre_strip_config.destination %} -{% if gre_strip_config.source is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " source " ~ gre_strip_config.source %} -{% endif %} +{% if ethernet_interface.encapsulation_dot1q.vlan is arista.avd.defined %} +{% set encapsulation_dot1q_cli = 'encapsulation dot1q vlan ' ~ ethernet_interface.encapsulation_dot1q.vlan %} +{% if ethernet_interface.encapsulation_dot1q.inner_vlan is arista.avd.defined %} +{% set encapsulation_dot1q_cli = encapsulation_dot1q_cli ~ ' inner ' ~ ethernet_interface.encapsulation_dot1q.inner_vlan %} +{% endif %} + {{ encapsulation_dot1q_cli }} +{% elif ethernet_interface.encapsulation_vlan.client.encapsulation is arista.avd.defined %} +{% set client_encapsulation = ethernet_interface.encapsulation_vlan.client.encapsulation %} +{% set network_flag = False %} +{% if client_encapsulation in ['dot1q', 'dot1ad'] %} +{% if ethernet_interface.encapsulation_vlan.client.vlan is arista.avd.defined %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' ' ~ ethernet_interface.encapsulation_vlan.client.vlan %} +{% elif ethernet_interface.encapsulation_vlan.client.outer_vlan is arista.avd.defined and ethernet_interface.encapsulation_vlan.client.inner_vlan is arista.avd.defined %} +{% if ethernet_interface.encapsulation_vlan.client.inner_encapsulation is arista.avd.defined %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' outer ' ~ ethernet_interface.encapsulation_vlan.client.outer_vlan ~ ' inner ' ~ ethernet_interface.encapsulation_vlan.client.inner_encapsulation ~ ' ' ~ ethernet_interface.encapsulation_vlan.client.inner_vlan %} +{% else %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' outer ' ~ ethernet_interface.encapsulation_vlan.client.outer_vlan ~ ' inner ' ~ ethernet_interface.encapsulation_vlan.client.inner_vlan %} {% endif %} -{% if gre_strip_config.protocol is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " protocol " ~ gre_strip_config.protocol %} -{% if gre_strip_config.feature_header_length is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " feature header length " ~ gre_strip_config.feature_header_length %} -{% endif %} +{% if ethernet_interface.encapsulation_vlan.network.encapsulation | arista.avd.default == 'client inner' %} +{% set network_flag = True %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ ethernet_interface.encapsulation_vlan.network.encapsulation %} {% endif %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " strip" %} -{% if gre_strip_config.protocol is arista.avd.defined and - gre_strip_config.feature_header_length is arista.avd.defined and - gre_strip_config.re_encapsulation_ethernet_header is arista.avd.defined(true) %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " re-encapsulation ethernet" %} +{% endif %} +{% elif client_encapsulation in ['untagged', 'unmatched'] %} +{% set encapsulation_cli = 'client ' ~ ethernet_interface.encapsulation_vlan.client.encapsulation %} +{% endif %} +{% if encapsulation_cli is arista.avd.defined %} +{% if client_encapsulation in ['dot1q', 'dot1ad', 'untagged'] and ethernet_interface.encapsulation_vlan.network.encapsulation is arista.avd.defined and not network_flag %} +{% set network_encapsulation = ethernet_interface.encapsulation_vlan.network.encapsulation %} +{% if network_encapsulation in ['dot1q', 'dot1ad'] %} +{% if ethernet_interface.encapsulation_vlan.network.vlan is arista.avd.defined %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' ' ~ ethernet_interface.encapsulation_vlan.network.vlan %} +{% elif ethernet_interface.encapsulation_vlan.network.outer_vlan is arista.avd.defined and ethernet_interface.encapsulation_vlan.network.inner_vlan is arista.avd.defined %} +{% if ethernet_interface.encapsulation_vlan.network.inner_encapsulation is arista.avd.defined %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' outer ' ~ ethernet_interface.encapsulation_vlan.network.outer_vlan ~ ' inner ' ~ ethernet_interface.encapsulation_vlan.network.inner_encapsulation ~ ' ' ~ ethernet_interface.encapsulation_vlan.network.inner_vlan %} +{% else %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' outer ' ~ ethernet_interface.encapsulation_vlan.network.outer_vlan ~ ' inner ' ~ ethernet_interface.encapsulation_vlan.network.inner_vlan %} +{% endif %} +{% endif %} +{% elif network_encapsulation == 'untagged' and client_encapsulation == 'untagged' %} +{% set encapsulation_cli = encapsulation_cli ~ ' network untagged' %} +{% elif network_encapsulation == 'client' and client_encapsulation != "untagged" %} +{% set encapsulation_cli = encapsulation_cli ~ " network client" %} {% endif %} - {{ tap_encapsulation_cli }} {% endif %} -{% endfor %} + encapsulation vlan + {{ encapsulation_cli }} +{% endif %} {% endif %} -{% if ethernet_interface.switchport.tool.mpls_pop_all is arista.avd.defined(true) %} - switchport tool mpls pop all +{% if ethernet_interface.switchport.access_vlan is arista.avd.defined %} + switchport access vlan {{ ethernet_interface.switchport.access_vlan }} {% endif %} -{% if ethernet_interface.switchport.tool.encapsulation.vn_tag_strip is arista.avd.defined(true) %} - switchport tool encapsulation vn-tag strip +{% if ethernet_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) %} + switchport trunk native vlan tag +{% elif ethernet_interface.switchport.trunk.native_vlan is arista.avd.defined %} + switchport trunk native vlan {{ ethernet_interface.switchport.trunk.native_vlan }} {% endif %} -{% if ethernet_interface.switchport.tool.encapsulation.dot1br_strip is arista.avd.defined(true) %} - switchport tool encapsulation dot1br strip +{% if ethernet_interface.switchport.phone.vlan is arista.avd.defined %} + switchport phone vlan {{ ethernet_interface.switchport.phone.vlan }} {% endif %} -{% if ethernet_interface.switchport.tap.allowed_vlan is arista.avd.defined %} - switchport tap allowed vlan {{ ethernet_interface.switchport.tap.allowed_vlan }} +{% if ethernet_interface.switchport.phone.trunk is arista.avd.defined %} + switchport phone trunk {{ ethernet_interface.switchport.phone.trunk }} {% endif %} -{% if ethernet_interface.switchport.tool.allowed_vlan is arista.avd.defined %} - switchport tool allowed vlan {{ ethernet_interface.switchport.tool.allowed_vlan }} +{% if ethernet_interface.switchport.vlan_translations.in_required is arista.avd.defined(true) %} + switchport vlan translation in required {% endif %} -{% if ethernet_interface.switchport.tool.identity.tag is arista.avd.defined %} - switchport tool identity {{ ethernet_interface.switchport.tool.identity.tag }} +{% if ethernet_interface.switchport.vlan_translations.out_required is arista.avd.defined(true) %} + switchport vlan translation out required {% endif %} -{% if ethernet_interface.switchport.tool.identity.dot1q_dzgre_source is arista.avd.defined %} - switchport tool identity dot1q source dzgre {{ ethernet_interface.switchport.tool.identity.dot1q_dzgre_source }} -{% elif ethernet_interface.switchport.tool.identity.qinq_dzgre_source is arista.avd.defined %} - switchport tool identity qinq source dzgre {{ ethernet_interface.switchport.tool.identity.qinq_dzgre_source }} +{% if ethernet_interface.switchport.dot1q.vlan_tag is arista.avd.defined %} + switchport dot1q vlan tag {{ ethernet_interface.switchport.dot1q.vlan_tag }} {% endif %} -{% if ethernet_interface.switchport.tap.truncation.enabled is arista.avd.defined(true) %} -{% set tap_truncation_cli = "switchport tap truncation" %} -{% if ethernet_interface.switchport.tap.truncation.size is arista.avd.defined %} -{% set tap_truncation_cli = tap_truncation_cli ~ " " ~ ethernet_interface.switchport.tap.truncation.size %} -{% endif %} - {{ tap_truncation_cli }} +{% if ethernet_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} + switchport trunk allowed vlan {{ ethernet_interface.switchport.trunk.allowed_vlan }} {% endif %} -{% if ethernet_interface.switchport.tool.truncation.enabled is arista.avd.defined(true) %} -{% set tool_truncation_cli = "switchport tool truncation" %} -{% if ethernet_interface.switchport.tool.truncation.size is arista.avd.defined %} -{% set tool_truncation_cli = tool_truncation_cli ~ " " ~ ethernet_interface.switchport.tool.truncation.size %} -{% endif %} - {{ tool_truncation_cli }} +{% if ethernet_interface.switchport.mode is arista.avd.defined %} + switchport mode {{ ethernet_interface.switchport.mode }} {% endif %} -{% if ethernet_interface.switchport.tap.default.groups is arista.avd.defined %} - switchport tap default group {{ ethernet_interface.switchport.tap.default.groups | arista.avd.natural_sort | join(" group ") }} +{% if ethernet_interface.switchport.dot1q.ethertype is arista.avd.defined %} + switchport dot1q ethertype {{ ethernet_interface.switchport.dot1q.ethertype }} {% endif %} -{% if ethernet_interface.switchport.tap.default.nexthop_groups is arista.avd.defined %} - switchport tap default nexthop-group {{ ethernet_interface.switchport.tap.default.nexthop_groups | arista.avd.natural_sort | join(" ") }} +{% if ethernet_interface.switchport.vlan_forwarding_accept_all is arista.avd.defined(true) %} + switchport vlan forwarding accept all {% endif %} -{% for interface in ethernet_interface.switchport.tap.default.interfaces | arista.avd.natural_sort %} - switchport tap default interface {{ interface }} +{% for trunk_group in ethernet_interface.switchport.trunk.groups | arista.avd.natural_sort %} + switchport trunk group {{ trunk_group }} {% endfor %} -{% if ethernet_interface.switchport.tool.groups is arista.avd.defined %} -{% set tool_groups = ethernet_interface.switchport.tool.groups | arista.avd.natural_sort | join(" ") %} - switchport tool group set {{ tool_groups }} +{% if ethernet_interface.switchport.enabled is arista.avd.defined(true) %} + switchport +{% elif ethernet_interface.switchport.enabled is arista.avd.defined(false) %} + no switchport {% endif %} -{% if ethernet_interface.switchport.tool.dot1q_remove_outer_vlan_tag is arista.avd.defined %} - switchport tool dot1q remove outer {{ ethernet_interface.switchport.tool.dot1q_remove_outer_vlan_tag }} +{% if ethernet_interface.switchport.source_interface is arista.avd.defined %} + switchport source-interface {{ ethernet_interface.switchport.source_interface }} +{% endif %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_both | arista.avd.natural_sort('from') %} +{% set vlan_translation_both_cli = 'switchport vlan translation ' ~ vlan_translation.from %} +{% if vlan_translation.dot1q_tunnel is arista.avd.defined(true) %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' dot1q-tunnel' %} +{% elif vlan_translation.inner_vlan_from is arista.avd.defined %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' inner ' ~ vlan_translation.inner_vlan_from %} +{% if vlan_translation.network is arista.avd.defined(true) %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' network' %} +{% endif %} +{% endif %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' ' ~ vlan_translation.to %} + {{ vlan_translation_both_cli }} +{% endfor %} +{% if ethernet_interface.switchport.vlan_translations.direction_in is arista.avd.defined %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_in %} +{% set vlan_translation_in_cli = 'switchport vlan translation in ' ~ vlan_translation.from %} +{% if vlan_translation.dot1q_tunnel is arista.avd.defined(true) %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ ' dot1q-tunnel' %} +{% elif vlan_translation.inner_vlan_from is arista.avd.defined %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ ' inner ' ~ vlan_translation.inner_vlan_from %} +{% endif %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ " " ~ vlan_translation.to %} + {{ vlan_translation_in_cli }} +{% endfor %} {% endif %} -{% if ethernet_interface.switchport.tool.dzgre_preserve is arista.avd.defined(true) %} - switchport tool dzgre preserve +{% if ethernet_interface.switchport.vlan_translations.direction_out is arista.avd.defined %} +{% for vlan_translation in ethernet_interface.switchport.vlan_translations.direction_out %} +{% if vlan_translation.dot1q_tunnel_to is arista.avd.defined %} +{% set vlan_translation_out_cli = 'switchport vlan translation out ' ~ vlan_translation.from ~ ' dot1q-tunnel ' ~ vlan_translation.dot1q_tunnel_to %} +{% elif vlan_translation.to is arista.avd.defined %} +{% set vlan_translation_out_cli = 'switchport vlan translation out ' ~ vlan_translation.from ~ ' ' ~ vlan_translation.to %} +{% if vlan_translation.inner_vlan_to is arista.avd.defined %} +{% set vlan_translation_out_cli = vlan_translation_out_cli ~ ' inner ' ~ vlan_translation.inner_vlan_to %} +{% endif %} +{% endif %} +{% if vlan_translation_out_cli is arista.avd.defined %} + {{ vlan_translation_out_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if ethernet_interface.switchport.trunk.private_vlan_secondary is arista.avd.defined(true) %} + switchport trunk private-vlan secondary +{% endif %} +{% if ethernet_interface.switchport.pvlan_mapping is arista.avd.defined %} + switchport pvlan mapping {{ ethernet_interface.switchport.pvlan_mapping }} {% endif %} {% if ethernet_interface.l2_protocol.encapsulation_dot1q_vlan is arista.avd.defined %} l2-protocol encapsulation dot1q vlan {{ ethernet_interface.l2_protocol.encapsulation_dot1q_vlan }} @@ -330,6 +369,59 @@ interface {{ ethernet_interface.name }} dot1x authentication failure action traffic drop {% endif %} {% endif %} +{% if ethernet_interface.dot1x.aaa.unresponsive is arista.avd.defined %} +{% set aaa_config = "dot1x aaa unresponsive" %} +{% set actions = ethernet_interface.dot1x.aaa.unresponsive %} +{% for action in actions | sort(reverse=True) %} +{% if action == "phone_action" %} +{% set aaa_action_config = aaa_config ~ " phone action" %} +{% elif action == "action" %} +{% set aaa_action_config = aaa_config ~ " action" %} +{% endif %} +{% if aaa_action_config is arista.avd.defined %} +{% if actions[action].apply_cached_results is arista.avd.defined(true) %} +{% set action_apply_config = "apply cached-results" %} +{% if actions[action].cached_results_timeout.time_duration is arista.avd.defined and actions[action].cached_results_timeout.time_duration_unit is arista.avd.defined %} +{% set aaa_action_config = aaa_action_config ~ " " ~ action_apply_config ~ " timeout " ~ actions[action].cached_results_timeout.time_duration ~ " " ~ actions[action].cached_results_timeout.time_duration_unit %} +{% endif %} +{% endif %} +{% if actions[action].traffic_allow is arista.avd.defined(true) %} +{% if actions[action].apply_alternate is arista.avd.defined(true) %} +{% set aaa_action_config = aaa_action_config ~ " else traffic allow" %} +{% else %} +{% set aaa_action_config = aaa_action_config ~ " traffic allow" %} +{% endif %} +{% else %} +{% if actions[action].traffic_allow_vlan is arista.avd.defined and actions[action].traffic_allow_access_list is arista.avd.defined %} +{% if actions[action].apply_alternate is arista.avd.defined(true) %} +{% set aaa_action_config = aaa_action_config ~ " else traffic allow vlan " ~ actions[action].traffic_allow_vlan ~ " access-list " ~ actions[action].traffic_allow_access_list %} +{% else %} +{% set aaa_action_config = aaa_action_config ~ " traffic allow vlan " ~ actions[action].traffic_allow_vlan ~ " access-list " ~ actions[action].traffic_allow_access_list %} +{% endif %} +{% else %} +{% if actions[action].traffic_allow_vlan is arista.avd.defined %} +{% if actions[action].apply_alternate is arista.avd.defined(true) %} +{% set aaa_action_config = aaa_action_config ~ " else traffic allow vlan " ~ actions[action].traffic_allow_vlan %} +{% else %} +{% set aaa_action_config = aaa_action_config ~ " traffic allow vlan " ~ actions[action].traffic_allow_vlan %} +{% endif %} +{% endif %} +{% if actions[action].traffic_allow_access_list is arista.avd.defined %} +{% if actions[action].apply_alternate is arista.avd.defined(true) %} +{% set aaa_action_config = aaa_action_config ~ " else traffic allow access list " ~ actions[action].traffic_allow_access_list %} +{% else %} +{% set aaa_action_config = aaa_action_config ~ " traffic allow access list " ~ actions[action].traffic_allow_access_list %} +{% endif %} +{% endif %} +{% endif %} +{% endif %} + {{ aaa_action_config }} +{% endif %} +{% endfor %} +{% endif %} +{% if ethernet_interface.dot1x.aaa.unresponsive.eap_response is arista.avd.defined %} + {{ aaa_config }} eap response {{ ethernet_interface.dot1x.aaa.unresponsive.eap_response }} +{% endif %} {% if ethernet_interface.dot1x.reauthentication is arista.avd.defined(true) %} dot1x reauthentication {% endif %} @@ -352,6 +444,9 @@ interface {{ ethernet_interface.name }} {{ host_mode_cli }} {% endif %} {% endif %} +{% if ethernet_interface.dot1x.mac_based_access_list is arista.avd.defined(true) %} + dot1x mac based access-list +{% endif %} {% if ethernet_interface.dot1x.mac_based_authentication.enabled is arista.avd.defined(true) %} {% if ethernet_interface.dot1x.mac_based_authentication.host_mode_common is arista.avd.defined(true) %} dot1x mac based authentication host-mode common @@ -443,6 +538,28 @@ interface {{ ethernet_interface.name }} {{ ip_helper_cli }} {% endfor %} {% endif %} +{% if ethernet_interface.switchport.backup_link.interface is arista.avd.defined %} +{% set backup_link_cli = "switchport backup-link " ~ ethernet_interface.switchport.backup_link.interface %} +{% if ethernet_interface.switchport.backup_link.prefer_vlan is arista.avd.defined %} +{% set backup_link_cli = backup_link_cli ~ " prefer vlan " ~ ethernet_interface.switchport.backup_link.prefer_vlan %} +{% endif %} + {{ backup_link_cli }} +{% if ethernet_interface.switchport.backup.preemption_delay is arista.avd.defined %} + switchport backup preemption-delay {{ ethernet_interface.switchport.backup.preemption_delay }} +{% endif %} +{% if ethernet_interface.switchport.backup.mac_move_burst is arista.avd.defined %} + switchport backup mac-move-burst {{ ethernet_interface.switchport.backup.mac_move_burst }} +{% endif %} +{% if ethernet_interface.switchport.backup.mac_move_burst_interval is arista.avd.defined %} + switchport backup mac-move-burst-interval {{ ethernet_interface.switchport.backup.mac_move_burst_interval }} +{% endif %} +{% if ethernet_interface.switchport.backup.initial_mac_move_delay is arista.avd.defined %} + switchport backup initial-mac-move-delay {{ ethernet_interface.switchport.backup.initial_mac_move_delay }} +{% endif %} +{% if ethernet_interface.switchport.backup.dest_macaddr is arista.avd.defined %} + switchport backup dest-macaddr {{ ethernet_interface.switchport.backup.dest_macaddr }} +{% endif %} +{% endif %} {% if ethernet_interface.ip_address is arista.avd.defined("dhcp") and ethernet_interface.dhcp_client_accept_default_route is arista.avd.defined(true) %} dhcp client accept default-route {% endif %} @@ -978,6 +1095,111 @@ interface {{ ethernet_interface.name }} priority {{ ethernet_interface.sync_e.priority }} {% endif %} {% endif %} +{% if ethernet_interface.switchport.tap.native_vlan is arista.avd.defined %} + switchport tap native vlan {{ ethernet_interface.switchport.tap.native_vlan }} +{% endif %} +{% if ethernet_interface.switchport.tap.identity.port_id is arista.avd.defined %} +{% set tap_identity_cli = "switchport tap identity " ~ ethernet_interface.switchport.tap.identity.port_id %} +{% if ethernet_interface.switchport.tap.identity.inner_port_id is arista.avd.defined %} +{% set tap_identity_cli = tap_identity_cli ~ " inner " ~ ethernet_interface.switchport.tap.identity.inner_port_id %} +{% endif %} + {{ tap_identity_cli }} +{% endif %} +{% if ethernet_interface.switchport.tap.mac_address.dest is arista.avd.defined %} +{% set tap_mac_address_cli = "switchport tap mac-address dest " ~ ethernet_interface.switchport.tap.mac_address.dest %} +{% if ethernet_interface.switchport.tap.mac_address.src is arista.avd.defined %} +{% set tap_mac_address_cli = tap_mac_address_cli ~ " src " ~ ethernet_interface.switchport.tap.mac_address.src %} +{% endif %} + {{ tap_mac_address_cli }} +{% endif %} +{# The position of "mpls_pop_all" does not match the EOS CLI to implement this "elif" with "vxlan_strip" #} +{% if ethernet_interface.switchport.tap.mpls_pop_all is arista.avd.defined(true) %} + switchport tap mpls pop all +{% elif ethernet_interface.switchport.tap.encapsulation.vxlan_strip is arista.avd.defined(true) %} + switchport tap encapsulation vxlan strip +{% endif %} +{% if ethernet_interface.switchport.tap.encapsulation.gre is arista.avd.defined %} +{% for gre_strip_config in ethernet_interface.switchport.tap.encapsulation.gre %} +{% if gre_strip_config.strip is arista.avd.defined(true) %} +{% set tap_encapsulation_cli = "switchport tap encapsulation gre" %} +{% if gre_strip_config.destination is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " destination " ~ gre_strip_config.destination %} +{% if gre_strip_config.source is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " source " ~ gre_strip_config.source %} +{% endif %} +{% endif %} +{% if gre_strip_config.protocol is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " protocol " ~ gre_strip_config.protocol %} +{% if gre_strip_config.feature_header_length is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " feature header length " ~ gre_strip_config.feature_header_length %} +{% endif %} +{% endif %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " strip" %} +{% if gre_strip_config.protocol is arista.avd.defined and + gre_strip_config.feature_header_length is arista.avd.defined and + gre_strip_config.re_encapsulation_ethernet_header is arista.avd.defined(true) %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " re-encapsulation ethernet" %} +{% endif %} + {{ tap_encapsulation_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if ethernet_interface.switchport.tool.mpls_pop_all is arista.avd.defined(true) %} + switchport tool mpls pop all +{% endif %} +{% if ethernet_interface.switchport.tool.encapsulation.vn_tag_strip is arista.avd.defined(true) %} + switchport tool encapsulation vn-tag strip +{% endif %} +{% if ethernet_interface.switchport.tool.encapsulation.dot1br_strip is arista.avd.defined(true) %} + switchport tool encapsulation dot1br strip +{% endif %} +{% if ethernet_interface.switchport.tap.allowed_vlan is arista.avd.defined %} + switchport tap allowed vlan {{ ethernet_interface.switchport.tap.allowed_vlan }} +{% endif %} +{% if ethernet_interface.switchport.tool.allowed_vlan is arista.avd.defined %} + switchport tool allowed vlan {{ ethernet_interface.switchport.tool.allowed_vlan }} +{% endif %} +{% if ethernet_interface.switchport.tool.identity.tag is arista.avd.defined %} + switchport tool identity {{ ethernet_interface.switchport.tool.identity.tag }} +{% endif %} +{% if ethernet_interface.switchport.tool.identity.dot1q_dzgre_source is arista.avd.defined %} + switchport tool identity dot1q source dzgre {{ ethernet_interface.switchport.tool.identity.dot1q_dzgre_source }} +{% elif ethernet_interface.switchport.tool.identity.qinq_dzgre_source is arista.avd.defined %} + switchport tool identity qinq source dzgre {{ ethernet_interface.switchport.tool.identity.qinq_dzgre_source }} +{% endif %} +{% if ethernet_interface.switchport.tap.truncation.enabled is arista.avd.defined(true) %} +{% set tap_truncation_cli = "switchport tap truncation" %} +{% if ethernet_interface.switchport.tap.truncation.size is arista.avd.defined %} +{% set tap_truncation_cli = tap_truncation_cli ~ " " ~ ethernet_interface.switchport.tap.truncation.size %} +{% endif %} + {{ tap_truncation_cli }} +{% endif %} +{% if ethernet_interface.switchport.tool.truncation.enabled is arista.avd.defined(true) %} +{% set tool_truncation_cli = "switchport tool truncation" %} +{% if ethernet_interface.switchport.tool.truncation.size is arista.avd.defined %} +{% set tool_truncation_cli = tool_truncation_cli ~ " " ~ ethernet_interface.switchport.tool.truncation.size %} +{% endif %} + {{ tool_truncation_cli }} +{% endif %} +{% if ethernet_interface.switchport.tap.default.groups is arista.avd.defined %} + switchport tap default group {{ ethernet_interface.switchport.tap.default.groups | arista.avd.natural_sort | join(" group ") }} +{% endif %} +{% if ethernet_interface.switchport.tap.default.nexthop_groups is arista.avd.defined %} + switchport tap default nexthop-group {{ ethernet_interface.switchport.tap.default.nexthop_groups | arista.avd.natural_sort | join(" ") }} +{% endif %} +{% for interface in ethernet_interface.switchport.tap.default.interfaces | arista.avd.natural_sort %} + switchport tap default interface {{ interface }} +{% endfor %} +{% if ethernet_interface.switchport.tool.groups is arista.avd.defined %} +{% set tool_groups = ethernet_interface.switchport.tool.groups | arista.avd.natural_sort | join(" ") %} + switchport tool group set {{ tool_groups }} +{% endif %} +{% if ethernet_interface.switchport.tool.dot1q_remove_outer_vlan_tag is arista.avd.defined %} + switchport tool dot1q remove outer {{ ethernet_interface.switchport.tool.dot1q_remove_outer_vlan_tag }} +{% endif %} +{% if ethernet_interface.switchport.tool.dzgre_preserve is arista.avd.defined(true) %} + switchport tool dzgre preserve +{% endif %} {% if ethernet_interface.eos_cli is arista.avd.defined %} {{ ethernet_interface.eos_cli | indent(3, false) }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/event-handlers.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/event-handlers.j2 index 8897ad28eb5..fecb9d819fd 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/event-handlers.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/event-handlers.j2 @@ -8,6 +8,12 @@ {% for handler in event_handlers | arista.avd.natural_sort('name') %} ! event-handler {{ handler.name }} +{% if handler.actions.log is arista.avd.defined(true) and not handler.actions.bash_command is arista.avd.defined and handler.trigger != "on-boot" %} + action log +{% endif %} +{% if handler.actions.increment_device_health_metric is arista.avd.defined and handler.trigger != "on-boot" %} + action increment device-health metric {{ handler.actions.increment_device_health_metric }} +{% endif %} {% if handler.trigger is arista.avd.defined %} {% if handler.trigger is arista.avd.defined("on-maintenance") and handler.trigger_on_maintenance.operation is arista.avd.defined @@ -81,10 +87,11 @@ event-handler {{ handler.name }} {% else %} action bash {{ bash_command }} {% endif %} -{% elif handler.actions.log is arista.avd.defined(true) %} +{% endif %} +{% if handler.actions.log is arista.avd.defined(true) and handler.trigger == "on-boot" %} action log {% endif %} -{% if handler.actions.increment_device_health_metric is arista.avd.defined %} +{% if handler.actions.increment_device_health_metric is arista.avd.defined and handler.trigger == "on-boot" %} action increment device-health metric {{ handler.actions.increment_device_health_metric }} {% endif %} {% if handler.delay is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/flow-tracking.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/flow-tracking.j2 index af988276df7..b0676035c4c 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/flow-tracking.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/flow-tracking.j2 @@ -4,6 +4,57 @@ that can be found in the LICENSE file. #} {# eos - flow trackings #} +{# hardware #} +{% if flow_tracking.hardware is arista.avd.defined %} +! +flow tracking hardware +{% for tracker in flow_tracking.hardware.trackers | arista.avd.natural_sort %} +{% if not loop.first %} + ! +{% endif %} + tracker {{ tracker.name }} +{% if tracker.record_export.on_inactive_timeout is arista.avd.defined %} + record export on inactive timeout {{ tracker.record_export.on_inactive_timeout }} +{% endif %} +{% if tracker.record_export.on_interval is arista.avd.defined %} + record export on interval {{ tracker.record_export.on_interval }} +{% endif %} +{% if tracker.record_export.mpls is arista.avd.defined(true) %} + record export mpls +{% endif %} +{% for exporter in tracker.exporters | arista.avd.natural_sort("name") %} +{% if not loop.first %} + ! +{% endif %} + exporter {{ exporter.name }} +{% if exporter.collector.host is arista.avd.defined %} +{% set collector_cli = 'collector ' ~ exporter.collector.host %} +{% if exporter.collector.port is arista.avd.defined %} +{% set collector_cli = collector_cli ~ ' port ' ~ exporter.collector.port %} +{% endif %} + {{ collector_cli }} +{% endif %} +{% if exporter.format.ipfix_version is arista.avd.defined %} + format ipfix version {{ exporter.format.ipfix_version }} +{% endif %} +{% if exporter.local_interface is arista.avd.defined %} + local interface {{ exporter.local_interface }} +{% endif %} +{% if exporter.template_interval is arista.avd.defined %} + template interval {{ exporter.template_interval }} +{% endif %} +{% endfor %} +{% if tracker.table_size is arista.avd.defined %} + flow table size {{ tracker.table_size }} entries +{% endif %} +{% endfor %} +{% if flow_tracking.hardware.record.format_ipfix_standard_timestamps_counters is arista.avd.defined(true) %} + record format ipfix standard timestamps counters +{% endif %} +{% if flow_tracking.hardware.shutdown is arista.avd.defined(false) %} + no shutdown +{% endif %} +{% endif %} {# sampled #} {% if flow_tracking.sampled is arista.avd.defined %} ! @@ -37,51 +88,13 @@ flow tracking sampled {% endif %} {% endif %} {% for tracker in flow_tracking.sampled.trackers | arista.avd.natural_sort %} - tracker {{ tracker.name }} -{% if tracker.record_export.on_inactive_timeout is arista.avd.defined %} - record export on inactive timeout {{ tracker.record_export.on_inactive_timeout }} -{% endif %} -{% if tracker.record_export.on_interval is arista.avd.defined %} - record export on interval {{ tracker.record_export.on_interval }} -{% endif %} -{% if tracker.record_export.mpls is arista.avd.defined(true) %} - record export mpls -{% endif %} -{% if tracker.exporters is arista.avd.defined %} -{% for exporter in tracker.exporters %} - exporter {{ exporter.name }} -{% if exporter.collector.host is arista.avd.defined %} -{% set collector_cli = 'collector ' ~ exporter.collector.host %} -{% if exporter.collector.port is arista.avd.defined %} -{% set collector_cli = collector_cli ~ ' port ' ~ exporter.collector.port %} -{% endif %} - {{ collector_cli }} -{% endif %} -{% if exporter.format.ipfix_version is arista.avd.defined %} - format ipfix version {{ exporter.format.ipfix_version }} -{% endif %} -{% if exporter.local_interface is arista.avd.defined %} - local interface {{ exporter.local_interface }} -{% endif %} -{% if exporter.template_interval is arista.avd.defined %} - template interval {{ exporter.template_interval }} -{% endif %} -{% endfor %} +{% if not loop.first %} + ! {% endif %} + tracker {{ tracker.name }} {% if tracker.table_size is arista.avd.defined %} flow table size {{ tracker.table_size }} entries {% endif %} -{% endfor %} -{% if flow_tracking.sampled.shutdown is arista.avd.defined(false) %} - no shutdown -{% endif %} -{% endif %} -{# hardware #} -{% if flow_tracking.hardware is arista.avd.defined %} -! -flow tracking hardware -{% for tracker in flow_tracking.hardware.trackers | arista.avd.natural_sort %} - tracker {{ tracker.name }} {% if tracker.record_export.on_inactive_timeout is arista.avd.defined %} record export on inactive timeout {{ tracker.record_export.on_inactive_timeout }} {% endif %} @@ -91,35 +104,30 @@ flow tracking hardware {% if tracker.record_export.mpls is arista.avd.defined(true) %} record export mpls {% endif %} -{% if tracker.exporters is arista.avd.defined %} -{% for exporter in tracker.exporters %} +{% for exporter in tracker.exporters | arista.avd.natural_sort("name") %} +{% if not loop.first %} + ! +{% endif %} exporter {{ exporter.name }} -{% if exporter.collector.host is arista.avd.defined %} -{% set collector_cli = 'collector ' ~ exporter.collector.host %} -{% if exporter.collector.port is arista.avd.defined %} -{% set collector_cli = collector_cli ~ ' port ' ~ exporter.collector.port %} -{% endif %} - {{ collector_cli }} +{% if exporter.collector.host is arista.avd.defined %} +{% set collector_cli = 'collector ' ~ exporter.collector.host %} +{% if exporter.collector.port is arista.avd.defined %} +{% set collector_cli = collector_cli ~ ' port ' ~ exporter.collector.port %} {% endif %} -{% if exporter.format.ipfix_version is arista.avd.defined %} + {{ collector_cli }} +{% endif %} +{% if exporter.format.ipfix_version is arista.avd.defined %} format ipfix version {{ exporter.format.ipfix_version }} -{% endif %} -{% if exporter.local_interface is arista.avd.defined %} +{% endif %} +{% if exporter.local_interface is arista.avd.defined %} local interface {{ exporter.local_interface }} -{% endif %} -{% if exporter.template_interval is arista.avd.defined %} +{% endif %} +{% if exporter.template_interval is arista.avd.defined %} template interval {{ exporter.template_interval }} -{% endif %} -{% endfor %} -{% endif %} -{% if tracker.table_size is arista.avd.defined %} - flow table size {{ tracker.table_size }} entries -{% endif %} +{% endif %} +{% endfor %} {% endfor %} -{% if flow_tracking.hardware.record.format_ipfix_standard_timestamps_counters is arista.avd.defined(true) %} - record format ipfix standard timestamps counters -{% endif %} -{% if flow_tracking.hardware.shutdown is arista.avd.defined(false) %} +{% if flow_tracking.sampled.shutdown is arista.avd.defined(false) %} no shutdown {% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hardware.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hardware.j2 index c6d8d109d56..854c87b065b 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hardware.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hardware.j2 @@ -4,6 +4,14 @@ that can be found in the LICENSE file. #} {# eos - hardware #} +{% if hardware.port_groups is arista.avd.defined %} +! +{% for port_group in hardware.port_groups %} +{% if port_group.select is arista.avd.defined %} +hardware port-group {{ port_group.port_group }} select {{ port_group.select }} +{% endif %} +{% endfor %} +{% endif %} {% if hardware.access_list.mechanism is arista.avd.defined %} ! hardware access-list mechanism {{ hardware.access_list.mechanism }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hostname.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hostname.j2 index 7e429796ce3..bd1994f9b97 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hostname.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/hostname.j2 @@ -4,7 +4,7 @@ that can be found in the LICENSE file. #} {# eos - hostname #} -{% if not generate_default_config is arista.avd.defined(false) %} +{% if hostname is arista.avd.defined or generate_default_config is arista.avd.defined(true) %} ! hostname {{ hostname | arista.avd.default(inventory_hostname) }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-defaults.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-defaults.j2 index 97a6cd327fd..c5736a1f726 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-defaults.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-defaults.j2 @@ -7,6 +7,9 @@ {% if interface_defaults is arista.avd.defined %} ! interface defaults +{% if interface_defaults.mtu is arista.avd.defined %} + mtu {{ interface_defaults.mtu }} +{% endif %} {% if interface_defaults.ethernet is arista.avd.defined %} ethernet {% if interface_defaults.ethernet.shutdown is arista.avd.defined(true) %} @@ -15,7 +18,4 @@ interface defaults no shutdown {% endif %} {% endif %} -{% if interface_defaults.mtu is arista.avd.defined %} - mtu {{ interface_defaults.mtu }} -{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-groups.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-groups.j2 index 8994b3ab02d..faf25120780 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-groups.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-groups.j2 @@ -10,10 +10,10 @@ group interface {{ interface_group.name }} {% for interface in interface_group.interfaces | arista.avd.natural_sort %} interface {{ interface }} {% endfor %} -{% for interface_profile in interface_group.interface_maintenance_profiles | arista.avd.natural_sort %} - maintenance profile interface {{ interface_profile }} -{% endfor %} {% for bgp_profile in interface_group.bgp_maintenance_profiles | arista.avd.natural_sort %} maintenance profile bgp {{ bgp_profile }} {% endfor %} +{% for interface_profile in interface_group.interface_maintenance_profiles | arista.avd.natural_sort %} + maintenance profile interface {{ interface_profile }} +{% endfor %} {% endfor %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-ip-nat.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-ip-nat.j2 index 6d24b96d2dd..0a20a3516d7 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-ip-nat.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/interface-ip-nat.j2 @@ -5,6 +5,7 @@ #} {# eos - interface ip nat #} {# Static source nat entries #} +{# Sequence of eos_cli does not exactly match with EOS cli #} {% for nat in interface_ip_nat.source.static | arista.avd.default([]) | arista.avd.natural_sort('original_ip') %} {% if not (nat.access_list is arista.avd.defined and nat.group is arista.avd.defined) and not (nat.original_port is not arista.avd.defined and nat.translated_port is arista.avd.defined) %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-access-lists.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-access-lists.j2 index 297db015751..501de4afa90 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-access-lists.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-access-lists.j2 @@ -23,13 +23,9 @@ ip access-list {{ acl.name }} {# START ACL_ENTRY CYCLE: walk over the list of ACL entries #} {% for acle in acl.entries %} {# Build ACL entry: #} -{# - init ACL entry string #} +{# Init ACL entry string #} {% set acl_entry = namespace(string='') %} -{# - add sequence number if defined and space #} -{% if acle.sequence is arista.avd.defined %} -{% set acl_entry.string = acl_entry.string ~ acle.sequence ~ ' ' %} -{% endif %} -{# - add action or remark #} +{# Add action or remark #} {# if remark is defined, add remark + text only #} {% if acle.remark is arista.avd.defined %} {% set acl_entry.string = acl_entry.string ~ 'remark ' ~ acle.remark %} @@ -130,7 +126,14 @@ ip access-list {{ acl.name }} {% endif %} {% endif %} {% endif %} +{# Only render if the string is not empty #} +{% if acl_entry.string != "" %} +{# Prepend sequence number if defined and space #} +{% if acle.sequence is arista.avd.defined %} +{% set acl_entry.string = acle.sequence ~ ' ' ~ acl_entry.string %} +{% endif %} {{ acl_entry.string }} +{% endif %} {# END ACL_ENTRY CYCLE: walk over the list of ACL entries #} {% endfor %} {# END ACL CYCLE: end walk over the list of defined ACLs #} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-client-source-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-client-source-interfaces.j2 index 3063b7e0755..78947305cc7 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-client-source-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-client-source-interfaces.j2 @@ -11,7 +11,7 @@ or ip_tftp_client_source_interfaces is arista.avd.defined %} ! {% if ip_ftp_client_source_interfaces is arista.avd.defined %} -{% for ip_ftp_client_source_interface in ip_ftp_client_source_interfaces %} +{% for ip_ftp_client_source_interface in ip_ftp_client_source_interfaces | arista.avd.natural_sort %} {% if ip_ftp_client_source_interface.name is arista.avd.defined %} {% set ip_ftp_client_cli = "ip ftp client source-interface " ~ ip_ftp_client_source_interface.name | capitalize %} {% if ip_ftp_client_source_interface.vrf is arista.avd.defined %} @@ -43,7 +43,7 @@ {% endfor %} {% endif %} {% if ip_telnet_client_source_interfaces is arista.avd.defined %} -{% for ip_telnet_client_source_interface in ip_telnet_client_source_interfaces %} +{% for ip_telnet_client_source_interface in ip_telnet_client_source_interfaces | arista.avd.natural_sort %} {% if ip_telnet_client_source_interface.name is arista.avd.defined %} {% set ip_telnet_client_cli = "ip telnet client source-interface " ~ ip_telnet_client_source_interface.name | capitalize %} {% if ip_telnet_client_source_interface.vrf is arista.avd.defined %} @@ -54,7 +54,7 @@ {% endfor %} {% endif %} {% if ip_tftp_client_source_interfaces is arista.avd.defined %} -{% for ip_tftp_client_source_interface in ip_tftp_client_source_interfaces %} +{% for ip_tftp_client_source_interface in ip_tftp_client_source_interfaces | arista.avd.natural_sort %} {% if ip_tftp_client_source_interface.name is arista.avd.defined %} {% set ip_tftp_client_cli = "ip tftp client source-interface " ~ ip_tftp_client_source_interface.name | capitalize %} {% if ip_tftp_client_source_interface.vrf is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-nat-part1.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-nat-part1.j2 index 8fa1acc8d93..4236e1bc72c 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-nat-part1.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-nat-part1.j2 @@ -6,13 +6,13 @@ {# eos - ip nat part 1 (translation, kernel_buffer_size) #} {% if ip_nat is arista.avd.defined %} ! -{% if ip_nat.translation.address_selection.any | arista.avd.default(false) %} -ip nat translation address selection any -{% endif %} {% if ip_nat.translation.address_selection.hash_field_source_ip | arista.avd.default(false) %} ip nat translation address selection hash field source-ip {% endif %} -{% for timeout in ip_nat.translation.timeouts | arista.avd.default([]) %} +{% if ip_nat.translation.address_selection.any | arista.avd.default(false) %} +ip nat translation address selection any +{% endif %} +{% for timeout in ip_nat.translation.timeouts | arista.avd.default([]) | arista.avd.natural_sort %} ip nat translation {{ timeout.protocol }}-timeout {{ timeout.timeout }} {% endfor %} {% if ip_nat.translation.max_entries.limit is arista.avd.defined %} @@ -37,7 +37,7 @@ ip nat kernel buffer size {{ ip_nat.kernel_buffer_size }} ! {% set nat_profile_def = "ip nat profile " ~ profile.name %} {% if profile.vrf is arista.avd.defined %} -{% set nat_profile_def = nat_profile_def ~ " vrf " ~ profile.name %} +{% set nat_profile_def = nat_profile_def ~ " vrf " ~ profile.vrf %} {% endif %} {{ nat_profile_def }} {% set interface_ip_nat = profile %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-security.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-security.j2 index d9b47798724..24e2aace4ab 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-security.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ip-security.j2 @@ -7,14 +7,11 @@ {% if ip_security is arista.avd.defined %} ! ip security -{% for ike_policy in ip_security.ike_policies | arista.avd.default([]) %} +{% for ike_policy in ip_security.ike_policies | arista.avd.natural_sort('name') %} +{% if not loop.first %} ! - ike policy {{ ike_policy.name }} -{% if ike_policy.local_id_fqdn is arista.avd.defined %} - local-id fqdn {{ ike_policy.local_id_fqdn }} -{% elif ike_policy.local_id is arista.avd.defined %} - local-id {{ ike_policy.local_id }} {% endif %} + ike policy {{ ike_policy.name }} {% if ike_policy.ike_lifetime is arista.avd.defined %} ike-lifetime {{ ike_policy.ike_lifetime }} {% endif %} @@ -24,17 +21,15 @@ ip security {% if ike_policy.dh_group is arista.avd.defined %} dh-group {{ ike_policy.dh_group }} {% endif %} +{% if ike_policy.local_id_fqdn is arista.avd.defined %} + local-id fqdn {{ ike_policy.local_id_fqdn }} +{% elif ike_policy.local_id is arista.avd.defined %} + local-id {{ ike_policy.local_id }} +{% endif %} {% endfor %} -{% for sa_policy in ip_security.sa_policies | arista.avd.default([]) %} +{% for sa_policy in ip_security.sa_policies | arista.avd.natural_sort('name') %} ! sa policy {{ sa_policy.name }} -{% if sa_policy.esp.integrity is arista.avd.defined %} -{% if sa_policy.esp.integrity == "disabled" %} - esp integrity null -{% else %} - esp integrity {{ sa_policy.esp.integrity }} -{% endif %} -{% endif %} {% if sa_policy.esp.encryption is arista.avd.defined %} {% if sa_policy.esp.encryption == "disabled" %} esp encryption null @@ -42,6 +37,13 @@ ip security esp encryption {{ sa_policy.esp.encryption }} {% endif %} {% endif %} +{% if sa_policy.esp.integrity is arista.avd.defined %} +{% if sa_policy.esp.integrity == "disabled" %} + esp integrity null +{% else %} + esp integrity {{ sa_policy.esp.integrity }} +{% endif %} +{% endif %} {% if sa_policy.sa_lifetime.value is arista.avd.defined %} sa lifetime {{ sa_policy.sa_lifetime.value }} {{ sa_policy.sa_lifetime.unit | arista.avd.default("hours") }} {% endif %} @@ -49,7 +51,7 @@ ip security pfs dh-group {{ sa_policy.pfs_dh_group }} {% endif %} {% endfor %} -{% for profile in ip_security.profiles | arista.avd.default([]) %} +{% for profile in ip_security.profiles | arista.avd.natural_sort('name') %} ! profile {{ profile.name }} {% if profile.ike_policy is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lacp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lacp.j2 index 6207e8a9dea..2de28e0224a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lacp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lacp.j2 @@ -6,6 +6,9 @@ {# eos - lacp #} {% if lacp is arista.avd.defined %} ! +{% if lacp.system_priority is arista.avd.defined %} +lacp system-priority {{ lacp.system_priority }} +{% endif %} {% if lacp.port_id.range.begin is arista.avd.defined and lacp.port_id.range.end is arista.avd.defined %} lacp port-id range {{ lacp.port_id.range.begin }} {{ lacp.port_id.range.end }} {% endif %} @@ -14,7 +17,4 @@ lacp rate-limit default {% elif lacp.rate_limit.default is arista.avd.defined(false) %} no lacp rate-limit default {% endif %} -{% if lacp.system_priority is arista.avd.defined %} -lacp system-priority {{ lacp.system_priority }} -{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lldp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lldp.j2 index 9ec36dd4d62..da8312e6e44 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lldp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/lldp.j2 @@ -6,29 +6,17 @@ {# eos - lldp #} {% if lldp is arista.avd.defined %} ! -{% if lldp.run is arista.avd.defined(false) %} -no lldp run -{% endif %} {% if lldp.timer is arista.avd.defined %} lldp timer {{ lldp.timer }} {% endif %} -{% if lldp.timer_reinitialization is arista.avd.defined %} -lldp timer reinitialization {{ lldp.timer_reinitialization }} -{% endif %} {% if lldp.holdtime is arista.avd.defined %} lldp hold-time {{ lldp.holdtime }} {% endif %} -{% if lldp.management_address is arista.avd.defined %} -lldp management-address {{ lldp.management_address }} -{% endif %} -{% if lldp.vrf is arista.avd.defined %} -lldp management-address vrf {{ lldp.vrf }} -{% endif %} -{% if lldp.receive_packet_tagged_drop is arista.avd.defined(true) %} -lldp receive packet tagged drop +{% if lldp.timer_reinitialization is arista.avd.defined %} +lldp timer reinitialization {{ lldp.timer_reinitialization }} {% endif %} {% if lldp.tlvs is arista.avd.defined %} -{% for tlv in lldp.tlvs %} +{% for tlv in lldp.tlvs | arista.avd.natural_sort("name") %} {% if tlv.name is arista.avd.defined and tlv.transmit is arista.avd.defined %} {% set lldp_tlv_transmit_cli = "lldp tlv transmit " ~ tlv.name %} {% if tlv.transmit is arista.avd.defined(false) %} @@ -38,4 +26,16 @@ lldp receive packet tagged drop {% endif %} {% endfor %} {% endif %} +{% if lldp.run is arista.avd.defined(false) %} +no lldp run +{% endif %} +{% if lldp.management_address is arista.avd.defined %} +lldp management-address {{ lldp.management_address }} +{% endif %} +{% if lldp.vrf is arista.avd.defined %} +lldp management-address vrf {{ lldp.vrf }} +{% endif %} +{% if lldp.receive_packet_tagged_drop is arista.avd.defined(true) %} +lldp receive packet tagged drop +{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-congestion-drops.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-congestion-drops.j2 new file mode 100644 index 00000000000..8219860fc1e --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-congestion-drops.j2 @@ -0,0 +1,10 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - logging event congestion-drops #} +{% if logging.event.congestion_drops_interval is arista.avd.defined %} +! +logging event congestion-drops interval {{ logging.event.congestion_drops_interval }} +{% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-storm-control.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-storm-control.j2 new file mode 100644 index 00000000000..31afe2b3a3a --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging-event-storm-control.j2 @@ -0,0 +1,15 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - logging even storm-control #} +{% if logging.event.storm_control.discards.global is arista.avd.defined(true) or logging.event.storm_control.discards.interval is arista.avd.defined %} +! +{% endif %} +{% if logging.event.storm_control.discards.global is arista.avd.defined(true) %} +logging event storm-control discards global +{% endif %} +{% if logging.event.storm_control.discards.interval is arista.avd.defined %} +logging event storm-control discards interval {{ logging.event.storm_control.discards.interval }} +{% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging.j2 index 23b28d5665c..7d6c5196aa5 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/logging.j2 @@ -6,6 +6,11 @@ {# eos - logging #} {% if logging is arista.avd.defined %} ! +{% if logging.repeat_messages is arista.avd.defined(false) %} +no logging repeat-messages +{% elif logging.repeat_messages is arista.avd.defined(true) %} +logging repeat-messages +{% endif %} {% if logging.buffered.level is arista.avd.defined('disabled') %} no logging buffered {% elif logging.buffered.size is arista.avd.defined or logging.buffered.level is arista.avd.defined %} @@ -33,12 +38,6 @@ no logging monitor {% elif logging.monitor is arista.avd.defined %} logging monitor {{ logging.monitor }} {% endif %} -{% if logging.event.storm_control.discards.global is arista.avd.defined(true) %} -logging event storm-control discards global -{% endif %} -{% if logging.event.storm_control.discards.interval is arista.avd.defined %} -logging event storm-control discards interval {{ logging.event.storm_control.discards.interval }} -{% endif %} {% if logging.synchronous.level is arista.avd.defined('disabled') %} no logging synchronous {% elif logging.synchronous is arista.avd.defined %} @@ -51,8 +50,9 @@ logging synchronous level {{ logging.synchronous.level | arista.avd.default("cri {% set logging_host_cli = logging_host_cli ~ " vrf " ~ vrf.name %} {% endif %} {% set logging_host_cli = logging_host_cli ~ " host " ~ host.name %} -{% if host.ports is arista.avd.defined() %} -{% set logging_host_cli = logging_host_cli ~ ' ' ~ host.ports | join(' ') %} +{% if host.ports is arista.avd.defined %} +{% set ports = host.ports | arista.avd.natural_sort %} +{% set logging_host_cli = logging_host_cli ~ ' ' ~ ports | join(' ') %} {% endif %} {% if host.protocol is arista.avd.defined() and host.protocol is not arista.avd.defined("udp") %} {% set logging_host_cli = logging_host_cli ~ " protocol " ~ host.protocol | lower %} @@ -94,8 +94,18 @@ logging source-interface {{ logging.source_interface }} logging policy match match-list {{ match_list.name }} {{ match_list.action }} {% endfor %} {% for level in logging.level | arista.avd.natural_sort('facility') %} +{% if loop.first %} +! +{% endif %} {% if level.severity is arista.avd.defined %} logging level {{ level.facility }} {{ level.severity }} {% endif %} {% endfor %} +{% if logging.event.global_link_status is arista.avd.defined(false) %} +! +no logging event link-status global +{% elif logging.event.global_link_status is arista.avd.defined(true) %} +! +logging event link-status global +{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/loopback-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/loopback-interfaces.j2 index dc7938624e1..0cdc9e902e5 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/loopback-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/loopback-interfaces.j2 @@ -33,35 +33,35 @@ interface {{ loopback_interface.name }} {% if loopback_interface.ipv6_address is arista.avd.defined %} ipv6 address {{ loopback_interface.ipv6_address }} {% endif %} +{% if loopback_interface.mpls.ldp.interface is arista.avd.defined(true) %} + mpls ldp interface +{% elif loopback_interface.mpls.ldp.interface is arista.avd.defined(false) %} + no mpls ldp interface +{% endif %} {% if loopback_interface.ospf_area is arista.avd.defined %} ip ospf area {{ loopback_interface.ospf_area }} {% endif %} +{% if loopback_interface.node_segment.ipv4_index is arista.avd.defined %} + node-segment ipv4 index {{ loopback_interface.node_segment.ipv4_index }} +{% endif %} +{% if loopback_interface.node_segment.ipv6_index is arista.avd.defined %} + node-segment ipv6 index {{ loopback_interface.node_segment.ipv6_index }} +{% endif %} {% if loopback_interface.isis_enable is arista.avd.defined %} isis enable {{ loopback_interface.isis_enable }} {% endif %} {% if loopback_interface.isis_bfd is arista.avd.defined %} isis bfd {% endif %} -{% if loopback_interface.isis_passive is arista.avd.defined(true) %} - isis passive -{% endif %} {% if loopback_interface.isis_metric is arista.avd.defined %} isis metric {{ loopback_interface.isis_metric }} {% endif %} +{% if loopback_interface.isis_passive is arista.avd.defined(true) %} + isis passive +{% endif %} {% if loopback_interface.isis_network_point_to_point is arista.avd.defined(true) %} isis network point-to-point {% endif %} -{% if loopback_interface.mpls.ldp.interface is arista.avd.defined(true) %} - mpls ldp interface -{% elif loopback_interface.mpls.ldp.interface is arista.avd.defined(false) %} - no mpls ldp interface -{% endif %} -{% if loopback_interface.node_segment.ipv4_index is arista.avd.defined %} - node-segment ipv4 index {{ loopback_interface.node_segment.ipv4_index }} -{% endif %} -{% if loopback_interface.node_segment.ipv6_index is arista.avd.defined %} - node-segment ipv6 index {{ loopback_interface.node_segment.ipv6_index }} -{% endif %} {% if loopback_interface.eos_cli is arista.avd.defined %} {{ loopback_interface.eos_cli | indent(3, false) }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mac-security.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mac-security.j2 index 9e319d3481c..fdb33f53bec 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mac-security.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mac-security.j2 @@ -13,8 +13,8 @@ mac security {% if mac_security.fips_restrictions is arista.avd.defined(true) %} fips restrictions {% endif %} - ! {% for profile in mac_security.profiles | arista.avd.natural_sort('name') %} + ! profile {{ profile.name }} {% if profile.cipher is arista.avd.defined %} cipher {{ profile.cipher }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-gnmi.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-gnmi.j2 index 5867094f1c1..928d884c2d7 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-gnmi.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-gnmi.j2 @@ -5,11 +5,16 @@ #} {# eos - management api gnmi #} {% if management_api_gnmi is arista.avd.defined %} +{% set first_line = True %} ! management api gnmi {% if management_api_gnmi.transport is arista.avd.defined %} {% if management_api_gnmi.transport.grpc is arista.avd.defined %} -{% for transport in management_api_gnmi.transport.grpc %} +{% set first_line = False %} +{% for transport in management_api_gnmi.transport.grpc | arista.avd.natural_sort("name") %} +{% if not loop.first %} + ! +{% endif %} {% if transport.name is arista.avd.defined %} transport grpc {{ transport.name }} {% if transport.ssl_profile is arista.avd.defined %} @@ -31,7 +36,13 @@ management api gnmi {% endfor %} {% endif %} {% if management_api_gnmi.transport.grpc_tunnels is arista.avd.defined %} -{% for transport in management_api_gnmi.transport.grpc_tunnels %} +{% if not first_line == True %} + ! +{% endif %} +{% for transport in management_api_gnmi.transport.grpc_tunnels | arista.avd.natural_sort("name") %} +{% if not loop.first %} + ! +{% endif %} transport grpc-tunnel {{ transport.name }} {% if transport.shutdown is arista.avd.defined(true) %} shutdown diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-http.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-http.j2 index 614798d0a62..90fe3344639 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-http.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-api-http.j2 @@ -9,9 +9,6 @@ management api http-commands {% if management_api_http.enable_https is arista.avd.defined(true) %} protocol https -{% if management_api_http.https_ssl_profile is arista.avd.defined %} - protocol https ssl profile {{ management_api_http.https_ssl_profile }} -{% endif %} {% elif management_api_http.enable_https is arista.avd.defined(false) %} no protocol https {% endif %} @@ -24,6 +21,9 @@ management api http-commands default-services {% elif management_api_http.default_services is arista.avd.defined(false) %} no default-services +{% endif %} +{% if management_api_http.https_ssl_profile is arista.avd.defined %} + protocol https ssl profile {{ management_api_http.https_ssl_profile }} {% endif %} no shutdown {% for vrf in management_api_http.enable_vrfs | arista.avd.natural_sort('name') %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-interfaces.j2 index f789a7535d8..6d6f35c7494 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-interfaces.j2 @@ -15,15 +15,15 @@ interface {{ management_interface.name }} {% elif management_interface.shutdown is arista.avd.defined(false) %} no shutdown {% endif %} -{% if management_interface.speed is arista.avd.defined %} - speed {{ management_interface.speed }} -{% endif %} {% if management_interface.mtu is arista.avd.defined %} mtu {{ management_interface.mtu }} {% endif %} {% if management_interface.mac_address is arista.avd.defined %} mac-address {{ management_interface.mac_address }} {% endif %} +{% if management_interface.speed is arista.avd.defined %} + speed {{ management_interface.speed }} +{% endif %} {% if management_interface.vrf is arista.avd.defined and management_interface.vrf != 'default' %} vrf {{ management_interface.vrf }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-security.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-security.j2 index 21c457fae12..88f118b78a8 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-security.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-security.j2 @@ -21,45 +21,44 @@ management security entropy source hardware exclusive {% endif %} {% endif %} +{% if management_security.password.minimum_length is arista.avd.defined %} + password minimum length {{ management_security.password.minimum_length }} +{% endif %} {% if management_security.password.encryption_key_common is arista.avd.defined(true) %} password encryption-key common {% endif %} {% if management_security.password.encryption_reversible is arista.avd.defined() %} password encryption reversible {{ management_security.password.encryption_reversible }} {% endif %} -{% if management_security.password.minimum_length is arista.avd.defined %} - password minimum length {{ management_security.password.minimum_length }} -{% endif %} -{% if management_security.password.policies is arista.avd.defined %} -{% for policy in management_security.password.policies %} +{% for policy in management_security.password.policies | arista.avd.natural_sort("name") %} + ! password policy {{ policy.name }} -{% if policy.minimum is arista.avd.defined %} -{% if policy.minimum.digits is arista.avd.defined %} +{% if policy.minimum is arista.avd.defined %} +{% if policy.minimum.digits is arista.avd.defined %} minimum digits {{ policy.minimum.digits }} -{% endif %} -{% if policy.minimum.length is arista.avd.defined %} +{% endif %} +{% if policy.minimum.length is arista.avd.defined %} minimum length {{ policy.minimum.length }} -{% endif %} -{% if policy.minimum.lower is arista.avd.defined %} +{% endif %} +{% if policy.minimum.lower is arista.avd.defined %} minimum lower {{ policy.minimum.lower }} -{% endif %} -{% if policy.minimum.special is arista.avd.defined %} +{% endif %} +{% if policy.minimum.special is arista.avd.defined %} minimum special {{ policy.minimum.special }} -{% endif %} -{% if policy.minimum.upper is arista.avd.defined %} +{% endif %} +{% if policy.minimum.upper is arista.avd.defined %} minimum upper {{ policy.minimum.upper }} -{% endif %} {% endif %} -{% if policy.maximum is arista.avd.defined %} -{% if policy.maximum.repetitive is arista.avd.defined %} +{% endif %} +{% if policy.maximum is arista.avd.defined %} +{% if policy.maximum.repetitive is arista.avd.defined %} maximum repetitive {{ policy.maximum.repetitive }} -{% endif %} -{% if policy.maximum.sequential is arista.avd.defined %} +{% endif %} +{% if policy.maximum.sequential is arista.avd.defined %} maximum sequential {{ policy.maximum.sequential }} -{% endif %} {% endif %} -{% endfor %} -{% endif %} +{% endif %} +{% endfor %} {% for profile in management_security.shared_secret_profiles | arista.avd.natural_sort("profile") %} ! session shared-secret profile {{ profile.profile }} @@ -86,6 +85,7 @@ management security {% endfor %} {% endfor %} {% for ssl_profile in management_security.ssl_profiles | arista.avd.natural_sort %} + ! ssl profile {{ ssl_profile.name }} {% if ssl_profile.tls_versions is arista.avd.defined %} tls versions {{ ssl_profile.tls_versions }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-ssh.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-ssh.j2 index b0181d59a56..4432e008d2e 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-ssh.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-ssh.j2 @@ -8,7 +8,7 @@ ! management ssh {% if management_ssh.access_groups is arista.avd.defined %} -{% for access_group in management_ssh.access_groups %} +{% for access_group in management_ssh.access_groups | arista.avd.natural_sort %} {% set acl_cli = "ip access-group " ~ access_group.name %} {% if access_group.vrf is arista.avd.defined %} {% set acl_cli = acl_cli ~ " vrf " ~ access_group.vrf %} @@ -18,7 +18,7 @@ management ssh {% endfor %} {% endif %} {% if management_ssh.ipv6_access_groups is arista.avd.defined %} -{% for ipv6_access_group in management_ssh.ipv6_access_groups %} +{% for ipv6_access_group in management_ssh.ipv6_access_groups | arista.avd.natural_sort %} {% set ipv6_acl_cli = "ipv6 access-group " ~ ipv6_access_group.name %} {% if ipv6_access_group.vrf is arista.avd.defined %} {% set ipv6_acl_cli = ipv6_acl_cli ~ " vrf " ~ ipv6_access_group.vrf %} @@ -30,17 +30,8 @@ management ssh {% if management_ssh.idle_timeout is arista.avd.defined %} idle-timeout {{ management_ssh.idle_timeout }} {% endif %} -{% if management_ssh.connection.limit is arista.avd.defined %} - connection limit {{ management_ssh.connection.limit }} -{% endif %} -{% if management_ssh.connection.per_host is arista.avd.defined %} - connection per-host {{ management_ssh.connection.per_host }} -{% endif %} -{% if management_ssh.client_alive.interval is arista.avd.defined %} - client-alive interval {{ management_ssh.client_alive.interval }} -{% endif %} -{% if management_ssh.client_alive.count_max is arista.avd.defined %} - client-alive count-max {{ management_ssh.client_alive.count_max }} +{% if management_ssh.authentication.protocols is arista.avd.defined %} + authentication protocol {{ management_ssh.authentication.protocols | join(" ") }} {% endif %} {% if management_ssh.cipher is arista.avd.defined %} cipher {{ management_ssh.cipher | join(" ") }} @@ -54,14 +45,26 @@ management ssh {% if management_ssh.hostkey.server is arista.avd.defined %} hostkey server {{ management_ssh.hostkey.server | join(" ") }} {% endif %} +{% if management_ssh.connection.per_host is arista.avd.defined %} + connection per-host {{ management_ssh.connection.per_host }} +{% endif %} {% if management_ssh.fips_restrictions is arista.avd.defined(true) %} fips restrictions {% endif %} {% if management_ssh.hostkey.client_strict_checking is arista.avd.defined(true) %} hostkey client strict-checking {% endif %} -{% if management_ssh.hostkey.server_cert is arista.avd.defined %} - hostkey server cert {{ management_ssh.hostkey.server_cert }} +{% if management_ssh.connection.limit is arista.avd.defined %} + connection limit {{ management_ssh.connection.limit }} +{% endif %} +{% if management_ssh.authentication.empty_passwords is arista.avd.defined %} + authentication empty-passwords {{ management_ssh.authentication.empty_passwords }} +{% endif %} +{% if management_ssh.client_alive.interval is arista.avd.defined %} + client-alive interval {{ management_ssh.client_alive.interval }} +{% endif %} +{% if management_ssh.client_alive.count_max is arista.avd.defined %} + client-alive count-max {{ management_ssh.client_alive.count_max }} {% endif %} {% if management_ssh.enable is arista.avd.defined(false) %} shutdown @@ -71,6 +74,9 @@ management ssh {% if management_ssh.log_level is arista.avd.defined %} log-level {{ management_ssh.log_level }} {% endif %} +{% if management_ssh.hostkey.server_cert is arista.avd.defined %} + hostkey server cert {{ management_ssh.hostkey.server_cert }} +{% endif %} {% for vrf in management_ssh.vrfs | arista.avd.natural_sort('name') %} ! vrf {{ vrf.name }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-tech-support.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-tech-support.j2 index 8e5e40c8d5a..bc1cc137e86 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-tech-support.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/management-tech-support.j2 @@ -9,21 +9,17 @@ management tech-support {% if management_tech_support.policy_show_tech_support is arista.avd.defined %} policy show tech-support -{% if management_tech_support.policy_show_tech_support.exclude_commands is arista.avd.defined %} -{% for exclude_command in management_tech_support.policy_show_tech_support.exclude_commands %} -{% set exclude_cli = "" %} -{% if exclude_command.type is arista.avd.defined('json') %} -{% set exclude_cli = "json " %} -{% endif %} -{% set exclude_cli = exclude_cli ~ exclude_command.command %} +{% for exclude_command in management_tech_support.policy_show_tech_support.exclude_commands | arista.avd.natural_sort %} +{% set exclude_cli = "" %} +{% if exclude_command.type is arista.avd.defined('json') %} +{% set exclude_cli = "json " %} +{% endif %} +{% set exclude_cli = exclude_cli ~ exclude_command.command %} exclude command {{ exclude_cli }} -{% endfor %} -{% endif %} -{% if management_tech_support.policy_show_tech_support.include_commands is arista.avd.defined %} -{% for include_command in management_tech_support.policy_show_tech_support.include_commands %} +{% endfor %} +{% for include_command in management_tech_support.policy_show_tech_support.include_commands | arista.avd.natural_sort %} include command {{ include_command.command }} -{% endfor %} -{% endif %} +{% endfor %} exit {% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/match-list-input.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/match-list-input.j2 index c6be88d112f..91d101f20fd 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/match-list-input.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/match-list-input.j2 @@ -5,6 +5,17 @@ #} {# eos - match list input #} {% if match_list_input is arista.avd.defined %} +{% if match_list_input.string is arista.avd.defined %} +! +{% for match_list in match_list_input.string | arista.avd.natural_sort('name') %} +match-list input string {{ match_list.name }} +{% for sequence in match_list.sequence_numbers | arista.avd.natural_sort('sequence') %} +{% if sequence.match_regex is arista.avd.defined %} + {{ sequence.sequence }} match regex {{ sequence.match_regex }} +{% endif %} +{% endfor %} +{% endfor %} +{% endif %} {% if match_list_input.prefix_ipv4 is arista.avd.defined %} ! {% for match_list in match_list_input.prefix_ipv4 | arista.avd.natural_sort('name') %} @@ -23,15 +34,4 @@ match-list input prefix-ipv6 {{ match_list.name }} {% endfor %} {% endfor %} {% endif %} -{% if match_list_input.string is arista.avd.defined %} -! -{% for match_list in match_list_input.string | arista.avd.natural_sort('name') %} -match-list input string {{ match_list.name }} -{% for sequence in match_list.sequence_numbers | arista.avd.natural_sort('sequence') %} -{% if sequence.match_regex is arista.avd.defined %} - {{ sequence.sequence }} match regex {{ sequence.match_regex }} -{% endif %} -{% endfor %} -{% endfor %} -{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-connectivity.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-connectivity.j2 index c9cd0188cda..1a4e86055ca 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-connectivity.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-connectivity.j2 @@ -7,6 +7,53 @@ {% if monitor_connectivity is arista.avd.defined %} ! monitor connectivity +{% for vrf in monitor_connectivity.vrfs | arista.avd.natural_sort('name') %} +{% if vrf.name is arista.avd.defined %} +{% if not loop.first %} + ! +{% endif %} + vrf {{ vrf.name }} +{% for interface_set in vrf.interface_sets | arista.avd.natural_sort('name') %} +{% if interface_set.name is arista.avd.defined and interface_set.interfaces is arista.avd.defined %} + interface set {{ interface_set.name }} {{ interface_set.interfaces }} +{% endif %} +{% endfor %} +{% if vrf.description is arista.avd.defined %} + description + {{ vrf.description }} +{% endif %} +{% if vrf.local_interfaces is arista.avd.defined %} +{% set local_interfaces_cli = "local-interfaces " ~ vrf.local_interfaces %} +{% if vrf.address_only | arista.avd.default(true) %} +{% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} +{% endif %} + {{ local_interfaces_cli }} default +{% endif %} +{% for host in vrf.hosts | arista.avd.natural_sort('name') %} +{% if host.name is arista.avd.defined %} + ! + host {{ host.name }} +{% if host.description is arista.avd.defined %} + description + {{ host.description }} +{% endif %} +{% if host.local_interfaces is arista.avd.defined %} +{% set local_interfaces_cli = "local-interfaces " ~ host.local_interfaces %} +{% if host.address_only | arista.avd.default(true) %} +{% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} +{% endif %} + {{ local_interfaces_cli }} +{% endif %} +{% if host.ip is arista.avd.defined %} + ip {{ host.ip }} +{% endif %} +{% if host.url is arista.avd.defined %} + url {{ host.url }} +{% endif %} +{% endif %} +{% endfor %} +{% endif %} +{% endfor %} {% if monitor_connectivity.interval is arista.avd.defined %} interval {{ monitor_connectivity.interval }} {% endif %} @@ -22,7 +69,6 @@ monitor connectivity {% endfor %} {% if monitor_connectivity.local_interfaces is arista.avd.defined %} {% set local_interfaces_cli = "local-interfaces " ~ monitor_connectivity.local_interfaces %} -{# In AVD 4.x address_only default is true - TODO reevaluate for AVD 5.0.0 #} {% if monitor_connectivity.address_only | arista.avd.default(true) %} {% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} {% endif %} @@ -38,7 +84,6 @@ monitor connectivity {% endif %} {% if host.local_interfaces is arista.avd.defined %} {% set local_interfaces_cli = "local-interfaces " ~ host.local_interfaces %} -{# In AVD 4.x address_only default is true - TODO reevaluate for AVD 5.0.0 #} {% if host.address_only | arista.avd.default(true) %} {% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} {% endif %} @@ -52,50 +97,4 @@ monitor connectivity {% endif %} {% endif %} {% endfor %} -{% for vrf in monitor_connectivity.vrfs | arista.avd.natural_sort('name') %} -{% if vrf.name is arista.avd.defined %} - vrf {{ vrf.name }} -{% for interface_set in vrf.interface_sets | arista.avd.natural_sort('name') %} -{% if interface_set.name is arista.avd.defined and interface_set.interfaces is arista.avd.defined %} - interface set {{ interface_set.name }} {{ interface_set.interfaces }} -{% endif %} -{% endfor %} -{% if vrf.local_interfaces is arista.avd.defined %} -{% set local_interfaces_cli = "local-interfaces " ~ vrf.local_interfaces %} -{# In AVD 4.x address_only default is true - TODO reevaluate for AVD 5.0.0 #} -{% if vrf.address_only | arista.avd.default(true) %} -{% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} -{% endif %} - {{ local_interfaces_cli }} default -{% endif %} -{% if vrf.description is arista.avd.defined %} - description - {{ vrf.description }} -{% endif %} -{% for host in vrf.hosts | arista.avd.natural_sort('name') %} -{% if host.name is arista.avd.defined %} - ! - host {{ host.name }} -{% if host.description is arista.avd.defined %} - description - {{ host.description }} -{% endif %} -{% if host.local_interfaces is arista.avd.defined %} -{% set local_interfaces_cli = "local-interfaces " ~ host.local_interfaces %} -{# In AVD 4.x address_only default is true - TODO reevaluate for AVD 5.0.0 #} -{% if host.address_only | arista.avd.default(true) %} -{% set local_interfaces_cli = local_interfaces_cli ~ " address-only" %} -{% endif %} - {{ local_interfaces_cli }} -{% endif %} -{% if host.ip is arista.avd.defined %} - ip {{ host.ip }} -{% endif %} -{% if host.url is arista.avd.defined %} - url {{ host.url }} -{% endif %} -{% endif %} -{% endfor %} -{% endif %} -{% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-session-default-encapsulation-gre.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-session-default-encapsulation-gre.j2 new file mode 100644 index 00000000000..7872997339c --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-session-default-encapsulation-gre.j2 @@ -0,0 +1,10 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +{# eos - monitor session default #} +{% if monitor_session_default_encapsulation_gre.payload is arista.avd.defined %} +! +monitor session default encapsulation gre payload {{ monitor_session_default_encapsulation_gre.payload }} +{% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-sessions.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-sessions.j2 index ee0589e056a..fc07083b0fc 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-sessions.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/monitor-sessions.j2 @@ -6,49 +6,47 @@ {# eos - monitor sessions #} {% if monitor_sessions is arista.avd.defined %} ! -{% for monitor_session in monitor_sessions | arista.avd.natural_sort('name') if monitor_session.name is arista.avd.defined %} -{% if monitor_session.sources is arista.avd.defined and monitor_session.destinations is arista.avd.defined %} -{% for source in monitor_session.sources | arista.avd.natural_sort('name') if source.name is arista.avd.defined %} -{% set source_cli = "monitor session " ~ monitor_session.name ~ " source " ~ source.name %} -{% if source.direction is arista.avd.defined %} -{% set source_cli = source_cli ~ " " ~ source.direction %} -{% endif %} -{% if source.access_group.type is arista.avd.defined and source.access_group.name is arista.avd.defined %} -{% set source_cli = source_cli ~ " " ~ source.access_group.type ~ " access-group " ~ source.access_group.name %} -{% if source.access_group.priority is arista.avd.defined %} -{% set source_cli = source_cli ~ " priority " ~ source.access_group.priority %} -{% endif %} +{% for monitor_session in monitor_sessions | arista.avd.natural_sort('name') %} +{% if monitor_session.access_group.type is arista.avd.defined and monitor_session.access_group.name is arista.avd.defined %} +monitor session {{ monitor_session.name }} {{ monitor_session.access_group.type }} access-group {{ monitor_session.access_group.name }} +{% endif %} +{% for source in monitor_session.sources | arista.avd.natural_sort('name') %} +{% set source_cli = "monitor session " ~ monitor_session.name ~ " source " ~ source.name %} +{% if source.direction is arista.avd.defined %} +{% set source_cli = source_cli ~ " " ~ source.direction %} +{% endif %} +{% if source.access_group.type is arista.avd.defined and source.access_group.name is arista.avd.defined %} +{% set source_cli = source_cli ~ " " ~ source.access_group.type ~ " access-group " ~ source.access_group.name %} +{% if source.access_group.priority is arista.avd.defined %} +{% set source_cli = source_cli ~ " priority " ~ source.access_group.priority %} {% endif %} +{% endif %} {{ source_cli }} -{% endfor %} -{% for destination in monitor_session.destinations | arista.avd.natural_sort %} +{% endfor %} +{% for destination in monitor_session.destinations | arista.avd.natural_sort %} monitor session {{ monitor_session.name }} destination {{ destination }} -{% endfor %} -{% if monitor_session.encapsulation_gre_metadata_tx is arista.avd.defined(true) %} -monitor session {{ monitor_session.name }} encapsulation gre metadata tx +{% endfor %} +{% if monitor_session.truncate.enabled is arista.avd.defined(true) %} +{% set truncate_cli = "monitor session " ~ monitor_session.name ~ " truncate" %} +{% if monitor_session.truncate.size is arista.avd.defined %} +{% set truncate_cli = truncate_cli ~ " size " ~ monitor_session.truncate.size %} {% endif %} -{% if monitor_session.header_remove_size is arista.avd.defined %} -monitor session {{ monitor_session.name }} header remove size {{ monitor_session.header_remove_size }} -{% endif %} -{% if monitor_session.access_group.type is arista.avd.defined and monitor_session.access_group.name is arista.avd.defined %} -monitor session {{ monitor_session.name }} {{ monitor_session.access_group.type }} access-group {{ monitor_session.access_group.name }} -{% endif %} -{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} +{{ truncate_cli }} +{% endif %} +{% if monitor_session.sample is arista.avd.defined %} +monitor session {{ monitor_session.name }} sample {{ monitor_session.sample }} +{% endif %} +{% if monitor_session.rate_limit_per_ingress_chip is arista.avd.defined %} monitor session {{ monitor_session.name }} rate-limit per-ingress-chip {{ monitor_session.rate_limit_per_ingress_chip }} -{% endif %} -{% if monitor_session.rate_limit_per_egress_chip is arista.avd.defined %} +{% endif %} +{% if monitor_session.rate_limit_per_egress_chip is arista.avd.defined %} monitor session {{ monitor_session.name }} rate-limit per-egress-chip {{ monitor_session.rate_limit_per_egress_chip }} -{% endif %} -{% if monitor_session.sample is arista.avd.defined %} -monitor session {{ monitor_session.name }} sample {{ monitor_session.sample }} -{% endif %} -{% if monitor_session.truncate.enabled is arista.avd.defined(true) %} -{% set truncate_cli = "monitor session " ~ monitor_session.name ~ " truncate" %} -{% if monitor_session.truncate.size is arista.avd.defined %} -{% set truncate_cli = truncate_cli ~ " size " ~ monitor_session.truncate.size %} -{% endif %} -{{ truncate_cli }} -{% endif %} +{% endif %} +{% if monitor_session.header_remove_size is arista.avd.defined %} +monitor session {{ monitor_session.name }} header remove size {{ monitor_session.header_remove_size }} +{% endif %} +{% if monitor_session.encapsulation_gre_metadata_tx is arista.avd.defined(true) %} +monitor session {{ monitor_session.name }} encapsulation gre metadata tx {% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mpls.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mpls.j2 index 6fce879299b..659a1b1c88e 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mpls.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/mpls.j2 @@ -11,20 +11,20 @@ mpls ip {% if mpls.ldp is arista.avd.defined %} ! mpls ldp -{% if mpls.ldp.interface_disabled_default is arista.avd.defined(true) %} - interface disabled default -{% endif %} {% if mpls.ldp.router_id is arista.avd.defined %} router-id {{ mpls.ldp.router_id }} {% endif %} +{% if mpls.ldp.transport_address_interface is arista.avd.defined %} + transport-address interface {{ mpls.ldp.transport_address_interface }} +{% endif %} +{% if mpls.ldp.interface_disabled_default is arista.avd.defined(true) %} + interface disabled default +{% endif %} {% if mpls.ldp.shutdown is arista.avd.defined(true) %} shutdown {% elif mpls.ldp.shutdown is arista.avd.defined(false) %} no shutdown {% endif %} -{% if mpls.ldp.transport_address_interface is arista.avd.defined %} - transport-address interface {{ mpls.ldp.transport_address_interface }} -{% endif %} {% endif %} {% if mpls.icmp.fragmentation_needed_tunneling is arista.avd.defined(true) or mpls.icmp.ttl_exceeded_tunneling is arista.avd.defined(true) %} ! diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/patch-panel.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/patch-panel.j2 index 846e2f19671..86116f3eac4 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/patch-panel.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/patch-panel.j2 @@ -16,7 +16,7 @@ patch panel {% endif %} ! {% endif %} -{% for patch in patch_panel.patches | arista.avd.default([]) %} +{% for patch in patch_panel.patches | arista.avd.natural_sort("name") %} {% if patch.name is arista.avd.defined %} patch {{ patch.name }} {% if patch.enabled is arista.avd.defined(false) %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/port-channel-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/port-channel-interfaces.j2 index 56a70745972..a3da7a105c6 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/port-channel-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/port-channel-interfaces.j2 @@ -50,7 +50,7 @@ interface {{ port_channel_interface.name }} {% elif port_channel_interface.encapsulation_vlan.client.dot1q.inner is arista.avd.defined and port_channel_interface.encapsulation_vlan.client.dot1q.outer is arista.avd.defined %} {% set encapsulation_cli = "client dot1q outer " ~ port_channel_interface.encapsulation_vlan.client.dot1q.outer ~ " inner " ~ port_channel_interface.encapsulation_vlan.client.dot1q.inner %} {% if port_channel_interface.encapsulation_vlan.network.dot1q.inner is arista.avd.defined and port_channel_interface.encapsulation_vlan.network.dot1q.outer is arista.avd.defined %} -{% set encapsulation_cli = encapsulation_cli ~ " network dot1q outer " ~ port_channel_interface.encapsulation_vlan.network.dot1q.inner ~ " inner " ~ port_channel_interface.encapsulation_vlan.network.dot1q.outer %} +{% set encapsulation_cli = encapsulation_cli ~ " network dot1q outer " ~ port_channel_interface.encapsulation_vlan.network.dot1q.outer ~ " inner " ~ port_channel_interface.encapsulation_vlan.network.dot1q.inner %} {% elif port_channel_interface.encapsulation_vlan.network.dot1q.client is arista.avd.defined(true) %} {% set encapsulation_cli = encapsulation_cli ~ " network client" %} {% endif %} @@ -108,110 +108,149 @@ interface {{ port_channel_interface.name }} {{ vlan_translation_cli }} {% endif %} {% endfor %} -{% if port_channel_interface.switchport.tap.native_vlan is arista.avd.defined %} - switchport tap native vlan {{ port_channel_interface.switchport.tap.native_vlan }} -{% endif %} -{% if port_channel_interface.switchport.tap.identity.port_id is arista.avd.defined %} -{% set tap_identity_cli = "switchport tap identity " ~ port_channel_interface.switchport.tap.identity.port_id %} -{% if port_channel_interface.switchport.tap.identity.inner_port_id is arista.avd.defined %} -{% set tap_identity_cli = tap_identity_cli ~ " inner " ~ port_channel_interface.switchport.tap.identity.inner_port_id %} -{% endif %} - {{ tap_identity_cli }} +{% if port_channel_interface.vlan_id is arista.avd.defined and port_channel_interface.type | arista.avd.default != 'l2dot1q' %} + vlan id {{ port_channel_interface.vlan_id }} {% endif %} -{% if port_channel_interface.switchport.tap.mac_address.dest is arista.avd.defined %} -{% set tap_mac_address_cli = "switchport tap mac-address dest " ~ port_channel_interface.switchport.tap.mac_address.dest %} -{% if port_channel_interface.switchport.tap.mac_address.src is arista.avd.defined %} -{% set tap_mac_address_cli = tap_mac_address_cli ~ " src " ~ port_channel_interface.switchport.tap.mac_address.src %} +{% if port_channel_interface.encapsulation_dot1q.vlan is arista.avd.defined %} +{% set encapsulation_dot1q_cli = 'encapsulation dot1q vlan ' ~ port_channel_interface.encapsulation_dot1q.vlan %} +{% if port_channel_interface.encapsulation_dot1q.inner_vlan is arista.avd.defined %} +{% set encapsulation_dot1q_cli = encapsulation_dot1q_cli ~ ' inner ' ~ port_channel_interface.encapsulation_dot1q.inner_vlan %} {% endif %} - {{ tap_mac_address_cli }} -{% endif %} -{# The position of "mpls_pop_all" does not match the EOS CLI to implement this "elif" with "vxlan_strip" #} -{% if port_channel_interface.switchport.tap.mpls_pop_all is arista.avd.defined(true) %} - switchport tap mpls pop all -{% elif port_channel_interface.switchport.tap.encapsulation.vxlan_strip is arista.avd.defined(true) %} - switchport tap encapsulation vxlan strip -{% endif %} -{% if port_channel_interface.switchport.tap.encapsulation.gre is arista.avd.defined %} -{% for gre_strip_config in port_channel_interface.switchport.tap.encapsulation.gre %} -{% if gre_strip_config.strip is arista.avd.defined(true) %} -{% set tap_encapsulation_cli = "switchport tap encapsulation gre" %} -{% if gre_strip_config.destination is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " destination " ~ gre_strip_config.destination %} -{% if gre_strip_config.source is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " source " ~ gre_strip_config.source %} -{% endif %} + {{ encapsulation_dot1q_cli }} +{% elif port_channel_interface.encapsulation_vlan.client.encapsulation is arista.avd.defined %} +{% set client_encapsulation = port_channel_interface.encapsulation_vlan.client.encapsulation %} +{% set network_flag = False %} +{% if client_encapsulation in ['dot1q', 'dot1ad'] %} +{% if port_channel_interface.encapsulation_vlan.client.vlan is arista.avd.defined %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' ' ~ port_channel_interface.encapsulation_vlan.client.vlan %} +{% elif port_channel_interface.encapsulation_vlan.client.outer_vlan is arista.avd.defined and port_channel_interface.encapsulation_vlan.client.inner_vlan is arista.avd.defined %} +{% if port_channel_interface.encapsulation_vlan.client.inner_encapsulation is arista.avd.defined %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' outer ' ~ port_channel_interface.encapsulation_vlan.client.outer_vlan ~ ' inner ' ~ port_channel_interface.encapsulation_vlan.client.inner_encapsulation ~ ' ' ~ port_channel_interface.encapsulation_vlan.client.inner_vlan %} +{% else %} +{% set encapsulation_cli = 'client ' ~ client_encapsulation ~ ' outer ' ~ port_channel_interface.encapsulation_vlan.client.outer_vlan ~ ' inner ' ~ port_channel_interface.encapsulation_vlan.client.inner_vlan %} {% endif %} -{% if gre_strip_config.protocol is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " protocol " ~ gre_strip_config.protocol %} -{% if gre_strip_config.feature_header_length is arista.avd.defined %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " feature header length " ~ gre_strip_config.feature_header_length %} -{% endif %} +{% if port_channel_interface.encapsulation_vlan.network.encapsulation | arista.avd.default == 'client inner' %} +{% set network_flag = True %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ port_channel_interface.encapsulation_vlan.network.encapsulation %} {% endif %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " strip" %} -{% if gre_strip_config.protocol is arista.avd.defined and - gre_strip_config.feature_header_length is arista.avd.defined and - gre_strip_config.re_encapsulation_ethernet_header is arista.avd.defined(true) %} -{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " re-encapsulation ethernet" %} +{% endif %} +{% elif client_encapsulation in ['untagged', 'unmatched'] %} +{% set encapsulation_cli = 'client ' ~ port_channel_interface.encapsulation_vlan.client.encapsulation %} +{% endif %} +{% if encapsulation_cli is arista.avd.defined %} +{% if client_encapsulation in ['dot1q', 'dot1ad', 'untagged'] and port_channel_interface.encapsulation_vlan.network.encapsulation is arista.avd.defined and not network_flag %} +{% set network_encapsulation = port_channel_interface.encapsulation_vlan.network.encapsulation %} +{% if network_encapsulation in ['dot1q', 'dot1ad'] %} +{% if port_channel_interface.encapsulation_vlan.network.vlan is arista.avd.defined %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' ' ~ port_channel_interface.encapsulation_vlan.network.vlan %} +{% elif port_channel_interface.encapsulation_vlan.network.outer_vlan is arista.avd.defined and port_channel_interface.encapsulation_vlan.network.inner_vlan is arista.avd.defined %} +{% if port_channel_interface.encapsulation_vlan.network.inner_encapsulation is arista.avd.defined %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' outer ' ~ port_channel_interface.encapsulation_vlan.network.outer_vlan ~ ' inner ' ~ port_channel_interface.encapsulation_vlan.network.inner_encapsulation ~ ' ' ~ port_channel_interface.encapsulation_vlan.network.inner_vlan %} +{% else %} +{% set encapsulation_cli = encapsulation_cli ~ ' network ' ~ network_encapsulation ~ ' outer ' ~ port_channel_interface.encapsulation_vlan.network.outer_vlan ~ ' inner ' ~ port_channel_interface.encapsulation_vlan.network.inner_vlan %} +{% endif %} +{% endif %} +{% elif network_encapsulation == 'untagged' and client_encapsulation == 'untagged' %} +{% set encapsulation_cli = encapsulation_cli ~ ' network untagged' %} +{% elif network_encapsulation == 'client' and client_encapsulation != "untagged" %} +{% set encapsulation_cli = encapsulation_cli ~ " network client" %} {% endif %} - {{ tap_encapsulation_cli }} {% endif %} -{% endfor %} + encapsulation vlan + {{ encapsulation_cli }} +{% endif %} {% endif %} -{% if port_channel_interface.switchport.tool.mpls_pop_all is arista.avd.defined(true) %} - switchport tool mpls pop all +{% if port_channel_interface.switchport.access_vlan is arista.avd.defined %} + switchport access vlan {{ port_channel_interface.switchport.access_vlan }} {% endif %} -{% if port_channel_interface.switchport.tool.encapsulation.vn_tag_strip is arista.avd.defined(true) %} - switchport tool encapsulation vn-tag strip +{% if port_channel_interface.switchport.trunk.native_vlan_tag is arista.avd.defined(true) %} + switchport trunk native vlan tag +{% elif port_channel_interface.switchport.trunk.native_vlan is arista.avd.defined %} + switchport trunk native vlan {{ port_channel_interface.switchport.trunk.native_vlan }} {% endif %} -{% if port_channel_interface.switchport.tool.encapsulation.dot1br_strip is arista.avd.defined(true) %} - switchport tool encapsulation dot1br strip +{% if port_channel_interface.switchport.phone.vlan is arista.avd.defined %} + switchport phone vlan {{ port_channel_interface.switchport.phone.vlan }} {% endif %} -{% if port_channel_interface.switchport.tap.allowed_vlan is arista.avd.defined %} - switchport tap allowed vlan {{ port_channel_interface.switchport.tap.allowed_vlan }} +{% if port_channel_interface.switchport.phone.trunk is arista.avd.defined %} + switchport phone trunk {{ port_channel_interface.switchport.phone.trunk }} {% endif %} -{% if port_channel_interface.switchport.tool.allowed_vlan is arista.avd.defined %} - switchport tool allowed vlan {{ port_channel_interface.switchport.tool.allowed_vlan }} +{% if port_channel_interface.switchport.vlan_translations.in_required is arista.avd.defined(true) %} + switchport vlan translation in required {% endif %} -{% if port_channel_interface.switchport.tool.identity.tag is arista.avd.defined %} - switchport tool identity {{ port_channel_interface.switchport.tool.identity.tag }} +{% if port_channel_interface.switchport.vlan_translations.out_required is arista.avd.defined(true) %} + switchport vlan translation out required {% endif %} -{% if port_channel_interface.switchport.tool.identity.dot1q_dzgre_source is arista.avd.defined %} - switchport tool identity dot1q source dzgre {{ port_channel_interface.switchport.tool.identity.dot1q_dzgre_source }} -{% elif port_channel_interface.switchport.tool.identity.qinq_dzgre_source is arista.avd.defined %} - switchport tool identity qinq source dzgre {{ port_channel_interface.switchport.tool.identity.qinq_dzgre_source }} +{% if port_channel_interface.switchport.dot1q.vlan_tag is arista.avd.defined %} + switchport dot1q vlan tag {{ port_channel_interface.switchport.dot1q.vlan_tag }} {% endif %} -{% if port_channel_interface.switchport.tap.truncation.enabled is arista.avd.defined(true) %} -{% set tap_truncation_cli = "switchport tap truncation" %} -{% if port_channel_interface.switchport.tap.truncation.size is arista.avd.defined %} -{% set tap_truncation_cli = tap_truncation_cli ~ " " ~ port_channel_interface.switchport.tap.truncation.size %} -{% endif %} - {{ tap_truncation_cli }} +{% if port_channel_interface.switchport.trunk.allowed_vlan is arista.avd.defined %} + switchport trunk allowed vlan {{ port_channel_interface.switchport.trunk.allowed_vlan }} {% endif %} -{% if port_channel_interface.switchport.tool.truncation.enabled is arista.avd.defined(true) %} -{% set tool_truncation_cli = "switchport tool truncation" %} -{% if port_channel_interface.switchport.tool.truncation.size is arista.avd.defined %} -{% set tool_truncation_cli = tool_truncation_cli ~ " " ~ port_channel_interface.switchport.tool.truncation.size %} -{% endif %} - {{ tool_truncation_cli }} +{% if port_channel_interface.switchport.mode is arista.avd.defined %} + switchport mode {{ port_channel_interface.switchport.mode }} {% endif %} -{% if port_channel_interface.switchport.tap.default.groups is arista.avd.defined %} - switchport tap default group {{ port_channel_interface.switchport.tap.default.groups | arista.avd.natural_sort | join(" group ") }} +{% if port_channel_interface.switchport.dot1q.ethertype is arista.avd.defined %} + switchport dot1q ethertype {{ port_channel_interface.switchport.dot1q.ethertype }} {% endif %} -{% if port_channel_interface.switchport.tap.default.nexthop_groups is arista.avd.defined %} - switchport tap default nexthop-group {{ port_channel_interface.switchport.tap.default.nexthop_groups | arista.avd.natural_sort | join(" ") }} +{% if port_channel_interface.switchport.vlan_forwarding_accept_all is arista.avd.defined(true) %} + switchport vlan forwarding accept all {% endif %} -{% for interface in port_channel_interface.switchport.tap.default.interfaces | arista.avd.natural_sort %} - switchport tap default interface {{ interface }} +{% for trunk_group in port_channel_interface.switchport.trunk.groups | arista.avd.natural_sort %} + switchport trunk group {{ trunk_group }} {% endfor %} -{% if port_channel_interface.switchport.tool.groups is arista.avd.defined %} -{% set tool_groups = port_channel_interface.switchport.tool.groups | arista.avd.natural_sort | join(" ") %} - switchport tool group set {{ tool_groups }} +{% if port_channel_interface.switchport.enabled is arista.avd.defined(true) %} + switchport +{% elif port_channel_interface.switchport.enabled is arista.avd.defined(false) %} + no switchport {% endif %} -{% if port_channel_interface.switchport.tool.dot1q_remove_outer_vlan_tag is arista.avd.defined %} - switchport tool dot1q remove outer {{ port_channel_interface.switchport.tool.dot1q_remove_outer_vlan_tag }} +{% if port_channel_interface.switchport.source_interface is arista.avd.defined %} + switchport source-interface {{ port_channel_interface.switchport.source_interface }} +{% endif %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_both | arista.avd.natural_sort('from') %} +{% set vlan_translation_both_cli = 'switchport vlan translation ' ~ vlan_translation.from %} +{% if vlan_translation.dot1q_tunnel is arista.avd.defined(true) %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' dot1q-tunnel' %} +{% elif vlan_translation.inner_vlan_from is arista.avd.defined %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' inner ' ~ vlan_translation.inner_vlan_from %} +{% if vlan_translation.network is arista.avd.defined(true) %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' network' %} +{% endif %} +{% endif %} +{% set vlan_translation_both_cli = vlan_translation_both_cli ~ ' ' ~ vlan_translation.to %} + {{ vlan_translation_both_cli }} +{% endfor %} +{% if port_channel_interface.switchport.vlan_translations.direction_in is arista.avd.defined %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_in %} +{% set vlan_translation_in_cli = 'switchport vlan translation in ' ~ vlan_translation.from %} +{% if vlan_translation.dot1q_tunnel is arista.avd.defined(true) %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ ' dot1q-tunnel' %} +{% elif vlan_translation.inner_vlan_from is arista.avd.defined %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ ' inner ' ~ vlan_translation.inner_vlan_from %} +{% endif %} +{% set vlan_translation_in_cli = vlan_translation_in_cli ~ " " ~ vlan_translation.to %} + {{ vlan_translation_in_cli }} +{% endfor %} {% endif %} -{% if port_channel_interface.switchport.tool.dzgre_preserve is arista.avd.defined(true) %} - switchport tool dzgre preserve +{% if port_channel_interface.switchport.vlan_translations.direction_out is arista.avd.defined %} +{% for vlan_translation in port_channel_interface.switchport.vlan_translations.direction_out %} +{% if vlan_translation.dot1q_tunnel_to is arista.avd.defined %} +{% set vlan_translation_out_cli = 'switchport vlan translation out ' ~ vlan_translation.from ~ ' dot1q-tunnel ' ~ vlan_translation.dot1q_tunnel_to %} +{% elif vlan_translation.to is arista.avd.defined %} +{% set vlan_translation_out_cli = 'switchport vlan translation out ' ~ vlan_translation.from ~ ' ' ~ vlan_translation.to %} +{% if vlan_translation.inner_vlan_to is arista.avd.defined %} +{% set vlan_translation_out_cli = vlan_translation_out_cli ~ ' inner ' ~ vlan_translation.inner_vlan_to %} +{% endif %} +{% endif %} +{% if vlan_translation_out_cli is arista.avd.defined %} + {{ vlan_translation_out_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if port_channel_interface.switchport.trunk.private_vlan_secondary is arista.avd.defined(true) %} + switchport trunk private-vlan secondary +{% endif %} +{% if port_channel_interface.switchport.pvlan_mapping is arista.avd.defined %} + switchport pvlan mapping {{ port_channel_interface.switchport.pvlan_mapping }} {% endif %} {% if port_channel_interface.l2_protocol.encapsulation_dot1q_vlan is arista.avd.defined %} l2-protocol encapsulation dot1q vlan {{ port_channel_interface.l2_protocol.encapsulation_dot1q_vlan }} @@ -322,6 +361,38 @@ interface {{ port_channel_interface.name }} {% if port_channel_interface.mlag is arista.avd.defined %} mlag {{ port_channel_interface.mlag }} {% endif %} +{% if port_channel_interface.switchport.port_security is arista.avd.defined %} +{% if port_channel_interface.switchport.port_security.enabled is arista.avd.defined(true) or port_channel_interface.switchport.port_security.violation.mode is arista.avd.defined('shutdown') %} + switchport port-security +{% elif port_channel_interface.switchport.port_security.violation.mode is arista.avd.defined('protect') %} +{% if port_channel_interface.switchport.port_security.violation.protect_log is arista.avd.defined(true) %} + switchport port-security violation protect log +{% else %} + switchport port-security violation protect +{% endif %} +{% endif %} +{% if port_channel_interface.switchport.port_security.mac_address_maximum.disabled is arista.avd.defined(true) %} + switchport port-security mac-address maximum disabled +{% elif port_channel_interface.switchport.port_security.mac_address_maximum.disabled is arista.avd.defined(false) %} + no switchport port-security mac-address maximum disabled +{% elif port_channel_interface.switchport.port_security.mac_address_maximum.limit is arista.avd.defined %} + switchport port-security mac-address maximum {{ port_channel_interface.switchport.port_security.mac_address_maximum.limit }} +{% endif %} +{% if port_channel_interface.switchport.port_security.violation.mode is not arista.avd.defined('protect') %} +{% if port_channel_interface.switchport.port_security.vlans is arista.avd.defined %} +{% for vlan in port_channel_interface.switchport.port_security.vlans %} +{% if vlan.range is arista.avd.defined and vlan.mac_address_maximum is arista.avd.defined %} +{% for id in vlan.range | arista.avd.range_expand %} + switchport port-security vlan {{ id }} mac-address maximum {{ vlan.mac_address_maximum }} +{% endfor %} +{% endif %} +{% endfor %} +{% endif %} +{% if port_channel_interface.switchport.port_security.vlan_default_mac_address_maximum is arista.avd.defined %} + switchport port-security vlan default mac-address maximum {{ port_channel_interface.switchport.port_security.vlan_default_mac_address_maximum }} +{% endif %} +{% endif %} +{% endif %} {% if port_channel_interface.qos.trust is arista.avd.defined %} {% if port_channel_interface.qos.trust == 'disabled' %} no qos trust @@ -463,6 +534,28 @@ interface {{ port_channel_interface.name }} {% if port_channel_interface.pim.ipv4.bfd is arista.avd.defined(true) %} pim ipv4 bfd {% endif %} +{% if port_channel_interface.switchport.backup_link.interface is arista.avd.defined %} +{% set backup_link_cli = "switchport backup-link " ~ port_channel_interface.switchport.backup_link.interface %} +{% if port_channel_interface.switchport.backup_link.prefer_vlan is arista.avd.defined %} +{% set backup_link_cli = backup_link_cli ~ " prefer vlan " ~ port_channel_interface.switchport.backup_link.prefer_vlan %} +{% endif %} + {{ backup_link_cli }} +{% if port_channel_interface.switchport.backup.preemption_delay is arista.avd.defined %} + switchport backup preemption-delay {{ port_channel_interface.switchport.backup.preemption_delay }} +{% endif %} +{% if port_channel_interface.switchport.backup.mac_move_burst is arista.avd.defined %} + switchport backup mac-move-burst {{ port_channel_interface.switchport.backup.mac_move_burst }} +{% endif %} +{% if port_channel_interface.switchport.backup.mac_move_burst_interval is arista.avd.defined %} + switchport backup mac-move-burst-interval {{ port_channel_interface.switchport.backup.mac_move_burst_interval }} +{% endif %} +{% if port_channel_interface.switchport.backup.initial_mac_move_delay is arista.avd.defined %} + switchport backup initial-mac-move-delay {{ port_channel_interface.switchport.backup.initial_mac_move_delay }} +{% endif %} +{% if port_channel_interface.switchport.backup.dest_macaddr is arista.avd.defined %} + switchport backup dest-macaddr {{ port_channel_interface.switchport.backup.dest_macaddr }} +{% endif %} +{% endif %} {% if port_channel_interface.vmtracer is arista.avd.defined(true) %} vmtracer vmware-esx {% endif %} @@ -610,6 +703,111 @@ interface {{ port_channel_interface.name }} no sflow egress unmodified enable {% endif %} {% endif %} +{% if port_channel_interface.switchport.tap.native_vlan is arista.avd.defined %} + switchport tap native vlan {{ port_channel_interface.switchport.tap.native_vlan }} +{% endif %} +{% if port_channel_interface.switchport.tap.identity.port_id is arista.avd.defined %} +{% set tap_identity_cli = "switchport tap identity " ~ port_channel_interface.switchport.tap.identity.port_id %} +{% if port_channel_interface.switchport.tap.identity.inner_port_id is arista.avd.defined %} +{% set tap_identity_cli = tap_identity_cli ~ " inner " ~ port_channel_interface.switchport.tap.identity.inner_port_id %} +{% endif %} + {{ tap_identity_cli }} +{% endif %} +{% if port_channel_interface.switchport.tap.mac_address.dest is arista.avd.defined %} +{% set tap_mac_address_cli = "switchport tap mac-address dest " ~ port_channel_interface.switchport.tap.mac_address.dest %} +{% if port_channel_interface.switchport.tap.mac_address.src is arista.avd.defined %} +{% set tap_mac_address_cli = tap_mac_address_cli ~ " src " ~ port_channel_interface.switchport.tap.mac_address.src %} +{% endif %} + {{ tap_mac_address_cli }} +{% endif %} +{# The position of "mpls_pop_all" does not match the EOS CLI to implement this "elif" with "vxlan_strip" #} +{% if port_channel_interface.switchport.tap.mpls_pop_all is arista.avd.defined(true) %} + switchport tap mpls pop all +{% elif port_channel_interface.switchport.tap.encapsulation.vxlan_strip is arista.avd.defined(true) %} + switchport tap encapsulation vxlan strip +{% endif %} +{% if port_channel_interface.switchport.tap.encapsulation.gre is arista.avd.defined %} +{% for gre_strip_config in port_channel_interface.switchport.tap.encapsulation.gre %} +{% if gre_strip_config.strip is arista.avd.defined(true) %} +{% set tap_encapsulation_cli = "switchport tap encapsulation gre" %} +{% if gre_strip_config.destination is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " destination " ~ gre_strip_config.destination %} +{% if gre_strip_config.source is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " source " ~ gre_strip_config.source %} +{% endif %} +{% endif %} +{% if gre_strip_config.protocol is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " protocol " ~ gre_strip_config.protocol %} +{% if gre_strip_config.feature_header_length is arista.avd.defined %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " feature header length " ~ gre_strip_config.feature_header_length %} +{% endif %} +{% endif %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " strip" %} +{% if gre_strip_config.protocol is arista.avd.defined and + gre_strip_config.feature_header_length is arista.avd.defined and + gre_strip_config.re_encapsulation_ethernet_header is arista.avd.defined(true) %} +{% set tap_encapsulation_cli = tap_encapsulation_cli ~ " re-encapsulation ethernet" %} +{% endif %} + {{ tap_encapsulation_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if port_channel_interface.switchport.tool.mpls_pop_all is arista.avd.defined(true) %} + switchport tool mpls pop all +{% endif %} +{% if port_channel_interface.switchport.tool.encapsulation.vn_tag_strip is arista.avd.defined(true) %} + switchport tool encapsulation vn-tag strip +{% endif %} +{% if port_channel_interface.switchport.tool.encapsulation.dot1br_strip is arista.avd.defined(true) %} + switchport tool encapsulation dot1br strip +{% endif %} +{% if port_channel_interface.switchport.tap.allowed_vlan is arista.avd.defined %} + switchport tap allowed vlan {{ port_channel_interface.switchport.tap.allowed_vlan }} +{% endif %} +{% if port_channel_interface.switchport.tool.allowed_vlan is arista.avd.defined %} + switchport tool allowed vlan {{ port_channel_interface.switchport.tool.allowed_vlan }} +{% endif %} +{% if port_channel_interface.switchport.tool.identity.tag is arista.avd.defined %} + switchport tool identity {{ port_channel_interface.switchport.tool.identity.tag }} +{% endif %} +{% if port_channel_interface.switchport.tool.identity.dot1q_dzgre_source is arista.avd.defined %} + switchport tool identity dot1q source dzgre {{ port_channel_interface.switchport.tool.identity.dot1q_dzgre_source }} +{% elif port_channel_interface.switchport.tool.identity.qinq_dzgre_source is arista.avd.defined %} + switchport tool identity qinq source dzgre {{ port_channel_interface.switchport.tool.identity.qinq_dzgre_source }} +{% endif %} +{% if port_channel_interface.switchport.tap.truncation.enabled is arista.avd.defined(true) %} +{% set tap_truncation_cli = "switchport tap truncation" %} +{% if port_channel_interface.switchport.tap.truncation.size is arista.avd.defined %} +{% set tap_truncation_cli = tap_truncation_cli ~ " " ~ port_channel_interface.switchport.tap.truncation.size %} +{% endif %} + {{ tap_truncation_cli }} +{% endif %} +{% if port_channel_interface.switchport.tool.truncation.enabled is arista.avd.defined(true) %} +{% set tool_truncation_cli = "switchport tool truncation" %} +{% if port_channel_interface.switchport.tool.truncation.size is arista.avd.defined %} +{% set tool_truncation_cli = tool_truncation_cli ~ " " ~ port_channel_interface.switchport.tool.truncation.size %} +{% endif %} + {{ tool_truncation_cli }} +{% endif %} +{% if port_channel_interface.switchport.tap.default.groups is arista.avd.defined %} + switchport tap default group {{ port_channel_interface.switchport.tap.default.groups | arista.avd.natural_sort | join(" group ") }} +{% endif %} +{% if port_channel_interface.switchport.tap.default.nexthop_groups is arista.avd.defined %} + switchport tap default nexthop-group {{ port_channel_interface.switchport.tap.default.nexthop_groups | arista.avd.natural_sort | join(" ") }} +{% endif %} +{% for interface in port_channel_interface.switchport.tap.default.interfaces | arista.avd.natural_sort %} + switchport tap default interface {{ interface }} +{% endfor %} +{% if port_channel_interface.switchport.tool.groups is arista.avd.defined %} +{% set tool_groups = port_channel_interface.switchport.tool.groups | arista.avd.natural_sort | join(" ") %} + switchport tool group set {{ tool_groups }} +{% endif %} +{% if port_channel_interface.switchport.tool.dot1q_remove_outer_vlan_tag is arista.avd.defined %} + switchport tool dot1q remove outer {{ port_channel_interface.switchport.tool.dot1q_remove_outer_vlan_tag }} +{% endif %} +{% if port_channel_interface.switchport.tool.dzgre_preserve is arista.avd.defined(true) %} + switchport tool dzgre preserve +{% endif %} {% if port_channel_interface.eos_cli is arista.avd.defined %} {{ port_channel_interface.eos_cli | indent(3, false) }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/priority-flow-control.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/priority-flow-control.j2 index d341846fa89..88df76b71a5 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/priority-flow-control.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/priority-flow-control.j2 @@ -9,17 +9,17 @@ {% if priority_flow_control.all_off is arista.avd.defined(true) %} priority-flow-control all off {% endif %} -{% if priority_flow_control.watchdog.action is arista.avd.defined %} -priority-flow-control pause watchdog action {{ priority_flow_control.watchdog.action }} -{% endif %} {% if priority_flow_control.watchdog.timeout is arista.avd.defined %} priority-flow-control pause watchdog default timeout {{ priority_flow_control.watchdog.timeout }} {% endif %} +{% if priority_flow_control.watchdog.recovery_time is arista.avd.defined %} +priority-flow-control pause watchdog default recovery-time {{ priority_flow_control.watchdog.recovery_time }} +{% endif %} {% if priority_flow_control.watchdog.polling_interval is arista.avd.defined %} priority-flow-control pause watchdog default polling-interval {{ priority_flow_control.watchdog.polling_interval }} {% endif %} -{% if priority_flow_control.watchdog.recovery_time is arista.avd.defined %} -priority-flow-control pause watchdog default recovery-time {{ priority_flow_control.watchdog.recovery_time }} +{% if priority_flow_control.watchdog.action is arista.avd.defined %} +priority-flow-control pause watchdog action {{ priority_flow_control.watchdog.action }} {% endif %} {% if priority_flow_control.watchdog.override_action_drop is arista.avd.defined(true) %} priority-flow-control pause watchdog override action drop diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ptp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ptp.j2 index 6de323d2996..b10f8e2410a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ptp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/ptp.j2 @@ -9,30 +9,15 @@ {% if ptp.clock_identity is arista.avd.defined %} ptp clock-identity {{ ptp.clock_identity }} {% endif %} -{% if ptp.source.ip is arista.avd.defined %} -ptp source ip {{ ptp.source.ip }} -{% endif %} -{% if ptp.priority1 is arista.avd.defined %} -ptp priority1 {{ ptp.priority1 }} -{% endif %} -{% if ptp.priority2 is arista.avd.defined %} -ptp priority2 {{ ptp.priority2 }} -{% endif %} -{% if ptp.profile is arista.avd.defined %} -ptp profile {{ ptp.profile }} -{% endif %} -{% if ptp.ttl is arista.avd.defined %} -ptp ttl {{ ptp.ttl }} -{% endif %} {% if ptp.domain is arista.avd.defined %} ptp domain {{ ptp.domain }} {% endif %} -{% if ptp.message_type.general.dscp is arista.avd.defined %} -ptp message-type general dscp {{ ptp.message_type.general.dscp }} default -{% endif %} {% if ptp.message_type.event.dscp is arista.avd.defined %} ptp message-type event dscp {{ ptp.message_type.event.dscp }} default {% endif %} +{% if ptp.message_type.general.dscp is arista.avd.defined %} +ptp message-type general dscp {{ ptp.message_type.general.dscp }} default +{% endif %} {% if ptp.mode is arista.avd.defined %} {% if ptp.mode_one_step is arista.avd.defined(true) and ptp.mode in ["boundary", "e2etransparent"] %} ptp mode {{ ptp.mode }} one-step @@ -40,6 +25,21 @@ ptp mode {{ ptp.mode }} one-step ptp mode {{ ptp.mode }} {% endif %} {% endif %} +{% if ptp.priority1 is arista.avd.defined %} +ptp priority1 {{ ptp.priority1 }} +{% endif %} +{% if ptp.priority2 is arista.avd.defined %} +ptp priority2 {{ ptp.priority2 }} +{% endif %} +{% if ptp.profile is arista.avd.defined %} +ptp profile {{ ptp.profile }} +{% endif %} +{% if ptp.source.ip is arista.avd.defined %} +ptp source ip {{ ptp.source.ip }} +{% endif %} +{% if ptp.ttl is arista.avd.defined %} +ptp ttl {{ ptp.ttl }} +{% endif %} {% if ptp.forward_unicast is arista.avd.defined(true) %} ptp forward-unicast {% endif %} @@ -52,38 +52,38 @@ ptp monitor threshold offset-from-master {{ ptp.monitor.threshold.offset_from_ma {% if ptp.monitor.threshold.mean_path_delay is arista.avd.defined %} ptp monitor threshold mean-path-delay {{ ptp.monitor.threshold.mean_path_delay }} {% endif %} -{% if ptp.monitor.threshold.drop.offset_from_master is arista.avd.defined %} -ptp monitor threshold offset-from-master {{ ptp.monitor.threshold.drop.offset_from_master }} nanoseconds drop -{% endif %} {% if ptp.monitor.threshold.drop.mean_path_delay is arista.avd.defined %} ptp monitor threshold mean-path-delay {{ ptp.monitor.threshold.drop.mean_path_delay }} nanoseconds drop {% endif %} +{% if ptp.monitor.threshold.drop.offset_from_master is arista.avd.defined %} +ptp monitor threshold offset-from-master {{ ptp.monitor.threshold.drop.offset_from_master }} nanoseconds drop +{% endif %} {% if ptp.monitor.missing_message.intervals is arista.avd.defined %} -{% if ptp.monitor.missing_message.intervals.announce is arista.avd.defined %} -ptp monitor threshold missing-message announce {{ ptp.monitor.missing_message.intervals.announce }} intervals +{% if ptp.monitor.missing_message.intervals.sync is arista.avd.defined %} +ptp monitor threshold missing-message sync {{ ptp.monitor.missing_message.intervals.sync }} intervals {% endif %} {% if ptp.monitor.missing_message.intervals.follow_up is arista.avd.defined %} ptp monitor threshold missing-message follow-up {{ ptp.monitor.missing_message.intervals.follow_up }} intervals {% endif %} -{% if ptp.monitor.missing_message.intervals.sync is arista.avd.defined %} -ptp monitor threshold missing-message sync {{ ptp.monitor.missing_message.intervals.sync }} intervals +{% if ptp.monitor.missing_message.intervals.announce is arista.avd.defined %} +ptp monitor threshold missing-message announce {{ ptp.monitor.missing_message.intervals.announce }} intervals {% endif %} {% endif %} {% if ptp.monitor.missing_message.sequence_ids.enabled is arista.avd.defined(false) %} no ptp monitor sequence-id {% elif ptp.monitor.missing_message.sequence_ids.enabled is arista.avd.defined(true) %} ptp monitor sequence-id -{% if ptp.monitor.missing_message.sequence_ids.announce is arista.avd.defined %} -ptp monitor threshold missing-message announce {{ ptp.monitor.missing_message.sequence_ids.announce }} sequence-ids -{% endif %} -{% if ptp.monitor.missing_message.sequence_ids.delay_resp is arista.avd.defined %} -ptp monitor threshold missing-message delay-resp {{ ptp.monitor.missing_message.sequence_ids.delay_resp }} sequence-ids +{% if ptp.monitor.missing_message.sequence_ids.sync is arista.avd.defined %} +ptp monitor threshold missing-message sync {{ ptp.monitor.missing_message.sequence_ids.sync }} sequence-ids {% endif %} {% if ptp.monitor.missing_message.sequence_ids.follow_up is arista.avd.defined %} ptp monitor threshold missing-message follow-up {{ ptp.monitor.missing_message.sequence_ids.follow_up }} sequence-ids {% endif %} -{% if ptp.monitor.missing_message.sequence_ids.sync is arista.avd.defined %} -ptp monitor threshold missing-message sync {{ ptp.monitor.missing_message.sequence_ids.sync }} sequence-ids +{% if ptp.monitor.missing_message.sequence_ids.delay_resp is arista.avd.defined %} +ptp monitor threshold missing-message delay-resp {{ ptp.monitor.missing_message.sequence_ids.delay_resp }} sequence-ids +{% endif %} +{% if ptp.monitor.missing_message.sequence_ids.announce is arista.avd.defined %} +ptp monitor threshold missing-message announce {{ ptp.monitor.missing_message.sequence_ids.announce }} sequence-ids {% endif %} {% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/queue-monitor-length.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/queue-monitor-length.j2 index 89dd7d4f1cc..27f8ca0c48c 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/queue-monitor-length.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/queue-monitor-length.j2 @@ -7,6 +7,14 @@ {% if queue_monitor_length.enabled is arista.avd.defined(true) %} ! queue-monitor length +{% if queue_monitor_length.notifying is arista.avd.defined(true) %} +queue-monitor length notifying +{% elif queue_monitor_length.notifying is arista.avd.defined(false) %} +no queue-monitor length notifying +{% endif %} +{% if queue_monitor_length.tx_latency is arista.avd.defined(true) %} +queue-monitor length tx-latency +{% endif %} {% if queue_monitor_length.default_thresholds.high is arista.avd.defined %} {% set default_thresholds_cli = "queue-monitor length default threshold" %} {% if queue_monitor_length.default_thresholds.low is arista.avd.defined %} @@ -16,17 +24,6 @@ queue-monitor length {% endif %} {{ default_thresholds_cli }} {% endif %} -{% if queue_monitor_length.log is arista.avd.defined %} -queue-monitor length log {{ queue_monitor_length.log }} -{% endif %} -{% if queue_monitor_length.notifying is arista.avd.defined(true) %} -queue-monitor length notifying -{% elif queue_monitor_length.notifying is arista.avd.defined(false) %} -no queue-monitor length notifying -{% endif %} -{% if queue_monitor_length.tx_latency is arista.avd.defined(true) %} -queue-monitor length tx-latency -{% endif %} {% if queue_monitor_length.cpu.thresholds.high is arista.avd.defined %} {% if queue_monitor_length.cpu.thresholds.low is arista.avd.defined %} queue-monitor length cpu thresholds {{ queue_monitor_length.cpu.thresholds.high }} {{ queue_monitor_length.cpu.thresholds.low }} @@ -34,4 +31,8 @@ queue-monitor length cpu thresholds {{ queue_monitor_length.cpu.thresholds.high queue-monitor length cpu threshold {{ queue_monitor_length.cpu.thresholds.high }} {% endif %} {% endif %} +{% if queue_monitor_length.log is arista.avd.defined %} +! +queue-monitor length log {{ queue_monitor_length.log }} +{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/rancid-content-type.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/rancid-content-type.j2 index 062d33df711..e10371fd03b 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/rancid-content-type.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/rancid-content-type.j2 @@ -4,6 +4,6 @@ that can be found in the LICENSE file. #} {# eos - rancid content type #} -{% if not generate_default_config is arista.avd.defined(false) %} +{% if generate_default_config is arista.avd.defined(true) %} !RANCID-CONTENT-TYPE: arista {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-adaptive-virtual-topology.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-adaptive-virtual-topology.j2 index 3a8ed90d9f3..9c281b8cfcb 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-adaptive-virtual-topology.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-adaptive-virtual-topology.j2 @@ -8,7 +8,11 @@ ! router adaptive-virtual-topology {% if router_adaptive_virtual_topology.topology_role is arista.avd.defined %} - topology role {{ router_adaptive_virtual_topology.topology_role }} +{% set topology_role = "topology role " ~ router_adaptive_virtual_topology.topology_role %} +{% if router_adaptive_virtual_topology.gateway_vxlan is arista.avd.defined(true) and router_adaptive_virtual_topology.topology_role in ["edge", "transit zone", "transit region"] %} +{% set topology_role = topology_role ~ " gateway vxlan" %} +{% endif %} + {{ topology_role }} {% endif %} {% if router_adaptive_virtual_topology.region.name is arista.avd.defined and router_adaptive_virtual_topology.region.id %} region {{ router_adaptive_virtual_topology.region.name }} id {{ router_adaptive_virtual_topology.region.id }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-bgp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-bgp.j2 index 0f953bbcb81..e3e74790688 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-bgp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-bgp.j2 @@ -643,12 +643,14 @@ router bgp {{ router_bgp.as }} {% set evpn_neighbor_default_encap_cli = evpn_neighbor_default_encap_cli ~ " next-hop-self source-interface " ~ router_bgp.address_family_evpn.neighbor_default.next_hop_self_source_interface %} {% endif %} {{ evpn_neighbor_default_encap_cli }} +{% elif router_bgp.address_family_evpn.neighbor_default.encapsulation is arista.avd.defined("path-selection") %} + neighbor default encapsulation path-selection {% endif %} {% if router_bgp.address_family_evpn.next_hop_mpls_resolution_ribs is arista.avd.defined %} {% set evpn_mpls_resolution_ribs = [] %} {% for rib in router_bgp.address_family_evpn.next_hop_mpls_resolution_ribs %} {% if rib.rib_type is arista.avd.defined("tunnel-rib-colored") %} -{% do evpn_mpls_resolution_ribs.append("tunnel-rib-colored system-colored-tunnel-rib") %} +{% do evpn_mpls_resolution_ribs.append("tunnel-rib colored system-colored-tunnel-rib") %} {% elif rib.rib_type is arista.avd.defined("tunnel-rib") and rib.rib_name is arista.avd.defined() %} {% do evpn_mpls_resolution_ribs.append("tunnel-rib " ~ rib.rib_name) %} {% elif rib.rib_type is arista.avd.defined %} @@ -730,6 +732,9 @@ router bgp {{ router_bgp.as }} {% endif %} {{ neighbor_default_route_cli }} {% endif %} +{% if neighbor.encapsulation is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} encapsulation {{ neighbor.encapsulation }} +{% endif %} {% endfor %} {% if router_bgp.address_family_evpn.next_hop.resolution_disabled is arista.avd.defined(true) %} next-hop resolution disabled @@ -946,6 +951,293 @@ router bgp {{ router_bgp.as }} {% endif %} {% endfor %} {% endif %} +{# address family ipv4 BGP Labeled-Unicast activation #} +{% if router_bgp.address_family_ipv4_labeled_unicast is arista.avd.defined %} + ! + address-family ipv4 labeled-unicast +{% if router_bgp.address_family_ipv4_labeled_unicast.update_wait_for_convergence is arista.avd.defined(true) %} + update wait-for-convergence +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy is arista.avd.defined %} +{% for direction in ['in', 'out'] %} +{% set dir = 'direction_' ~ direction %} +{% set policy = router_bgp.address_family_ipv4_labeled_unicast.bgp.missing_policy[dir] %} +{% if policy.action is arista.avd.defined %} +{% set missing_policy_cli = "bgp missing-policy" %} +{% if policy.include_community_list is arista.avd.defined(true) or policy.include_prefix_list is arista.avd.defined(true) or policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " include" %} +{% if policy.include_community_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " community-list" %} +{% endif %} +{% if policy.include_prefix_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " prefix-list" %} +{% endif %} +{% if policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " sub-route-map" %} +{% endif %} +{% endif %} +{% set missing_policy_cli = missing_policy_cli ~ " direction " ~ direction ~ " action " ~ policy.action %} + {{ missing_policy_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.receive is arista.avd.defined(true) %} + bgp additional-paths receive +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send is arista.avd.defined %} +{% set ipv4lu_add_path = "bgp additional-paths send " ~ router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_ecmp_limit is arista.avd.defined and router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send == "ecmp" %} +{% set ipv4lu_add_path = ipv4lu_add_path ~ " limit " ~ router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_ecmp_limit %} +{% elif router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_limit is arista.avd.defined and router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send == "limit" %} +{% set ipv4lu_add_path = ipv4lu_add_path ~ " " ~ router_bgp.address_family_ipv4_labeled_unicast.bgp.additional_paths.send_limit %} +{% endif %} + {{ ipv4lu_add_path }} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.bgp.next_hop_unchanged is arista.avd.defined(true) %} + bgp next-hop-unchanged +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.next_hop_resolution_ribs is arista.avd.defined %} +{% set v4_bgp_lu_resolution_ribs = [] %} +{% for rib in router_bgp.address_family_ipv4_labeled_unicast.next_hop_resolution_ribs %} +{% if rib.rib_type is arista.avd.defined("tunnel-rib-colored") %} +{% do v4_bgp_lu_resolution_ribs.append("tunnel-rib colored system-colored-tunnel-rib") %} +{% elif rib.rib_type is arista.avd.defined("tunnel-rib") %} +{% if rib.rib_name is arista.avd.defined %} +{% do v4_bgp_lu_resolution_ribs.append("tunnel-rib " ~ rib.rib_name) %} +{% endif %} +{% elif rib.rib_type is arista.avd.defined %} +{% do v4_bgp_lu_resolution_ribs.append(rib.rib_type) %} +{% endif %} +{% endfor %} +{% if v4_bgp_lu_resolution_ribs %} + next-hop resolution ribs {{ v4_bgp_lu_resolution_ribs | join(" ") }} +{% endif %} +{% endif %} +{% for peer in router_bgp.address_family_ipv4_labeled_unicast.peer_groups | arista.avd.natural_sort('name') %} +{% if peer.activate is arista.avd.defined(true) %} + neighbor {{ peer.name }} activate +{% else %} + no neighbor {{ peer.name }} activate +{% endif %} +{% if peer.additional_paths.receive is arista.avd.defined(true) %} + neighbor {{ peer.name }} additional-paths receive +{% endif %} +{% if peer.graceful_restart is arista.avd.defined(true) %} + neighbor {{ peer.name }} graceful-restart +{% endif %} +{% if peer.graceful_restart_helper.stale_route_map is arista.avd.defined %} + neighbor {{ peer.name }} graceful-restart-helper stale-route route-map {{ peer.graceful_restart_helper.stale_route_map }} +{% endif %} +{% if peer.route_map_in is arista.avd.defined %} + neighbor {{ peer.name }} route-map {{ peer.route_map_in }} in +{% endif %} +{% if peer.route_map_out is arista.avd.defined %} + neighbor {{ peer.name }} route-map {{ peer.route_map_out }} out +{% endif %} +{% if peer.rcf_in is arista.avd.defined %} + neighbor {{ peer.name }} rcf in {{ peer.rcf_in }} +{% endif %} +{% if peer.rcf_out is arista.avd.defined %} + neighbor {{ peer.name }} rcf out {{ peer.rcf_out }} +{% endif %} +{% if peer.additional_paths.send is arista.avd.defined %} +{% set lu_peer_add_path = "neighbor " ~ peer.name ~ " additional-paths send " ~ peer.additional_paths.send %} +{% if peer.additional_paths.send_ecmp_limit is arista.avd.defined and peer.additional_paths.send == "ecmp" %} +{% set lu_peer_add_path = lu_peer_add_path ~ " limit " ~ peer.additional_paths.send_ecmp_limit %} +{% elif peer.additional_paths.send_limit is arista.avd.defined and peer.additional_paths.send == "limit" %} +{% set lu_peer_add_path = lu_peer_add_path~ " " ~ peer.additional_paths.send_limit %} +{% endif %} + {{ lu_peer_add_path }} +{% endif %} +{% if peer.next_hop_unchanged is arista.avd.defined(true) %} + neighbor {{ peer.name }} next-hop-unchanged +{% endif %} +{% if peer.next_hop_self is arista.avd.defined(true) %} + neighbor {{ peer.name }} next-hop-self +{% endif %} +{% if peer.next_hop_self_v4_mapped_v6_source_interface is arista.avd.defined %} + neighbor {{ peer.name }} next-hop-self v4-mapped-v6 source-interface {{ peer.next_hop_self_v4_mapped_v6_source_interface }} +{% elif peer.next_hop_self_source_interface is arista.avd.defined %} + neighbor {{ peer.name }} next-hop-self source-interface {{ peer.next_hop_self_source_interface }} +{% endif %} +{% if peer.maximum_advertised_routes is arista.avd.defined %} +{% set maximum_routes_cli = "neighbor " ~peer.name ~ " maximum-routes " ~peer.maximum_advertised_routes %} +{% if peer.maximum_advertised_routes_warning_limit is arista.avd.defined %} +{% set maximum_routes_cli = maximum_routes_cli ~ " warning-limit " ~ peer.maximum_advertised_routes_warning_limit %} +{% endif %} + {{ maximum_routes_cli }} +{% endif %} +{% if peer.missing_policy is arista.avd.defined %} +{% for direction in ['in', 'out'] %} +{% set dir = 'direction_' ~ direction %} +{% set policy = peer.missing_policy[dir] %} +{% if policy.action is arista.avd.defined %} +{% set missing_policy_cli = "neighbor " ~ peer.name ~ " missing-policy" %} +{% if policy.include_community_list is arista.avd.defined(true) or policy.include_prefix_list is arista.avd.defined(true) or policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " include" %} +{% if policy.include_community_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " community-list" %} +{% endif %} +{% if policy.include_prefix_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " prefix-list" %} +{% endif %} +{% if policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " sub-route-map" %} +{% endif %} +{% endif %} +{% set missing_policy_cli = missing_policy_cli ~ " direction " ~ direction ~ " action " ~ policy.action %} + {{ missing_policy_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if peer.aigp_session is arista.avd.defined(true) %} + neighbor {{ peer.name }} aigp-session +{% endif %} +{% if peer.multi_path is arista.avd.defined(true) %} + neighbor {{ peer.name }} multi-path +{% endif %} +{% if peer.next_hop_resolution.v4_mapped_v6_translation is arista.avd.defined(true) %} + neighbor {{ peer.name }} next-hop resolution v4-mapped-v6 translation +{% elif peer.next_hop_resolution.v4_mapped_v6_translation is arista.avd.defined(false) %} + neighbor {{ peer.name }} next-hop resolution v4-mapped-v6 translation disabled +{% endif %} +{% endfor %} +{% for neighbor in router_bgp.address_family_ipv4_labeled_unicast.neighbors | arista.avd.natural_sort('ip_address') %} +{% if neighbor.activate is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} activate +{% else %} + no neighbor {{ neighbor.ip_address }} activate +{% endif %} +{% if neighbor.additional_paths.receive is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} additional-paths receive +{% endif %} +{% if neighbor.graceful_restart is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} graceful-restart +{% endif %} +{% if neighbor.graceful_restart_helper.stale_route_map is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} graceful-restart-helper stale-route route-map {{ neighbor.graceful_restart_helper.stale_route_map }} +{% endif %} +{% if neighbor.route_map_in is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} route-map {{ neighbor.route_map_in }} in +{% endif %} +{% if neighbor.route_map_out is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} route-map {{ neighbor.route_map_out }} out +{% endif %} +{% if neighbor.rcf_in is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} rcf in {{ neighbor.rcf_in }} +{% endif %} +{% if neighbor.rcf_out is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} rcf out {{ neighbor.rcf_out }} +{% endif %} +{% if neighbor.additional_paths.send is arista.avd.defined %} +{% set lu_neighbor_add_path = "neighbor " ~ neighbor.ip_address ~ " additional-paths send " ~ neighbor.additional_paths.send %} +{% if neighbor.additional_paths.send_ecmp_limit is arista.avd.defined and neighbor.additional_paths.send == "ecmp" %} +{% set lu_neighbor_add_path = lu_neighbor_add_path ~ " limit " ~ neighbor.additional_paths.send_ecmp_limit %} +{% elif neighbor.additional_paths.send_limit is arista.avd.defined and neighbor.additional_paths.send == "limit" %} +{% set lu_neighbor_add_path = lu_neighbor_add_path~ " " ~ neighbor.additional_paths.send_limit %} +{% endif %} + {{ lu_neighbor_add_path }} +{% endif %} +{% if neighbor.next_hop_unchanged is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} next-hop-unchanged +{% endif %} +{% if neighbor.next_hop_self is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} next-hop-self +{% endif %} +{% if neighbor.next_hop_self_v4_mapped_v6_source_interface is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} next-hop-self v4-mapped-v6 source-interface {{ neighbor.next_hop_self_v4_mapped_v6_source_interface }} +{% elif neighbor.next_hop_self_source_interface is arista.avd.defined %} + neighbor {{ neighbor.ip_address }} next-hop-self source-interface {{ neighbor.next_hop_self_source_interface }} +{% endif %} +{% if neighbor.maximum_advertised_routes is arista.avd.defined %} +{% set maximum_routes_cli = "neighbor " ~neighbor.ip_address ~ " maximum-advertised-routes " ~neighbor.maximum_advertised_routes %} +{% if neighbor.maximum_advertised_routes_warning_limit is arista.avd.defined %} +{% set maximum_routes_cli = maximum_routes_cli ~ " warning-limit " ~ neighbor.maximum_advertised_routes_warning_limit %} +{% endif %} + {{ maximum_routes_cli }} +{% endif %} +{% if neighbor.missing_policy is arista.avd.defined %} +{% for direction in ['in', 'out'] %} +{% set dir = 'direction_' ~ direction %} +{% set policy = neighbor.missing_policy[dir] %} +{% if policy.action is arista.avd.defined %} +{% set missing_policy_cli = "neighbor " ~ neighbor.ip_address ~ " missing-policy " %} +{% if policy.include_community_list is arista.avd.defined(true) or policy.include_prefix_list is arista.avd.defined(true) or policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " include" %} +{% if policy.include_community_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " community-list" %} +{% endif %} +{% if policy.include_prefix_list is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " prefix-list" %} +{% endif %} +{% if policy.include_sub_route_map is arista.avd.defined(true) %} +{% set missing_policy_cli = missing_policy_cli ~ " sub-route-map" %} +{% endif %} +{% endif %} +{% set missing_policy_cli = missing_policy_cli ~ " direction " ~ direction ~ " action " ~ policy.action %} + {{ missing_policy_cli }} +{% endif %} +{% endfor %} +{% endif %} +{% if neighbor.aigp_session is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} aigp-session +{% endif %} +{% if neighbor.multi_path is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} multi-path +{% endif %} +{% if neighbor.next_hop_resolution.v4_mapped_v6_translation is arista.avd.defined(true) %} + neighbor {{ neighbor.ip_address }} next-hop resolution v4-mapped-v6 translation +{% elif neighbor.next_hop_resolution.v4_mapped_v6_translation is arista.avd.defined(false) %} + neighbor {{ neighbor.ip_address }} next-hop resolution v4-mapped-v6 translation disabled +{% endif %} +{% endfor %} +{% if router_bgp.address_family_ipv4_labeled_unicast.networks is arista.avd.defined %} +{% for network in router_bgp.address_family_ipv4_labeled_unicast.networks %} +{% set network_cli = "network " ~ network.prefix %} +{% if network.route_map is arista.avd.defined %} +{% set network_cli = network_cli ~ " route-map " ~ network.route_map %} +{% endif %} + {{ network_cli }} +{% endfor %} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.next_hops is arista.avd.defined %} +{% for next_hop in router_bgp.address_family_ipv4_labeled_unicast.next_hops %} +{% set next_hop_cli = "next-hop " ~ next_hop.ip_address ~ " originate" %} +{% if next_hop.lfib_backup_ip_forwarding is arista.avd.defined(true) %} +{% set next_hop_cli = next_hop_cli ~ " lfib-backup ip-forwarding" %} +{% endif %} + {{ next_hop_cli }} +{% endfor %} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.lfib_entry_installation_skipped is arista.avd.defined(true) %} + lfib entry installation skipped +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.label_local_termination is arista.avd.defined %} + label local-termination {{ router_bgp.address_family_ipv4_labeled_unicast.label_local_termination }} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.graceful_restart is arista.avd.defined(true) %} + graceful-restart +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.neighbor_default.next_hop_self is arista.avd.defined(true) %} + neighbor default next-hop-self +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.tunnel_source_protocols is arista.avd.defined %} +{% for tunnel_source_protocol in router_bgp.address_family_ipv4_labeled_unicast.tunnel_source_protocols %} +{% set tunnel_source_protocol_cli = "tunnel source-protocol " ~ tunnel_source_protocol.protocol %} +{% if tunnel_source_protocol.rcf is arista.avd.defined %} +{% set tunnel_source_protocol_cli = tunnel_source_protocol_cli ~ " rcf " ~ tunnel_source_protocol.rcf %} +{% endif %} + {{ tunnel_source_protocol_cli }} +{% endfor %} +{% endif %} +{% if router_bgp.address_family_ipv4_labeled_unicast.aigp_session is arista.avd.defined %} +{% for aigp_session_type in ['ibgp','confederation','ebgp'] %} +{% if router_bgp.address_family_ipv4_labeled_unicast.aigp_session[aigp_session_type] is arista.avd.defined(true) %} + aigp-session {{ aigp_session_type }} +{% endif %} +{% endfor %} +{% endif %} +{% endif %} {# address family ipv4 multicast activation #} {% if router_bgp.address_family_ipv4_multicast is arista.avd.defined %} ! diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-internet-exit.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-internet-exit.j2 index 71a3c78460c..74edcba72c4 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-internet-exit.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-internet-exit.j2 @@ -8,23 +8,30 @@ ! router internet-exit {% for exit_group in router_internet_exit.exit_groups | arista.avd.natural_sort('name') %} - ! - exit-group {{ exit_group.name }} + exit-group {{ exit_group.name }} {% for local_connection in exit_group.local_connections | arista.avd.natural_sort('name') %} - local connection {{ local_connection.name }} + local connection {{ local_connection.name }} {% endfor %} {% if exit_group.fib_default is arista.avd.defined(true) %} - fib-default + fib-default +{% endif %} +{% if not loop.last %} + ! {% endif %} {% endfor %} +{% if router_internet_exit.policies is arista.avd.defined %} + ! +{% endif %} {% for policy in router_internet_exit.policies | arista.avd.natural_sort('name') %} - ! - policy {{ policy.name }} + policy {{ policy.name }} {# Order of exit-groups MUST be preserved #} {% for exit_group in policy.exit_groups | arista.avd.default([]) %} {% if exit_group.name is arista.avd.defined %} - exit-group {{ exit_group.name }} + exit-group {{ exit_group.name }} {% endif %} {% endfor %} +{% if not loop.last %} + ! +{% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-isis.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-isis.j2 index 985f6459c80..0bc23c9d734 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-isis.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-isis.j2 @@ -219,7 +219,7 @@ router isis {{ router_isis.instance }} {% endif %} {% endif %} ! -{% if router_isis.address_family_ipv4 is arista.avd.defined %} +{% if router_isis.address_family_ipv4.enabled is arista.avd.defined(true) %} address-family ipv4 unicast {% if router_isis.address_family_ipv4.maximum_paths is arista.avd.defined %} maximum-paths {{ router_isis.address_family_ipv4.maximum_paths }} @@ -250,7 +250,7 @@ router isis {{ router_isis.instance }} {% endif %} ! {% endif %} -{% if router_isis.address_family_ipv6 is arista.avd.defined %} +{% if router_isis.address_family_ipv6.enabled is arista.avd.defined(true) %} address-family ipv6 unicast {% if router_isis.address_family_ipv6.maximum_paths is arista.avd.defined %} maximum-paths {{ router_isis.address_family_ipv6.maximum_paths }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-msdp.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-msdp.j2 index 6c474631c04..aa90bebf80e 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-msdp.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-msdp.j2 @@ -22,7 +22,7 @@ router msdp {% if router_msdp.connection_retry_interval is arista.avd.defined %} connection retry interval {{ router_msdp.connection_retry_interval }} {% endif %} -{% for peer in router_msdp.peers | arista.avd.default([]) %} +{% for peer in router_msdp.peers | arista.avd.default([]) | arista.avd.natural_sort('ipv4_address') %} {% if peer.ipv4_address is arista.avd.defined %} ! peer {{ peer.ipv4_address }} @@ -33,7 +33,7 @@ router msdp {% endif %} {{ default_peer_cli }} {% endif %} -{% for mesh_group in peer.mesh_groups | arista.avd.default([]) %} +{% for mesh_group in peer.mesh_groups | arista.avd.default([]) | arista.avd.natural_sort('name') %} {% if mesh_group.name is arista.avd.defined %} mesh-group {{ mesh_group.name }} {% endif %} @@ -61,11 +61,11 @@ router msdp {% endif %} {% endif %} {% endfor %} -{% for vrf in router_msdp.vrfs | arista.avd.default([]) %} +{% for vrf in router_msdp.vrfs | arista.avd.default([]) | arista.avd.natural_sort('name') %} {% if vrf.name is arista.avd.defined and vrf.name != "default" %} ! vrf {{ vrf.name }} -{% for group_limit in vrf.group_limits | arista.avd.default([]) %} +{% for group_limit in vrf.group_limits | arista.avd.default([]) | arista.avd.natural_sort('source_prefix') %} group-limit {{ group_limit.limit }} source {{ group_limit.source_prefix }} {% endfor %} {% if vrf.originator_id_local_interface is arista.avd.defined %} @@ -80,43 +80,41 @@ router msdp {% if vrf.connection_retry_interval is arista.avd.defined %} connection retry interval {{ vrf.connection_retry_interval }} {% endif %} -{% for peer in vrf.peers | arista.avd.default([]) %} -{% if peer.ipv4_address is arista.avd.defined %} +{% for peer in vrf.peers | arista.avd.default([]) | arista.avd.natural_sort('ipv4_address') %} ! peer {{ peer.ipv4_address }} -{% if peer.default_peer.enabled is arista.avd.defined(true) %} -{% set default_peer_cli = "default-peer" %} -{% if peer.default_peer.prefix_list is arista.avd.defined %} -{% set default_peer_cli = default_peer_cli ~ " prefix-list " ~ peer.default_peer.prefix_list %} -{% endif %} - {{ default_peer_cli }} +{% if peer.default_peer.enabled is arista.avd.defined(true) %} +{% set default_peer_cli = "default-peer" %} +{% if peer.default_peer.prefix_list is arista.avd.defined %} +{% set default_peer_cli = default_peer_cli ~ " prefix-list " ~ peer.default_peer.prefix_list %} {% endif %} -{% for mesh_group in peer.mesh_groups | arista.avd.default([]) %} -{% if mesh_group.name is arista.avd.defined %} + {{ default_peer_cli }} +{% endif %} +{% for mesh_group in peer.mesh_groups | arista.avd.default([]) %} +{% if mesh_group.name is arista.avd.defined %} mesh-group {{ mesh_group.name }} -{% endif %} -{% endfor %} -{% if peer.local_interface is arista.avd.defined %} - local-interface {{ peer.local_interface }} {% endif %} -{% if peer.keepalive.keepalive_timer is arista.avd.defined and peer.keepalive.hold_timer is arista.avd.defined %} +{% endfor %} +{% if peer.local_interface is arista.avd.defined %} + local-interface {{ peer.local_interface }} +{% endif %} +{% if peer.keepalive.keepalive_timer is arista.avd.defined and peer.keepalive.hold_timer is arista.avd.defined %} keepalive {{ peer.keepalive.keepalive_timer }} {{ peer.keepalive.hold_timer }} -{% endif %} -{% if peer.sa_filter.in_list is arista.avd.defined %} +{% endif %} +{% if peer.sa_filter.in_list is arista.avd.defined %} sa-filter in list {{ peer.sa_filter.in_list }} -{% endif %} -{% if peer.sa_filter.out_list is arista.avd.defined %} +{% endif %} +{% if peer.sa_filter.out_list is arista.avd.defined %} sa-filter out list {{ peer.sa_filter.out_list }} -{% endif %} -{% if peer.description is arista.avd.defined %} +{% endif %} +{% if peer.description is arista.avd.defined %} description {{ peer.description }} -{% endif %} -{% if peer.disabled is arista.avd.defined(true) %} +{% endif %} +{% if peer.disabled is arista.avd.defined(true) %} disabled -{% endif %} -{% if peer.sa_limit is arista.avd.defined %} +{% endif %} +{% if peer.sa_limit is arista.avd.defined %} sa-limit {{ peer.sa_limit }} -{% endif %} {% endif %} {% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-ospf.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-ospf.j2 index 8b323817fe9..6933b7baac1 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-ospf.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-ospf.j2 @@ -129,7 +129,7 @@ router ospf {{ process_id.id }} {% endif %} {{ default_information_originate_cli }} {% endif %} -{% if process_id.redistribute.static is defined %} +{% if process_id.redistribute.static.enabled is arista.avd.defined(true) %} {% set redistribute_static_cli = "redistribute static" %} {% if process_id.redistribute.static.include_leaked is arista.avd.defined(true) %} {% set redistribute_static_cli = redistribute_static_cli ~ " include leaked" %} @@ -139,7 +139,7 @@ router ospf {{ process_id.id }} {% endif %} {{ redistribute_static_cli }} {% endif %} -{% if process_id.redistribute.connected is defined %} +{% if process_id.redistribute.connected.enabled is arista.avd.defined(true) %} {% set redistribute_connected_cli = "redistribute connected" %} {% if process_id.redistribute.connected.include_leaked is arista.avd.defined(true) %} {% set redistribute_connected_cli = redistribute_connected_cli ~ " include leaked" %} @@ -149,7 +149,7 @@ router ospf {{ process_id.id }} {% endif %} {{ redistribute_connected_cli }} {% endif %} -{% if process_id.redistribute.bgp is defined %} +{% if process_id.redistribute.bgp.enabled is arista.avd.defined(true) %} {% set redistribute_bgp_cli = "redistribute bgp" %} {% if process_id.redistribute.bgp.include_leaked is arista.avd.defined(true) %} {% set redistribute_bgp_cli = redistribute_bgp_cli ~ " include leaked" %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-path-selection.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-path-selection.j2 index 15923e512ee..8952d0a81db 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-path-selection.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-path-selection.j2 @@ -58,7 +58,8 @@ router path-selection ! {{ local_ip_def }} {% if local_ip.stun.server_profiles is arista.avd.defined %} - stun server-profile {{ local_ip.stun.server_profiles | join(" ") }} +{% set server_profiles = local_ip.stun.server_profiles | arista.avd.natural_sort %} + stun server-profile {{ server_profiles | join(" ") }} {% endif %} {% endfor %} {# peer dynamic #} @@ -91,18 +92,18 @@ router path-selection {% for load_balance_policy in router_path_selection.load_balance_policies | arista.avd.natural_sort('name') %} ! load-balance policy {{ load_balance_policy.name }} -{% if load_balance_policy.lowest_hop_count is arista.avd.defined(true) %} - hop count lowest +{% if load_balance_policy.latency is arista.avd.defined %} + latency {{ load_balance_policy.latency }} {% endif %} {% if load_balance_policy.jitter is arista.avd.defined %} jitter {{ load_balance_policy.jitter }} {% endif %} -{% if load_balance_policy.latency is arista.avd.defined %} - latency {{ load_balance_policy.latency }} -{% endif %} {% if load_balance_policy.loss_rate is arista.avd.defined %} loss-rate {{ load_balance_policy.loss_rate }} {% endif %} +{% if load_balance_policy.lowest_hop_count is arista.avd.defined(true) %} + hop count lowest +{% endif %} {% for priority, entries in load_balance_policy.path_groups | arista.avd.default([]) | groupby("priority", default=1) %} {% for entry in entries | arista.avd.natural_sort("name") %} {% set path_group_cli = "path-group " ~ entry.name %} @@ -125,6 +126,9 @@ router path-selection {% endif %} {% for rule in policy.rules | arista.avd.natural_sort('id') %} {% if rule.application_profile is arista.avd.defined %} +{% if policy.default_match is arista.avd.defined or not loop.first %} + ! +{% endif %} {{ rule.id }} application-profile {{ rule.application_profile }} {% if rule.load_balance is arista.avd.defined %} load-balance {{ rule.load_balance }} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-pim-sparse-mode.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-pim-sparse-mode.j2 index 183d19657f2..84875e9ae39 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-pim-sparse-mode.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-pim-sparse-mode.j2 @@ -9,6 +9,9 @@ router pim sparse-mode {% if router_pim_sparse_mode.ipv4 is arista.avd.defined %} ipv4 +{% if router_pim_sparse_mode.ipv4.ssm_range is arista.avd.defined %} + ssm range {{ router_pim_sparse_mode.ipv4.ssm_range }} +{% endif %} {% if router_pim_sparse_mode.ipv4.bfd is arista.avd.defined(true) %} bfd {% endif %} @@ -47,9 +50,6 @@ router pim sparse-mode {{ other_anycast_rp_addresses_cli }} {% endfor %} {% endfor %} -{% if router_pim_sparse_mode.ipv4.ssm_range is arista.avd.defined %} - ssm range {{ router_pim_sparse_mode.ipv4.ssm_range }} -{% endif %} {% endif %} {% for vrf in router_pim_sparse_mode.vrfs | arista.avd.natural_sort('name') %} ! diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-traffic-engineering.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-traffic-engineering.j2 index 2587c85b842..30fe2f83fd7 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-traffic-engineering.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/router-traffic-engineering.j2 @@ -4,8 +4,7 @@ that can be found in the LICENSE file. #} {# eos - router traffic engineering #} -{# for AVD 5.0.0, the first part of the if statement will be removed #} -{% if router_traffic_engineering is arista.avd.defined or router_traffic_engineering.enabled is arista.avd.defined(true) %} +{% if router_traffic_engineering.enabled is arista.avd.defined(true) %} ! router traffic-engineering {% if router_traffic_engineering.segment_routing is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/sflow.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/sflow.j2 index a5fd9587041..6494a86710c 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/sflow.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/sflow.j2 @@ -14,9 +14,6 @@ {% set sample_cli = sample_cli ~ sflow.sample %} {{ sample_cli }} {% endif %} -{% if sflow.sample_input_subinterface is arista.avd.defined(true) %} -sflow sample input subinterface -{% endif %} {% if sflow.polling_interval is arista.avd.defined %} sflow polling-interval {{ sflow.polling_interval }} {% endif %} @@ -46,6 +43,9 @@ sflow source-interface {{ sflow.source_interface }} {% elif sflow.source is arista.avd.defined %} sflow source {{ sflow.source }} {% endif %} +{% if sflow.sample_input_subinterface is arista.avd.defined(true) %} +sflow sample input subinterface +{% endif %} {% if sflow.sample_output_subinterface is arista.avd.defined(true) %} sflow sample output subinterface {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/snmp-server.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/snmp-server.j2 index 041a2eb5315..cde4d09c54b 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/snmp-server.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/snmp-server.j2 @@ -6,27 +6,7 @@ {# eos - snmp server #} {% if snmp_server is arista.avd.defined %} ! -{% if snmp_server.engine_ids.local is arista.avd.defined %} -snmp-server engineID local {{ snmp_server.engine_ids.local }} -{% endif %} -{% if snmp_server.contact is arista.avd.defined %} -snmp-server contact {{ snmp_server.contact }} -{% endif %} -{% if snmp_server.location is arista.avd.defined %} -snmp-server location {{ snmp_server.location }} -{% endif %} -{% if snmp_server.engine_ids.remotes is arista.avd.defined %} -{% for engine_id in snmp_server.engine_ids.remotes %} -{% if engine_id.id is arista.avd.defined and engine_id.address is arista.avd.defined %} -{% set remote_engine_ids_cli = "snmp-server engineID remote " ~ engine_id.address %} -{% if engine_id.udp_port is arista.avd.defined %} -{% set remote_engine_ids_cli = remote_engine_ids_cli ~ " udp-port " ~ engine_id.udp_port %} -{% endif %} -{% set remote_engine_ids_cli = remote_engine_ids_cli ~ " " ~ engine_id.id %} -{{ remote_engine_ids_cli }} -{% endif %} -{% endfor %} -{% endif %} +{# TODO IPv4/IPv6 access list config order is not correct as per EOS #} {% if snmp_server.ipv4_acls is arista.avd.defined %} {% for acl in snmp_server.ipv4_acls %} {% set acl_cli = "snmp-server ipv4 access-list " ~ acl.name %} @@ -45,8 +25,18 @@ snmp-server location {{ snmp_server.location }} {{ acl_cli }} {% endfor %} {% endif %} +{% if snmp_server.engine_ids.local is arista.avd.defined %} +snmp-server engineID local {{ snmp_server.engine_ids.local }} +{% endif %} +{% if snmp_server.contact is arista.avd.defined %} +snmp-server contact {{ snmp_server.contact }} +{% endif %} +{% if snmp_server.location is arista.avd.defined %} +snmp-server location {{ snmp_server.location }} +{% endif %} +{# TODO local interfaces config order is not correct as per EOS #} {% if snmp_server.local_interfaces is arista.avd.defined %} -{% for local_interface in snmp_server.local_interfaces %} +{% for local_interface in snmp_server.local_interfaces | arista.avd.natural_sort('name') %} {% set interface_snmp_cli = "snmp-server" %} {% if local_interface.vrf is arista.avd.defined %} {% set interface_snmp_cli = interface_snmp_cli ~ " vrf " ~ local_interface.vrf %} @@ -56,7 +46,7 @@ snmp-server location {{ snmp_server.location }} {% endfor %} {% endif %} {% if snmp_server.views is arista.avd.defined %} -{% for view in snmp_server.views %} +{% for view in snmp_server.views | arista.avd.natural_sort('name') %} {% if view.name is arista.avd.defined %} {% set view_cli = "snmp-server view " ~ view.name %} {% endif %} @@ -92,7 +82,7 @@ snmp-server location {{ snmp_server.location }} {% endfor %} {% endif %} {% if snmp_server.groups is arista.avd.defined %} -{% for group in snmp_server.groups %} +{% for group in snmp_server.groups | arista.avd.natural_sort('name') %} {% if group.name is arista.avd.defined %} {% set group_cli = "snmp-server group " ~ group.name %} {% endif %} @@ -115,7 +105,7 @@ snmp-server location {{ snmp_server.location }} {% endfor %} {% endif %} {% if snmp_server.users is arista.avd.defined %} -{% for user in snmp_server.users %} +{% for user in snmp_server.users | arista.avd.natural_sort('name') %} {% if user.name is arista.avd.defined %} {% set user_cli = "snmp-server user " ~ user.name %} {% endif %} @@ -146,8 +136,20 @@ snmp-server location {{ snmp_server.location }} {{ user_cli }} {% endfor %} {% endif %} +{% if snmp_server.engine_ids.remotes is arista.avd.defined %} +{% for engine_id in snmp_server.engine_ids.remotes | arista.avd.natural_sort('address') %} +{% if engine_id.id is arista.avd.defined and engine_id.address is arista.avd.defined %} +{% set remote_engine_ids_cli = "snmp-server engineID remote " ~ engine_id.address %} +{% if engine_id.udp_port is arista.avd.defined %} +{% set remote_engine_ids_cli = remote_engine_ids_cli ~ " udp-port " ~ engine_id.udp_port %} +{% endif %} +{% set remote_engine_ids_cli = remote_engine_ids_cli ~ " " ~ engine_id.id %} +{{ remote_engine_ids_cli }} +{% endif %} +{% endfor %} +{% endif %} {% if snmp_server.hosts is arista.avd.defined %} -{% for host in snmp_server.hosts %} +{% for host in snmp_server.hosts | arista.avd.natural_sort('host') %} {% if host.host is arista.avd.defined %} {% set host_cli = "snmp-server host " ~ host.host %} {% if host.vrf is arista.avd.defined %} @@ -189,4 +191,7 @@ no snmp-server vrf {{ vrf.name }} {% endif %} {% endfor %} {% endif %} +{% if snmp_server.ifmib_ifspeed_shape_rate is arista.avd.defined(true) %} +snmp-server ifmib ifspeed shape-rate +{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/spanning-tree.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/spanning-tree.j2 index b878418abb0..5aafb098bf9 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/spanning-tree.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/spanning-tree.j2 @@ -6,9 +6,6 @@ {# eos - spanning-tree #} {% if spanning_tree is arista.avd.defined %} ! -{% if spanning_tree.root_super is arista.avd.defined(true) %} -spanning-tree root super -{% endif %} {% if spanning_tree.mode is arista.avd.defined() %} spanning-tree mode {{ spanning_tree.mode }} {% endif %} @@ -38,6 +35,9 @@ spanning-tree bpduguard rate-limit default spanning-tree bpduguard rate-limit count {{ spanning_tree.bpduguard_rate_limit.count }} {% endif %} {% endif %} +{% if spanning_tree.root_super is arista.avd.defined(true) %} +spanning-tree root super +{% endif %} {% if spanning_tree.mode is arista.avd.defined('mstp') %} {% for mst_instance in spanning_tree.mst_instances | arista.avd.natural_sort('id') %} {% if mst_instance.priority is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/tacacs-servers.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/tacacs-servers.j2 index ff12468a8f9..587c3354702 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/tacacs-servers.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/tacacs-servers.j2 @@ -6,6 +6,12 @@ {# eos - tacacs servers #} {% if tacacs_servers is arista.avd.defined %} ! +{% if tacacs_servers.timeout is arista.avd.defined %} +tacacs-server timeout {{ tacacs_servers.timeout }} +{% endif %} +{% if tacacs_servers.policy_unknown_mandatory_attribute_ignore is arista.avd.defined(true) %} +tacacs-server policy unknown-mandatory-attribute ignore +{% endif %} {% for host in tacacs_servers.hosts %} {% if host.host is arista.avd.defined %} {% set host_cli = "tacacs-server host " ~ host.host %} @@ -26,10 +32,4 @@ {% endif %} {{ host_cli }} {% endfor %} -{% if tacacs_servers.policy_unknown_mandatory_attribute_ignore is arista.avd.defined(true) %} -tacacs-server policy unknown-mandatory-attribute ignore -{% endif %} -{% if tacacs_servers.timeout is arista.avd.defined %} -tacacs-server timeout {{ tacacs_servers.timeout }} -{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/terminal.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/terminal.j2 index feb1bcd8306..7d8daa82f17 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/terminal.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/terminal.j2 @@ -6,10 +6,10 @@ {# eos - terminal #} {% if terminal is arista.avd.defined %} ! -{% if terminal.width is arista.avd.defined %} -terminal width {{ terminal.width }} -{% endif %} {% if terminal.length is arista.avd.defined %} terminal length {{ terminal.length }} {% endif %} +{% if terminal.width is arista.avd.defined %} +terminal width {{ terminal.width }} +{% endif %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/traffic-policies.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/traffic-policies.j2 index 85da6a299c0..534c8f93237 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/traffic-policies.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/traffic-policies.j2 @@ -7,207 +7,223 @@ {% if traffic_policies is arista.avd.defined %} ! traffic-policies -{# Global options #} -{% if traffic_policies.options.counter_per_interface is arista.avd.defined(true) %} - counter interface per-interface ingress -{% endif %} {# FIELD SET #} +{# -- L4 PORT MANAGEMENT -- #} +{% for field_set_port in traffic_policies.field_sets.ports | arista.avd.natural_sort('name') %} + field-set l4-port {{ field_set_port.name }} +{% if field_set_port.port_range is arista.avd.defined %} + {{ field_set_port.port_range }} +{% endif %} +{% if not loop.last %} + ! +{% endif %} +{% endfor %} {# -- IPv4 PREFIX MANAGEMENT -- #} -{% if traffic_policies.field_sets.ipv4 is arista.avd.defined %} -{% for field_set_ipv4 in traffic_policies.field_sets.ipv4 %} +{% for field_set_ipv4 in traffic_policies.field_sets.ipv4 | arista.avd.natural_sort('name') %} field-set ipv4 prefix {{ field_set_ipv4.name }} - {{ field_set_ipv4.prefixes | join(' ') }} +{% if field_set_ipv4.prefixes is arista.avd.defined %} + {{ field_set_ipv4.prefixes | arista.avd.natural_sort | join(' ') }} +{% endif %} +{% if not loop.last %} ! -{% endfor %} -{% endif %} +{% endif %} +{% endfor %} {# -- IPv6 PREFIX MANAGEMENT -- #} -{% if traffic_policies.field_sets.ipv6 is arista.avd.defined %} -{% for field_set_ipv6 in traffic_policies.field_sets.ipv6 %} +{% for field_set_ipv6 in traffic_policies.field_sets.ipv6 | arista.avd.natural_sort('name') %} field-set ipv6 prefix {{ field_set_ipv6.name }} - {{ field_set_ipv6.prefixes | join(' ') }} +{% if field_set_ipv6.prefixes is arista.avd.defined %} + {{ field_set_ipv6.prefixes | arista.avd.natural_sort | join(' ') }} +{% endif %} +{% if not loop.last %} ! -{% endfor %} -{% endif %} -{# -- L4 PORT MANAGEMENT -- #} -{% if traffic_policies.field_sets.ports is arista.avd.defined %} -{% for field_set_port in traffic_policies.field_sets.ports %} - field-set l4-port {{ field_set_port.name }} - {{ field_set_port.port_range }} +{% endif %} +{% endfor %} +{# Global options #} +{% if traffic_policies.options.counter_per_interface is arista.avd.defined(true) %} + counter interface per-interface ingress ! -{% endfor %} {% endif %} {# TRAFFIC POLICIES #} -{% if traffic_policies.policies is arista.avd.defined %} -{% for policy in traffic_policies.policies %} +{% for policy in traffic_policies.policies | arista.avd.natural_sort('name') %} traffic-policy {{ policy.name }} -{% if policy.matches is arista.avd.defined %} +{% if policy.matches is arista.avd.defined %} {# COUNTER CREATION SECTION #} -{% set transient_values = namespace() %} -{% set transient_values.counters = [] %} -{% for match in policy.matches %} -{% if match.actions.count is arista.avd.defined %} -{% do transient_values.counters.append(match.actions.count | string) %} -{% endif %} -{% endfor %} -{% if transient_values.counters | length > 0 %} - counter {{ transient_values.counters | join(' ') }} +{% set transient_values = namespace() %} +{% set transient_values.counters = [] %} +{% for match in policy.matches %} +{% if match.actions.count is arista.avd.defined %} +{% do transient_values.counters.append(match.actions.count | string) %} {% endif %} +{% endfor %} +{% if transient_values.counters | length > 0 %} + counter {{ transient_values.counters | arista.avd.natural_sort | join(' ') }} + ! +{% endif %} {# MATCH SECTION #} -{% for match in policy.matches %} +{% for match in policy.matches %} match {{ match.name }} {{ match.type | lower }} -{# -- SOURCE PREFIX MANAGEMENT -- #} -{% if match.source is arista.avd.defined %} -{% if match.source.prefixes is arista.avd.defined %} - source prefix {{ match.source.prefixes | join(' ') }} -{% endif %} -{% if match.source.prefix_lists is arista.avd.defined %} - source prefix field-set {{ match.source.prefix_lists | join(' ') }} -{% endif %} -{% endif %} -{# -- DESTINATION PREFIX MANAGEMENT -- #} -{% if match.destination is arista.avd.defined %} -{% if match.destination.prefixes is arista.avd.defined %} - destination prefix {{ match.destination.prefixes | join(' ') }} -{% endif %} -{% if match.destination.prefix_lists is arista.avd.defined %} - destination prefix field-set {{ match.destination.prefix_lists | join(' ') }} -{% endif %} -{% endif %} -{# -- PROTOCOL MANAGEMENT -- #} -{% if match.protocols is arista.avd.defined %} -{% for protocol in match.protocols %} -{# -- destination port-list -- #} -{% if protocol.dst_port is arista.avd.defined and protocol.protocol | lower in ['tcp','udp'] %} -{% set protocol_cli = 'protocol ' ~ protocol.protocol %} -{% if protocol.flags is arista.avd.defined %} -{% set protocol_cli = protocol_cli ~ ' flags ' ~ protocol.flags | join(' ') %} -{% endif %} -{% set protocol_cli = protocol_cli ~ ' destination port ' ~ protocol.dst_port %} - {{ protocol_cli }} -{# -- source port-list -- #} -{% elif protocol.src_port is arista.avd.defined and protocol.protocol | lower in ['tcp','udp'] %} -{% set protocol_cli = 'protocol ' ~ protocol.protocol %} -{% if protocol.flags is arista.avd.defined %} -{% set protocol_cli = protocol_cli ~ ' flags ' ~ protocol.flags | join(' ') %} +{# -- SOURCE PREFIX MANAGEMENT -- #} +{% if match.source.prefixes is arista.avd.defined %} + source prefix {{ match.source.prefixes | arista.avd.natural_sort | join(' ') }} +{% elif match.source.prefix_lists is arista.avd.defined %} + source prefix field-set {{ match.source.prefix_lists | arista.avd.natural_sort | join(' ') }} +{% endif %} +{# -- DESTINATION PREFIX MANAGEMENT -- #} +{% if match.destination.prefixes is arista.avd.defined %} + destination prefix {{ match.destination.prefixes | arista.avd.natural_sort | join(' ') }} +{% elif match.destination.prefix_lists is arista.avd.defined %} + destination prefix field-set {{ match.destination.prefix_lists | arista.avd.natural_sort | join(' ') }} +{% endif %} +{# -- PROTOCOL MANAGEMENT -- #} +{% if match.protocols is arista.avd.defined %} +{% set bgp_flag = True %} +{% for protocol in match.protocols %} +{% if protocol.protocol | lower in ['neighbors', 'bgp'] and bgp_flag %} +{% if protocol.protocol | lower == 'neighbors' %} +{% set protocol_neighbors_cli = 'protocol neighbors bgp' %} +{% if protocol.enforce_gtsm is arista.avd.defined(true) %} +{% set protocol_neighbors_cli = protocol_neighbors_cli ~ ' enforce ttl maximum-hops' %} {% endif %} -{% set protocol_cli = protocol_cli ~ ' source port ' ~ protocol.src_port %} - {{ protocol_cli }} -{# -- destination field-set -- #} -{% elif protocol.dst_field is arista.avd.defined and protocol.protocol | lower in ['tcp','udp'] %} -{% set protocol_cli = 'protocol ' ~ protocol.protocol %} -{% if protocol.flags is arista.avd.defined %} -{% set protocol_cli = protocol_cli ~ ' flags ' ~ protocol.flags | join(' ') %} + {{ protocol_neighbors_cli }} +{% else %} + protocol bgp +{% endif %} +{% break %} +{% else %} +{% set bgp_flag = False %} +{% set protocol_cli = 'protocol ' ~ protocol.protocol | lower %} +{% if protocol.flags is arista.avd.defined and protocol.protocol | lower == 'tcp' %} +{% for flag in protocol.flags %} + {{ protocol_cli }} flags {{ flag }} +{% endfor %} +{% endif %} +{% if protocol.protocol | lower in ['tcp','udp'] and ( + protocol.src_port is arista.avd.defined or + protocol.dst_port is arista.avd.defined or + protocol.src_field is arista.avd.defined or + protocol.dst_field is arista.avd.defined) %} +{# -- source/destination port-list -- #} +{% if protocol.src_port is arista.avd.defined or protocol.dst_port is arista.avd.defined %} +{% set protocol_port_cli = protocol_cli %} +{% if protocol.src_port is arista.avd.defined %} +{% set protocol_port_cli = protocol_port_cli ~ ' source port ' ~ protocol.src_port %} +{% endif %} +{% if protocol.dst_port is arista.avd.defined %} +{% set protocol_port_cli = protocol_port_cli ~ ' destination port ' ~ protocol.dst_port %} +{% endif %} + {{ protocol_port_cli }} {% endif %} -{% set protocol_cli = protocol_cli ~ ' destination port field-set ' ~ protocol.dst_field %} - {{ protocol_cli }} -{# -- source field-set -- #} -{% elif protocol.src_field is arista.avd.defined and protocol.protocol | lower in ['tcp','udp'] %} -{% set protocol_cli = 'protocol ' ~ protocol.protocol %} -{% if protocol.flags is arista.avd.defined %} -{% set protocol_cli = protocol_cli ~ ' flags ' ~ protocol.flags | join(' ') %} +{# -- source/destination field-set -- #} +{% if protocol.src_field is arista.avd.defined or protocol.dst_field is arista.avd.defined %} +{% set protocol_field_cli = protocol_cli %} +{% if protocol.src_field is arista.avd.defined %} +{% set protocol_field_cli = protocol_field_cli ~ ' source port field-set ' ~ protocol.src_field %} +{% endif %} +{% if protocol.dst_field is arista.avd.defined %} +{% set protocol_field_cli = protocol_field_cli ~ ' destination port field-set ' ~ protocol.dst_field %} +{% endif %} + {{ protocol_field_cli }} {% endif %} -{% set protocol_cli = protocol_cli ~ ' source port field-set ' ~ protocol.src_field %} +{% elif protocol.icmp_type is arista.avd.defined and protocol.protocol | lower == 'icmp' %} + {{ protocol_cli }} type {{ protocol.icmp_type | arista.avd.natural_sort | join(' ') }} code all +{% else %} {{ protocol_cli }} -{% elif protocol.icmp_type is arista.avd.defined(protocol.protocol) | lower == 'icmp' %} - protocol icmp type {{ protocol.icmp_type | join(' ') }} code all -{% elif protocol.protocol | lower == 'neighbors' %} - protocol neighbors bgp -{% elif protocol.protocol | lower != 'ip' %} - protocol {{ protocol.protocol }} {% endif %} -{% endfor %} -{% endif %} -{# -- TTL MANAGEMENT -- #} -{% if match.ttl is arista.avd.defined %} +{% endif %} +{% endfor %} +{% endif %} +{# -- TTL MANAGEMENT -- #} +{% if match.ttl is arista.avd.defined %} ttl {{ match.ttl }} -{% endif %} -{# -- FRAGMENT MANAGEMENT -- #} -{% if match.fragment.offset is arista.avd.defined %} +{% endif %} +{# -- FRAGMENT MANAGEMENT -- #} +{% if match.fragment.offset is arista.avd.defined %} fragment offset {{ match.fragment.offset }} -{% elif match.fragment is defined %} +{% elif match.fragment is defined %} fragment -{% endif %} +{% endif %} {# -- ACTIONS SECTION -- #} -{% if match.actions.count is arista.avd.defined or match.actions.traffic_class is arista.avd.defined or match.actions.dscp is arista.avd.defined or match.actions.drop is arista.avd.defined(true) %} +{% if match.actions.count is arista.avd.defined or match.actions.traffic_class is arista.avd.defined or match.actions.dscp is arista.avd.defined or match.actions.drop is arista.avd.defined(true) %} + ! actions -{# -- COUNT packets -- #} -{% if match.actions.count is arista.avd.defined %} +{# -- COUNT packets -- #} +{% if match.actions.count is arista.avd.defined %} count {{ match.actions.count }} -{% endif %} -{# -- Traffic Class -- #} -{% if match.actions.traffic_class is arista.avd.defined %} - set traffic class {{ match.actions.traffic_class }} -{% endif %} -{# -- DSCP -- #} -{% if match.actions.dscp is arista.avd.defined %} - set dscp {{ match.actions.dscp }} -{% endif %} -{# -- DROP Action -- #} -{% if match.actions.drop is arista.avd.defined(true) %} +{% endif %} +{# -- DROP Action -- #} +{% if match.actions.drop is arista.avd.defined(true) %} drop -{# -- LOGGING only if DROP is set-- #} -{% if match.actions.log is arista.avd.defined(true) %} +{# -- LOGGING only if DROP is set-- #} +{% if match.actions.log is arista.avd.defined(true) %} log -{% endif %} {% endif %} {% endif %} +{# -- DSCP -- #} +{% if match.actions.dscp is arista.avd.defined %} + set dscp {{ match.actions.dscp }} +{% endif %} +{# -- Traffic Class -- #} +{% if match.actions.traffic_class is arista.avd.defined %} + set traffic class {{ match.actions.traffic_class }} +{% endif %} +{% endif %} {# END OF MATCH Section #} - ! ! -{% endfor %} -{% endif %} +{% endfor %} +{% endif %} {# DEFAULT MATCH Section #} -{% if policy.default_actions is arista.avd.defined %} -{% for version in policy.default_actions %} - match {{ version | lower }}-all-default {{ version | lower }} + match ipv4-all-default ipv4 +{% if policy.default_actions.ipv4 is arista.avd.defined %} actions -{% if version is arista.avd.defined('ipv4') %} -{# -- COUNT packets ipv4 -- #} -{% if policy.default_actions.ipv4.count is arista.avd.defined %} +{# -- COUNT packets ipv4 -- #} +{% if policy.default_actions.ipv4.count is arista.avd.defined %} count {{ policy.default_actions.ipv4.count }} -{% endif %} -{# -- Traffic Class ipv4 -- #} -{% if policy.default_actions.ipv4.traffic_class is arista.avd.defined %} - set traffic class {{ policy.default_actions.ipv4.traffic_class }} -{% endif %} -{# -- DSCP ipv4 -- #} -{% if policy.default_actions.ipv4.dscp is arista.avd.defined %} - set dscp {{ policy.default_actions.ipv4.dscp }} -{% endif %} -{# -- DROP Action ipv4 -- #} -{% if policy.default_actions.ipv4.drop is arista.avd.defined(true) %} +{% endif %} +{# -- DROP Action ipv4 -- #} +{% if policy.default_actions.ipv4.drop is arista.avd.defined(true) %} drop -{# -- LOGGING ipv4 only if DROP is set-- #} -{% if policy.default_actions.ipv4.log is arista.avd.defined(true) %} +{# -- LOGGING ipv4 only if DROP is set-- #} +{% if policy.default_actions.ipv4.log is arista.avd.defined(true) %} log -{% endif %} -{% endif %} -{% elif version is arista.avd.defined('ipv6') %} -{# -- COUNT packets ipv6 -- #} -{% if policy.default_actions.ipv6.count is arista.avd.defined %} +{% endif %} +{% endif %} +{# -- DSCP ipv4 -- #} +{% if policy.default_actions.ipv4.dscp is arista.avd.defined %} + set dscp {{ policy.default_actions.ipv4.dscp }} +{% endif %} +{# -- Traffic Class ipv4 -- #} +{% if policy.default_actions.ipv4.traffic_class is arista.avd.defined %} + set traffic class {{ policy.default_actions.ipv4.traffic_class }} +{% endif %} +{% endif %} + ! + match ipv6-all-default ipv6 +{% if policy.default_actions.ipv6 is arista.avd.defined %} + actions +{# -- COUNT packets ipv6 -- #} +{% if policy.default_actions.ipv6.count is arista.avd.defined %} count {{ policy.default_actions.ipv6.count }} -{% endif %} -{# -- Traffic Class ipv6 -- #} -{% if policy.default_actions.ipv6.traffic_class is arista.avd.defined %} - set traffic class {{ policy.default_actions.ipv6.traffic_class }} -{% endif %} -{# -- DSCP ipv6 -- #} -{% if policy.default_actions.ipv6.dscp is arista.avd.defined %} - set dscp {{ policy.default_actions.ipv6.dscp }} -{% endif %} -{# -- DROP Action ipv6 -- #} -{% if policy.default_actions.ipv6.drop is arista.avd.defined(true) %} +{% endif %} +{# -- DROP Action ipv6 -- #} +{% if policy.default_actions.ipv6.drop is arista.avd.defined(true) %} drop -{# -- LOGGING ipv6 only if DROP is set-- #} -{% if policy.default_actions.ipv6.log is arista.avd.defined(true) %} +{# -- LOGGING ipv6 only if DROP is set-- #} +{% if policy.default_actions.ipv6.log is arista.avd.defined(true) %} log -{% endif %} -{% endif %} -{% endif %} -{% endfor %} +{% endif %} {% endif %} +{# -- DSCP ipv6 -- #} +{% if policy.default_actions.ipv6.dscp is arista.avd.defined %} + set dscp {{ policy.default_actions.ipv6.dscp }} +{% endif %} +{# -- Traffic Class ipv6 -- #} +{% if policy.default_actions.ipv6.traffic_class is arista.avd.defined %} + set traffic class {{ policy.default_actions.ipv6.traffic_class }} +{% endif %} +{% endif %} {# END of DEFAULT MATCH Section #} +{% if not loop.last %} ! -{% endfor %} -{% endif %} +{% endif %} +{% endfor %} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/transceiver-qsfp-default-mode.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/transceiver-qsfp-default-mode.j2 index ed7b354fd4a..e77996ce6d1 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/transceiver-qsfp-default-mode.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/transceiver-qsfp-default-mode.j2 @@ -4,8 +4,8 @@ that can be found in the LICENSE file. #} {# eos - transceiver qsfp default mode #} -{# cannot be disabled in current EOS releases #} -{% if transceiver_qsfp_default_mode_4x10 | arista.avd.default(generate_default_config, true) %} +{% if transceiver_qsfp_default_mode_4x10 is arista.avd.defined(true) + or (generate_default_config is arista.avd.defined(true) and transceiver_qsfp_default_mode_4x10 is not arista.avd.defined(false)) %} ! transceiver qsfp default-mode 4x10G {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vlan-interfaces.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vlan-interfaces.j2 index 87a2a5a8b45..d3f03471974 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vlan-interfaces.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vlan-interfaces.j2 @@ -306,6 +306,112 @@ interface {{ vlan_interface.name }} {% if vlan_interface.isis_network_point_to_point is arista.avd.defined(true) %} isis network point-to-point {% endif %} +{% if vlan_interface.isis_authentication.both.mode is arista.avd.defined + and (vlan_interface.isis_authentication.both.mode in ["md5", "text"] + or (vlan_interface.isis_authentication.both.mode == "sha" and vlan_interface.isis_authentication.both.sha.key_id is arista.avd.defined) + or (vlan_interface.isis_authentication.both.mode == "shared-secret" + and vlan_interface.isis_authentication.both.shared_secret.profile is arista.avd.defined + and vlan_interface.isis_authentication.both.shared_secret.algorithm is arista.avd.defined)) %} +{% set isis_auth_cli = "isis authentication mode " ~ vlan_interface.isis_authentication.both.mode %} +{% if vlan_interface.isis_authentication.both.mode == "sha" %} +{% set isis_auth_cli = isis_auth_cli ~ " key-id " ~ vlan_interface.isis_authentication.both.sha.key_id %} +{% elif vlan_interface.isis_authentication.both.mode == "shared-secret" %} +{% set isis_auth_cli = isis_auth_cli ~ " profile " ~ vlan_interface.isis_authentication.both.shared_secret.profile ~ " algorithm " ~ vlan_interface.isis_authentication.both.shared_secret.algorithm %} +{% endif %} +{% if vlan_interface.isis_authentication.both.rx_disabled is arista.avd.defined(true) %} +{% set isis_auth_cli = isis_auth_cli ~ " rx-disabled" %} +{% endif %} + {{ isis_auth_cli }} +{% else %} +{% if vlan_interface.isis_authentication.level_1.mode is arista.avd.defined + and (vlan_interface.isis_authentication.level_1.mode in ["md5", "text"] + or (vlan_interface.isis_authentication.level_1.mode == "sha" and vlan_interface.isis_authentication.level_1.sha.key_id is arista.avd.defined) + or (vlan_interface.isis_authentication.level_1.mode == "shared-secret" + and vlan_interface.isis_authentication.level_1.shared_secret.profile is arista.avd.defined + and vlan_interface.isis_authentication.level_1.shared_secret.algorithm is arista.avd.defined)) %} +{% set isis_auth_cli = "isis authentication mode " ~ vlan_interface.isis_authentication.level_1.mode %} +{% if vlan_interface.isis_authentication.level_1.mode == "sha" %} +{% set isis_auth_cli = isis_auth_cli ~ " key-id " ~ vlan_interface.isis_authentication.level_1.sha.key_id %} +{% elif vlan_interface.isis_authentication.level_1.mode == "shared-secret" %} +{% set isis_auth_cli = isis_auth_cli ~ " profile " ~ vlan_interface.isis_authentication.level_1.shared_secret.profile ~ " algorithm " ~ vlan_interface.isis_authentication.level_1.shared_secret.algorithm %} +{% endif %} +{% if vlan_interface.isis_authentication.level_1.rx_disabled is arista.avd.defined(true) %} +{% set isis_auth_cli = isis_auth_cli ~ " rx-disabled" %} +{% endif %} + {{ isis_auth_cli }} level-1 +{% endif %} +{% if vlan_interface.isis_authentication.level_2.mode is arista.avd.defined + and (vlan_interface.isis_authentication.level_2.mode in ["md5", "text"] + or (vlan_interface.isis_authentication.level_2.mode == "sha" and vlan_interface.isis_authentication.level_2.sha.key_id is arista.avd.defined) + or (vlan_interface.isis_authentication.level_2.mode == "shared-secret" + and vlan_interface.isis_authentication.level_2.shared_secret.profile is arista.avd.defined + and vlan_interface.isis_authentication.level_2.shared_secret.algorithm is arista.avd.defined)) %} +{% set isis_auth_cli = "isis authentication mode " ~ vlan_interface.isis_authentication.level_2.mode %} +{% if vlan_interface.isis_authentication.level_2.mode == "sha" %} +{% set isis_auth_cli = isis_auth_cli ~ " key-id " ~ vlan_interface.isis_authentication.level_2.sha.key_id %} +{% elif vlan_interface.isis_authentication.level_2.mode == "shared-secret" %} +{% set isis_auth_cli = isis_auth_cli ~ " profile " ~ vlan_interface.isis_authentication.level_2.shared_secret.profile ~ " algorithm " ~ vlan_interface.isis_authentication.level_2.shared_secret.algorithm %} +{% endif %} +{% if vlan_interface.isis_authentication.level_2.rx_disabled is arista.avd.defined(true) %} +{% set isis_auth_cli = isis_auth_cli ~ " rx-disabled" %} +{% endif %} + {{ isis_auth_cli }} level-2 +{% endif %} +{% endif %} +{% if vlan_interface.isis_authentication is arista.avd.defined %} +{% set both_key_ids = [] %} +{% if vlan_interface.isis_authentication.both.key_ids is arista.avd.defined %} +{% for auth_key in vlan_interface.isis_authentication.both.key_ids | arista.avd.natural_sort("id") %} +{% if auth_key.id is arista.avd.defined + and auth_key.algorithm is arista.avd.defined + and auth_key.key_type is arista.avd.defined + and auth_key.key is arista.avd.defined %} +{% do both_key_ids.append(auth_key.id) %} +{% if auth_key.rfc_5310 is arista.avd.defined(true) %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} rfc-5310 key {{ auth_key.key_type }} {{ auth_key.key }} +{% else %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} key {{ auth_key.key_type }} {{ auth_key.key }} +{% endif %} +{% endif %} +{% endfor %} +{% endif %} +{% for auth_key in vlan_interface.isis_authentication.level_1.key_ids | arista.avd.natural_sort("id") %} +{% if auth_key.id is arista.avd.defined + and auth_key.id not in both_key_ids + and auth_key.algorithm is arista.avd.defined + and auth_key.key_type is arista.avd.defined + and auth_key.key is arista.avd.defined %} +{% if auth_key.rfc_5310 is arista.avd.defined(true) %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} rfc-5310 key {{ auth_key.key_type }} {{ auth_key.key }} level-1 +{% else %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} key {{ auth_key.key_type }} {{ auth_key.key }} level-1 +{% endif %} +{% endif %} +{% endfor %} +{% for auth_key in vlan_interface.isis_authentication.level_2.key_ids | arista.avd.natural_sort("id") %} +{% if auth_key.id is arista.avd.defined + and auth_key.id not in both_key_ids + and auth_key.algorithm is arista.avd.defined + and auth_key.key_type is arista.avd.defined + and auth_key.key is arista.avd.defined %} +{% if auth_key.rfc_5310 is arista.avd.defined(true) %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} rfc-5310 key {{ auth_key.key_type }} {{ auth_key.key }} level-2 +{% else %} + isis authentication key-id {{ auth_key.id }} algorithm {{ auth_key.algorithm }} key {{ auth_key.key_type }} {{ auth_key.key }} level-2 +{% endif %} +{% endif %} +{% endfor %} +{% if vlan_interface.isis_authentication.both.key_type is arista.avd.defined and vlan_interface.isis_authentication.both.key is arista.avd.defined %} + isis authentication key {{ vlan_interface.isis_authentication.both.key_type }} {{ vlan_interface.isis_authentication.both.key }} +{% else %} +{% if vlan_interface.isis_authentication.level_1.key_type is arista.avd.defined and vlan_interface.isis_authentication.level_1.key is arista.avd.defined %} + isis authentication key {{ vlan_interface.isis_authentication.level_1.key_type }} {{ vlan_interface.isis_authentication.level_1.key }} level-1 +{% endif %} +{% if vlan_interface.isis_authentication.level_2.key_type is arista.avd.defined and vlan_interface.isis_authentication.level_2.key is arista.avd.defined %} + isis authentication key {{ vlan_interface.isis_authentication.level_2.key_type }} {{ vlan_interface.isis_authentication.level_2.key }} level-2 +{% endif %} +{% endif %} +{% endif %} {% if vlan_interface.vrrp_ids is arista.avd.defined %} {% for vrid in vlan_interface.vrrp_ids | arista.avd.natural_sort('id') if vrid.id is arista.avd.defined %} {% if vrid.priority_level is arista.avd.defined %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vxlan-interface.j2 b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vxlan-interface.j2 index 0468fface33..23484b76e3f 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vxlan-interface.j2 +++ b/python-avd/pyavd/_eos_cli_config_gen/j2templates/eos/vxlan-interface.j2 @@ -34,9 +34,6 @@ interface Vxlan1 {% if vlan.vni is arista.avd.defined %} vxlan vlan {{ vlan.id }} vni {{ vlan.vni }} {% endif %} -{% if vlan.flood_vteps is arista.avd.defined %} - vxlan vlan {{ vlan.id }} flood vtep {{ vlan.flood_vteps | join(' ') }} -{% endif %} {% endfor %} {% for vrf in vxlan_config.vxlan.vrfs | arista.avd.natural_sort('name') %} {% if vrf.vni is arista.avd.defined %} @@ -59,30 +56,35 @@ interface Vxlan1 {% if vxlan_config.vxlan.flood_vteps is arista.avd.defined %} vxlan flood vtep {{ vxlan_config.vxlan.flood_vteps | join(' ') }} {% endif %} -{% if vxlan_config.vxlan.qos.dscp_propagation_encapsulation is arista.avd.defined(true) %} - vxlan qos dscp propagation encapsulation -{% elif vxlan_config.vxlan.qos.dscp_propagation_encapsulation is arista.avd.defined(false) %} - no vxlan qos dscp propagation encapsulation +{% for vlan in vxlan_config.vxlan.vlans | arista.avd.natural_sort('id') %} +{% if vlan.flood_vteps is arista.avd.defined %} + vxlan vlan {{ vlan.id }} flood vtep {{ vlan.flood_vteps | join(' ') }} +{% endif %} +{% endfor %} +{% for vlan in vxlan_config.vxlan.vlans | arista.avd.natural_sort('id') if vlan.multicast_group is arista.avd.defined %} + vxlan vlan {{ vlan.id }} multicast group {{ vlan.multicast_group }} +{% endfor %} +{% for vrf in vxlan_config.vxlan.vrfs | arista.avd.natural_sort('name') if vrf.multicast_group is arista.avd.defined %} + vxlan vrf {{ vrf.name }} multicast group {{ vrf.multicast_group }} +{% endfor %} +{% if vxlan_config.vxlan.multicast.headend_replication is arista.avd.defined(true) %} + vxlan multicast headend-replication {% endif %} {% if vxlan_config.vxlan.qos.ecn_propagation is arista.avd.defined(true) %} vxlan qos ecn propagation {% elif vxlan_config.vxlan.qos.ecn_propagation is arista.avd.defined(false) %} no vxlan qos ecn propagation {% endif %} +{% if vxlan_config.vxlan.qos.dscp_propagation_encapsulation is arista.avd.defined(true) %} + vxlan qos dscp propagation encapsulation +{% elif vxlan_config.vxlan.qos.dscp_propagation_encapsulation is arista.avd.defined(false) %} + no vxlan qos dscp propagation encapsulation +{% endif %} {% if vxlan_config.vxlan.qos.map_dscp_to_traffic_class_decapsulation is arista.avd.defined(true) %} vxlan qos map dscp to traffic-class decapsulation {% elif vxlan_config.vxlan.qos.map_dscp_to_traffic_class_decapsulation is arista.avd.defined(false) %} no vxlan qos map dscp to traffic-class decapsulation {% endif %} -{% for vlan in vxlan_config.vxlan.vlans | arista.avd.natural_sort('id') if vlan.multicast_group is arista.avd.defined %} - vxlan vlan {{ vlan.id }} multicast group {{ vlan.multicast_group }} -{% endfor %} -{% for vrf in vxlan_config.vxlan.vrfs | arista.avd.natural_sort('name') if vrf.multicast_group is arista.avd.defined %} - vxlan vrf {{ vrf.name }} multicast group {{ vrf.multicast_group }} -{% endfor %} -{% if vxlan_config.vxlan.multicast.headend_replication is arista.avd.defined(true) %} - vxlan multicast headend-replication -{% endif %} {% if vxlan_config.eos_cli is arista.avd.defined %} {{ vxlan_config.eos_cli | indent(3, false) }} {% endif %} diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml index 645459a6a7e..deefbb4f574 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/eos_cli_config_gen.schema.yml @@ -290,6 +290,9 @@ keys: aaa_root: type: dict keys: + disabled: + type: bool + description: Set to `true` to configure `no aaa root` which is the EOS default. secret: type: dict keys: @@ -872,6 +875,10 @@ keys: type: list primary_key: name display_name: Community Lists (legacy model) + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: ip_community_lists items: type: dict keys: @@ -891,6 +898,10 @@ keys: description: 'Add a comment to provide information about the configuration. This comment will be rendered at the top of the generated configuration.' + config_end: + type: bool + description: Render `end` at the end of the configuration. + default: false custom_templates: type: list display_name: Extensibility with Custom Templates @@ -1545,6 +1556,26 @@ keys: max: 300 convert_types: - str + radius_av_pair_username_format: + type: dict + description: RADIUS AV-pair username settings. + keys: + delimiter: + type: str + description: Delimiter to use in MAC address string. + required: true + valid_values: + - colon + - hyphen + - none + - period + mac_string_case: + type: str + description: MAC address string in lowercase/uppercase. + required: true + valid_values: + - lowercase + - uppercase radius_av_pair: type: dict keys: @@ -1822,6 +1853,10 @@ keys: enable_password: type: dict keys: + disabled: + type: bool + description: Set to `true` to configure `no enable password` which is the + EOS default. hash_algorithm: type: str valid_values: @@ -1841,7 +1876,13 @@ keys: of the final EOS configuration. eos_cli_config_gen_configuration: type: dict + documentation_options: + table: role-settings keys: + enable: + type: bool + description: Generate device EOS configurations. + default: true hide_passwords: type: bool description: 'Replace the input data using the `hide_passwords` filter in @@ -1851,7 +1892,13 @@ keys: default: false eos_cli_config_gen_documentation: type: dict + documentation_options: + table: role-settings keys: + enable: + type: bool + description: Generate device Markdown documentation. + default: true hide_passwords: type: bool description: 'Replace the input data using the `hide_passwords` filter in @@ -1971,14 +2018,29 @@ keys: For an access port this would be a single vlan "123". ' + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.access_vlan or ethernet_interfaces[].switchport.trunk.allowed_vlan native_vlan: type: int convert_types: - str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.native_vlan native_vlan_tag: type: bool description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.native_vlan_tag mode: type: str valid_values: @@ -1986,7 +2048,17 @@ keys: - dot1q-tunnel - trunk - trunk phone + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.mode phone: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone type: dict keys: trunk: @@ -1996,12 +2068,22 @@ keys: - tagged phone - untagged - untagged phone + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone.trunk vlan: type: int min: 1 max: 4094 convert_types: - str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone.vlan l2_protocol: type: dict keys: @@ -2017,8 +2099,17 @@ keys: type: list items: type: str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.groups type: type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation valid_values: - routed - switched @@ -2028,8 +2119,7 @@ keys: description: 'l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed. - Interface will not be listed in device documentation, unless "type" is - set. + The `type = switched/routed` should not be combined with `switchport`. ' snmp_trap_link_change: @@ -2150,24 +2240,61 @@ keys: convert_types: - str description: VLAN tag to configure on sub-interface. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: encapsulation_dot1q.vlan + encapsulation_dot1q: + description: 'Warning: `encapsulation_dot1q` should not be combined with + `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: + l2dot1q`.' + type: dict + keys: + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + required: true + description: VLAD ID. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID. This setting can only be applied to sub-interfaces + on EOS. encapsulation_vlan: type: dict + description: 'This setting can only be applied to sub-interfaces on EOS. + + Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: + l3dot1q` or `ethernet_interfaces[].type: l2dot1q`.' keys: client: type: dict keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: type: int convert_types: - str + min: 1 + max: 4094 description: Client VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Client Outer VLAN ID. inner: type: int @@ -2176,32 +2303,129 @@ keys: description: Client Inner VLAN ID. unmatched: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + encapsulation: + type: str + valid_values: + - dot1q + - dot1ad + - unmatched + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client Outer VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client Inner VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad network: type: dict description: Network encapsulations are all optional and skipped if using client unmatched. keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: type: int convert_types: - str + min: 1 + max: 4094 description: Network VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Network outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Network inner VLAN ID. client: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + encapsulation: + description: '`untagged` (no encapsulation) is applicable for `untagged` + client only. + + `client` and `client inner` (retain client encapsulation) is not + applicable for `untagged` client.' + type: str + valid_values: + - dot1q + - dot1ad + - client + - client inner + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network outer VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network inner VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad vlan_id: + description: 'This setting can only be applied to sub-interfaces on EOS. + + Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type + == l2dot1q`.' type: int min: 1 max: 4094 @@ -2758,12 +2982,27 @@ keys: description: ZTP vlan number. trunk_private_vlan_secondary: type: bool + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.private_vlan_secondary pvlan_mapping: type: str convert_types: - int description: List of vlans as string. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.pvlan_mapping vlan_translations: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.vlan_translations type: list items: type: dict @@ -2839,6 +3078,9 @@ keys: type: bool host_mode_common: type: bool + mac_based_access_list: + type: bool + description: Operate interface in per-mac access-list mode. timeout: type: dict keys: @@ -2896,6 +3138,30 @@ keys: max: 65535 convert_types: - str + aaa: + type: dict + keys: + unresponsive: + type: dict + description: Configure AAA timeout options. + keys: + eap_response: + type: str + description: EAP response to send. EOS default is `success`. + valid_values: + - success + - disabled + action: + type: dict + $ref: eos_cli_config_gen#/keys/dot1x/keys/aaa/keys/unresponsive/keys/action + keys: + traffic_allow_access_list: + type: str + description: Name of standard access-list to apply when + AAA times out. + phone_action: + type: dict + $ref: eos_cli_config_gen#/keys/dot1x/keys/aaa/keys/unresponsive/keys/phone_action service_profile: type: str description: QOS profile. @@ -3432,84 +3698,369 @@ keys: role. switchport: type: dict + description: This should not be combined with `ethernet_interfaces[].type + = switched/routed`. keys: - port_security: + enabled: + type: bool + description: 'Warning: This should not be combined with `ethernet_interfaces[].type + = routed`.' + mode: + type: str + valid_values: + - access + - dot1q-tunnel + - trunk + - trunk phone + description: 'Warning: This should not be combined with `ethernet_interfaces[].mode`.' + access_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Set VLAN when interface is in access mode. + + Warning: This should not be combined with `ethernet_interfaces[].mode + = access/dot1q-tunnel` and `ethernet_interface[].vlans`.' + trunk: type: dict keys: - enabled: + allowed_vlan: + type: str + convert_types: + - int + description: 'VLAN ID or range(s) of VLAN IDs. + + Warning: This should not be combined with `ethernet_interfaces[].mode + = trunk` and `ethernet_interface[].vlans`.' + native_vlan: + type: int + convert_types: + - str + description: 'Set native VLAN when interface is in trunking mode. + + Warning: This should not be combined with `ethernet_interfaces[].native_vlan`.' + min: 1 + max: 4094 + native_vlan_tag: type: bool - mac_address_maximum: - type: dict - description: Maximum number of MAC addresses allowed on the interface. - keys: - disabled: - type: bool - description: Disable port level check for port security (only - in violation 'shutdown' mode). - limit: - type: int - convert_types: - - str - min: 1 - max: 1000 - description: MAC address limit. - violation: - type: dict - description: Configure violation mode (shutdown or protect), EOS - default is 'shutdown'. - keys: - mode: - type: str - valid_values: - - shutdown - - protect - description: Configure port security mode. - protect_log: - type: bool - description: Log new addresses seen after limit is reached in - protect mode. - vlan_default_mac_address_maximum: + description: 'If setting both native_vlan and native_vlan_tag, native_vlan_tag + takes precedence. + + Warning: This should not be combined with `ethernet_interfaces[].native_vlan_tag`.' + private_vlan_secondary: + type: bool + description: 'Enable secondary VLAN mapping for a private vlan. + + Warning: This should not be combined with `ethernet_ineterfaces[].trunk_private_vlan_secondary`.' + groups: + description: 'Warning: This should not be combined with `ethernet_ineterfaces[].trunk_groups`. + + ' + type: list + items: + type: str + convert_types: + - int + description: Trunk group name. + phone: + type: dict + description: 'Warning: This should not be combined with `ethernet_interfaces[].phone`.' + keys: + vlan: type: int + min: 1 + max: 4094 convert_types: - str - min: 0 - max: 1000 - description: Default maximum MAC addresses for all VLANs on this - interface. - vlans: + description: 'Warning: This should not be combined with `ethernet_interfaces[].phone.vlan`.' + trunk: + type: str + description: 'Warning: This should not be combined with `ethernet_interfaces[].phone.trunk`.' + valid_values: + - tagged + - tagged phone + - untagged + - untagged phone + pvlan_mapping: + type: str + convert_types: + - int + description: 'Secondary VLAN IDs of the private VLAN mapping. + + Warning: This should not be combined with `ethernet_interfaces[].pvlan_mapping`.' + dot1q: + type: dict + keys: + ethertype: + type: int + convert_types: + - str + min: 1536 + max: 65535 + description: Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged + frames. + vlan_tag: + type: str + description: Allow/disallow VLAN tagged frames. + valid_values: + - disallowed + - required + source_interface: + type: str + description: 'tx: Allow bridged traffic to go out of the source interface. + + tx multicast: Allow multicast traffic only to go out of the source + interface.' + valid_values: + - tx + - tx multicast + vlan_translations: + description: 'VLAN Translation mappings. + + Warning: This should not be combined with `ethernet_interfaces[].vlan_translations`.' + type: dict + keys: + in_required: + type: bool + description: Drop the ingress traffic that do not match any VLAN + mapping. + out_required: + type: bool + description: Drop the egress traffic that do not match any VLAN + mapping. + direction_in: type: list - primary_key: range + description: Map ingress traffic only. items: type: dict keys: - range: + from: type: str convert_types: - int - description: "VLAN ID or range(s) of VLAN IDs, <1-4094>.\nExample:\n - \ - 3\n - 1,3\n - 1-10\n" - mac_address_maximum: + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + required: true + to: type: int convert_types: - str - tap: - description: 'In tap mode, the interface operates as a tap port. - - Tap ports receive traffic for replication on one or more tool ports.' - type: dict - keys: - allowed_vlan: - type: str - convert_types: - - int - description: VLAN ID or range(s) of VLAN IDs within range 1-4094. - default: - description: Default tap destination config. - type: dict - keys: - groups: - description: Tap group names for the interface. - type: list + min: 1 + max: 4094 + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + direction_out: + type: list + description: Map egress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + required: true + to: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: VLAN ID to map to. + dot1q_tunnel_to: + type: str + convert_types: + - int + description: 'VLAN ID or range of VLAN IDs or "all". Range + 1-4094. + + This takes precedence over `to` and `inner_vlan_to`.' + inner_vlan_to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map to. + direction_both: + type: list + description: Map both egress and ingress traffic. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + required: true + to: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID to map from. + network: + type: bool + description: 'Enable use of network-side VLAN ID. + + This setting can only be enabled when `inner_vlan_from` + is defined.' + vlan_forwarding_accept_all: + type: bool + backup_link: + type: dict + keys: + interface: + type: str + description: Backup interface. Example - Ethernet4, Vlan10 etc. + prefer_vlan: + type: str + convert_types: + - int + description: VLANs to carry on the backup interface (1-4094). + backup: + type: dict + description: The `backup_link` is required for this setting. + keys: + dest_macaddr: + type: str + format: mac + description: 'Destination MAC address for MAC move updates. + + The mac address should be multicast or broadcast. + + Example: 01:00:00:00:00:00' + initial_mac_move_delay: + type: int + convert_types: + - str + description: Initial MAC move delay in milliseconds. + min: 0 + max: 65535 + mac_move_burst: + type: int + convert_types: + - str + description: Size of MAC move bursts. + min: 0 + max: 65535 + mac_move_burst_interval: + type: int + convert_types: + - str + description: MAC move burst interval in milliseconds. + min: 0 + max: 65535 + preemption_delay: + type: int + convert_types: + - str + description: Preemption delay in milliseconds. + min: 0 + max: 65535 + port_security: + type: dict + keys: + enabled: + type: bool + mac_address_maximum: + type: dict + description: Maximum number of MAC addresses allowed on the interface. + keys: + disabled: + type: bool + description: Disable port level check for port security (only + in violation 'shutdown' mode). + limit: + type: int + convert_types: + - str + min: 1 + max: 1000 + description: MAC address limit. + violation: + type: dict + description: Configure violation mode (shutdown or protect), EOS + default is 'shutdown'. + keys: + mode: + type: str + valid_values: + - shutdown + - protect + description: Configure port security mode. + protect_log: + type: bool + description: Log new addresses seen after limit is reached in + protect mode. + vlan_default_mac_address_maximum: + type: int + convert_types: + - str + min: 0 + max: 1000 + description: Default maximum MAC addresses for all VLANs on this + interface. + vlans: + type: list + primary_key: range + items: + type: dict + keys: + range: + type: str + convert_types: + - int + description: "VLAN ID or range(s) of VLAN IDs, <1-4094>.\nExample:\n + \ - 3\n - 1,3\n - 1-10\n" + mac_address_maximum: + type: int + convert_types: + - str + tap: + description: 'In tap mode, the interface operates as a tap port. + + Tap ports receive traffic for replication on one or more tool ports.' + type: dict + keys: + allowed_vlan: + type: str + convert_types: + - int + description: VLAN ID or range(s) of VLAN IDs within range 1-4094. + default: + description: Default tap destination config. + type: dict + keys: + groups: + description: Tap group names for the interface. + type: list items: type: str interfaces: @@ -4069,7 +4620,7 @@ keys: default: false generate_default_config: type: bool - default: true + default: false description: 'The `generate_default_config` knob allows to omit default EOS configuration. This can be useful when leveraging `eos_cli_config_gen` to generate configlets @@ -4082,7 +4633,8 @@ keys: - RANCID Content Type - - Hostname + - Hostname (even if `hostname` variable is not set. Then the hostname is picked + up from `inventory_hostname`) - Default configuration for `aaa` @@ -4093,9 +4645,20 @@ keys: - End of configuration delimiter ' + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/devel/docs/porting-guides/5.x.x.html#default-eos-configuration-is-no-longer-automatically-generated generate_device_documentation: type: bool + documentation_options: + table: role-settings default: true + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: eos_cli_config_gen_documentation.enable hardware: type: dict keys: @@ -4121,6 +4684,19 @@ keys: serdes: type: str description: Serdes speed like "10g" or "25g". + port_groups: + type: list + primary_key: port_group + items: + type: dict + keys: + port_group: + type: str + convert_types: + - int + select: + type: str + description: Select Ports to activate hardware_counters: type: dict keys: @@ -5092,8 +5668,7 @@ keys: keys: name: type: str - description: Name of the SA policy. The "null" value is deprecated and - will be removed in AVD 5.0.0. + description: Name of the SA policy. sa_lifetime: type: dict keys: @@ -5727,9 +6302,7 @@ keys: - alerts - emergencies - disabled - description: 'Console logging severity level. - - ' + description: Console logging severity level. monitor: type: str valid_values: @@ -5742,9 +6315,7 @@ keys: - alerts - emergencies - disabled - description: 'Monitor logging severity level. - - ' + description: Monitor logging severity level. buffered: type: dict keys: @@ -5766,9 +6337,10 @@ keys: - notifications - warnings - disabled - description: 'Buffer logging severity level. - - ' + description: Buffer logging severity level. + repeat_messages: + type: bool + description: Summarize concurrent repeat messages. trap: type: str valid_values: @@ -5782,9 +6354,7 @@ keys: - system - warnings - disabled - description: 'Trap logging severity level. - - ' + description: Trap logging severity level. synchronous: type: dict keys: @@ -5801,9 +6371,7 @@ keys: - notifications - warnings - disabled - description: 'Synchronous logging severity level. - - ' + description: Synchronous logging severity level. default: critical format: type: dict @@ -5827,14 +6395,10 @@ keys: line. (default EOS CLI behaviour). sequence_numbers: type: bool - description: 'Add sequence numbers to log messages. - - ' + description: Add sequence numbers to log messages. rfc5424: type: bool - description: 'Forward logs in RFC5424 format. - - ' + description: Forward logs in RFC5424 format. facility: type: str valid_values: @@ -5922,6 +6486,15 @@ keys: event: type: dict keys: + congestion_drops_interval: + type: int + convert_types: + - str + min: 1 + max: 65535 + description: Logging interval in seconds. + global_link_status: + type: bool storm_control: type: dict keys: @@ -6912,6 +7485,25 @@ keys: management_ssh: type: dict keys: + authentication: + type: dict + keys: + empty_passwords: + type: str + valid_values: + - auto + - deny + - permit + description: Permit or deny empty passwords for SSH authentication. + protocols: + type: list + items: + type: str + valid_values: + - keyboard-interactive + - password + - public-key + description: Allowed SSH authentication methods. access_groups: type: list items: @@ -7539,16 +8131,12 @@ keys: type: str address_only: type: bool - description: 'PREVIEW: This key is in preview. - - When address-only is configured, the source IP of the packet is set to the - interface + description: 'When address-only is configured, the source IP of the packet + is set to the interface IP but the packet may exit the device via a different interface. - When set to `false`, the probe uses the interface to exit the device. - - Not supported yet in EOS.' + When set to `false`, the probe uses the interface to exit the device.' default: true hosts: type: list @@ -7567,16 +8155,12 @@ keys: type: str address_only: type: bool - description: 'PREVIEW: This key is in preview. - - When address-only is configured, the source IP of the packet is set - to the interface + description: 'When address-only is configured, the source IP of the + packet is set to the interface IP but the packet may exit the device via a different interface. - When set to `false`, the probe uses the interface to exit the device. - - Not supported yet in EOS.' + When set to `false`, the probe uses the interface to exit the device.' default: true url: type: str @@ -7606,16 +8190,12 @@ keys: type: str address_only: type: bool - description: 'PREVIEW: This key is in preview. - - When address-only is configured, the source IP of the packet is set - to the interface + description: 'When address-only is configured, the source IP of the + packet is set to the interface IP but the packet may exit the device via a different interface. - When set to `false`, the probe uses the interface to exit the device. - - Not supported yet in EOS.' + When set to `false`, the probe uses the interface to exit the device.' default: true hosts: type: list @@ -7634,17 +8214,13 @@ keys: type: str address_only: type: bool - description: 'PREVIEW: This key is in preview. - - When address-only is configured, the source IP of the packet - is set to the interface + description: 'When address-only is configured, the source IP of + the packet is set to the interface IP but the packet may exit the device via a different interface. When set to `false`, the probe uses the interface to exit the - device. - - Not supported yet in EOS.' + device.' default: true url: type: str @@ -7673,6 +8249,17 @@ keys: type: bool description: Some platforms support only the `logging transceiver` command. `enabled` key configures this command. + monitor_session_default_encapsulation_gre: + documentation_options: + table: monitor-sessions + type: dict + keys: + payload: + type: str + description: Mirroring GRE payload type configuration commands. + valid_values: + - full-packet + - inner-packet monitor_sessions: type: list items: @@ -7759,6 +8346,8 @@ keys: convert_types: - str monitor_telemetry_influx: + documentation_options: + table: monitor-telemetry type: dict keys: vrf: @@ -7833,6 +8422,8 @@ keys: required: true description: Value of the global tag pair. monitor_telemetry_postcard_policy: + documentation_options: + table: monitor-telemetry type: dict keys: disabled: @@ -8711,10 +9302,19 @@ keys: For an access port this would be a single vlan "123". ' + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.access_vlan or port_channel_interfaces[].switchport.trunk.allowed_vlan snmp_trap_link_change: type: bool type: type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation valid_values: - routed - switched @@ -8729,21 +9329,54 @@ keys: ' encapsulation_dot1q_vlan: type: int - description: VLAN tag to configure on sub-interface. convert_types: - str + description: VLAN tag to configure on sub-interface. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: encapsulation_dot1q.vlan + encapsulation_dot1q: + description: 'Warning: `encapsulation_dot1q` should not be combined with + `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: + l2dot1q`.' + type: dict + keys: + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + required: true + description: VLAD ID. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID. This setting can only be applied to sub-interfaces + on EOS. vrf: type: str description: VRF name. convert_types: - int encapsulation_vlan: + description: 'This setting can only be applied to sub-interfaces on EOS. + + Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: + l3dot1q` or `ethernet_interfaces[].type: l2dot1q`.' type: dict keys: client: type: dict keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: @@ -8755,40 +9388,141 @@ keys: type: int convert_types: - str + min: 1 + max: 4094 description: Client Outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Client Inner VLAN ID. unmatched: type: bool - network: - type: dict - description: Network encapsulation are all optional, and skipped if - using client unmatched. - keys: - dot1q: - type: dict - keys: - vlan: - type: int - convert_types: - - str + deprecation: + warning: true + remove_in_version: 6.0.0 + encapsulation: + type: str + valid_values: + - dot1q + - dot1ad + - unmatched + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client Outer VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Client Inner VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: unmatched`.' + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad + network: + type: dict + description: Network encapsulation are all optional, and skipped if + using client unmatched. + keys: + dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 + type: dict + keys: + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 description: Network VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Network Outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Network Inner VLAN ID. client: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + encapsulation: + description: '`untagged` (no encapsulation) is applicable for `untagged` + client only. + + `client` and `client inner` (retain client encapsulation) is not + applicable for `untagged` client.' + type: str + valid_values: + - dot1q + - dot1ad + - client + - client inner + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network outer VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Network inner VLAN ID. Not applicable for `encapsulation: + untagged` or `encapsulation: client`.' + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad vlan_id: + description: 'This setting can only be applied to sub-interfaces on EOS. + + Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type + == l2dot1q`.' type: int convert_types: - str @@ -8801,17 +9535,32 @@ keys: - dot1q-tunnel - trunk - trunk phone + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.mode native_vlan: type: int convert_types: - str description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.native_vlan native_vlan_tag: type: bool default: false description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.native_vlan_tag link_tracking_groups: type: list primary_key: name @@ -8828,18 +9577,33 @@ keys: - downstream phone: type: dict + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone keys: trunk: type: str valid_values: - tagged - untagged + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone.trunk vlan: type: int convert_types: - str min: 1 max: 4094 + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone.vlan l2_protocol: type: dict keys: @@ -8868,6 +9632,11 @@ keys: type: list items: type: str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.groups lacp_fallback_timeout: type: int description: Timeout in seconds. @@ -8963,12 +9732,27 @@ keys: type: bool trunk_private_vlan_secondary: type: bool + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.private_vlan_secondary pvlan_mapping: type: str description: List of vlans as string. convert_types: - int + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.pvlan_mapping vlan_translations: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.vlan_translations type: list items: type: dict @@ -9520,6 +10304,345 @@ keys: switchport: type: dict keys: + enabled: + type: bool + description: 'Warning: This should not be combined with `port_channel_interfaces[].type + = routed`.' + mode: + type: str + valid_values: + - access + - dot1q-tunnel + - trunk + - trunk phone + description: 'Warning: This should not be combined with `port_channel_interfaces[].mode`' + access_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: 'Set VLAN when interface is in access mode. + + Warning: This should not be combined with `port_channel_interfaces[].mode + = access/dot1q-tunnel` and `port_channel_interface.vlans`.' + trunk: + type: dict + keys: + allowed_vlan: + type: str + convert_types: + - int + description: 'VLAN ID or range(s) of VLAN IDs (1-4094). + + Warning: This should not be combined with `port_channel_interfaces[].mode + = trunk` and `port_channel_interfaces[].vlans`.' + native_vlan: + type: int + convert_types: + - str + description: 'Set native VLAN when interface is in trunking mode. + + Warning: This should not be combined with `port_channel_interfaces[].native_vlan`.' + min: 1 + max: 4094 + native_vlan_tag: + type: bool + description: 'If setting both native_vlan and native_vlan_tag, native_vlan_tag + takes precedence. + + Warning: This should not be combined with `port_channel_interfaces[].native_vlan_tag`.' + private_vlan_secondary: + type: bool + description: 'Enable secondary VLAN mapping for a private vlan. + + Warning: This should not be combined with `port_channel_interfaces[].trunk_private_vlan_secondary`.' + groups: + description: 'Warning: This should not be combined with `port_channel_interfaces[].trunk_groups`. + + ' + type: list + items: + type: str + convert_types: + - int + description: Trunk group name. + phone: + type: dict + keys: + vlan: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: 'Warning: This should not be combined with `port_channel_interfaces[].phone.vlan`.' + trunk: + type: str + description: 'Warning: This should not be combined with `port_channel_interfaces[].phone.trunk`' + valid_values: + - tagged + - tagged phone + - untagged + - untagged phone + pvlan_mapping: + type: str + convert_types: + - int + description: 'Secondary VLAN IDs of the private VLAN mapping. + + Warning: This should not be combined with `port_channel_interfaces[].pvlan_mapping`.' + dot1q: + type: dict + keys: + ethertype: + type: int + convert_types: + - str + min: 1536 + max: 65535 + description: Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged + frames. + vlan_tag: + type: str + valid_values: + - disallowed + - required + source_interface: + type: str + description: 'tx: Allow bridged traffic to go out of the source interface. + + tx multicast: Allow multicast traffic only to go out of the source + interface.' + valid_values: + - tx + - tx multicast + vlan_translations: + description: 'VLAN Translation mappings. + + Warning: This should not be combined with `port_channel_interfaces[].vlan_translations`.' + type: dict + keys: + in_required: + type: bool + description: Drop the ingress traffic that do not match any VLAN + mapping. + out_required: + type: bool + description: Drop the egress traffic that do not match any VLAN + mapping. + direction_in: + type: list + description: Map ingress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + direction_out: + type: list + description: Map egress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + required: true + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + dot1q_tunnel_to: + type: str + convert_types: + - int + description: 'VLAN ID or range of VLAN IDs or "all". Range + 1-4094. + + This takes precedence over `to` and `inner_vlan_to`.' + inner_vlan_to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map to. + direction_both: + type: list + description: Map both egress and ingress traffic. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range + 1-4094. + required: true + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + network: + type: bool + description: 'Enable use of network-side VLAN ID. + + This setting can only be enabled when `inner_vlan_from` + is defined.' + vlan_forwarding_accept_all: + type: bool + backup_link: + type: dict + keys: + interface: + type: str + required: true + description: Backup interface. Example - Ethernet4, Vlan10 etc. + prefer_vlan: + type: str + convert_types: + - int + description: VLANs to carry on the backup interface (1-4094). + backup: + type: dict + description: The `backup_link` is required for this setting. + keys: + dest_macaddr: + type: str + format: mac + description: 'Destination MAC address for MAC move updates. + + The mac address should be multicast or broadcast. + + Example: 01:00:00:00:00:00' + initial_mac_move_delay: + type: int + convert_types: + - str + description: Initial MAC move delay in milliseconds. + min: 0 + max: 65535 + mac_move_burst: + type: int + convert_types: + - str + description: Size of MAC move bursts. + min: 0 + max: 65535 + mac_move_burst_interval: + type: int + convert_types: + - str + description: MAC move burst interval in milliseconds. + min: 0 + max: 65535 + preemption_delay: + type: int + convert_types: + - str + description: Preemption delay in milliseconds. + min: 0 + max: 65535 + port_security: + type: dict + keys: + enabled: + type: bool + mac_address_maximum: + type: dict + description: Maximum number of MAC addresses allowed on the interface. + keys: + disabled: + type: bool + description: Disable port level check for port security (only + in violation 'shutdown' mode). + limit: + type: int + convert_types: + - str + min: 1 + max: 1000 + description: MAC address limit. + violation: + type: dict + description: Configure violation mode (shutdown or protect), EOS + default is 'shutdown'. + keys: + mode: + type: str + valid_values: + - shutdown + - protect + description: Configure port security mode. + protect_log: + type: bool + description: Log new addresses seen after limit is reached in + protect mode. + vlan_default_mac_address_maximum: + type: int + convert_types: + - str + min: 0 + max: 1000 + description: Default maximum MAC addresses for all VLANs on this + interface. + vlans: + type: list + primary_key: range + items: + type: dict + keys: + range: + type: str + convert_types: + - int + description: "VLAN ID or range(s) of VLAN IDs, <1-4094>.\nExample:\n + \ - 3\n - 1,3\n - 1-10\n" + mac_address_maximum: + type: int + convert_types: + - str tap: description: 'In tap mode, the interface operates as a tap port. @@ -10828,6 +11951,12 @@ keys: - pathfinder - transit region - transit zone + gateway_vxlan: + description: 'Enables VXLAN gateway router profile. + + Only applicable for `topology_role: edge`, `topology_role: transit region` + or `topology_role: transit zone`.' + type: bool region: type: dict description: Region name and ID. @@ -10891,11 +12020,7 @@ keys: policies: type: list primary_key: name - description: 'A sequence of application profiles mapped to some virtual topologies. - - - When `wan_mode` is set to `autovpn`, the rules are indexed using 10* - in the list.' + description: A sequence of application profiles mapped to some virtual topologies. items: type: dict keys: @@ -12115,6 +13240,8 @@ keys: valid_values: - vxlan - mpls + - path-selection + description: Transport encapsulation for neighbor. next_hop_self_source_interface: description: Source interface name. type: str @@ -12179,6 +13306,13 @@ keys: Example: MyFunction(myarg).' route_map: type: str + encapsulation: + type: str + valid_values: + - vxlan + - mpls + - path-selection + description: Transport encapsulation for the neighbor. peer_groups: type: list primary_key: name @@ -12225,6 +13359,8 @@ keys: valid_values: - vxlan - mpls + - path-selection + description: Transport encapsulation for the peer-group. additional_paths: type: dict keys: @@ -12402,12 +13538,343 @@ keys: description: Peer-group name. activate: type: bool - route_map_in: + route_map_in: + type: str + description: Inbound route-map name. + route_map_out: + type: str + description: Outbound route-map name. + rcf_in: + type: str + description: 'Inbound RCF function name with parenthesis. + + Example: MyFunction(myarg).' + rcf_out: + type: str + description: 'Outbound RCF function name with parenthesis. + + Example: MyFunction(myarg).' + default_originate: + type: dict + keys: + always: + type: bool + route_map: + description: Route-map name. + type: str + prefix_list_in: + type: str + description: Inbound prefix-list name. + prefix_list_out: + type: str + description: Outbound prefix-list name. + next_hop: + type: dict + keys: + address_family_ipv6: + type: dict + keys: + enabled: + type: bool + required: true + originate: + type: bool + address_family_ipv6_originate: + type: bool + deprecation: + warning: true + removed: true + new_key: address_family_ipv6 + remove_in_version: 5.0.0 + neighbors: + type: list + primary_key: ip_address + items: + type: dict + keys: + ip_address: + type: str + activate: + type: bool + route_map_in: + type: str + description: Inbound route-map name. + route_map_out: + type: str + description: Outbound route-map name. + rcf_in: + type: str + description: 'Inbound RCF function name with parenthesis. + + Example: MyFunction(myarg).' + rcf_out: + type: str + description: 'Outbound RCF function name with parenthesis. + + Example: MyFunction(myarg).' + prefix_list_in: + type: str + description: Inbound prefix-list name. + prefix_list_out: + type: str + description: Prefix-list name. + default_originate: + type: dict + keys: + always: + type: bool + route_map: + type: str + redistribute_routes: + type: list + primary_key: source_protocol + allow_duplicate_primary_key: true + items: + type: dict + keys: + source_protocol: + type: str + valid_values: + - attached-host + - bgp + - connected + - dynamic + - isis + - ospf + - ospfv3 + - rip + - static + - user + route_map: + type: str + include_leaked: + type: bool + description: Only applicable if `source_protocol` is one of `connected`, + `static`, `isis`, `ospf`, `ospfv3`. + rcf: + type: str + description: 'RCF function name with parenthesis. + + Example: MyFunction(myarg). + + `route_map` and `rcf` are mutually exclusive. `route_map` takes + precedence. + + Only applicable if `source_protocol` is one of `connected`, `static`, + `isis`, `user`, `dynamic`.' + ospf_route_type: + type: str + valid_values: + - external + - internal + - nssa-external + - nssa-external 1 + - nssa-external 2 + description: 'Routes learned by the OSPF protocol. + + The `ospf_route_type` is valid for source_protocols ''ospf'' and + ''ospfv3''. + + ' + address_family_ipv4_labeled_unicast: + type: dict + keys: + aigp_session: + type: dict + keys: + confederation: + type: bool + ebgp: + type: bool + ibgp: + type: bool + bgp: + type: dict + keys: + additional_paths: + type: dict + $ref: eos_cli_config_gen#/$defs/bgp_additional_paths + missing_policy: + type: dict + description: Missing policy configuration for all address-families. + keys: + direction_in: + description: Missing policy inbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy + decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy + decision. + next_hop_unchanged: + type: bool + graceful_restart: + type: bool + label_local_termination: + type: str + valid_values: + - explicit-null + - implicit-null + lfib_entry_installation_skipped: + type: bool + description: Skip LFIB entry installation and next hop self route advertisements. + neighbor_default: + type: dict + keys: + next_hop_self: + type: bool + peer_groups: + type: list + primary_key: name + items: + type: dict + keys: + name: + type: str + description: Peer-group name. + activate: + type: bool + additional_paths: + type: dict + $ref: eos_cli_config_gen#/$defs/bgp_additional_paths + aigp_session: + type: bool + graceful_restart: + type: bool + graceful_restart_helper: + type: dict + keys: + stale_route_map: + type: str + maximum_advertised_routes: + type: int + description: Maximum number of routes (0 means unlimited). + min: 0 + max: 4294967294 + convert_types: + - str + maximum_advertised_routes_warning_limit: + type: str + convert_types: + - int + description: 'Maximum number of routes after which a warning is + issued (0 means never warn) or + + Percentage of maximum number of routes at which to warn ("<1-100> + percent"). + + ' + missing_policy: + type: dict + description: Missing policy configuration for BGP Labeled-Unicast + neighbor. + keys: + direction_in: + description: Missing policy inbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing + policy decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing + policy decision. + multi_path: + type: bool + next_hop_resolution: + type: dict + keys: + v4_mapped_v6_translation: + type: bool + next_hop_self: + type: bool + next_hop_self_source_interface: + description: Source interface name. type: str - description: Inbound route-map name. - route_map_out: + next_hop_self_v4_mapped_v6_source_interface: + description: v4-mapped-v6 source interface name. Takes precedence + over the next_hop_self_source_interface. type: str - description: Outbound route-map name. + next_hop_unchanged: + type: bool rcf_in: type: str description: 'Inbound RCF function name with parenthesis. @@ -12418,54 +13885,123 @@ keys: description: 'Outbound RCF function name with parenthesis. Example: MyFunction(myarg).' - default_originate: + route_map_in: + type: str + description: Inbound route-map name. + route_map_out: + type: str + description: Outbound route-map name. + neighbors: + type: list + primary_key: ip_address + items: + type: dict + keys: + ip_address: + type: str + activate: + type: bool + additional_paths: + type: dict + $ref: eos_cli_config_gen#/$defs/bgp_additional_paths + aigp_session: + type: bool + graceful_restart: + type: bool + graceful_restart_helper: type: dict keys: - always: - type: bool - route_map: - description: Route-map name. + stale_route_map: type: str - prefix_list_in: - type: str - description: Inbound prefix-list name. - prefix_list_out: + maximum_advertised_routes: + type: int + description: Maximum number of routes (0 means unlimited). + min: 0 + max: 4294967294 + convert_types: + - str + maximum_advertised_routes_warning_limit: type: str - description: Outbound prefix-list name. - next_hop: + convert_types: + - int + description: 'Maximum number of routes after which a warning is + issued (0 means never warn) or + + Percentage of maximum number of routes at which to warn ("<1-100> + percent"). + + ' + missing_policy: type: dict + description: Missing policy configuration for BGP Labeled-Unicast + neighbor. keys: - address_family_ipv6: + direction_in: + description: Missing policy inbound direction. type: dict keys: - enabled: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: type: bool + description: Include sub-route-map references in missing + policy decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str required: true - originate: + valid_values: + - deny + - permit + - deny-in-out + include_community_list: type: bool - address_family_ipv6_originate: + description: Include community-list references in missing + policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy + decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing + policy decision. + multi_path: + type: bool + next_hop_resolution: + type: dict + keys: + v4_mapped_v6_translation: type: bool - deprecation: - warning: true - removed: true - new_key: address_family_ipv6 - remove_in_version: 5.0.0 - neighbors: - type: list - primary_key: ip_address - items: - type: dict - keys: - ip_address: - type: str - activate: + next_hop_self: type: bool - route_map_in: + next_hop_self_source_interface: + description: Source interface name. type: str - description: Inbound route-map name. - route_map_out: + next_hop_self_v4_mapped_v6_source_interface: + description: v4-mapped-v6 source interface name. Takes precedence + over the next_hop_self_source_interface. type: str - description: Outbound route-map name. + next_hop_unchanged: + type: bool rcf_in: type: str description: 'Inbound RCF function name with parenthesis. @@ -12476,70 +14012,79 @@ keys: description: 'Outbound RCF function name with parenthesis. Example: MyFunction(myarg).' - prefix_list_in: + route_map_in: type: str - description: Inbound prefix-list name. - prefix_list_out: + description: Inbound route-map name. + route_map_out: type: str - description: Prefix-list name. - default_originate: - type: dict - keys: - always: - type: bool - route_map: - type: str - redistribute_routes: + description: Outbound route-map name. + networks: type: list - primary_key: source_protocol - allow_duplicate_primary_key: true + primary_key: prefix + min_length: 1 items: type: dict keys: - source_protocol: + prefix: + description: IPv4 prefix "A.B.C.D/E" or IPv6 prefix "A:B:C:D:E:F:G:H/I". type: str - valid_values: - - attached-host - - bgp - - connected - - dynamic - - isis - - ospf - - ospfv3 - - rip - - static - - user route_map: + description: Route-map name. type: str - include_leaked: + next_hops: + type: list + primary_key: ip_address + min_length: 1 + items: + type: dict + keys: + ip_address: + type: str + lfib_backup_ip_forwarding: type: bool - description: Only applicable if `source_protocol` is one of `connected`, - `static`, `isis`, `ospf`, `ospfv3`. - rcf: + next_hop_resolution_ribs: + type: list + min_length: 1 + max_length: 3 + description: Specify the RIBs used to resolve next-hops. The order of + this list determines the order of RIB lookups. + items: + type: dict + keys: + rib_type: type: str - description: 'RCF function name with parenthesis. - - Example: MyFunction(myarg). - - `route_map` and `rcf` are mutually exclusive. `route_map` takes - precedence. - - Only applicable if `source_protocol` is one of `connected`, `static`, - `isis`, `user`, `dynamic`.' - ospf_route_type: + required: true + valid_values: + - system-connected + - tunnel-rib-colored + - tunnel-rib + description: Type of RIB. For 'tunnel-rib', use 'rib_name' to specify + the name of the Tunnel-RIB to use. + rib_name: + type: str + description: The name of the tunnel-rib to use when using 'tunnel-rib' + type. + tunnel_source_protocols: + type: list + min_length: 1 + max_length: 2 + primary_key: protocol + items: + type: dict + keys: + protocol: type: str valid_values: - - external - - internal - - nssa-external - - nssa-external 1 - - nssa-external 2 - description: 'Routes learned by the OSPF protocol. - - The `ospf_route_type` is valid for source_protocols ''ospf'' and - ''ospfv3''. + - isis segment-routing + - ldp + rcf: + type: str + description: 'Optional RCF function name with parenthesis. - ' + Example: MyFunction(myarg).' + update_wait_for_convergence: + type: bool + description: Wait for BGP to converge before sending out any route updates. address_family_ipv4_multicast: type: dict keys: @@ -14734,11 +16279,10 @@ keys: - '0' - '7' - 8a - description: Configure authentication key type. Default key_id is - 0. + description: Configure authentication key type. key: type: str - description: Password string. + description: Password string. `key_type` is required for this setting. key_ids: type: list primary_key: id @@ -14817,6 +16361,7 @@ keys: - sha-512 rx_disabled: type: bool + description: Disable authentication check on the receive side. level_1: type: dict description: Authentication settings for level-1. 'both' takes precedence @@ -14865,6 +16410,7 @@ keys: keys: enabled: type: bool + required: true maximum_paths: type: int convert_types: @@ -14908,6 +16454,7 @@ keys: keys: enabled: type: bool + required: true maximum_paths: type: int convert_types: @@ -15554,6 +17101,9 @@ keys: static: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. @@ -15562,6 +17112,9 @@ keys: connected: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. @@ -15570,6 +17123,9 @@ keys: bgp: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. @@ -15720,7 +17276,7 @@ keys: name: type: str description: Local interface name. - pattern: ^Ethernet\d+(/\d+)*(\.\d+)?$ + pattern: ^(Port-Channel|Ethernet(\d+/)*)\d+(\.\d+)?$ public_address: type: str description: Public IP assigned by NAT. @@ -15951,6 +17507,7 @@ keys: rp_addresses: type: list primary_key: address + allow_duplicate_primary_key: true items: type: dict keys: @@ -16235,6 +17792,7 @@ keys: keys: enabled: type: bool + required: true router_id: type: dict keys: @@ -16760,6 +18318,9 @@ keys: - int enable: type: bool + ifmib_ifspeed_shape_rate: + type: bool + description: SNMP ifspeed reflecting shaping rate. spanning_tree: type: dict keys: @@ -17099,24 +18660,28 @@ keys: description: Segment size. ipv4_access_groups: type: list - primary_key: acl_name + unique_keys: + - vrf items: type: dict keys: acl_name: type: str + required: true vrf: type: str convert_types: - int ipv6_access_groups: type: list - primary_key: acl_name + unique_keys: + - vrf items: type: dict keys: acl_name: type: str + required: true vrf: type: str convert_types: @@ -17384,6 +18949,7 @@ keys: valid_values: - ipv4 - ipv6 + required: true source: type: dict keys: @@ -17456,6 +19022,10 @@ keys: type: list items: type: str + enforce_gtsm: + type: bool + description: Enforce the GTSM for BGP speakers. Only supported + when protocol is set to 'neighbors'. actions: type: dict keys: @@ -18098,6 +19668,9 @@ keys: - str isis_network_point_to_point: type: bool + isis_authentication: + type: dict + $ref: eos_cli_config_gen#/keys/router_isis/keys/authentication mtu: type: int convert_types: @@ -18636,6 +20209,48 @@ $defs: When the `protocols` list contain both `tcp` and `udp`, this key value must be the same as `udp_dest_port_set_name`.' + bgp_additional_paths: + type: dict + keys: + receive: + type: bool + send: + type: str + description: 'Select an option to send multiple paths for same prefix through + bgp updates. + + any: Send any eligible path. + + backup: Best path and installed backup path. + + ecmp: All paths in best path ECMP group. + + limit: Limit to n eligible paths. + + disabled: Disable sending any path.' + valid_values: + - any + - backup + - ecmp + - limit + - disabled + send_ecmp_limit: + type: int + description: Amount of ECMP paths to send. `send` must be set to `ecmp` for + this settings. If this key-value pair is not set, it will send all paths + in best ECMP group. + convert_types: + - str + min: 2 + max: 64 + send_limit: + type: int + description: Number of paths to send through bgp updates. `send` must be set + to `limit` for this setting. + convert_types: + - str + min: 2 + max: 64 flow_tracking: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/aaa_root.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/aaa_root.schema.yml index 08f15df6216..e603f6f71c4 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/aaa_root.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/aaa_root.schema.yml @@ -9,6 +9,10 @@ keys: aaa_root: type: dict keys: + disabled: + type: bool + description: |- + Set to `true` to configure `no aaa root` which is the EOS default. secret: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/community_lists.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/community_lists.schema.yml index a82d4963f17..f76c819b0c4 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/community_lists.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/community_lists.schema.yml @@ -10,6 +10,10 @@ keys: type: list primary_key: name display_name: Community Lists (legacy model) + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: ip_community_lists items: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/config_end.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/config_end.schema.yml new file mode 100644 index 00000000000..0db3ca077d6 --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/config_end.schema.yml @@ -0,0 +1,12 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + config_end: + type: bool + description: Render `end` at the end of the configuration. + default: false diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/defs_bgp_additional_paths.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/defs_bgp_additional_paths.schema.yml new file mode 100644 index 00000000000..eccf0ee83ba --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/defs_bgp_additional_paths.schema.yml @@ -0,0 +1,34 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +type: dict +$defs: + bgp_additional_paths: + type: dict + keys: + receive: + type: bool + send: + type: str + description: |- + Select an option to send multiple paths for same prefix through bgp updates. + any: Send any eligible path. + backup: Best path and installed backup path. + ecmp: All paths in best path ECMP group. + limit: Limit to n eligible paths. + disabled: Disable sending any path. + valid_values: [ 'any', 'backup', 'ecmp', 'limit', 'disabled' ] + send_ecmp_limit: + type: int + description: Amount of ECMP paths to send. `send` must be set to `ecmp` for this settings. If this key-value pair is not set, it will send all paths in best ECMP group. + convert_types: + - str + min: 2 + max: 64 + send_limit: + type: int + description: Number of paths to send through bgp updates. `send` must be set to `limit` for this setting. + convert_types: + - str + min: 2 + max: 64 diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/dot1x.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/dot1x.schema.yml index 6cdd7cf3f2a..a864a30020d 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/dot1x.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/dot1x.schema.yml @@ -33,6 +33,26 @@ keys: max: 300 convert_types: - str + radius_av_pair_username_format: + type: dict + description: RADIUS AV-pair username settings. + keys: + delimiter: + type: str + description: Delimiter to use in MAC address string. + required: true + valid_values: + - colon + - hyphen + - none + - period + mac_string_case: + type: str + description: MAC address string in lowercase/uppercase. + required: true + valid_values: + - lowercase + - uppercase radius_av_pair: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/enable_password.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/enable_password.schema.yml index 208594b4ac6..e0ca12d848a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/enable_password.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/enable_password.schema.yml @@ -9,6 +9,10 @@ keys: enable_password: type: dict keys: + disabled: + type: bool + description: |- + Set to `true` to configure `no enable password` which is the EOS default. hash_algorithm: type: str valid_values: ["md5", "sha512"] diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_configuration.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_configuration.schema.yml index a10f5d0bcc8..e4c3887974e 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_configuration.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_configuration.schema.yml @@ -8,7 +8,13 @@ type: dict keys: eos_cli_config_gen_configuration: type: dict + documentation_options: + table: role-settings keys: + enable: + type: bool + description: Generate device EOS configurations. + default: true hide_passwords: type: bool description: | diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_documentation.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_documentation.schema.yml index d72ab8bdaf7..fe185f2c064 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_documentation.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/eos_cli_config_gen_documentation.schema.yml @@ -8,7 +8,13 @@ type: dict keys: eos_cli_config_gen_documentation: type: dict + documentation_options: + table: role-settings keys: + enable: + type: bool + description: Generate device Markdown documentation. + default: true hide_passwords: type: bool description: | diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ethernet_interfaces.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ethernet_interfaces.schema.yml index 90840fbda8a..d36c5eb67c8 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ethernet_interfaces.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ethernet_interfaces.schema.yml @@ -58,28 +58,63 @@ keys: List of switchport vlans as string. For a trunk port this would be a range like "1-200,300". For an access port this would be a single vlan "123". + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.access_vlan or ethernet_interfaces[].switchport.trunk.allowed_vlan native_vlan: type: int convert_types: - str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.native_vlan native_vlan_tag: type: bool description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.native_vlan_tag mode: type: str valid_values: ["access", "dot1q-tunnel", "trunk", "trunk phone"] + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.mode phone: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone type: dict keys: trunk: type: str valid_values: ["tagged", "tagged phone", "untagged", "untagged phone"] + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone.trunk vlan: type: int min: 1 max: 4094 convert_types: - str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.phone.vlan l2_protocol: type: dict keys: @@ -95,12 +130,21 @@ keys: type: list items: type: str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.groups type: type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation valid_values: ["routed", "switched", "l3dot1q", "l2dot1q", "port-channel-member"] description: | l3dot1q and l2dot1q are used for sub-interfaces. The parent interface should be defined as routed. - Interface will not be listed in device documentation, unless "type" is set. + The `type = switched/routed` should not be combined with `switchport`. snmp_trap_link_change: type: bool address_locking: @@ -210,24 +254,60 @@ keys: convert_types: - str description: VLAN tag to configure on sub-interface. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: encapsulation_dot1q.vlan + encapsulation_dot1q: + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. + type: dict + keys: + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + required: true + description: VLAD ID. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. encapsulation_vlan: type: dict + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + This setting can only be applied to sub-interfaces on EOS. + Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. keys: client: type: dict keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: type: int convert_types: - str + min: 1 + max: 4094 description: Client VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Client Outer VLAN ID. inner: type: int @@ -236,31 +316,128 @@ keys: description: Client Inner VLAN ID. unmatched: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + # TODO: AVD6.0 the `encapsulation` key should be made required once the deprecated keys are removed in AVD6.0 + encapsulation: + type: str + valid_values: + - dot1q + - dot1ad + - unmatched + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad network: type: dict description: Network encapsulations are all optional and skipped if using client unmatched. keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: type: int convert_types: - str + min: 1 + max: 4094 description: Network VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Network outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Network inner VLAN ID. client: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + # TODO: AVD6.0 the `encapsulation` key should be made required once the deprecated keys are removed in AVD6.0 + encapsulation: + description: |- + `untagged` (no encapsulation) is applicable for `untagged` client only. + `client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. + type: str + valid_values: + - dot1q + - dot1ad + - client + - client inner + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad vlan_id: + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + This setting can only be applied to sub-interfaces on EOS. + Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. type: int min: 1 max: 4094 @@ -757,12 +934,27 @@ keys: description: ZTP vlan number. trunk_private_vlan_secondary: type: bool + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.trunk.private_vlan_secondary pvlan_mapping: type: str convert_types: - int description: List of vlans as string. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.pvlan_mapping vlan_translations: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: ethernet_interfaces[].switchport.vlan_translations type: list items: type: dict @@ -826,6 +1018,9 @@ keys: type: bool host_mode_common: type: bool + mac_based_access_list: + type: bool + description: Operate interface in per-mac access-list mode. timeout: type: dict keys: @@ -883,6 +1078,29 @@ keys: max: 65535 convert_types: - str + aaa: + type: dict + keys: + unresponsive: + type: dict + description: Configure AAA timeout options. + keys: + eap_response: + type: str + description: EAP response to send. EOS default is `success`. + valid_values: + - "success" + - "disabled" + action: + type: dict + $ref: "eos_cli_config_gen#/keys/dot1x/keys/aaa/keys/unresponsive/keys/action" + keys: + traffic_allow_access_list: + type: str + description: Name of standard access-list to apply when AAA times out. + phone_action: + type: dict + $ref: "eos_cli_config_gen#/keys/dot1x/keys/aaa/keys/unresponsive/keys/phone_action" service_profile: type: str description: QOS profile. @@ -1374,7 +1592,286 @@ keys: description: Set to false to disable interface validation by the `eos_validate_state` role. switchport: type: dict + description: This should not be combined with `ethernet_interfaces[].type = switched/routed`. keys: + enabled: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].type` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `ethernet_interfaces[].type = routed`. + mode: + type: str + valid_values: ["access", "dot1q-tunnel", "trunk", "trunk phone"] + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].mode` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `ethernet_interfaces[].mode`. + access_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].mode` and `ethernet_interface[].vlans` are removed in AVD6.0 + description: |- + Set VLAN when interface is in access mode. + Warning: This should not be combined with `ethernet_interfaces[].mode = access/dot1q-tunnel` and `ethernet_interface[].vlans`. + trunk: + type: dict + keys: + allowed_vlan: + type: str + convert_types: + - int + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].mode` and `ethernet_interface[].vlans` are removed in AVD6.0 + description: |- + VLAN ID or range(s) of VLAN IDs. + Warning: This should not be combined with `ethernet_interfaces[].mode = trunk` and `ethernet_interface[].vlans`. + native_vlan: + type: int + convert_types: + - str + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].native_vlan` is removed in AVD6.0 + description: |- + Set native VLAN when interface is in trunking mode. + Warning: This should not be combined with `ethernet_interfaces[].native_vlan`. + min: 1 + max: 4094 + native_vlan_tag: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].native_vlan_tag` is removed in AVD6.0 + description: |- + If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + Warning: This should not be combined with `ethernet_interfaces[].native_vlan_tag`. + private_vlan_secondary: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `ethernet_ineterfaces[].trunk_private_vlan_secondary` is removed in AVD6.0 + description: |- + Enable secondary VLAN mapping for a private vlan. + Warning: This should not be combined with `ethernet_ineterfaces[].trunk_private_vlan_secondary`. + groups: + # TODO: AVD6.0 the warning below should be removed when the `ethernet_ineterfaces[].trunk_groups` is removed in AVD6.0 + description: | + Warning: This should not be combined with `ethernet_ineterfaces[].trunk_groups`. + type: list + items: + type: str + convert_types: + - int + description: Trunk group name. + phone: + type: dict + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].phone` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `ethernet_interfaces[].phone`. + keys: + vlan: + type: int + min: 1 + max: 4094 + convert_types: + - str + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].phone.vlan` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `ethernet_interfaces[].phone.vlan`. + trunk: + type: str + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].phone.trunk` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `ethernet_interfaces[].phone.trunk`. + valid_values: ["tagged", "tagged phone", "untagged", "untagged phone"] + pvlan_mapping: + type: str + convert_types: + - int + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].pvlan_mapping` is removed in AVD6.0 + description: |- + Secondary VLAN IDs of the private VLAN mapping. + Warning: This should not be combined with `ethernet_interfaces[].pvlan_mapping`. + dot1q: + type: dict + keys: + ethertype: + type: int + convert_types: + - str + min: 1536 + max: 65535 + description: Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. + vlan_tag: + type: str + description: Allow/disallow VLAN tagged frames. + valid_values: + - disallowed + - required + source_interface: + type: str + description: |- + tx: Allow bridged traffic to go out of the source interface. + tx multicast: Allow multicast traffic only to go out of the source interface. + valid_values: + - tx + - tx multicast + vlan_translations: + # TODO: AVD6.0 the warning below should be removed when the `ethernet_interfaces[].vlan_translations` is removed in AVD6.0 + description: |- + VLAN Translation mappings. + Warning: This should not be combined with `ethernet_interfaces[].vlan_translations`. + type: dict + keys: + in_required: + type: bool + description: Drop the ingress traffic that do not match any VLAN mapping. + out_required: + type: bool + description: Drop the egress traffic that do not match any VLAN mapping. + direction_in: + type: list + description: Map ingress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + required: true + to: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + direction_out: + type: list + description: Map egress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + required: true + to: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: VLAN ID to map to. + dot1q_tunnel_to: + type: str + convert_types: + - int + description: |- + VLAN ID or range of VLAN IDs or "all". Range 1-4094. + This takes precedence over `to` and `inner_vlan_to`. + inner_vlan_to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map to. + direction_both: + type: list + description: Map both egress and ingress traffic. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + required: true + to: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID to map from. + network: + type: bool + description: |- + Enable use of network-side VLAN ID. + This setting can only be enabled when `inner_vlan_from` is defined. + vlan_forwarding_accept_all: + type: bool + backup_link: + type: dict + keys: + interface: + type: str + description: Backup interface. Example - Ethernet4, Vlan10 etc. + prefer_vlan: + type: str + convert_types: + - int + description: VLANs to carry on the backup interface (1-4094). + backup: + type: dict + description: The `backup_link` is required for this setting. + keys: + dest_macaddr: + type: str + format: mac + description: |- + Destination MAC address for MAC move updates. + The mac address should be multicast or broadcast. + Example: 01:00:00:00:00:00 + initial_mac_move_delay: + type: int + convert_types: + - str + description: Initial MAC move delay in milliseconds. + min: 0 + max: 65535 + mac_move_burst: + type: int + convert_types: + - str + description: Size of MAC move bursts. + min: 0 + max: 65535 + mac_move_burst_interval: + type: int + convert_types: + - str + description: MAC move burst interval in milliseconds. + min: 0 + max: 65535 + preemption_delay: + type: int + convert_types: + - str + description: Preemption delay in milliseconds. + min: 0 + max: 65535 port_security: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_default_config.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_default_config.schema.yml index 930cec3ffb6..a78729364b6 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_default_config.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_default_config.schema.yml @@ -8,7 +8,7 @@ type: dict keys: generate_default_config: type: bool - default: true + default: false description: | The `generate_default_config` knob allows to omit default EOS configuration. This can be useful when leveraging `eos_cli_config_gen` to generate configlets with CloudVision. @@ -16,8 +16,12 @@ keys: The following commands will be omitted when `generate_default_config` is set to `false`: - RANCID Content Type - - Hostname + - Hostname (even if `hostname` variable is not set. Then the hostname is picked up from `inventory_hostname`) - Default configuration for `aaa` - Default configuration for `enable password` - Transceiver qsfp default mode - End of configuration delimiter + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/devel/docs/porting-guides/5.x.x.html#default-eos-configuration-is-no-longer-automatically-generated diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_device_documentation.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_device_documentation.schema.yml index dd8b9c8f356..a1a9df97c15 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_device_documentation.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/generate_device_documentation.schema.yml @@ -8,4 +8,11 @@ type: dict keys: generate_device_documentation: type: bool + documentation_options: + table: role-settings default: true + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: eos_cli_config_gen_documentation.enable diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/hardware.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/hardware.schema.yml index c57fb53c948..78a9bcfb25d 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/hardware.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/hardware.schema.yml @@ -28,3 +28,16 @@ keys: serdes: type: str description: Serdes speed like "10g" or "25g". + port_groups: + type: list + primary_key: port_group + items: + type: dict + keys: + port_group: + type: str + convert_types: + - int + select: + type: str + description: Select Ports to activate diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_security.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_security.schema.yml index 1798dab53bd..e1b74b5e23f 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_security.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/ip_security.schema.yml @@ -59,7 +59,7 @@ keys: keys: name: type: str - description: Name of the SA policy. The "null" value is deprecated and will be removed in AVD 5.0.0. + description: Name of the SA policy. sa_lifetime: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/logging.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/logging.schema.yml index e0fa87de614..a70e5970611 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/logging.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/logging.schema.yml @@ -12,13 +12,11 @@ keys: console: type: str valid_values: ["debugging", "informational", "notifications", "warnings", "errors", "critical", "alerts", "emergencies", "disabled"] - description: | - Console logging severity level. + description: Console logging severity level. monitor: type: str valid_values: ["debugging", "informational", "notifications", "warnings", "errors", "critical", "alerts", "emergencies", "disabled"] - description: | - Monitor logging severity level. + description: Monitor logging severity level. buffered: type: dict keys: @@ -31,21 +29,21 @@ keys: level: type: str valid_values: ["alerts", "critical", "debugging", "emergencies", "errors", "informational", "notifications", "warnings", "disabled"] - description: | - Buffer logging severity level. + description: Buffer logging severity level. + repeat_messages: + type: bool + description: Summarize concurrent repeat messages. trap: type: str valid_values: ["alerts", "critical", "debugging", "emergencies", "errors", "informational", "notifications", "system", "warnings", "disabled"] - description: | - Trap logging severity level. + description: Trap logging severity level. synchronous: type: dict keys: level: type: str valid_values: ["alerts", "all", "critical", "debugging", "emergencies", "errors", "informational", "notifications", "warnings", "disabled"] - description: | - Synchronous logging severity level. + description: Synchronous logging severity level. default: "critical" format: type: dict @@ -60,12 +58,10 @@ keys: description: Hostname format in syslogs. For hostname _only_, remove the line. (default EOS CLI behaviour). sequence_numbers: type: bool - description: | - Add sequence numbers to log messages. + description: Add sequence numbers to log messages. rfc5424: type: bool - description: | - Forward logs in RFC5424 format. + description: Forward logs in RFC5424 format. facility: type: str valid_values: ["auth", "cron", "daemon", "kern", "local0", "local1", "local2", "local3", "local4", @@ -128,6 +124,15 @@ keys: event: type: dict keys: + congestion_drops_interval: + type: int + convert_types: + - str + min: 1 + max: 65535 + description: Logging interval in seconds. + global_link_status: + type: bool storm_control: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/management_ssh.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/management_ssh.schema.yml index 357cc48c098..a2ba18dc9df 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/management_ssh.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/management_ssh.schema.yml @@ -10,6 +10,19 @@ keys: management_ssh: type: dict keys: + authentication: + type: dict + keys: + empty_passwords: + type: str + valid_values: ["auto", "deny", "permit"] + description: Permit or deny empty passwords for SSH authentication. + protocols: + type: list + items: + type: str + valid_values: ["keyboard-interactive", "password", "public-key"] + description: Allowed SSH authentication methods. access_groups: type: list items: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_connectivity.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_connectivity.schema.yml index 32a7d86445e..545cea7a9e5 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_connectivity.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_connectivity.schema.yml @@ -32,11 +32,9 @@ keys: address_only: type: bool description: |- - PREVIEW: This key is in preview. When address-only is configured, the source IP of the packet is set to the interface IP but the packet may exit the device via a different interface. When set to `false`, the probe uses the interface to exit the device. - Not supported yet in EOS. default: true hosts: type: list @@ -56,11 +54,9 @@ keys: address_only: type: bool description: |- - PREVIEW: This key is in preview. When address-only is configured, the source IP of the packet is set to the interface IP but the packet may exit the device via a different interface. When set to `false`, the probe uses the interface to exit the device. - Not supported yet in EOS. default: true url: type: str @@ -91,11 +87,9 @@ keys: address_only: type: bool description: |- - PREVIEW: This key is in preview. When address-only is configured, the source IP of the packet is set to the interface IP but the packet may exit the device via a different interface. When set to `false`, the probe uses the interface to exit the device. - Not supported yet in EOS. default: true hosts: type: list @@ -115,11 +109,9 @@ keys: address_only: type: bool description: |- - PREVIEW: This key is in preview. When address-only is configured, the source IP of the packet is set to the interface IP but the packet may exit the device via a different interface. When set to `false`, the probe uses the interface to exit the device. - Not supported yet in EOS. default: true url: type: str diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_session_default_encapsulation_gre.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_session_default_encapsulation_gre.schema.yml new file mode 100644 index 00000000000..6a6ae4df085 --- /dev/null +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_session_default_encapsulation_gre.schema.yml @@ -0,0 +1,19 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../../plugins/plugin_utils/schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + monitor_session_default_encapsulation_gre: + documentation_options: + table: monitor-sessions + type: dict + keys: + payload: + type: str + description: Mirroring GRE payload type configuration commands. + valid_values: + - full-packet + - inner-packet diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_influx.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_influx.schema.yml index 6d1817936e0..516bf99ab7e 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_influx.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_influx.schema.yml @@ -7,6 +7,8 @@ type: dict keys: monitor_telemetry_influx: + documentation_options: + table: monitor-telemetry type: dict keys: vrf: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_postcard_policy.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_postcard_policy.schema.yml index 91eb4b7f9f5..aff2ff43d6a 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_postcard_policy.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/monitor_telemetry_postcard_policy.schema.yml @@ -7,6 +7,8 @@ type: dict keys: monitor_telemetry_postcard_policy: + documentation_options: + table: monitor-telemetry type: dict keys: disabled: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/port_channel_interfaces.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/port_channel_interfaces.schema.yml index 83b2f080a97..076825d1204 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/port_channel_interfaces.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/port_channel_interfaces.schema.yml @@ -54,10 +54,19 @@ keys: List of switchport vlans as string. For a trunk port this would be a range like "1-200,300". For an access port this would be a single vlan "123". + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.access_vlan or port_channel_interfaces[].switchport.trunk.allowed_vlan snmp_trap_link_change: type: bool type: type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#removal-of-type-key-dependency-for-rendering-ethernetport-channel-interfaces-configuration-and-documentation valid_values: - routed - switched @@ -68,21 +77,53 @@ keys: Interface will not be listed in device documentation, unless "type" is set. encapsulation_dot1q_vlan: type: int - description: VLAN tag to configure on sub-interface. convert_types: - str + description: VLAN tag to configure on sub-interface. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: encapsulation_dot1q.vlan + encapsulation_dot1q: + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + Warning: `encapsulation_dot1q` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. + type: dict + keys: + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + required: true + description: VLAD ID. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: Inner VLAN ID. This setting can only be applied to sub-interfaces on EOS. vrf: type: str description: VRF name. convert_types: - int encapsulation_vlan: + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + This setting can only be applied to sub-interfaces on EOS. + Warning: `encapsulation_vlan` should not be combined with `ethernet_interfaces[].type: l3dot1q` or `ethernet_interfaces[].type: l2dot1q`. type: dict keys: client: type: dict keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: @@ -94,39 +135,140 @@ keys: type: int convert_types: - str + min: 1 + max: 4094 description: Client Outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Client Inner VLAN ID. unmatched: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + # TODO: AVD6.0 the `encapsulation` key should be made required once the deprecated keys are removed in AVD6.0 + encapsulation: + type: str + valid_values: + - dot1q + - dot1ad + - unmatched + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client Outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Client Inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: unmatched`. + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad network: type: dict description: Network encapsulation are all optional, and skipped if using client unmatched. keys: dot1q: + deprecation: + warning: true + remove_in_version: 6.0.0 type: dict keys: vlan: type: int convert_types: - str + min: 1 + max: 4094 description: Network VLAN ID. outer: type: int convert_types: - str + min: 1 + max: 4094 description: Network Outer VLAN ID. inner: type: int convert_types: - str + min: 1 + max: 4094 description: Network Inner VLAN ID. client: type: bool + deprecation: + warning: true + remove_in_version: 6.0.0 + # TODO: AVD6.0 the `encapsulation` key should be made required once the deprecated keys are removed in AVD6.0 + encapsulation: + description: |- + `untagged` (no encapsulation) is applicable for `untagged` client only. + `client` and `client inner` (retain client encapsulation) is not applicable for `untagged` client. + type: str + valid_values: + - dot1q + - dot1ad + - client + - client inner + - untagged + vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + outer_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network outer VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_vlan: + type: int + convert_types: + - str + min: 1 + max: 4094 + description: |- + Network inner VLAN ID. Not applicable for `encapsulation: untagged` or `encapsulation: client`. + inner_encapsulation: + type: str + valid_values: + - dot1q + - dot1ad vlan_id: + # TODO: AVD 6.0 below warning should be removed when the `ethernet_interfaces[].type` key is removed in AVD 6.0 + description: |- + This setting can only be applied to sub-interfaces on EOS. + Warning: `vlan_id` should not be combined with `ethernet_interfaces[].type == l2dot1q`. type: int convert_types: - str @@ -139,15 +281,30 @@ keys: - dot1q-tunnel - trunk - trunk phone + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.mode native_vlan: type: int convert_types: - str description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.native_vlan native_vlan_tag: type: bool default: false description: If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.native_vlan_tag link_tracking_groups: type: list primary_key: name @@ -164,18 +321,33 @@ keys: - downstream phone: type: dict + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone keys: trunk: type: str valid_values: - tagged - untagged + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone.trunk vlan: type: int convert_types: - str min: 1 max: 4094 + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.phone.vlan l2_protocol: type: dict keys: @@ -204,6 +376,11 @@ keys: type: list items: type: str + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.groups lacp_fallback_timeout: type: int description: Timeout in seconds. @@ -297,12 +474,27 @@ keys: type: bool trunk_private_vlan_secondary: type: bool + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.trunk.private_vlan_secondary pvlan_mapping: type: str description: List of vlans as string. convert_types: - int + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.pvlan_mapping vlan_translations: + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + new_key: port_channel_interfaces[].switchport.vlan_translations type: list items: type: dict @@ -827,6 +1019,338 @@ keys: switchport: type: dict keys: + enabled: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].type` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `port_channel_interfaces[].type = routed`. + mode: + type: str + valid_values: ["access", "dot1q-tunnel", "trunk", "trunk phone"] + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].mode` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `port_channel_interfaces[].mode` + access_vlan: + type: int + convert_types: + - "str" + min: 1 + max: 4094 + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].mode` and `port_channel_interfaces[].vlans` are removed in AVD6.0 + description: |- + Set VLAN when interface is in access mode. + Warning: This should not be combined with `port_channel_interfaces[].mode = access/dot1q-tunnel` and `port_channel_interface.vlans`. + trunk: + type: dict + keys: + allowed_vlan: + type: str + convert_types: + - int + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].mode` and `port_channel_interfaces[].vlans` are removed in AVD6.0 + description: |- + VLAN ID or range(s) of VLAN IDs (1-4094). + Warning: This should not be combined with `port_channel_interfaces[].mode = trunk` and `port_channel_interfaces[].vlans`. + native_vlan: + type: int + convert_types: + - str + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].native_vlan` is removed in AVD6.0 + description: |- + Set native VLAN when interface is in trunking mode. + Warning: This should not be combined with `port_channel_interfaces[].native_vlan`. + min: 1 + max: 4094 + native_vlan_tag: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].native_vlan_tag` is removed in AVD6.0 + description: |- + If setting both native_vlan and native_vlan_tag, native_vlan_tag takes precedence. + Warning: This should not be combined with `port_channel_interfaces[].native_vlan_tag`. + private_vlan_secondary: + type: bool + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].trunk_private_vlan_secondary` is removed in AVD6.0 + description: |- + Enable secondary VLAN mapping for a private vlan. + Warning: This should not be combined with `port_channel_interfaces[].trunk_private_vlan_secondary`. + groups: + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].trunk_groups` is removed in AVD6.0 + description: | + Warning: This should not be combined with `port_channel_interfaces[].trunk_groups`. + type: list + items: + type: str + convert_types: + - int + description: Trunk group name. + phone: + type: dict + keys: + vlan: + type: int + min: 1 + max: 4094 + convert_types: + - str + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].phone.vlan` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `port_channel_interfaces[].phone.vlan`. + trunk: + type: str + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].phone.trunk` is removed in AVD6.0 + description: |- + Warning: This should not be combined with `port_channel_interfaces[].phone.trunk` + valid_values: ["tagged", "tagged phone", "untagged", "untagged phone"] + pvlan_mapping: + type: str + convert_types: + - int + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].pvlan_mapping` is removed in AVD6.0 + description: |- + Secondary VLAN IDs of the private VLAN mapping. + Warning: This should not be combined with `port_channel_interfaces[].pvlan_mapping`. + dot1q: + type: dict + keys: + ethertype: + type: int + convert_types: + - str + min: 1536 + max: 65535 + description: Ethertype/TPID (Tag Protocol IDentifier) for VLAN tagged frames. + vlan_tag: + type: str + valid_values: + - disallowed + - required + source_interface: + type: str + description: |- + tx: Allow bridged traffic to go out of the source interface. + tx multicast: Allow multicast traffic only to go out of the source interface. + valid_values: + - tx + - tx multicast + vlan_translations: + # TODO: AVD6.0 the warning below should be removed when the `port_channel_interfaces[].vlan_translations` is removed in AVD6.0 + description: |- + VLAN Translation mappings. + Warning: This should not be combined with `port_channel_interfaces[].vlan_translations`. + type: dict + keys: + in_required: + type: bool + description: Drop the ingress traffic that do not match any VLAN mapping. + out_required: + type: bool + description: Drop the egress traffic that do not match any VLAN mapping. + direction_in: + type: list + description: Map ingress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + direction_out: + type: list + description: Map egress traffic only. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + required: true + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + dot1q_tunnel_to: + type: str + convert_types: + - int + description: |- + VLAN ID or range of VLAN IDs or "all". Range 1-4094. + This takes precedence over `to` and `inner_vlan_to`. + inner_vlan_to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map to. + direction_both: + type: list + description: Map both egress and ingress traffic. + items: + type: dict + keys: + from: + type: str + convert_types: + - int + description: VLAN ID or range of VLAN IDs to map from. Range 1-4094. + required: true + to: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: VLAN ID to map to. + required: true + dot1q_tunnel: + type: bool + inner_vlan_from: + type: int + min: 1 + max: 4094 + convert_types: + - str + description: Inner VLAN ID to map from. + network: + type: bool + description: |- + Enable use of network-side VLAN ID. + This setting can only be enabled when `inner_vlan_from` is defined. + vlan_forwarding_accept_all: + type: bool + backup_link: + type: dict + keys: + interface: + type: str + required: true + description: Backup interface. Example - Ethernet4, Vlan10 etc. + prefer_vlan: + type: str + convert_types: + - int + description: VLANs to carry on the backup interface (1-4094). + backup: + type: dict + description: The `backup_link` is required for this setting. + keys: + dest_macaddr: + type: str + format: mac + description: |- + Destination MAC address for MAC move updates. + The mac address should be multicast or broadcast. + Example: 01:00:00:00:00:00 + initial_mac_move_delay: + type: int + convert_types: + - str + description: Initial MAC move delay in milliseconds. + min: 0 + max: 65535 + mac_move_burst: + type: int + convert_types: + - str + description: Size of MAC move bursts. + min: 0 + max: 65535 + mac_move_burst_interval: + type: int + convert_types: + - str + description: MAC move burst interval in milliseconds. + min: 0 + max: 65535 + preemption_delay: + type: int + convert_types: + - str + description: Preemption delay in milliseconds. + min: 0 + max: 65535 + port_security: + type: dict + keys: + enabled: + type: bool + mac_address_maximum: + type: dict + description: Maximum number of MAC addresses allowed on the interface. + keys: + disabled: + type: bool + description: Disable port level check for port security (only in violation 'shutdown' mode). + limit: + type: int + convert_types: + - str + min: 1 + max: 1000 + description: MAC address limit. + violation: + type: dict + description: Configure violation mode (shutdown or protect), EOS default is 'shutdown'. + keys: + mode: + type: str + valid_values: + - shutdown + - protect + description: Configure port security mode. + protect_log: + type: bool + description: Log new addresses seen after limit is reached in protect mode. + vlan_default_mac_address_maximum: + type: int + convert_types: + - str + min: 0 + max: 1000 + description: Default maximum MAC addresses for all VLANs on this interface. + vlans: + type: list + primary_key: range + items: + type: dict + keys: + range: + type: str + convert_types: + - int + description: | + VLAN ID or range(s) of VLAN IDs, <1-4094>. + Example: + - 3 + - 1,3 + - 1-10 + mac_address_maximum: + type: int + convert_types: + - str tap: description: |- In tap mode, the interface operates as a tap port. @@ -952,7 +1476,6 @@ keys: description: |- Extra ethernet header to prepend to the terminated packet. This setting does not reflect in the EOS running-config for protocol 0x0000. - tool: description: |- In tool mode, the interface operates as a tool port. diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_adaptive_virtual_topology.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_adaptive_virtual_topology.schema.yml index 29bc735bf09..8c13fe0e42d 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_adaptive_virtual_topology.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_adaptive_virtual_topology.schema.yml @@ -17,6 +17,11 @@ keys: - "pathfinder" - "transit region" - "transit zone" + gateway_vxlan: + description: |- + Enables VXLAN gateway router profile. + Only applicable for `topology_role: edge`, `topology_role: transit region` or `topology_role: transit zone`. + type: bool region: type: dict description: Region name and ID. @@ -82,8 +87,6 @@ keys: primary_key: name description: |- A sequence of application profiles mapped to some virtual topologies. - - When `wan_mode` is set to `autovpn`, the rules are indexed using 10* in the list. items: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_bgp.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_bgp.schema.yml index 1c40d5aef55..aa53b972ed3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_bgp.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_bgp.schema.yml @@ -1027,6 +1027,8 @@ keys: valid_values: - "vxlan" - "mpls" + - "path-selection" + description: Transport encapsulation for neighbor. next_hop_self_source_interface: description: Source interface name. type: str @@ -1088,6 +1090,13 @@ keys: Example: MyFunction(myarg). route_map: type: str + encapsulation: + type: str + valid_values: + - "vxlan" + - "mpls" + - "path-selection" + description: Transport encapsulation for the neighbor. peer_groups: type: list primary_key: name @@ -1134,6 +1143,8 @@ keys: valid_values: - "vxlan" - "mpls" + - "path-selection" + description: Transport encapsulation for the peer-group. additional_paths: type: dict keys: @@ -1439,6 +1450,382 @@ keys: description: | Routes learned by the OSPF protocol. The `ospf_route_type` is valid for source_protocols 'ospf' and 'ospfv3'. + address_family_ipv4_labeled_unicast: + type: dict + keys: + aigp_session: + type: dict + keys: + confederation: + type: bool + ebgp: + type: bool + ibgp: + type: bool + bgp: + type: dict + keys: + additional_paths: + type: dict + $ref: "eos_cli_config_gen#/$defs/bgp_additional_paths" + missing_policy: + type: dict + description: Missing policy configuration for all address-families. + keys: + direction_in: + description: Missing policy inbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + next_hop_unchanged: + type: bool + graceful_restart: + type: bool + label_local_termination: + type: str + valid_values: + - "explicit-null" + - "implicit-null" + lfib_entry_installation_skipped: + type: bool + description: Skip LFIB entry installation and next hop self route advertisements. + neighbor_default: + type: dict + keys: + next_hop_self: + type: bool + peer_groups: + type: list + primary_key: name + items: + type: dict + keys: + name: + type: str + description: Peer-group name. + activate: + type: bool + additional_paths: + type: dict + $ref: "eos_cli_config_gen#/$defs/bgp_additional_paths" + aigp_session: + type: bool + graceful_restart: + type: bool + graceful_restart_helper: + type: dict + keys: + stale_route_map: + type: str + maximum_advertised_routes: + type: int + description: Maximum number of routes (0 means unlimited). + min: 0 + max: 4294967294 + convert_types: + - str + maximum_advertised_routes_warning_limit: + type: str + convert_types: + - int + description: | + Maximum number of routes after which a warning is issued (0 means never warn) or + Percentage of maximum number of routes at which to warn ("<1-100> percent"). + missing_policy: + type: dict + description: Missing policy configuration for BGP Labeled-Unicast neighbor. + keys: + direction_in: + description: Missing policy inbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + multi_path: + type: bool + next_hop_resolution: + type: dict + keys: + v4_mapped_v6_translation: + type: bool + next_hop_self: + type: bool + next_hop_self_source_interface: + description: Source interface name. + type: str + next_hop_self_v4_mapped_v6_source_interface: + description: v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. + type: str + next_hop_unchanged: + type: bool + rcf_in: + type: str + description: |- + Inbound RCF function name with parenthesis. + Example: MyFunction(myarg). + rcf_out: + type: str + description: |- + Outbound RCF function name with parenthesis. + Example: MyFunction(myarg). + route_map_in: + type: str + description: Inbound route-map name. + route_map_out: + type: str + description: Outbound route-map name. + neighbors: + type: list + primary_key: ip_address + items: + type: dict + keys: + ip_address: + type: str + activate: + type: bool + additional_paths: + type: dict + $ref: "eos_cli_config_gen#/$defs/bgp_additional_paths" + aigp_session: + type: bool + graceful_restart: + type: bool + graceful_restart_helper: + type: dict + keys: + stale_route_map: + type: str + maximum_advertised_routes: + type: int + description: Maximum number of routes (0 means unlimited). + min: 0 + max: 4294967294 + convert_types: + - str + maximum_advertised_routes_warning_limit: + type: str + convert_types: + - int + description: | + Maximum number of routes after which a warning is issued (0 means never warn) or + Percentage of maximum number of routes at which to warn ("<1-100> percent"). + missing_policy: + type: dict + description: Missing policy configuration for BGP Labeled-Unicast neighbor. + keys: + direction_in: + description: Missing policy inbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + direction_out: + description: Missing policy outbound direction. + type: dict + keys: + action: + description: Missing policy action. + type: str + required: true + valid_values: + - deny + - permit + - deny-in-out + include_community_list: + type: bool + description: Include community-list references in missing policy decision. + include_prefix_list: + type: bool + description: Include prefix-list references in missing policy decision. + include_sub_route_map: + type: bool + description: Include sub-route-map references in missing policy decision. + multi_path: + type: bool + next_hop_resolution: + type: dict + keys: + v4_mapped_v6_translation: + type: bool + next_hop_self: + type: bool + next_hop_self_source_interface: + description: Source interface name. + type: str + next_hop_self_v4_mapped_v6_source_interface: + description: v4-mapped-v6 source interface name. Takes precedence over the next_hop_self_source_interface. + type: str + next_hop_unchanged: + type: bool + rcf_in: + type: str + description: |- + Inbound RCF function name with parenthesis. + Example: MyFunction(myarg). + rcf_out: + type: str + description: |- + Outbound RCF function name with parenthesis. + Example: MyFunction(myarg). + route_map_in: + type: str + description: Inbound route-map name. + route_map_out: + type: str + description: Outbound route-map name. + networks: + type: list + primary_key: prefix + min_length: 1 + items: + type: dict + keys: + prefix: + description: IPv4 prefix "A.B.C.D/E" or IPv6 prefix "A:B:C:D:E:F:G:H/I". + type: str + route_map: + description: Route-map name. + type: str + next_hops: + type: list + primary_key: ip_address + min_length: 1 + items: + type: dict + keys: + ip_address: + type: str + lfib_backup_ip_forwarding: + type: bool + next_hop_resolution_ribs: + type: list + min_length: 1 + max_length: 3 + description: "Specify the RIBs used to resolve next-hops. The order of this list determines the order of RIB lookups." + items: + type: dict + keys: + rib_type: + type: str + required: true + valid_values: + - "system-connected" + - "tunnel-rib-colored" + - "tunnel-rib" + description: "Type of RIB. For 'tunnel-rib', use 'rib_name' to specify the name of the Tunnel-RIB to use." + rib_name: + type: str + description: "The name of the tunnel-rib to use when using 'tunnel-rib' type." + tunnel_source_protocols: + type: list + min_length: 1 + max_length: 2 + primary_key: protocol + items: + type: dict + keys: + protocol: + type: str + valid_values: + - "isis segment-routing" + - "ldp" + rcf: + type: str + description: |- + Optional RCF function name with parenthesis. + Example: MyFunction(myarg). + update_wait_for_convergence: + type: bool + description: Wait for BGP to converge before sending out any route updates. address_family_ipv4_multicast: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_isis.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_isis.schema.yml index 89f7bcf569b..2348a8dd713 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_isis.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_isis.schema.yml @@ -82,10 +82,10 @@ keys: - '0' - '7' - '8a' - description: Configure authentication key type. Default key_id is 0. + description: Configure authentication key type. key: type: str - description: Password string. + description: Password string. `key_type` is required for this setting. key_ids: type: list primary_key: id @@ -164,6 +164,7 @@ keys: - sha-512 rx_disabled: type: bool + description: Disable authentication check on the receive side. level_1: type: dict description: Authentication settings for level-1. 'both' takes precedence over 'level_1' and 'level_2' settings. @@ -209,6 +210,7 @@ keys: keys: enabled: type: bool + required: true maximum_paths: type: int convert_types: @@ -252,6 +254,7 @@ keys: keys: enabled: type: bool + required: true maximum_paths: type: int convert_types: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_ospf.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_ospf.schema.yml index 29b8580b648..33631cbd110 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_ospf.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_ospf.schema.yml @@ -182,6 +182,9 @@ keys: static: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. @@ -190,6 +193,9 @@ keys: connected: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. @@ -198,6 +204,9 @@ keys: bgp: type: dict keys: + enabled: + type: bool + required: true route_map: type: str description: Route Map Name. diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_path_selection.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_path_selection.schema.yml index cfb54f7ceef..07be1c8bad3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_path_selection.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_path_selection.schema.yml @@ -48,7 +48,7 @@ keys: name: type: str description: Local interface name. - pattern: "^Ethernet\\d+(\/\\d+)*(\\.\\d+)?$" + pattern: "^(Port-Channel|Ethernet(\\d+/)*)\\d+(\\.\\d+)?$" public_address: type: str description: Public IP assigned by NAT. diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_pim_sparse_mode.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_pim_sparse_mode.schema.yml index 6f754b88010..c10d5bf0a87 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_pim_sparse_mode.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_pim_sparse_mode.schema.yml @@ -20,11 +20,8 @@ keys: description: IPv4 Prefix associated with SSM. rp_addresses: type: list - # This primary_key is inserted to support conversion from wildcard dicts, - # but it also stops the user from defining the same RP address multiple times, - # which should be allowed. When wildcard dict support is finally removed, - # this primary_key should also be removed. TODO: AVD5.0 primary_key: address + allow_duplicate_primary_key: true items: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_traffic_engineering.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_traffic_engineering.schema.yml index c9e99fbacad..ada25642e51 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_traffic_engineering.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/router_traffic_engineering.schema.yml @@ -11,6 +11,7 @@ keys: keys: enabled: type: bool + required: true router_id: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/snmp_server.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/snmp_server.schema.yml index e80b623c9dc..be3e01651f3 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/snmp_server.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/snmp_server.schema.yml @@ -262,3 +262,6 @@ keys: - int enable: type: bool + ifmib_ifspeed_shape_rate: + type: bool + description: SNMP ifspeed reflecting shaping rate. diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/system.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/system.schema.yml index 9c7166e6fa2..c844c587a50 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/system.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/system.schema.yml @@ -24,24 +24,28 @@ keys: description: Segment size. ipv4_access_groups: type: list - primary_key: acl_name + unique_keys: + - vrf items: type: dict keys: acl_name: type: str + required: true vrf: type: str convert_types: - int ipv6_access_groups: type: list - primary_key: acl_name + unique_keys: + - vrf items: type: dict keys: acl_name: type: str + required: true vrf: type: str convert_types: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/traffic_policies.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/traffic_policies.schema.yml index d0a74f8c739..a84b1c45873 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/traffic_policies.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/traffic_policies.schema.yml @@ -80,6 +80,7 @@ keys: valid_values: - ipv4 - ipv6 + required: true source: type: dict keys: @@ -147,6 +148,9 @@ keys: type: list items: type: str + enforce_gtsm: + type: bool + description: Enforce the GTSM for BGP speakers. Only supported when protocol is set to 'neighbors'. actions: type: dict keys: diff --git a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/vlan_interfaces.schema.yml b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/vlan_interfaces.schema.yml index 46bc4d23038..b034967de75 100644 --- a/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/vlan_interfaces.schema.yml +++ b/python-avd/pyavd/_eos_cli_config_gen/schema/schema_fragments/vlan_interfaces.schema.yml @@ -432,6 +432,9 @@ keys: - str isis_network_point_to_point: type: bool + isis_authentication: + type: dict + $ref: "eos_cli_config_gen#/keys/router_isis/keys/authentication" mtu: type: int convert_types: diff --git a/python-avd/pyavd/_eos_designs/eos_designs_facts/__init__.py b/python-avd/pyavd/_eos_designs/eos_designs_facts/__init__.py index 86621adb72f..6b6de7a8b15 100644 --- a/python-avd/pyavd/_eos_designs/eos_designs_facts/__init__.py +++ b/python-avd/pyavd/_eos_designs/eos_designs_facts/__init__.py @@ -185,3 +185,48 @@ def group(self) -> str | None: def router_id(self) -> str | None: """Exposed in avd_switch_facts.""" return self.shared_utils.router_id + + @cached_property + def inband_mgmt_ip(self) -> str | None: + """ + Exposed in avd_switch_facts. + + Used for fabric docs + """ + return self.shared_utils.inband_mgmt_ip + + @cached_property + def inband_mgmt_interface(self) -> str | None: + """ + Exposed in avd_switch_facts. + + Used for fabric docs + """ + return self.shared_utils.inband_mgmt_interface + + @cached_property + def pod(self) -> str: + """ + Exposed in avd_switch_facts. + + Used for fabric docs + """ + return self.shared_utils.pod_name or self.shared_utils.dc_name or self.shared_utils.fabric_name + + @cached_property + def connected_endpoints_keys(self) -> list: + """ + Exposed in avd_switch_facts. + + Used for fabric docs + """ + return self.shared_utils.connected_endpoints_keys + + @cached_property + def port_profile_names(self) -> list: + """ + Exposed in avd_switch_facts. + + Used for fabric docs + """ + return [{"profile": profile["profile"], "parent_profile": profile.get("parent_profile")} for profile in self.shared_utils.port_profiles] diff --git a/python-avd/pyavd/_eos_designs/eos_designs_facts/uplinks.py b/python-avd/pyavd/_eos_designs/eos_designs_facts/uplinks.py index c18ed3abcd2..fe4412f3c9f 100644 --- a/python-avd/pyavd/_eos_designs/eos_designs_facts/uplinks.py +++ b/python-avd/pyavd/_eos_designs/eos_designs_facts/uplinks.py @@ -8,8 +8,8 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdError -from pyavd._utils import append_if_not_duplicate, get, unique -from pyavd.j2filters import list_compress, range_expand +from pyavd._utils import append_if_not_duplicate, get +from pyavd.j2filters import list_compress, natural_sort, range_expand if TYPE_CHECKING: from . import EosDesignsFacts @@ -361,9 +361,11 @@ def uplink_peers(self: EosDesignsFacts) -> list: These are used to generate the "avd_topology_peers" fact covering downlinks for all devices. """ - uplink_switches = self.shared_utils.uplink_switches - # Making sure each peer is unique - return unique(uplink_switch for uplink_switch in uplink_switches if uplink_switch in self.shared_utils.all_fabric_devices) + # Since uplinks logic silently skips extra entries in uplink vars, we only need to parse shortest list. + min_length = min(len(self.shared_utils.uplink_switch_interfaces), len(self.shared_utils.uplink_interfaces), len(self.shared_utils.uplink_switches)) + # Using set to only get unique uplink switches + unique_uplink_switches = set(self.shared_utils.uplink_switches[:min_length]) + return natural_sort(unique_uplink_switches) @cached_property def _default_downlink_interfaces(self: EosDesignsFacts) -> list: @@ -373,3 +375,20 @@ def _default_downlink_interfaces(self: EosDesignsFacts) -> list: Parsed by downstream switches during eos_designs_facts phase. """ return range_expand(get(self.shared_utils.default_interfaces, "downlink_interfaces", default=[])) + + @cached_property + def uplink_switch_vrfs(self: EosDesignsFacts) -> list[str] | None: + """ + Exposed in avd_switch_facts. + + Return the list of VRF names present on uplink switches. + """ + if self.shared_utils.uplink_type != "p2p-vrfs": + return None + + vrfs = set() + for uplink_switch in self.uplink_peers: + uplink_switch_facts = self.shared_utils.get_peer_facts(uplink_switch) + vrfs.update(uplink_switch_facts.shared_utils.vrfs) + + return natural_sort(vrfs) or None diff --git a/python-avd/pyavd/_eos_designs/eos_designs_facts/vlans.py b/python-avd/pyavd/_eos_designs/eos_designs_facts/vlans.py index d91dc827f89..8c4222a2577 100644 --- a/python-avd/pyavd/_eos_designs/eos_designs_facts/vlans.py +++ b/python-avd/pyavd/_eos_designs/eos_designs_facts/vlans.py @@ -87,7 +87,9 @@ def _local_endpoint_vlans_and_trunk_groups(self: EosDesignsFacts) -> tuple[set, connected_endpoints = get(self._hostvars, connected_endpoints_key["key"], default=[]) for connected_endpoint in connected_endpoints: for adapter in connected_endpoint.get("adapters", []): - adapter_settings = self.shared_utils.get_merged_adapter_settings(adapter) + adapter_settings = self.shared_utils.get_merged_adapter_settings( + adapter, context=f"{connected_endpoints_key['key']}[{connected_endpoint['name']}].adapters" + ) if self.shared_utils.hostname not in adapter_settings.get("switches", []): # This switch is not connected to this endpoint. Skipping. continue @@ -111,7 +113,7 @@ def _local_endpoint_vlans_and_trunk_groups(self: EosDesignsFacts) -> tuple[set, # Skip entry if no match continue - adapter_settings = self.shared_utils.get_merged_adapter_settings(network_port_item) + adapter_settings = self.shared_utils.get_merged_adapter_settings(network_port_item, context="network_ports") adapter_vlans, adapter_trunk_groups = self._parse_adapter_settings(adapter_settings) vlans.update(adapter_vlans) trunk_groups.update(adapter_trunk_groups) diff --git a/python-avd/pyavd/_eos_designs/eos_designs_facts/wan.py b/python-avd/pyavd/_eos_designs/eos_designs_facts/wan.py index 14828a5dd79..ad5c2ef2664 100644 --- a/python-avd/pyavd/_eos_designs/eos_designs_facts/wan.py +++ b/python-avd/pyavd/_eos_designs/eos_designs_facts/wan.py @@ -6,8 +6,6 @@ from functools import cached_property from typing import TYPE_CHECKING -from pyavd.j2filters import natural_sort - if TYPE_CHECKING: from . import EosDesignsFacts @@ -28,37 +26,9 @@ def wan_path_groups(self: EosDesignsFacts) -> list | None: Each with a list of dictionaries containing the (interface, ip_address) in the path_group. TODO: Also add the path_groups importing any of our connected path groups. - Need to find out if we need to resolve recursive imports. + Need to find out if we need to resolve recursive imports. """ - if not self.shared_utils.is_wan_server: + if not self.shared_utils.is_wan_router: return None return self.shared_utils.wan_local_path_groups - - @cached_property - def wan_router_uplink_vrfs(self: EosDesignsFacts) -> list[str] | None: - """ - Exposed in avd_switch_facts. - - Return the list of VRF names present on uplink switches. - These VRFs will be attracted (configured) on WAN "clients" (edge/transit) unless filtered. - - Note that if the attracted VRFs do not have 'wan_vni' set, the code for interface vxlan1 will raise an error. - """ - if not self.shared_utils.is_wan_client or self.shared_utils.uplink_type != "p2p-vrfs": - return None - - # Partially recreating logic from 'uplinks', but since this fact is used to build 'filtered_tenants', - # which in turn is used to build 'uplinks', we cannot reuse 'uplinks' (recursion) - - # Since uplinks logic silently skips extra entries in uplink vars, we only need to parse shortest list. - min_length = min(len(self.shared_utils.uplink_switch_interfaces), len(self.shared_utils.uplink_interfaces), len(self.shared_utils.uplink_switches)) - # Using set to only get unique uplink switches - unique_uplink_switches = set(self.shared_utils.uplink_switches[:min_length]) - - vrfs = set() - for uplink_switch in unique_uplink_switches: - uplink_switch_facts = self.shared_utils.get_peer_facts(uplink_switch) - vrfs.update(uplink_switch_facts.shared_utils.vrfs) - - return natural_sort(vrfs) or None diff --git a/python-avd/pyavd/_eos_designs/fabric_documentation_facts/__init__.py b/python-avd/pyavd/_eos_designs/fabric_documentation_facts/__init__.py new file mode 100644 index 00000000000..1fa1a9b1fa5 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/fabric_documentation_facts/__init__.py @@ -0,0 +1,343 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from functools import cached_property +from ipaddress import IPv4Network, IPv6Network, ip_network +from math import ceil + +from pyavd._eos_designs.avdfacts import AvdFacts +from pyavd._utils import default, get, get_item +from pyavd.j2filters import natural_sort + +from .topology import Topology + + +class FabricDocumentationFacts(AvdFacts): + """ + Class calculating/holding facts used for generating Fabric Documentation and CSVs. + + For use in Jinja call the .render() method to return a dict of the cached_properties. + For use in Python the instance can be used directly to avoid calculating facts unless needed. + """ + + avd_switch_facts: dict[str, dict] + structured_configs: dict[str, dict] + _fabric_name: str + _include_connected_endpoints: bool + """Avoid building data for connected endpoints unless we need it.""" + + # Overriding class vars from AvdFacts, since fabric documentation covers all devices. + _hostvars = NotImplemented + shared_utils = NotImplemented + + def __init__(self, avd_facts: dict[str, dict], structured_configs: dict[str, dict], fabric_name: str, include_connected_endpoints: bool) -> None: # pylint: disable=super-init-not-called + self.avd_switch_facts = {hostname: facts["switch"] for hostname, facts in get(avd_facts, "avd_switch_facts", required=True).items()} + self._fabric_name = fabric_name + self.structured_configs = structured_configs + self._include_connected_endpoints = include_connected_endpoints + + @cached_property + def fabric_name(self) -> str: + """Fabric Name used for heading of Markdown doc.""" + return self._fabric_name + + @cached_property + def fabric_switches(self) -> list[dict]: + """List of fabric switches.""" + return natural_sort( + [ + { + "node": hostname, + "type": self.avd_switch_facts[hostname]["type"], + "pod": self.avd_switch_facts[hostname].get("pod"), + "mgmt_ip": self.avd_switch_facts[hostname].get("mgmt_ip") or "-", + "platform": self.avd_switch_facts[hostname].get("platform") or "-", + "provisioned": "Provisioned" if self.avd_switch_facts[hostname].get("is_deployed") else "Not Available", + "serial_number": self.avd_switch_facts[hostname].get("serial_number") or "-", + "inband_mgmt_ip": self.avd_switch_facts[hostname].get("inband_mgmt_ip"), + "inband_mgmt_interface": self.avd_switch_facts[hostname].get("inband_mgmt_interface"), + "loopback0_ip_address": get( + get_item(get(structured_config, "loopback_interfaces", default=[]), "name", "Loopback0", default={}), "ip_address" + ), + # TODO: Improve VTEP loopback detection + "vtep_loopback_ip_address": get( + get_item(get(structured_config, "loopback_interfaces", default=[]), "name", "Loopback1", default={}), "ip_address" + ), + "router_isis_net": get(structured_config, "router_isis.net"), + } + for hostname, structured_config in self.structured_configs.items() + ], + sort_key="node", + ) + + @cached_property + def has_isis(self) -> bool: + """At least one device has ISIS configured, so we should include the section in the docs.""" + return any(fabric_switch.get("router_isis_net") for fabric_switch in self.fabric_switches) + + @cached_property + def _node_types(self) -> set[str]: + """Set of node types that are part of the fabric.""" + return {switch["type"] for switch in self.fabric_switches} + + @cached_property + def _topology(self) -> Topology: + """ + Internal Topology mode. + + The topology model is an undirected graph containing links between devices that are of any type covered by the fabric. + The model is populated by traversing all ethernet_interfaces and adding the links using information about the device itself as well as the peer. + The links (edges) of the graph contain FrozenSets to enable automatic deduplication. The same link will only be once in the Graph even if added + from both ends. + + The topology model is only used for listing deduplicated edges in various ways, but it can be used for other purposes like diagrams later. + """ + topology = Topology() + for hostname, structured_config in self.structured_configs.items(): + for ethernet_interface in get(structured_config, "ethernet_interfaces", default=[]): + if (peer_type := get(ethernet_interface, "peer_type")) not in self._node_types and peer_type != "mlag_peer": + continue + + peer = get(ethernet_interface, "peer", required=True) + if peer_type == "mlag_peer": + peer_type = self.avd_switch_facts[peer]["type"] + mlag_peer = True + else: + mlag_peer = False + if peer_interface := get(ethernet_interface, "peer_interface"): + peer_ethernet_interface = get_item( + get(self.structured_configs, f"{peer}..ethernet_interfaces", separator="..", default=[]), "name", peer_interface, default={} + ) + peer_ip_address = get(peer_ethernet_interface, "ip_address") + else: + peer_ip_address = None + + routed = get(ethernet_interface, "switchport.enabled") is False + + data = ( + self.avd_switch_facts[hostname]["type"], # type + get(ethernet_interface, "name"), # interface + get(ethernet_interface, "ip_address"), # ip_address + mlag_peer, # is_mlag_peer + routed, # boolean to tell if the interface is routed or switched + ) + peer_data = ( + peer_type, # type + peer_interface, # interface + peer_ip_address, # ip_address + mlag_peer, # is_mlag_peer + routed, # boolean to tell if the interface is routed or switched + ) + topology.add_edge(hostname, peer, data, peer_data) + + return topology + + @cached_property + def topology_links(self) -> list[dict]: + """List of topology links extracted from _topology.""" + return natural_sort( + [ + { + "node": hostname, + "type": data[0], + "node_interface": data[1], + "node_ip_address": data[2], + "routed": data[4], + "peer": peer_name, + "peer_type": "mlag_peer" if peer_data[3] else peer_data[0], + "peer_interface": peer_data[1], + "peer_ip_address": peer_data[2], + } + for hostname, edges in self._topology.get_edges_by_node_unidirectional_sorted().items() + if edges + for edge in edges + for node_name, data in edge.node_data + if node_name == hostname + # Below is just a way to set the peer variables for easy reuse. + for peer_name, peer_data in edge.node_data + if peer_name != hostname + ] + ) + + @cached_property + def uplink_ipv4_pools(self) -> list[dict]: + """List of unique uplink_ipv4_pools containing information about size and usage.""" + # Build set of loopback_ipv4_pool for all devices + pools_set = {f"{pool}" for switch in self.avd_switch_facts.values() if (pool := get(switch, "uplink_ipv4_pool"))} + pools = [ip_network(pool, strict=False) for pool in pools_set] + + # Build list of ip addresses found in topology + ip_addresses = [ip_network(data[2], strict=False) for edge in self._topology.get_edges() for _, data in edge.node_data if data[2] is not None] + + return self.render_pools_as_list(pools, ip_addresses) + + @cached_property + def loopback_ipv4_pools(self) -> list[dict]: + """List of unique loopback_ipv4_pools containing information about size and usage.""" + # Build set of loopback_ipv4_pool for all devices + pools_set = {f"{pool}" for switch in self.avd_switch_facts.values() if (pool := get(switch, "loopback_ipv4_pool"))} + pools = [ip_network(pool, strict=False) for pool in pools_set] + + # Build list of ip addresses found in fabric switches + ip_addresses = [ + ip_network(fabric_switch["loopback0_ip_address"], strict=False) + for fabric_switch in self.fabric_switches + if fabric_switch["loopback0_ip_address"] is not None + ] + return self.render_pools_as_list(pools, ip_addresses) + + @cached_property + def vtep_loopback_ipv4_pools(self) -> list[dict]: + """List of unique vtep_loopback_ipv4_pools containing information about size and usage.""" + # Build set of vtep_loopback_ipv4_pool from all devices + pools_set = {f"{pool}" for switch in self.avd_switch_facts.values() if (pool := get(switch, "vtep_loopback_ipv4_pool"))} + pools = [ip_network(pool, strict=False) for pool in pools_set] + + # Build list of ip addresses found in fabric switches + ip_addresses = [ + ip_network(fabric_switch["vtep_loopback_ip_address"], strict=False) + for fabric_switch in self.fabric_switches + if fabric_switch["vtep_loopback_ip_address"] is not None + ] + return self.render_pools_as_list(pools, ip_addresses) + + def render_pools_as_list(self, pools: list[ip_network], addresses: list[ip_network]) -> list: + """Helper function to build IP pool data for a list of pools.""" + return natural_sort([self.get_pool_data(pool, addresses) for pool in pools], sort_key="pool") + + def get_pool_data(self, pool: IPv4Network | IPv6Network, addresses: list[IPv4Network | IPv6Network]) -> dict: + """Helper function to build IP pool data for one IP pool.""" + size = self.get_pool_size(pool) + used = self.count_addresses_in_pool(pool, addresses) + # rounding up on 100 * percent and then divide by 100 to give 11.22% rounded up on last decimal. + return {"pool": pool, "size": size, "used": used, "used_percent": (ceil((100 * used / size) * 100) / 100)} + + def get_pool_size(self, pool: IPv4Network | IPv6Network) -> int: + """ + Helper function returning the size of one IP pool. + + Ignores hosts, broadcast etc since this is a pool of subnets, not one subnet. + """ + max_prefixlen = 128 if pool.version == 6 else 32 + return 2 ** (max_prefixlen - pool.prefixlen) + + def count_addresses_in_pool(self, pool: IPv4Network | IPv6Network, addresses: list[IPv4Network | IPv6Network]) -> int: + """Helper function to count the number of addresses that fall within the given IP pool.""" + return len([True for address in addresses if address.subnet_of(pool)]) + + @cached_property + def all_connected_endpoints(self) -> dict[str, list]: + """ + Returning list of connected_endpoints from all devices. + + First generate a dict of lists keyed with connected endpoint key. + Then return a natural sorted dict where the inner lists are natural sorted on peer. + """ + if not self._include_connected_endpoints: + return {} + + all_connected_endpoints = {} + for hostname, structured_config in self.structured_configs.items(): + connected_endpoints_keys = get(self.avd_switch_facts[hostname], "connected_endpoints_keys", default=[]) + connected_endpoints_by_type = {item["type"]: item for item in connected_endpoints_keys} + port_channel_interfaces = get(structured_config, "port_channel_interfaces", default=[]) + for ethernet_interface in get(structured_config, "ethernet_interfaces", default=[]): + if (peer_type := get(ethernet_interface, "peer_type")) not in connected_endpoints_by_type: + continue + + if (channel_group := get(ethernet_interface, "channel_group.id")) is not None: + # Port channel member + port_channel_interface = get_item(port_channel_interfaces, "name", f"Port-Channel{channel_group}") + else: + port_channel_interface = {} + + all_connected_endpoints.setdefault(connected_endpoints_by_type[peer_type]["key"], []).append( + { + "peer": get(ethernet_interface, "peer", default="-"), + "peer_type": peer_type, + "peer_interface": get(ethernet_interface, "peer_interface", default="-"), + "fabric_switch": hostname, + "fabric_port": ethernet_interface["name"], + "description": get(ethernet_interface, "description", default="-"), + "shutdown": default(get(ethernet_interface, "shutdown"), get(port_channel_interface, "shutdown"), "-"), + "mode": default(get(ethernet_interface, "switchport.mode"), get(port_channel_interface, "switchport.mode"), "-"), + "access_vlan": default(get(ethernet_interface, "switchport.access_vlan"), get(port_channel_interface, "switchport.access_vlan"), "-"), + "trunk_allowed_vlan": default( + get(ethernet_interface, "switchport.trunk.allowed_vlan"), get(port_channel_interface, "switchport.trunk.allowed_vlan"), "-" + ), + "profile": default(get(ethernet_interface, "port_profile"), "-"), + } + ) + + return {key: natural_sort(all_connected_endpoints[key], sort_key="peer") for key in natural_sort(all_connected_endpoints)} + + @cached_property + def all_connected_endpoints_keys(self) -> list[dict]: + """ + Returning list of unique connected_endpoints_keys from all devices. + + First generating a set of tuples and then returning as a natural sorted list of dicts. + """ + if not self._include_connected_endpoints: + return [] + + set_of_tuples = { + (item["key"], item["type"], item.get("description")) + for switch in self.avd_switch_facts.values() + for item in get(switch, "connected_endpoints_keys", default=[]) + } + return natural_sort( + [ + { + "key": key, + "type": item_type, + "description": description, + } + for key, item_type, description in set_of_tuples + ], + sort_key="key", + ) + + @cached_property + def all_port_profiles(self) -> list[dict]: + """ + Returning list of unique port-profiles from all devices. + + First generating a set of tuples and then returning as a natural sorted list of dicts. + """ + if not self._include_connected_endpoints: + return [] + + set_of_tuples = { + (item["profile"], item.get("parent_profile")) for switch in self.avd_switch_facts.values() for item in get(switch, "port_profile_names", default=[]) + } + return natural_sort( + [ + { + "profile": profile, + "parent_profile": parent_profile, + } + for profile, parent_profile in set_of_tuples + ], + sort_key="profile", + ) + + def get_physical_links(self) -> list[tuple]: + """ + Returning list of physical links from all devices used for topology CSV. + + Return a list naturally sorted on hostname and sub-sorted on interface name. + """ + return [ + ( + self.avd_switch_facts[hostname]["type"], + hostname, + ethernet_interface["name"], + get(ethernet_interface, "peer_type", default=""), + get(ethernet_interface, "peer", default=""), + get(ethernet_interface, "peer_interface", default=""), + not get(ethernet_interface, "shutdown", default=False), + ) + for hostname in natural_sort(self.structured_configs) + for ethernet_interface in natural_sort(get(self.structured_configs[hostname], "ethernet_interfaces"), sort_key="name") + ] diff --git a/python-avd/pyavd/_eos_designs/fabric_documentation_facts/topology.py b/python-avd/pyavd/_eos_designs/fabric_documentation_facts/topology.py new file mode 100644 index 00000000000..8852106b9f7 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/fabric_documentation_facts/topology.py @@ -0,0 +1,46 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from __future__ import annotations + +from dataclasses import dataclass + +from pyavd.j2filters import natural_sort + + +@dataclass(frozen=True) +class Edge: + nodes: frozenset[str] + node_data: frozenset[tuple[str, tuple]] + + +class Topology: + edges: set[Edge] + node_edges: dict[str, set[Edge]] + + def __init__(self) -> None: + self.edges = set() + self.node_edges = {} + + def add_edge(self, node1: str, node2: str, node1_data: tuple, node2_data: tuple) -> Edge: + edge = Edge(nodes=frozenset((node1, node2)), node_data=frozenset(((node1, node1_data), (node2, node2_data)))) + self.edges.add(edge) + self.node_edges.setdefault(node1, set()).add(edge) + self.node_edges.setdefault(node2, set()).add(edge) + return edge + + def get_edges(self) -> tuple[Edge]: + return tuple(self.edges) + + def get_edges_by_node(self) -> dict[str, tuple[Edge]]: + return {node: tuple(edges) for node, edges in self.node_edges.items()} + + def get_edges_by_node_unidirectional_sorted(self) -> dict[str, tuple[Edge]]: + edges_done = set() + edges_by_node = {} + for node in natural_sort(self.node_edges): + uni_edges = self.node_edges[node].difference(edges_done) + edges_by_node[node] = tuple(uni_edges) + edges_done.update(uni_edges) + + return edges_by_node diff --git a/python-avd/pyavd/_eos_designs/j2templates/connected_endpoints_documentation.j2 b/python-avd/pyavd/_eos_designs/j2templates/connected_endpoints_documentation.j2 new file mode 100644 index 00000000000..1e9ceb53303 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/j2templates/connected_endpoints_documentation.j2 @@ -0,0 +1,51 @@ +{# + Copyright (c) 2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +## Connected Endpoints +{% if all_connected_endpoints | length == 0 %} + +No connected endpoint configured! +{% else %} + +### Connected Endpoint Keys + +| Key | Type | Description | +| --- | ---- | ----------- | +{% for connected_endpoints_key in all_connected_endpoints_keys %} +{% set key = connected_endpoints_key.key %} +{% set type = connected_endpoints_key.type %} +{% set description = connected_endpoints_key.description | arista.avd.default("-") %} +| {{ key }} | {{ type }} | {{ description }} | +{% endfor %} +{% for key in all_connected_endpoints %} + +### {{ key | replace("_", " ") | capitalize }} + +| Name | Port | Fabric Device | Fabric Port | Description | Shutdown | Mode | Access VLAN | Trunk Allowed VLANs | Profile | +| ---- | ---- | ------------- | ------------| ----------- | -------- | ---- | ----------- | ------------------- | ------- | +{% for connected_endpoint in all_connected_endpoints[key] %} +{% set port = connected_endpoint.peer_interface %} +{% set fabric_port = connected_endpoint.fabric_port %} +{% set profile = connected_endpoint.profile | arista.avd.default("-") %} +{% set description = connected_endpoint.description | arista.avd.default("-") %} +{% set shutdown = connected_endpoint.shutdown | arista.avd.default("-") %} +{% set mode = connected_endpoint.mode | arista.avd.default("-") %} +{% set access_vlan = connected_endpoint.access_vlan | arista.avd.default("-") %} +{% set trunk_allowed_vlan = connected_endpoint.trunk_allowed_vlan | arista.avd.default("-") %} +| {{ connected_endpoint.peer }} | {{ port }} | {{ connected_endpoint.fabric_switch }} | {{ fabric_port }} | {{ description }} | {{ shutdown }} | {{ mode }} | {{ access_vlan }} | {{ trunk_allowed_vlan }} | {{ profile }} | +{% endfor %} +{% endfor %} +{% endif %} +{% if all_port_profiles | length > 0 %} + +### Port Profiles + +| Profile Name | Parent Profile | +| ------------ | -------------- | +{% for profile in all_port_profiles %} +{% set parent = profile.parent_profile | arista.avd.default("-") %} +| {{ profile.profile }} | {{ parent }} | +{% endfor %} +{% endif %} diff --git a/python-avd/pyavd/_eos_designs/j2templates/fabric_documentation.j2 b/python-avd/pyavd/_eos_designs/j2templates/fabric_documentation.j2 new file mode 100644 index 00000000000..db7ab640ee8 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/j2templates/fabric_documentation.j2 @@ -0,0 +1,97 @@ +{# + Copyright (c) 2023-2024 Arista Networks, Inc. + Use of this source code is governed by the Apache License 2.0 + that can be found in the LICENSE file. +#} +# {{ fabric_name }} + +## Table of Contents + + + + +## Fabric Switches and Management IP + +| POD | Type | Node | Management IP | Platform | Provisioned in CloudVision | Serial Number | +| --- | ---- | ---- | ------------- | -------- | -------------------------- | ------------- | +{% for fabric_switch in fabric_switches %} +| {{ fabric_switch.pod }} | {{ fabric_switch.type }} | {{ fabric_switch.node }} | {{ fabric_switch.mgmt_ip }} | {{ fabric_switch.platform }} | {{ fabric_switch.provisioned }} | {{ fabric_switch.serial_number }} | +{% endfor %} + +> Provision status is based on Ansible inventory declaration and do not represent real status from CloudVision. + +### Fabric Switches with inband Management IP + +| POD | Type | Node | Management IP | Inband Interface | +| --- | ---- | ---- | ------------- | ---------------- | +{% for fabric_switch in fabric_switches | selectattr("inband_mgmt_ip", "arista.avd.defined") %} +| {{ fabric_switch.pod }} | {{ fabric_switch.type }} | {{ fabric_switch.node }} | {{ fabric_switch.inband_mgmt_ip }} | {{ fabric_switch.inband_mgmt_interface }} | +{% endfor %} + +## Fabric Topology + +| Type | Node | Node Interface | Peer Type | Peer Node | Peer Interface | +| ---- | ---- | -------------- | --------- | ----------| -------------- | +{% for topology_link in topology_links %} +| {{ topology_link.type }} | {{ topology_link.node }} | {{ topology_link.node_interface }} | {{ topology_link.peer_type }} | {{ topology_link.peer }} | {{ topology_link.peer_interface }} | +{% endfor %} + +## Fabric IP Allocation + +### Fabric Point-To-Point Links + +| Uplink IPv4 Pool | Available Addresses | Assigned addresses | Assigned Address % | +| ---------------- | ------------------- | ------------------ | ------------------ | +{% for uplink_ipv4_pool in uplink_ipv4_pools %} +| {{ uplink_ipv4_pool.pool }} | {{ uplink_ipv4_pool.size }} | {{ uplink_ipv4_pool.used }} | {{ uplink_ipv4_pool.used_percent }} % | +{% endfor %} + +### Point-To-Point Links Node Allocation + +| Node | Node Interface | Node IP Address | Peer Node | Peer Interface | Peer IP Address | +| ---- | -------------- | --------------- | --------- | -------------- | --------------- | +{% for topology_link in topology_links | selectattr("node_ip_address", "arista.avd.defined") %} +| {{ topology_link.node }} | {{ topology_link.node_interface }} | {{ topology_link.node_ip_address }} | {{ topology_link.peer }} | {{ topology_link.peer_interface }} | {{ topology_link.peer_ip_address }} | +{% endfor %} + +### Loopback Interfaces (BGP EVPN Peering) + +| Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | +| ------------- | ------------------- | ------------------ | ------------------ | +{% for loopback_ipv4_pool in loopback_ipv4_pools %} +| {{ loopback_ipv4_pool.pool }} | {{ loopback_ipv4_pool.size }} | {{ loopback_ipv4_pool.used }} | {{ loopback_ipv4_pool.used_percent }} % | +{% endfor %} + +### Loopback0 Interfaces Node Allocation + +| POD | Node | Loopback0 | +| --- | ---- | --------- | +{% for fabric_switch in fabric_switches | selectattr("loopback0_ip_address", "arista.avd.defined") %} +| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.loopback0_ip_address }} | +{% endfor %} +{% if has_isis %} + +### ISIS CLNS interfaces + +| POD | Node | CLNS Address | +| --- | ---- | ------------ | +{% for fabric_switch in fabric_switches | selectattr("router_isis_net", "arista.avd.defined") %} +| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.router_isis_net }} | +{% endfor %} +{% endif %} + +### VTEP Loopback VXLAN Tunnel Source Interfaces (VTEPs Only) + +| VTEP Loopback Pool | Available Addresses | Assigned addresses | Assigned Address % | +| ------------------ | ------------------- | ------------------ | ------------------ | +{% for vtep_loopback_ipv4_pool in vtep_loopback_ipv4_pools %} +| {{ vtep_loopback_ipv4_pool.pool }} | {{ vtep_loopback_ipv4_pool.size }} | {{ vtep_loopback_ipv4_pool.used }} | {{ vtep_loopback_ipv4_pool.used_percent }} % | +{% endfor %} + +### VTEP Loopback Node allocation + +| POD | Node | Loopback1 | +| --- | ---- | --------- | +{% for fabric_switch in fabric_switches | selectattr("vtep_loopback_ip_address", "arista.avd.defined") %} +| {{ fabric_switch.pod }} | {{ fabric_switch.node }} | {{ fabric_switch.vtep_loopback_ip_address }} | +{% endfor %} diff --git a/python-avd/pyavd/_eos_designs/schema/eos_designs.schema.yml b/python-avd/pyavd/_eos_designs/schema/eos_designs.schema.yml index 64763085213..010e736e7c6 100644 --- a/python-avd/pyavd/_eos_designs/schema/eos_designs.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/eos_designs.schema.yml @@ -43,6 +43,25 @@ keys: "warning" will produce warning messages. ' + avd_eos_designs_debug: + documentation_options: + table: role-settings + type: bool + default: false + description: Dump all vars and facts per device after generating `avd_switch_facts`. + avd_eos_designs_structured_config: + documentation_options: + table: role-settings + type: bool + default: true + description: Generate structured configuration per device. + avd_eos_designs_unset_facts: + documentation_options: + table: role-settings + type: bool + default: true + description: Unset `avd_switch_facts` to gain a small performance improvement + since Ansible needs to handle fewer variables. bfd_multihop: documentation_options: table: bfd-settings @@ -474,40 +493,40 @@ keys: default: - key: servers type: server - description: Server. + description: Server - key: firewalls type: firewall - description: Firewall. + description: Firewall - key: routers type: router - description: Router. + description: Router - key: load_balancers type: load_balancer - description: Load Balancer. + description: Load Balancer - key: storage_arrays type: storage_array - description: Storage Array. + description: Storage Array - key: cpes type: cpe - description: CPE. + description: CPE - key: workstations type: workstation - description: Workstation. + description: Workstation - key: access_points type: access_point - description: Access Point. + description: Access Point - key: phones type: phone - description: Phone. + description: Phone - key: printers type: printer - description: Printer. + description: Printer - key: cameras type: camera - description: Camera. + description: Camera - key: generic_devices type: generic_device - description: Generic Device. + description: Generic Device core_interfaces: type: dict $ref: eos_designs#/$defs/l3_edge @@ -859,6 +878,32 @@ keys: ' type: str + default_connected_endpoints_description: + type: str + documentation_options: + table: default-connected-endpoints-description + description: "Default description or description template to be used on all ports + to connected endpoints.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `endpoint_type`: The `type` from `connected_endpoints_keys` + like `server`, `router` etc.\n - `endpoint`: The name of the connected endpoint\n + \ - `endpoint_port`: The value from `endpoint_ports` for this switch port if + set.\n\nBy default the description is templated from the type, name and port + of the endpoint if set." + default: '{endpoint_type!u}_{endpoint}{endpoint_port?<_}' + default_connected_endpoints_port_channel_description: + type: str + documentation_options: + table: default-connected-endpoints-description + description: "Default description or description template to be used on all port-channels + to connected endpoints.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `endpoint_type`: The `type` from `connected_endpoints_keys` + like `server`, `router` etc.\n - `endpoint`: The name of the connected endpoint\n + \ - `endpoint_port_channel`: The value of `endpoint_port_channel` if set.\n + \ - `port_channel_id`: The port-channel number for the switch.\n - `adapter_description`: + The adapter's description if set.\n - `adapter_description_or_endpoint`: Helper + alias of the adapter_description or endpoint.\n\nBy default the description + is templated from the type, name and port-channel name of the endpoint if set." + default: '{endpoint_type!u}_{endpoint}{endpoint_port_channel?<_}' default_igmp_snooping_enabled: documentation_options: table: system-settings @@ -946,6 +991,30 @@ keys: - inband - none default: oob + default_network_ports_description: + type: str + documentation_options: + table: default-network-ports-description + description: "Default description or description template to be used on all ports + defined under `network_ports`.\nThis can be a template using the format string + syntax.\nThe available template fields are:\n - `endpoint_type`: Always set + to `network_port`.\n - `endpoint`: The value of the `endpoint` key if set.\n\nBy + default the description is templated from the `endpoint` key if set." + default: '{endpoint?}' + default_network_ports_port_channel_description: + type: str + documentation_options: + table: default-network-ports-description + description: "Default description or description template to be used on all port-channels + defined under `network_ports`.\nThis can be a template using the format string + syntax.\nThe available template fields are:\n - `endpoint_type`: Always set + to `network_port`.\n - `endpoint`: The value of the `endpoint` key if set.\n + \ - `endpoint_port_channel`: The value of `endpoint_port_channel` if set.\n + \ - `port_channel_id`: The port-channel number for the switch.\n - `adapter_description`: + The adapter's description if set.\n - `adapter_description_or_endpoint`: Helper + alias of the adapter_description or endpoint.\n\nBy default the description + is templated from the `endpoint` key if set." + default: '{endpoint?}{endpoint_port_channel?<_}' default_node_types: type: list primary_key: node_type @@ -969,6 +1038,11 @@ keys: design: documentation_options: table: design + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#deprecation_of_design.type type: dict keys: type: @@ -1026,16 +1100,30 @@ keys: default: true eos_designs_documentation: documentation_options: - table: role-documentation-output-settings + table: role-settings description: 'Control fabric documentation generation. ' type: dict keys: + enable: + description: Generate fabric-wide documentation. + type: bool + default: true connected_endpoints: - description: 'Generate fabric-wide documentation for connected endpoints. + description: 'Include connected endpoints in the fabric-wide documentation. - ' + This is `false` by default to avoid cluttering documentation for projects + with thousands of endpoints.' + type: bool + default: false + topology_csv: + description: Generate Topology CSV with all interfaces towards other devices. + type: bool + default: false + p2p_links_csv: + description: Generate P2P links CSV with all routed point-to-point links between + devices. type: bool default: false event_handlers: @@ -1355,6 +1443,20 @@ keys: convert_types: - str description: IPv4 prefix length used for L3 point-to-point uplinks. + wan_ha: + type: dict + description: Allow to manipulate the IP addressing scheme for WAN HA direct + subnets. + keys: + ipv4_prefix_length: + type: int + default: 31 + min: 1 + max: 31 + convert_types: + - str + description: IPv4 prefix length used for point-to-point interface for + direct WAN HA link. fabric_name: documentation_options: table: fabric-topology @@ -1391,13 +1493,13 @@ keys: mlag_interfaces: description: Enable sFlow on all MLAG peer interfaces. type: bool + l3_interfaces: + description: Enable sFlow on all l3 interfaces. + type: bool flow_tracking_settings: documentation_options: table: management-flow-tracking-settings - description: 'PREVIEW: This key is currently not supported - - - Define the flow tracking parameters for this topology.' + description: Define the flow tracking parameters for this topology. type: dict keys: sampled: @@ -1822,9 +1924,8 @@ keys: display_name: ISIS Default IS System-ID format description: 'Configures source for the system-id within the ISIS net id. - By default the `id` and `isis_system_id_prefix` fields configured under the - node attributes are used to generate the system-id. - + If this key is set to `node_id`, the fields `id` and `isis_system_id_prefix` + configured under the node attributes are used to generate the system-id. If `underlay_loopback` is selected then all node `isis_system_id_prefix` settings will be ignored and the loopback address will be used to generate the system-id.' @@ -1834,7 +1935,7 @@ keys: valid_values: - node_id - underlay_loopback - default: node_id + default: underlay_loopback isis_ti_lfa: documentation_options: table: isis-settings @@ -1951,7 +2052,7 @@ keys: description: 'Management interface description. ' - default: oob_management + default: OOB_MANAGEMENT mgmt_interface_vrf: documentation_options: table: management-interface-settings @@ -1966,6 +2067,27 @@ keys: type: bool default: false description: Configure IP routing for the OOB Management VRF. + mlag_bgp_peer_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on the MLAG BGP peers + including those in VRFs.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `mlag_peer`: The name of the MLAG peer.\n + \ - `interface`: The local MLAG L3 VLAN interface.\n - `peer_interface`: The + MLAG L3 VLAN interface on the MLAG peer.\n - `vrf`: The name of the VRF. Not + available for the underlay peering.\n\nThe default description is built from + the name and interface of the MLAG peer and optionally the VRF." + default: '{mlag_peer}_{peer_interface}' + mlag_bgp_peer_group_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on the MLAG BGP peer-group.\nThis + can be a template using the format string syntax.\nThe available template fields + are:\n - `mlag_peer`: The name of the MLAG peer.\n\nThe default description + is the name of the MLAG peers." + default: '{mlag_peer}' mlag_ibgp_peering_vrfs: documentation_options: table: network-services-vrfs-settings @@ -1991,18 +2113,99 @@ keys: min: 1 max: 4093 default: 3000 + mlag_member_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on MLAG peer-link + ethernet interfaces.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `mlag_peer`: The name of the MLAG peer.\n + \ - `interface`: The local MLAG port-channel interface.\n - `peer_interface`: + The port-channel interface on the MLAG peer.\n - `mlag_port_channel_id`: The + local MLAG port-channel ID.\n - `mlag_peer_port_channel_id`: The port-channel + ID on the MLAG peer.\n\nBy default the description is templated from the name + and interface of the MLAG peer." + default: MLAG_{mlag_peer}_{peer_interface} mlag_on_orphan_port_channel_downlink: type: bool documentation_options: table: fabric-settings - description: 'If `true` (default) an MLAG ID will always be configured on a Port-Channel + description: 'If `true` an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair. - If `false` an MLAG ID will only be configured on Port-Channel downlinks dual-homed - to two MLAG switches. - - Note the default value will change to `false` in AVD version 5.0' - default: true + If `false` (default) an MLAG ID will only be configured on Port-Channel downlinks + dual-homed to two MLAG switches.' + default: false + mlag_peer_l3_svi_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on MLAG L3 peering + SVI (Interface Vlan4093 by default).\nThis can be a template using the format + string syntax.\nThe available template fields are:\n - `mlag_peer`: The name + of the MLAG peer.\n - `interface`: The MLAG L3 peering SVI name.\n - `mlag_peer_l3_vlan`: + The MLAG L3 peering VLAN ID." + default: MLAG_L3 + mlag_peer_l3_vlan_name: + type: str + documentation_options: + table: fabric-settings + description: "Name or name template to be used on MLAG L3 VLAN (VLAN 4093 by default).\nThis + can be a template using the format string syntax.\nThe available template fields + are:\n - `mlag_peer`: The name of the MLAG peer.\n - `mlag_peer_l3_vlan`: + The MLAG L3 peering VLAN ID." + default: MLAG_L3 + mlag_peer_l3_vrf_svi_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on MLAG L3 peering + SVI for VRFs.\nThis can be a template using the format string syntax.\nThe available + template fields are:\n - `mlag_peer`: The name of the MLAG peer.\n - `interface`: + The MLAG L3 VRF peering SVI name.\n - `vlan`: The MLAG L3 VRF peering VLAN + ID.\n - `vrf`: The VRF name." + default: MLAG_L3_VRF_{vrf} + mlag_peer_l3_vrf_vlan_name: + type: str + documentation_options: + table: fabric-settings + description: "Name or name template to be used on MLAG L3 peering VLAN for VRFs.\nThis + can be a template using the format string syntax.\nThe available template fields + are:\n - `mlag_peer`: The name of the MLAG peer.\n - `vlan`: The MLAG L3 VRF + peering VLAN ID.\n - `vrf`: The VRF name." + default: MLAG_L3_VRF_{vrf} + mlag_peer_svi_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on MLAG peering SVI + (Interface Vlan4094 by default).\nThis can be a template using the format string + syntax.\nThe available template fields are:\n - `mlag_peer`: The name of the + MLAG peer.\n - `interface`: The MLAG peering SVI name.\n - `mlag_peer_vlan`: + The MLAG peering VLAN ID." + default: MLAG + mlag_peer_vlan_name: + type: str + documentation_options: + table: fabric-settings + description: "Name or name template to be used on MLAG peering VLAN (VLAN 4094 + by default).\nThis can be a template using the format string syntax.\nThe available + template fields are:\n - `mlag_peer`: The name of the MLAG peer.\n - `mlag_peer_vlan`: + The MLAG peering VLAN ID." + default: MLAG + mlag_port_channel_description: + type: str + documentation_options: + table: fabric-settings + description: "Description or description template to be used on MLAG peer-link + port-channel interfaces.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `mlag_peer`: The name of the MLAG peer.\n + \ - `interface`: The local MLAG port-channel interface.\n - `peer_interface`: + The port-channel interface on the MLAG peer.\n - `mlag_port_channel_id`: The + local MLAG port-channel ID.\n - `mlag_peer_port_channel_id`: The port-channel + ID on the MLAG peer.\n\nBy default the description is templated from the name + and port-channel interface of the MLAG peer." + default: MLAG_{mlag_peer}_{peer_interface} name_servers: documentation_options: table: management-settings @@ -2036,7 +2239,15 @@ keys: type: str description: type: str - description: Description to be used on all ports. + description: "Description or description template to be used on all ports.\nThis + can be a template using the format string syntax.\nThe available template + fields are:\n - `endpoint_type` - always set to `network_port`.\n - + `endpoint` - content of the `endpoint` key if set.\n\nThe default description + is set by `default_network_ports_description`.\nBy default the description + is templated from the `endpoint` key if set." + endpoint: + type: str + description: Name or description of the endpoints connected to these ports. network_services_keys: type: list primary_key: name @@ -2061,18 +2272,17 @@ keys: - name: tenants new_network_services_bgp_vrf_config: type: bool - description: 'Set this key to `true` in the node type to generate full BGP configuration - - for network services even when `evpn` is not in the address families - - (`evpn` is the default address family for `l3ls-evpn` but not for `l2ls`). - - - This is `false` by default except if `uplink_type` is set to `p2p-vrfs`, then - the default value is `true`. - + default: true + description: 'This key was used to generate BGP configuration for network services + even when `evpn` is not in the address families for the node as well as the + VRF. - This may introduce breaking changes to your configuration.' + This is now part of the default behavior so this key has been removed.' + deprecation: + warning: true + removed: true + remove_in_version: 5.0.0 + url: https://avd.arista.com/devel/porting-guides/5.x.x.html#new-improved-logic-for-bgp-configuration-of-network-services-vrfs custom_node_type_keys: $ref: eos_designs#/keys/node_type_keys default: null @@ -2207,7 +2417,7 @@ keys: This is used both for AutoVPN and Pathfinder designs. - That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. `server` indicates that the router is a route-reflector. @@ -2375,12 +2585,19 @@ keys: connected_endpoints_port_channel_interfaces: type: str description: Path to Custom J2 template. - overlay_loopback_interface: + router_id_loopback_interface: type: str description: Path to Custom J2 template. vtep_loopback_interface: type: str description: Path to Custom J2 template. + overlay_loopback_interface: + type: str + description: Path to Custom J2 template. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: router_id_loopback_interface cv_tags_topology_type: documentation_options: table: cloudvision-tags @@ -2464,6 +2681,16 @@ keys: ' default: false + overlay_bgp_peer_description: + type: str + documentation_options: + table: overlay-settings + description: "Description or description template to be used on the overlay BGP + peers.\nThis can be a template using the format string syntax.\nThe available + template fields are:\n - `peer`: The name of the BGP peer.\n - `peer_interface`: + The interface on the BGP peer if available.\n\nThe default description is built + from the name and interface of the BGP peer." + default: '{peer}{peer_interface?<_}' overlay_cvx_servers: documentation_options: table: overlay-settings @@ -2522,6 +2749,10 @@ keys: table: overlay-settings description: Customize the description on overlay interface Loopback0. type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: router_id_loopback_description overlay_mlag_rfc5549: documentation_options: table: overlay-settings @@ -2572,7 +2803,7 @@ keys: description: 'The method for deriving RD Administrator subfield (first part of RD): - - ''overlay_loopback_ip'' means the IP address of Loopback0. + - ''router_id'' means the IP address of Loopback0. - ''vtep_loopback'' means the IP address of the VTEP loopback interface. @@ -2586,8 +2817,11 @@ keys: - Integer between <0-4294967295>. + - ''overlay_loopback_ip'' means the IP address of Loopback0. (deprecated + - use ''router_id'' instead) + ' - default: overlay_loopback_ip + default: router_id admin_subfield_offset: type: str convert_types: @@ -2605,7 +2839,7 @@ keys: description: 'The method for deriving RD Administrator subfield (first part of RD) for VRF services: - - ''overlay_loopback_ip'' means the IP address of Loopback0. + - ''router_id'' means the IP address of Loopback0. - ''vtep_loopback'' means the IP address of the VTEP loopback interface. @@ -2619,6 +2853,9 @@ keys: - Integer between <0-4294967295>. + - ''overlay_loopback_ip'' means the IP address of Loopback0. (deprecated + - use ''router_id'' instead) + ''vrf_admin_subfield'' takes precedence for VRF RDs if set. Otherwise the ''admin_subfield'' value will be used. @@ -2804,7 +3041,10 @@ keys: p2p_uplinks_mtu: documentation_options: table: fabric-settings - description: Point to Point Links MTU. + description: 'Point to Point Links MTU. + + Precedence: .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu + -> 9214' type: int convert_types: - str @@ -2883,6 +3123,20 @@ keys: ' min: 68 max: 65535 + p2p_uplinks_mtu: + type: int + convert_types: + - str + description: 'Set MTU on point to point uplink interfaces. + + Takes precedence over the root key "p2p_uplinks_mtu". + + .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu + -> 9214. + + ' + min: 68 + max: 65535 feature_support: type: dict keys: @@ -3030,6 +3284,7 @@ keys: reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - platforms: - 7500R - 7500R2 @@ -3046,6 +3301,7 @@ keys: reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - platforms: - 7358X4 management_interface: Management1/1 @@ -3109,6 +3365,7 @@ keys: interface_storm_control: false queue_monitor_length_notify: false management_interface: Management1/1 + p2p_uplinks_mtu: 9194 - platforms: - AWE-7220R feature_support: @@ -3118,6 +3375,7 @@ keys: queue_monitor_length_notify: false poe: true management_interface: Management1 + p2p_uplinks_mtu: 9194 platform_speed_groups: documentation_options: table: platform-settings @@ -3314,6 +3572,12 @@ keys: valid_values: - sso - rpr + router_id_loopback_description: + documentation_options: + table: overlay-settings + description: Customize the description on Router ID interface Loopback0. + type: str + default: ROUTER_ID serial_number: documentation_options: table: system-settings @@ -3357,6 +3621,8 @@ keys: A rate of 16384 corresponds to an average sample of one per 16384 packets.' destinations: type: list + required: true + min_length: 1 items: type: dict keys: @@ -3409,14 +3675,14 @@ keys: documentation_options: table: fabric-settings type: bool - default: false + default: true description: 'When a device is set undeployed using `is_deployed: false` and `shutdown_bgp_towards_undeployed_peers` key is set to true, the BGP neighborship is shutdown on the peer.' shutdown_interfaces_towards_undeployed_peers: documentation_options: table: fabric-settings type: bool - default: false + default: true description: '- It is possible to provision configurations for a complete topology but flag devices as undeployed using the host level variable `is_deployed: false`. @@ -3846,7 +4112,7 @@ keys: keys: name: type: str - default: LEAF_PEER_L3 + default: MLAG uplink: type: dict description: 'Trunk Group used on L2 Leaf switches when "enable_trunk_groups" @@ -3861,7 +4127,9 @@ keys: documentation_options: table: type-setting type: str - dynamic_valid_values: node_type_keys.type + dynamic_valid_values: + - custom_node_type_keys.type + - node_type_keys.type description: 'The `type:` variable needs to be defined for each device in the fabric. @@ -4150,6 +4418,12 @@ keys: description: 'Generate AVD configurations directly from a given CloudVision topology. See `cv_topology` for details.' + vtep_loopback_description: + documentation_options: + table: overlay-settings + description: Customize the description on the VTEP interface, typically Loopback1. + type: str + default: VXLAN_TUNNEL_SOURCE vtep_vvtep_ip: documentation_options: table: overlay-settings @@ -4188,6 +4462,15 @@ keys: WAN interfaces require an inbound access-list to be set unless the carrier is "trusted".' + wan_encapsulation: + documentation_options: + table: wan-settings + description: Select the encapsulation to use for EVPN peerings for WAN BGP peers. + type: str + default: path-selection + valid_values: + - path-selection + - vxlan wan_ha: documentation_options: table: wan-settings @@ -4246,11 +4529,12 @@ keys: wan_mode: documentation_options: table: wan-settings - description: Select if the WAN should be run using CV Pathfinder or AutoVPN only. + description: Select if the WAN should be run using CV Pathfinder or Legacy AutoVPN + only. type: str default: cv-pathfinder valid_values: - - autovpn + - legacy-autovpn - cv-pathfinder wan_path_groups: documentation_options: @@ -4350,10 +4634,10 @@ keys: convert_types: - str wan_route_servers: - description: 'List of the AutoVPN RRs when using `wan_mode`=`autovpn`, or the - Pathfinders + description: 'List of the AutoVPN RRs when using `wan_mode: legacy-autovpn`, or + the Pathfinders - when using `wan_mode`=`cv-pathfinder`, to which the device should connect to. + when using `wan_mode: cv-pathfinder`, to which the device should connect to. This is also used to establish iBGP sessions between WAN route servers. @@ -4514,10 +4798,10 @@ keys: or destined to the WAN route servers.' policies: type: list - description: "List of virtual toplogies policies.\n\nFor AutoVPN, each item - in the list creates:\n * one policy with:\n * one `match` entry per - `application_virtual_topologies` item\n they are indexed using `10 - * ` where `list_index` starts at `1`.\n * one `default-match`\n + description: "List of virtual toplogies policies.\n\nFor Legacy AutoVPN, each + item in the list creates:\n * one policy with:\n * one `match` entry + per `application_virtual_topologies` item\n they are indexed using + `10 * ` where `list_index` starts at `1`.\n * one `default-match`\n \ * one load-balance policy per `application_virtual_topologies` and one for the `default_virtual_topology`.\n * if the policy is associated with the default VRF, a special control-plane rule is injected\n in the policy @@ -4669,6 +4953,11 @@ dynamic_keys: display_name: Connected Endpoints documentation_options: table: connected-endpoints + custom_node_type_keys.key: + $ref: eos_designs#/$defs/node_type + type: dict + documentation_options: + hide_keys: true network_services_keys.name: $ref: eos_designs#/$defs/network_services type: list @@ -4694,11 +4983,14 @@ $defs: ' description: type: str - description: 'By default the description is built leveraging `_`. - - When set this key will override the default value on the physical ports. - - ' + description: "Description or description template to be used on all ports.\nThis + can be a template using the format string syntax.\nThe available template + fields are:\n - `endpoint_type` - the `type` from `connected_endpoints_keys` + like `server`, `router` etc.\n - `endpoint` - The name of the connected + endpoint\n - `endpoint_port` - The value from `endpoint_ports` for this + switch port if set.\n\nThe default description is set by `default_connected_endpoints_description`.\nBy + default the description is templated from the type, name and port of the + endpoint if set." profile: type: str description: Port-profile name to inherit configuration. @@ -5175,13 +5467,23 @@ $defs: ' description: type: str - description: 'By default the description is built leveraging `` - name or `adapter.description` when defined. - - When this key is defined, it will append its content to the physical - port description. - - ' + description: "Description or description template to be used on the port-channel + interface.\nThis can be a template using the format string syntax.\nThe + available template fields are:\n - `endpoint_type` - the `type` from + `connected_endpoints_keys` like `server`, `router` etc.\n - `endpoint` + - The name of the connected endpoint\n - `endpoint_port_channel` - + The value from `endpoint_port_channel` if set.\n - `port_channel_id` + - The port-channel number for the switch.\n - `adapter_description` + - The adapter's description if set.\n - `adapter_description_or_endpoint` + - Helper alias of the adapter_description or endpoint.\n\nThe default + description is set by `default_connected_endpoints_port_channel_description`.\nBy + default the description is templated from the type, name and port_channel + interface of the endpoint if set." + endpoint_port_channel: + type: str + description: 'Name of the port-channel interface on the endpoint. + + Used for the port-channel description template with the field name `peer_interface`' enabled: type: bool default: true @@ -5342,9 +5644,6 @@ $defs: `connected_endpoints_keys.key` is one of the keys under "connected_endpoints_keys". - The default keys are `servers`, `firewalls`, `routers`, `load_balancers`, and - `storage_arrays`. - ' items: type: dict @@ -5399,13 +5698,15 @@ $defs: ' items: type: str - description: Interface name. + description: Port name on the endpoint. descriptions: type: list - description: 'Unique description per port. When set, takes priority - over description. - - ' + description: "Unique description per port. When set, takes priority + over description.\nThis can be a template using the format string + syntax.\nThe available template fields are:\n - `endpoint_type` + - the `type` from `connected_endpoints_keys` like `server`, `router` + etc.\n - `endpoint` - The name of the connected endpoint\n - `endpoint_port` + - The value from `endpoint_ports` for this switch port if set." flow_tracking_link: type: dict keys: @@ -5687,7 +5988,22 @@ $defs: fast_leave: type: bool description: Enable IGMP snooping fast-leave feature for all SVIs and - l2vlans within Tenant. + l2vlans within the Tenant. + always_redistribute_igmp: + type: bool + description: 'Always configure `redistribute igmp` under BGP for all + SVIs within the Tenant if `evpn_l2_multicast` is True. + + By default `redistribute igmp` is only configured when `evpn_l2_multicast` + is True and `evpn_l3_multicast` for the VRF is False. + + Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast + is enabled will take up additional control-plane and data-plane resources, + + but it is required to support forwarding of TTL=1 multicast traffic + within the VLAN. + + This can be overridden per SVI.' evpn_l3_multicast: documentation_options: table: network-services-multicast-settings @@ -5696,7 +6012,7 @@ $defs: Multicast group binding for VRF is created only for Multicast traffic. BULL traffic will use ingress-replication.\n- Configures binding between VXLAN, VLAN, and multicast group IPv4 address using the following formula:\n - \ < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_vni + \ < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >.\n- The recommendation is to assign a /20 block within the 232.0.0.0/8 Source-Specific Multicast range.\n- If enabled on an SVI using the anycast @@ -6120,6 +6436,13 @@ $defs: keys: enabled: type: bool + evpn_underlay_l3_multicast_group: + type: str + description: 'IPv4 address of evpn underlay l3 multicast group. + + To override multicast range set using the formula < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool + > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset + >.' evpn_peg: type: list description: For each group of nodes, allow configuration of EVPN @@ -6723,6 +7046,21 @@ $defs: bgp: type: dict keys: + enabled: + type: bool + description: 'Force (no) configuration of BGP for the VRF. + + If not set, BGP will be configured when needed according to + the following rules: + + - If the VRF is part of an overlay (`evpn` or `mpls`), BGP will + be configured for it. + + - If any BGP peers are configured under the VRF, BGP will be + configured for it. This is useful for L2LS designs with VRFs. + + - If uplink type is `p2p-vrfs` *and* the vrf is included in + the uplink VRFs, BGP will be configured for it.' raw_eos_cli: type: str description: 'EOS CLI rendered directly on the Router BGP, VRF @@ -8656,7 +8994,7 @@ $defs: This is used both for AutoVPN and Pathfinder designs. - That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. `server` indicates that the router is a route-reflector. @@ -8722,6 +9060,14 @@ $defs: default: true description: Enable / Disable IPsec over HA path-group when HA is enabled. + mtu: + type: int + convert_types: + - str + description: Set MTU on WAN HA interfaces. + min: 68 + max: 65535 + default: 9194 ha_interfaces: description: "Local WAN HA interfaces\nOverwrite the default behavior which is to pick all the `uplink_interfaces`.\nCan be used to filter @@ -8747,6 +9093,18 @@ $defs: description: 'Number of parallel links towards HA switches. Can be used to reserve IP addresses for future parallel HA links.' + port_channel_id: + type: int + convert_types: + - str + description: Port-channel ID to use for direct HA. + use_port_channel_for_direct_ha: + type: bool + default: true + description: 'Enable or disable using a port-channel interface for + direct HA when there is only one interface. + + This feature was introduced in EOS 4.33.0F.' flow_tracking: type: dict $ref: eos_designs#/$defs/flow_tracking_link @@ -9448,6 +9806,19 @@ $defs: keys: enabled: type: bool + always_redistribute_igmp: + type: bool + description: 'Always configure `redistribute igmp` under BGP for the VLAN. + Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + + By default `redistribute igmp` is only configured when `evpn_l2_multicast` + is True and `evpn_l3_multicast` for the VRF is False. + + Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is + enabled will take up additional control-plane and data-plane resources, + + but it is required to support forwarding of TTL=1 multicast traffic + within the VLAN.' evpn_l3_multicast: documentation_options: table: network-services-multicast-settings diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_debug.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_debug.schema.yml new file mode 100644 index 00000000000..9c7777edc02 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_debug.schema.yml @@ -0,0 +1,14 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + avd_eos_designs_debug: + documentation_options: + table: role-settings + type: bool + default: false + description: Dump all vars and facts per device after generating `avd_switch_facts`. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_structured_config.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_structured_config.schema.yml new file mode 100644 index 00000000000..f35b05b81ca --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_structured_config.schema.yml @@ -0,0 +1,14 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + avd_eos_designs_structured_config: + documentation_options: + table: role-settings + type: bool + default: true + description: Generate structured configuration per device. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_unset_facts.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_unset_facts.schema.yml new file mode 100644 index 00000000000..4e7b1b0069f --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/avd_eos_designs_unset_facts.schema.yml @@ -0,0 +1,14 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + avd_eos_designs_unset_facts: + documentation_options: + table: role-settings + type: bool + default: true + description: Unset `avd_switch_facts` to gain a small performance improvement since Ansible needs to handle fewer variables. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/connected_endpoints_keys.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/connected_endpoints_keys.schema.yml index 8cc3640cca8..0dd909d1eb4 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/connected_endpoints_keys.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/connected_endpoints_keys.schema.yml @@ -30,37 +30,37 @@ keys: default: - key: servers type: server - description: Server. + description: Server - key: firewalls type: firewall - description: Firewall. + description: Firewall - key: routers type: router - description: Router. + description: Router - key: load_balancers type: load_balancer - description: Load Balancer. + description: Load Balancer - key: storage_arrays type: storage_array - description: Storage Array. + description: Storage Array - key: cpes type: cpe - description: CPE. + description: CPE - key: workstations type: workstation - description: Workstation. + description: Workstation - key: access_points type: access_point - description: Access Point. + description: Access Point - key: phones type: phone - description: Phone. + description: Phone - key: printers type: printer - description: Printer. + description: Printer - key: cameras type: camera - description: Camera. + description: Camera - key: generic_devices type: generic_device - description: Generic Device. + description: Generic Device diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/custom_node_type.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/custom_node_type.schema.yml new file mode 100644 index 00000000000..129134c7030 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/custom_node_type.schema.yml @@ -0,0 +1,13 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +dynamic_keys: + "custom_node_type_keys.key": + $ref: "eos_designs#/$defs/node_type" + type: dict + documentation_options: + hide_keys: true diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_description.yml new file mode 100644 index 00000000000..caace58791a --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_description.yml @@ -0,0 +1,23 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + default_connected_endpoints_description: + type: str + documentation_options: + table: default-connected-endpoints-description + # TODO: Insert link to format string syntax article. + description: |- + Default description or description template to be used on all ports to connected endpoints. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc. + - `endpoint`: The name of the connected endpoint + - `endpoint_port`: The value from `endpoint_ports` for this switch port if set. + + By default the description is templated from the type, name and port of the endpoint if set. + default: "{endpoint_type!u}_{endpoint}{endpoint_port?<_}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_port_channel_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_port_channel_description.yml new file mode 100644 index 00000000000..4cc5b03c376 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_connected_endpoints_port_channel_description.yml @@ -0,0 +1,26 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + default_connected_endpoints_port_channel_description: + type: str + documentation_options: + table: default-connected-endpoints-description + # TODO: Insert link to format string syntax article. + description: |- + Default description or description template to be used on all port-channels to connected endpoints. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type`: The `type` from `connected_endpoints_keys` like `server`, `router` etc. + - `endpoint`: The name of the connected endpoint + - `endpoint_port_channel`: The value of `endpoint_port_channel` if set. + - `port_channel_id`: The port-channel number for the switch. + - `adapter_description`: The adapter's description if set. + - `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint. + + By default the description is templated from the type, name and port-channel name of the endpoint if set. + default: "{endpoint_type!u}_{endpoint}{endpoint_port_channel?<_}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_description.yml new file mode 100644 index 00000000000..4daf956edb8 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_description.yml @@ -0,0 +1,22 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + default_network_ports_description: + type: str + documentation_options: + table: default-network-ports-description + # TODO: Insert link to format string syntax article. + description: |- + Default description or description template to be used on all ports defined under `network_ports`. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type`: Always set to `network_port`. + - `endpoint`: The value of the `endpoint` key if set. + + By default the description is templated from the `endpoint` key if set. + default: "{endpoint?}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_port_channel_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_port_channel_description.yml new file mode 100644 index 00000000000..c96fc69a090 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/default_network_ports_port_channel_description.yml @@ -0,0 +1,26 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + default_network_ports_port_channel_description: + type: str + documentation_options: + table: default-network-ports-description + # TODO: Insert link to format string syntax article. + description: |- + Default description or description template to be used on all port-channels defined under `network_ports`. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type`: Always set to `network_port`. + - `endpoint`: The value of the `endpoint` key if set. + - `endpoint_port_channel`: The value of `endpoint_port_channel` if set. + - `port_channel_id`: The port-channel number for the switch. + - `adapter_description`: The adapter's description if set. + - `adapter_description_or_endpoint`: Helper alias of the adapter_description or endpoint. + + By default the description is templated from the `endpoint` key if set. + default: "{endpoint?}{endpoint_port_channel?<_}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_adapter_config.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_adapter_config.schema.yml index 9a679618d0e..b799a65d35d 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_adapter_config.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_adapter_config.schema.yml @@ -16,9 +16,17 @@ $defs: If not specified speed will be auto. description: type: str - description: | - By default the description is built leveraging `_`. - When set this key will override the default value on the physical ports. + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on all ports. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + - `endpoint` - The name of the connected endpoint + - `endpoint_port` - The value from `endpoint_ports` for this switch port if set. + + The default description is set by `default_connected_endpoints_description`. + By default the description is templated from the type, name and port of the endpoint if set. profile: type: str description: Port-profile name to inherit configuration. @@ -451,9 +459,25 @@ $defs: If no channel_id is specified, an id is generated from the first switch port in the port channel. description: type: str - description: | - By default the description is built leveraging `` name or `adapter.description` when defined. - When this key is defined, it will append its content to the physical port description. + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on the port-channel interface. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + - `endpoint` - The name of the connected endpoint + - `endpoint_port_channel` - The value from `endpoint_port_channel` if set. + - `port_channel_id` - The port-channel number for the switch. + - `adapter_description` - The adapter's description if set. + - `adapter_description_or_endpoint` - Helper alias of the adapter_description or endpoint. + + The default description is set by `default_connected_endpoints_port_channel_description`. + By default the description is templated from the type, name and port_channel interface of the endpoint if set. + endpoint_port_channel: + type: str + description: |- + Name of the port-channel interface on the endpoint. + Used for the port-channel description template with the field name `peer_interface` enabled: type: bool default: true diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_connected_endpoints.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_connected_endpoints.schema.yml index d11ed699eff..65dab055090 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_connected_endpoints.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_connected_endpoints.schema.yml @@ -12,7 +12,6 @@ $defs: description: | This should be applied to group_vars or host_vars where endpoints are connecting. `connected_endpoints_keys.key` is one of the keys under "connected_endpoints_keys". - The default keys are `servers`, `firewalls`, `routers`, `load_balancers`, and `storage_arrays`. items: type: dict keys: @@ -55,8 +54,13 @@ $defs: Each list item is one switchport. items: type: str - description: Interface name. + description: Port name on the endpoint. descriptions: type: list - description: | + description: |- Unique description per port. When set, takes priority over description. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type` - the `type` from `connected_endpoints_keys` like `server`, `router` etc. + - `endpoint` - The name of the connected endpoint + - `endpoint_port` - The value from `endpoint_ports` for this switch port if set. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_network_services.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_network_services.schema.yml index 8befac54cae..ec12b299d3f 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_network_services.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_network_services.schema.yml @@ -170,7 +170,15 @@ $defs: - str fast_leave: type: bool - description: Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within Tenant. + description: Enable IGMP snooping fast-leave feature for all SVIs and l2vlans within the Tenant. + always_redistribute_igmp: + type: bool + description: |- + Always configure `redistribute igmp` under BGP for all SVIs within the Tenant if `evpn_l2_multicast` is True. + By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. + This can be overridden per SVI. evpn_l3_multicast: documentation_options: table: network-services-multicast-settings @@ -179,7 +187,7 @@ $defs: - In the evpn-l3ls design type, this enables L3 EVPN Multicast (aka OISM)'. - Multicast group binding for VRF is created only for Multicast traffic. BULL traffic will use ingress-replication. - Configures binding between VXLAN, VLAN, and multicast group IPv4 address using the following formula: - < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_vni - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. - The recommendation is to assign a /20 block within the 232.0.0.0/8 Source-Specific Multicast range. - If enabled on an SVI using the anycast default gateway feature, a diagnostic loopback (see below) MUST be configured to source IGMP traffic. - Enables `evpn multicast` on the router bgp VRF. @@ -505,6 +513,11 @@ $defs: keys: enabled: type: bool + evpn_underlay_l3_multicast_group: + type: str + description: |- + IPv4 address of evpn underlay l3 multicast group. + To override multicast range set using the formula < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool > + < vrf_id - 1 > + < l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset >. evpn_peg: type: list description: For each group of nodes, allow configuration of EVPN PEG features. @@ -1011,6 +1024,14 @@ $defs: bgp: type: dict keys: + enabled: + type: bool + description: |- + Force (no) configuration of BGP for the VRF. + If not set, BGP will be configured when needed according to the following rules: + - If the VRF is part of an overlay (`evpn` or `mpls`), BGP will be configured for it. + - If any BGP peers are configured under the VRF, BGP will be configured for it. This is useful for L2LS designs with VRFs. + - If uplink type is `p2p-vrfs` *and* the vrf is included in the uplink VRFs, BGP will be configured for it. raw_eos_cli: type: str description: | diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_node_type.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_node_type.schema.yml index 01e5415a502..dfad31b8b6c 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_node_type.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_node_type.schema.yml @@ -1253,7 +1253,7 @@ $defs: Override the default WAN role. This is used both for AutoVPN and Pathfinder designs. - That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. `server` indicates that the router is a route-reflector. Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -1307,6 +1307,14 @@ $defs: type: bool default: true description: Enable / Disable IPsec over HA path-group when HA is enabled. + mtu: + type: int + convert_types: + - str + description: Set MTU on WAN HA interfaces. + min: 68 + max: 65535 + default: 9194 ha_interfaces: description: |- Local WAN HA interfaces @@ -1333,6 +1341,18 @@ $defs: description: |- Number of parallel links towards HA switches. Can be used to reserve IP addresses for future parallel HA links. + port_channel_id: + type: int + convert_types: + - str + description: |- + Port-channel ID to use for direct HA. + use_port_channel_for_direct_ha: + type: bool + default: true + description: |- + Enable or disable using a port-channel interface for direct HA when there is only one interface. + This feature was introduced in EOS 4.33.0F. flow_tracking: type: dict $ref: "eos_designs#/$defs/flow_tracking_link" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_svi_settings.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_svi_settings.schema.yml index e2751cae37d..1e64bff5207 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_svi_settings.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/defs_svi_settings.schema.yml @@ -153,6 +153,13 @@ $defs: keys: enabled: type: bool + always_redistribute_igmp: + type: bool + description: |- + Always configure `redistribute igmp` under BGP for the VLAN. Overrides the setting of `.[].evpn_l2_multicast.always_redistribute_igmp`. + By default `redistribute igmp` is only configured when `evpn_l2_multicast` is True and `evpn_l3_multicast` for the VRF is False. + Configuring `redistribute igmp` when both L2 and L3 EVPN Multicast is enabled will take up additional control-plane and data-plane resources, + but it is required to support forwarding of TTL=1 multicast traffic within the VLAN. evpn_l3_multicast: documentation_options: table: network-services-multicast-settings diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/design.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/design.schema.yml index 1f45f33ac55..805b7831614 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/design.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/design.schema.yml @@ -9,6 +9,11 @@ keys: design: documentation_options: table: design + deprecation: + warning: true + removed: false + remove_in_version: 6.0.0 + url: https://avd.arista.com/stable/docs/release-notes/5.x.x.html#deprecation_of_design.type type: dict keys: type: diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/eos_designs_documentation.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/eos_designs_documentation.schema.yml index 8df4c982c22..eec9b4e80e2 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/eos_designs_documentation.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/eos_designs_documentation.schema.yml @@ -8,13 +8,26 @@ type: dict keys: eos_designs_documentation: documentation_options: - table: role-documentation-output-settings + table: role-settings description: | Control fabric documentation generation. type: dict keys: + enable: + description: Generate fabric-wide documentation. + type: bool + default: true connected_endpoints: - description: | - Generate fabric-wide documentation for connected endpoints. + description: |- + Include connected endpoints in the fabric-wide documentation. + This is `false` by default to avoid cluttering documentation for projects with thousands of endpoints. + type: bool + default: false + topology_csv: + description: Generate Topology CSV with all interfaces towards other devices. + type: bool + default: false + p2p_links_csv: + description: Generate P2P links CSV with all routed point-to-point links between devices. type: bool default: false diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_ip_addressing.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_ip_addressing.schema.yml index d77116523d8..c196b9a7000 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_ip_addressing.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_ip_addressing.schema.yml @@ -56,3 +56,15 @@ keys: convert_types: - str description: IPv4 prefix length used for L3 point-to-point uplinks. + wan_ha: + type: dict + description: Allow to manipulate the IP addressing scheme for WAN HA direct subnets. + keys: + ipv4_prefix_length: + type: int + default: 31 + min: 1 + max: 31 + convert_types: + - str + description: IPv4 prefix length used for point-to-point interface for direct WAN HA link. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_sflow.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_sflow.schema.yml index 3b6f183e7c9..e8726842b23 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_sflow.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/fabric_sflow.schema.yml @@ -33,3 +33,6 @@ keys: mlag_interfaces: description: Enable sFlow on all MLAG peer interfaces. type: bool + l3_interfaces: + description: Enable sFlow on all l3 interfaces. + type: bool diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/flow_tracking_settings.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/flow_tracking_settings.schema.yml index 20c5cf80697..9cf6f77def6 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/flow_tracking_settings.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/flow_tracking_settings.schema.yml @@ -10,8 +10,6 @@ keys: documentation_options: table: management-flow-tracking-settings description: |- - PREVIEW: This key is currently not supported - Define the flow tracking parameters for this topology. type: dict keys: diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/isis_system_id_format.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/isis_system_id_format.schema.yml index 19c4ce8b81a..0e72910576d 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/isis_system_id_format.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/isis_system_id_format.schema.yml @@ -4,15 +4,13 @@ # yaml-language-server: $schema=../../../_schema/avd_meta_schema.json # Line above is used by RedHat's YAML Schema vscode extension # Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. -# TODO: AVD5.0 flip default to underlay_loopback type: dict keys: isis_system_id_format: display_name: ISIS Default IS System-ID format description: |- Configures source for the system-id within the ISIS net id. - By default the `id` and `isis_system_id_prefix` fields configured under the node attributes are used to generate the system-id. - + If this key is set to `node_id`, the fields `id` and `isis_system_id_prefix` configured under the node attributes are used to generate the system-id. If `underlay_loopback` is selected then all node `isis_system_id_prefix` settings will be ignored and the loopback address will be used to generate the system-id. documentation_options: table: isis-settings @@ -20,4 +18,4 @@ keys: valid_values: - node_id - underlay_loopback - default: "node_id" + default: underlay_loopback diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mgmt_interface_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mgmt_interface_description.schema.yml index 31e3cb91af0..07bb0a535a6 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mgmt_interface_description.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mgmt_interface_description.schema.yml @@ -12,4 +12,4 @@ keys: type: str description: | Management interface description. - default: oob_management + default: OOB_MANAGEMENT diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_description.schema.yml new file mode 100644 index 00000000000..bed4c39bf58 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_description.schema.yml @@ -0,0 +1,24 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_bgp_peer_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on the MLAG BGP peers including those in VRFs. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The local MLAG L3 VLAN interface. + - `peer_interface`: The MLAG L3 VLAN interface on the MLAG peer. + - `vrf`: The name of the VRF. Not available for the underlay peering. + + The default description is built from the name and interface of the MLAG peer and optionally the VRF. + default: "{mlag_peer}_{peer_interface}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_group_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_group_description.schema.yml new file mode 100644 index 00000000000..318654229ea --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_bgp_peer_group_description.schema.yml @@ -0,0 +1,21 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_bgp_peer_group_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on the MLAG BGP peer-group. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + + The default description is the name of the MLAG peers. + default: "{mlag_peer}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_member_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_member_description.yml new file mode 100644 index 00000000000..98c2fe9cf2b --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_member_description.yml @@ -0,0 +1,25 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_member_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on MLAG peer-link ethernet interfaces. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The local MLAG port-channel interface. + - `peer_interface`: The port-channel interface on the MLAG peer. + - `mlag_port_channel_id`: The local MLAG port-channel ID. + - `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer. + + By default the description is templated from the name and interface of the MLAG peer. + default: "MLAG_{mlag_peer}_{peer_interface}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_on_orphan_port_channel_downlink.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_on_orphan_port_channel_downlink.schema.yml index d7ff2b6dd26..2741405f398 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_on_orphan_port_channel_downlink.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_on_orphan_port_channel_downlink.schema.yml @@ -11,8 +11,6 @@ keys: documentation_options: table: fabric-settings description: |- - If `true` (default) an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair. - If `false` an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. - Note the default value will change to `false` in AVD version 5.0 - # TODO: AVD5.0 change default to false and remove the note from the description. - default: true + If `true` an MLAG ID will always be configured on a Port-Channel downlink even if the downlink is only on one node in the MLAG pair. + If `false` (default) an MLAG ID will only be configured on Port-Channel downlinks dual-homed to two MLAG switches. + default: false diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_svi_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_svi_description.yml new file mode 100644 index 00000000000..8d2e3dc839f --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_svi_description.yml @@ -0,0 +1,21 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_l3_svi_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on MLAG L3 peering SVI (Interface Vlan4093 by default). + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The MLAG L3 peering SVI name. + - `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. + default: "MLAG_L3" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vlan_name.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vlan_name.yml new file mode 100644 index 00000000000..1b54ba3613f --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vlan_name.yml @@ -0,0 +1,20 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_l3_vlan_name: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Name or name template to be used on MLAG L3 VLAN (VLAN 4093 by default). + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `mlag_peer_l3_vlan`: The MLAG L3 peering VLAN ID. + default: "MLAG_L3" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_svi_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_svi_description.schema.yml new file mode 100644 index 00000000000..9cf957cc91d --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_svi_description.schema.yml @@ -0,0 +1,22 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_l3_vrf_svi_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on MLAG L3 peering SVI for VRFs. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The MLAG L3 VRF peering SVI name. + - `vlan`: The MLAG L3 VRF peering VLAN ID. + - `vrf`: The VRF name. + default: "MLAG_L3_VRF_{vrf}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_vlan_name.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_vlan_name.schema.yml new file mode 100644 index 00000000000..3dc8b0f2fe4 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_l3_vrf_vlan_name.schema.yml @@ -0,0 +1,21 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_l3_vrf_vlan_name: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Name or name template to be used on MLAG L3 peering VLAN for VRFs. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `vlan`: The MLAG L3 VRF peering VLAN ID. + - `vrf`: The VRF name. + default: "MLAG_L3_VRF_{vrf}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_svi_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_svi_description.yml new file mode 100644 index 00000000000..2cc172e9e17 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_svi_description.yml @@ -0,0 +1,21 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_svi_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on MLAG peering SVI (Interface Vlan4094 by default). + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The MLAG peering SVI name. + - `mlag_peer_vlan`: The MLAG peering VLAN ID. + default: "MLAG" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_vlan_name.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_vlan_name.yml new file mode 100644 index 00000000000..a5ccec3c4a9 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_peer_vlan_name.yml @@ -0,0 +1,20 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_peer_vlan_name: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Name or name template to be used on MLAG peering VLAN (VLAN 4094 by default). + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `mlag_peer_vlan`: The MLAG peering VLAN ID. + default: "MLAG" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_port_channel_description.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_port_channel_description.yml new file mode 100644 index 00000000000..f7a9675afd8 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/mlag_port_channel_description.yml @@ -0,0 +1,25 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + mlag_port_channel_description: + type: str + documentation_options: + table: fabric-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on MLAG peer-link port-channel interfaces. + This can be a template using the format string syntax. + The available template fields are: + - `mlag_peer`: The name of the MLAG peer. + - `interface`: The local MLAG port-channel interface. + - `peer_interface`: The port-channel interface on the MLAG peer. + - `mlag_port_channel_id`: The local MLAG port-channel ID. + - `mlag_peer_port_channel_id`: The port-channel ID on the MLAG peer. + + By default the description is templated from the name and port-channel interface of the MLAG peer. + default: "MLAG_{mlag_peer}_{peer_interface}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_ports.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_ports.schema.yml index 5ac17d727aa..17c067624ee 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_ports.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_ports.schema.yml @@ -37,4 +37,16 @@ keys: type: str description: type: str - description: Description to be used on all ports. + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on all ports. + This can be a template using the format string syntax. + The available template fields are: + - `endpoint_type` - always set to `network_port`. + - `endpoint` - content of the `endpoint` key if set. + + The default description is set by `default_network_ports_description`. + By default the description is templated from the `endpoint` key if set. + endpoint: + type: str + description: Name or description of the endpoints connected to these ports. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_services_keys.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_services_keys.schema.yml index 44fc84c2510..5ef70dc22b9 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_services_keys.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/network_services_keys.schema.yml @@ -20,4 +20,4 @@ keys: name: type: str default: - - "name": "tenants" + - name: tenants diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/new_network_services_bgp_vrf_config.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/new_network_services_bgp_vrf_config.schema.yml index 534ce44cb03..6cedb6cdd6f 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/new_network_services_bgp_vrf_config.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/new_network_services_bgp_vrf_config.schema.yml @@ -8,11 +8,12 @@ type: dict keys: new_network_services_bgp_vrf_config: type: bool + default: true description: |- - Set this key to `true` in the node type to generate full BGP configuration - for network services even when `evpn` is not in the address families - (`evpn` is the default address family for `l3ls-evpn` but not for `l2ls`). - - This is `false` by default except if `uplink_type` is set to `p2p-vrfs`, then the default value is `true`. - - This may introduce breaking changes to your configuration. + This key was used to generate BGP configuration for network services even when `evpn` is not in the address families for the node as well as the VRF. + This is now part of the default behavior so this key has been removed. + deprecation: + warning: true + removed: true + remove_in_version: 5.0.0 + url: https://avd.arista.com/devel/porting-guides/5.x.x.html#new-improved-logic-for-bgp-configuration-of-network-services-vrfs diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/node_type_keys.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/node_type_keys.schema.yml index decd99c85ce..c3fb5c3b9cc 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/node_type_keys.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/node_type_keys.schema.yml @@ -119,7 +119,7 @@ keys: Set the default WAN role. This is used both for AutoVPN and Pathfinder designs. - That means if `wan_mode` root key is set to `autovpn` or `cv-pathfinder`. + That means if `wan_mode` root key is set to `legacy-autovpn` or `cv-pathfinder`. `server` indicates that the router is a route-reflector. Only supported if `overlay_routing_protocol` is set to `ibgp`. @@ -263,12 +263,19 @@ keys: connected_endpoints_port_channel_interfaces: type: str description: Path to Custom J2 template. - overlay_loopback_interface: + router_id_loopback_interface: type: str description: Path to Custom J2 template. vtep_loopback_interface: type: str description: Path to Custom J2 template. + overlay_loopback_interface: + type: str + description: Path to Custom J2 template. + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: router_id_loopback_interface cv_tags_topology_type: documentation_options: table: cloudvision-tags diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_bgp_peer_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_bgp_peer_description.schema.yml new file mode 100644 index 00000000000..1a5962b19f2 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_bgp_peer_description.schema.yml @@ -0,0 +1,22 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + overlay_bgp_peer_description: + type: str + documentation_options: + table: overlay-settings + # TODO: Insert link to format string syntax article. + description: |- + Description or description template to be used on the overlay BGP peers. + This can be a template using the format string syntax. + The available template fields are: + - `peer`: The name of the BGP peer. + - `peer_interface`: The interface on the BGP peer if available. + + The default description is built from the name and interface of the BGP peer. + default: "{peer}{peer_interface?<_}" diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_loopback_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_loopback_description.schema.yml index e86a4743830..58f8eca59d7 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_loopback_description.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_loopback_description.schema.yml @@ -11,3 +11,7 @@ keys: table: overlay-settings description: Customize the description on overlay interface Loopback0. type: str + deprecation: + warning: true + remove_in_version: 6.0.0 + new_key: router_id_loopback_description diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_rd_type.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_rd_type.schema.yml index aaf0875534f..5df3c89f969 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_rd_type.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/overlay_rd_type.schema.yml @@ -30,14 +30,15 @@ keys: - int description: | The method for deriving RD Administrator subfield (first part of RD): - - 'overlay_loopback_ip' means the IP address of Loopback0. + - 'router_id' means the IP address of Loopback0. - 'vtep_loopback' means the IP address of the VTEP loopback interface. - 'bgp_as' means the AS number of the device. - 'switch_id' means the 'id' value of the device. - Any without mask. - Integer between <0-65535>. - Integer between <0-4294967295>. - default: overlay_loopback_ip + - 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead) + default: router_id admin_subfield_offset: type: str convert_types: @@ -51,13 +52,14 @@ keys: - int description: | The method for deriving RD Administrator subfield (first part of RD) for VRF services: - - 'overlay_loopback_ip' means the IP address of Loopback0. + - 'router_id' means the IP address of Loopback0. - 'vtep_loopback' means the IP address of the VTEP loopback interface. - 'bgp_as' means the AS number of the device. - 'switch_id' means the 'id' value of the device. - Any without mask. - Integer between <0-65535>. - Integer between <0-4294967295>. + - 'overlay_loopback_ip' means the IP address of Loopback0. (deprecated - use 'router_id' instead) 'vrf_admin_subfield' takes precedence for VRF RDs if set. Otherwise the 'admin_subfield' value will be used. vrf_admin_subfield_offset: diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/p2p_uplinks_mtu.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/p2p_uplinks_mtu.schema.yml index c9f1ebfe06f..6aee15759f8 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/p2p_uplinks_mtu.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/p2p_uplinks_mtu.schema.yml @@ -9,7 +9,9 @@ keys: p2p_uplinks_mtu: documentation_options: table: fabric-settings - description: Point to Point Links MTU. + description: |- + Point to Point Links MTU. + Precedence: .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214 type: int convert_types: - str diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/platform_settings.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/platform_settings.schema.yml index 31fb7666af0..c493a8a90b7 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/platform_settings.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/platform_settings.schema.yml @@ -71,6 +71,16 @@ keys: Takes precedence over the root key "default_interface_mtu". min: 68 max: 65535 + p2p_uplinks_mtu: + type: int + convert_types: + - str + description: | + Set MTU on point to point uplink interfaces. + Takes precedence over the root key "p2p_uplinks_mtu". + .uplink_mtu -> platform_settings.p2p_uplinks_mtu -> p2p_uplinks_mtu -> 9214. + min: 68 + max: 65535 feature_support: type: dict keys: @@ -132,6 +142,11 @@ keys: type: str description: EOS CLI rendered directly on the root level of the final EOS configuration. default: + # Campus platforms are separated out by their ability to support "trident_forwarding_table_partition". + # This is required for EVPN multicast, currently only supported on all 720XP platforms. + # This command is not supported on 710P or 722XP platforms. 720D range has some devices that support this + # and others that don't, but they are all grouped together as none of them support EVPN multicast. + # TODO: This needs to be revisited as some 720 platforms now support EVPN multicast. - platforms: - default feature_support: @@ -199,6 +214,7 @@ keys: reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - platforms: - 7500R - 7500R2 @@ -215,6 +231,7 @@ keys: reload_delay: mlag: 900 non_mlag: 1020 + tcam_profile: vxlan-routing - platforms: - 7358X4 management_interface: Management1/1 @@ -277,6 +294,7 @@ keys: interface_storm_control: false queue_monitor_length_notify: false management_interface: Management1/1 + p2p_uplinks_mtu: 9194 - platforms: - AWE-7220R feature_support: @@ -286,3 +304,4 @@ keys: queue_monitor_length_notify: false poe: true management_interface: Management1 + p2p_uplinks_mtu: 9194 diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/router_id_loopback_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/router_id_loopback_description.schema.yml new file mode 100644 index 00000000000..bc2c3e41ab8 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/router_id_loopback_description.schema.yml @@ -0,0 +1,14 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + router_id_loopback_description: + documentation_options: + table: overlay-settings + description: Customize the description on Router ID interface Loopback0. + type: str + default: ROUTER_ID diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/sflow_settings.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/sflow_settings.schema.yml index 662df30d281..6718f7dedce 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/sflow_settings.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/sflow_settings.schema.yml @@ -29,6 +29,8 @@ keys: A rate of 16384 corresponds to an average sample of one per 16384 packets. destinations: type: list + required: true + min_length: 1 items: type: dict keys: diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_bgp_towards_undeployed_peers.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_bgp_towards_undeployed_peers.schema.yml index 257a6b539fe..54b8c527d97 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_bgp_towards_undeployed_peers.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_bgp_towards_undeployed_peers.schema.yml @@ -10,6 +10,6 @@ keys: documentation_options: table: fabric-settings type: bool - default: false + default: true description: |- When a device is set undeployed using `is_deployed: false` and `shutdown_bgp_towards_undeployed_peers` key is set to true, the BGP neighborship is shutdown on the peer. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_interfaces_towards_undeployed_peers.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_interfaces_towards_undeployed_peers.schema.yml index c9d80b9db1b..7507a20cde6 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_interfaces_towards_undeployed_peers.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/shutdown_interfaces_towards_undeployed_peers.schema.yml @@ -10,7 +10,7 @@ keys: documentation_options: table: fabric-settings type: bool - default: false + default: true description: | - It is possible to provision configurations for a complete topology but flag devices as undeployed using the host level variable `is_deployed: false`. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/trunk_groups.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/trunk_groups.schema.yml index 2cd3c0f9212..3d12698b47b 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/trunk_groups.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/trunk_groups.schema.yml @@ -26,7 +26,7 @@ keys: keys: name: type: str - default: "LEAF_PEER_L3" + default: "MLAG" uplink: type: dict description: | diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/type.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/type.schema.yml index 137bac6937b..bb52e0fb44e 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/type.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/type.schema.yml @@ -10,7 +10,9 @@ keys: documentation_options: table: type-setting type: str - dynamic_valid_values: "node_type_keys.type" + dynamic_valid_values: + - custom_node_type_keys.type + - node_type_keys.type description: | The `type:` variable needs to be defined for each device in the fabric. This is leveraged to load the appropriate template to generate the configuration. diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/vtep_loopback_description.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/vtep_loopback_description.schema.yml new file mode 100644 index 00000000000..7c95076dcb5 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/vtep_loopback_description.schema.yml @@ -0,0 +1,14 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + vtep_loopback_description: + documentation_options: + table: overlay-settings + description: Customize the description on the VTEP interface, typically Loopback1. + type: str + default: VXLAN_TUNNEL_SOURCE diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_encapsulation.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_encapsulation.schema.yml new file mode 100644 index 00000000000..637cc332737 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_encapsulation.schema.yml @@ -0,0 +1,17 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +# yaml-language-server: $schema=../../../_schema/avd_meta_schema.json +# Line above is used by RedHat's YAML Schema vscode extension +# Use Ctrl + Space to get suggestions for every field. Autocomplete will pop up after typing 2 letters. +type: dict +keys: + wan_encapsulation: + documentation_options: + table: wan-settings + description: Select the encapsulation to use for EVPN peerings for WAN BGP peers. + type: str + default: path-selection + valid_values: + - path-selection + - vxlan diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_mode.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_mode.schema.yml index 6da45150462..84c0259456d 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_mode.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_mode.schema.yml @@ -9,9 +9,9 @@ keys: wan_mode: documentation_options: table: wan-settings - description: Select if the WAN should be run using CV Pathfinder or AutoVPN only. + description: Select if the WAN should be run using CV Pathfinder or Legacy AutoVPN only. type: str default: cv-pathfinder valid_values: - - autovpn + - legacy-autovpn - cv-pathfinder diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_route_servers.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_route_servers.schema.yml index 13a8d4e85be..04aef5ef5cd 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_route_servers.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_route_servers.schema.yml @@ -8,8 +8,8 @@ type: dict keys: wan_route_servers: description: |- - List of the AutoVPN RRs when using `wan_mode`=`autovpn`, or the Pathfinders - when using `wan_mode`=`cv-pathfinder`, to which the device should connect to. + List of the AutoVPN RRs when using `wan_mode: legacy-autovpn`, or the Pathfinders + when using `wan_mode: cv-pathfinder`, to which the device should connect to. This is also used to establish iBGP sessions between WAN route servers. When the route server is part of the same inventory as the WAN routers, diff --git a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_virtual_topologies.schema.yml b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_virtual_topologies.schema.yml index eaebab180fc..e11a22833bc 100644 --- a/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_virtual_topologies.schema.yml +++ b/python-avd/pyavd/_eos_designs/schema/schema_fragments/wan_virtual_topologies.schema.yml @@ -84,7 +84,7 @@ keys: description: |- List of virtual toplogies policies. - For AutoVPN, each item in the list creates: + For Legacy AutoVPN, each item in the list creates: * one policy with: * one `match` entry per `application_virtual_topologies` item they are indexed using `10 * ` where `list_index` starts at `1`. diff --git a/python-avd/pyavd/_eos_designs/shared_utils/__init__.py b/python-avd/pyavd/_eos_designs/shared_utils/__init__.py index 50d5180ebaf..ddc04d7295c 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/__init__.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/__init__.py @@ -1,9 +1,12 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. +from pyavd._schema.avdschema import AvdSchema + from .bgp_peer_groups import BgpPeerGroupsMixin from .connected_endpoints_keys import ConnectedEndpointsKeysMixin from .cv_topology import CvTopology +from .descriptions import DescriptionsMixin from .filtered_tenants import FilteredTenantsMixin from .flow_tracking import FlowTrackingMixin from .inband_management import InbandManagementMixin @@ -29,6 +32,7 @@ class SharedUtils( BgpPeerGroupsMixin, ConnectedEndpointsKeysMixin, + DescriptionsMixin, FilteredTenantsMixin, InbandManagementMixin, InterfaceDescriptionsMixin, @@ -65,6 +69,7 @@ class SharedUtils( The class cannot be overridden. """ - def __init__(self, hostvars: dict, templar: object) -> None: + def __init__(self, hostvars: dict, templar: object, schema: AvdSchema) -> None: self.hostvars = hostvars self.templar = templar + self.schema = schema diff --git a/python-avd/pyavd/_eos_designs/shared_utils/connected_endpoints_keys.py b/python-avd/pyavd/_eos_designs/shared_utils/connected_endpoints_keys.py index cc019206ddd..f6b9ada56be 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/connected_endpoints_keys.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/connected_endpoints_keys.py @@ -11,22 +11,6 @@ if TYPE_CHECKING: from . import SharedUtils -# NOTE: there is a static list of default endpoint keys in the fabric connected endpoints documentation templates. -DEFAULT_CONNECTED_ENDPOINTS_KEYS = [ - {"key": "servers", "type": "server", "description": "Server"}, - {"key": "firewalls", "type": "firewall", "description": "Firewall"}, - {"key": "routers", "type": "router", "description": "Router"}, - {"key": "load_balancers", "type": "load_balancer", "description": "Load Balancer"}, - {"key": "storage_arrays", "type": "storage_array", "description": "Storage Array"}, - {"key": "cpes", "type": "cpe", "description": "CPE"}, - {"key": "workstations", "type": "workstation", "description": "Workstation"}, - {"key": "access_points", "type": "access_point", "description": "Access Point"}, - {"key": "phones", "type": "phone", "description": "Phone"}, - {"key": "printers", "type": "printer", "description": "Printer"}, - {"key": "cameras", "type": "camera", "description": "Camera"}, - {"key": "generic_devices", "type": "generic_device", "description": "Generic Device"}, -] - class ConnectedEndpointsKeysMixin: """ @@ -44,6 +28,7 @@ def connected_endpoints_keys(self: SharedUtils) -> list: NOTE: This method is called _before_ any schema validation, since we need to resolve connected_endpoints_keys dynamically """ connected_endpoints_keys = [] - # Support legacy data model by converting nested dict to list of dict - connected_endpoints_keys = get(self.hostvars, "connected_endpoints_keys", default=DEFAULT_CONNECTED_ENDPOINTS_KEYS) + # Reading default value from schema + default_connected_endpoint_keys = self.schema.get_default_value(["connected_endpoints_keys"]) + connected_endpoints_keys = get(self.hostvars, "connected_endpoints_keys", default=default_connected_endpoint_keys) return [entry for entry in connected_endpoints_keys if entry.get("key") is not None and self.hostvars.get(entry["key"]) is not None] diff --git a/python-avd/pyavd/_eos_designs/shared_utils/descriptions.py b/python-avd/pyavd/_eos_designs/shared_utils/descriptions.py new file mode 100644 index 00000000000..fdbb74fb832 --- /dev/null +++ b/python-avd/pyavd/_eos_designs/shared_utils/descriptions.py @@ -0,0 +1,96 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from __future__ import annotations + +from functools import cached_property +from typing import TYPE_CHECKING + +from pyavd._utils import get + +if TYPE_CHECKING: + from . import SharedUtils + + +class DescriptionsMixin: + """ + Mixin Class providing a subset of SharedUtils. + + Class should only be used as Mixin to the SharedUtils class. + Using type-hint on self to get proper type-hints on attributes across all Mixins. + """ + + @cached_property + def default_network_ports_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["default_network_ports_description"]) + return get(self.hostvars, "default_network_ports_description", default=default_value) + + @cached_property + def default_network_ports_port_channel_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["default_network_ports_port_channel_description"]) + return get(self.hostvars, "default_network_ports_port_channel_description", default=default_value) + + @cached_property + def default_connected_endpoints_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["default_connected_endpoints_description"]) + return get(self.hostvars, "default_connected_endpoints_description", default=default_value) + + @cached_property + def default_connected_endpoints_port_channel_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["default_connected_endpoints_port_channel_description"]) + return get(self.hostvars, "default_connected_endpoints_port_channel_description", default=default_value) + + @cached_property + def mlag_member_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_member_description"]) + return get(self.hostvars, "mlag_member_description", default=default_value) + + @cached_property + def mlag_port_channel_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_port_channel_description"]) + return get(self.hostvars, "mlag_port_channel_description", default=default_value) + + @cached_property + def mlag_peer_svi_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_svi_description"]) + return get(self.hostvars, "mlag_peer_svi_description", default=default_value) + + @cached_property + def mlag_peer_l3_svi_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_l3_svi_description"]) + return get(self.hostvars, "mlag_peer_l3_svi_description", default=default_value) + + @cached_property + def mlag_peer_vlan_name(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_vlan_name"]) + return get(self.hostvars, "mlag_peer_vlan_name", default=default_value) + + @cached_property + def mlag_peer_l3_vlan_name(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_l3_vlan_name"]) + return get(self.hostvars, "mlag_peer_l3_vlan_name", default=default_value) + + @cached_property + def mlag_peer_l3_vrf_svi_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_l3_vrf_svi_description"]) + return get(self.hostvars, "mlag_peer_l3_vrf_svi_description", default=default_value) + + @cached_property + def mlag_peer_l3_vrf_vlan_name(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_peer_l3_vrf_vlan_name"]) + return get(self.hostvars, "mlag_peer_l3_vrf_vlan_name", default=default_value) + + @cached_property + def mlag_bgp_peer_group_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_bgp_peer_group_description"]) + return get(self.hostvars, "mlag_bgp_peer_group_description", default=default_value) + + @cached_property + def mlag_bgp_peer_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["mlag_bgp_peer_description"]) + return get(self.hostvars, "mlag_bgp_peer_description", default=default_value) + + @cached_property + def overlay_bgp_peer_description(self: SharedUtils) -> str: + default_value = self.schema.get_default_value(["overlay_bgp_peer_description"]) + return get(self.hostvars, "overlay_bgp_peer_description", default=default_value) diff --git a/python-avd/pyavd/_eos_designs/shared_utils/filtered_tenants.py b/python-avd/pyavd/_eos_designs/shared_utils/filtered_tenants.py index 947f465cee3..73736eace33 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/filtered_tenants.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/filtered_tenants.py @@ -175,13 +175,12 @@ def is_forced_vrf(self: SharedUtils, vrf: dict) -> bool: There can be various causes for this: - The VRF is part of a tenant set under 'always_include_vrfs_in_tenants' - 'always_include_vrfs_in_tenants' is set to ['all'] - - This is a WAN router and the VRF present on the uplink switch. - Note that if the attracted VRF does not have a wan_vni configured, the code for interface vxlan1 will raise an error. + - This device is using 'p2p-vrfs' as uplink type and the VRF present on the uplink switch. """ if "all" in self.always_include_vrfs_in_tenants or vrf["tenant"] in self.always_include_vrfs_in_tenants: return True - return self.is_wan_client and vrf["name"] in (self.get_switch_fact("wan_router_uplink_vrfs", required=False) or []) + return vrf["name"] in (self.get_switch_fact("uplink_switch_vrfs", required=False) or []) def filtered_vrfs(self: SharedUtils, tenant: dict) -> list[dict]: """ @@ -222,6 +221,7 @@ def filtered_vrfs(self: SharedUtils, tenant: dict) -> list[dict]: evpn_l3_multicast_enabled = default(get(vrf, "evpn_l3_multicast.enabled"), get(tenant, "evpn_l3_multicast.enabled")) if self.evpn_multicast: vrf["_evpn_l3_multicast_enabled"] = evpn_l3_multicast_enabled + vrf["_evpn_l3_multicast_group_ip"] = get(vrf, "evpn_l3_multicast.evpn_underlay_l3_multicast_group") rps = [] for rp_entry in default(get(vrf, "pim_rp_addresses"), get(tenant, "pim_rp_addresses"), []): @@ -308,15 +308,17 @@ def get_merged_svi_config(self: SharedUtils, svi: dict) -> list[dict]: } if (svi_profile_name := filtered_svi.get("profile")) is not None: - svi_profile = get_item(self.svi_profiles, "profile", svi_profile_name, default={}) + msg = f"Profile '{svi_profile_name}' applied under SVI '{filtered_svi['name']}' does not exist in `svi_profiles`." + svi_profile = get_item(self.svi_profiles, "profile", svi_profile_name, required=True, custom_error_msg=msg) if (svi_parent_profile_name := svi_profile.get("parent_profile")) is not None: - svi_parent_profile = get_item(self.svi_profiles, "profile", svi_parent_profile_name, default={}) + msg = f"Profile '{svi_parent_profile_name}' applied under SVI Profile '{svi_profile_name}' does not exist in `svi_profiles`." + svi_parent_profile = get_item(self.svi_profiles, "profile", svi_parent_profile_name, required=True, custom_error_msg=msg) # deepmerge all levels of config - later vars override previous. # Using destructive_merge=False to avoid having references to profiles and other data. # Instead it will be doing deep copies inside merge. - merged_svi = merge( + merged_svi: dict = merge( svi_parent_profile, svi_profile, filtered_svi, @@ -326,26 +328,8 @@ def get_merged_svi_config(self: SharedUtils, svi: dict) -> list[dict]: list_merge="replace", destructive_merge=False, ) - - # Override structured configs since we don't want to deep-merge those - merged_svi["structured_config"] = default( - filtered_svi["nodes"][0].get("structured_config"), - svi_profile["nodes"][0].get("structured_config"), - svi_parent_profile["nodes"][0].get("structured_config"), - filtered_svi.get("structured_config"), - svi_profile.get("structured_config"), - svi_parent_profile.get("structured_config"), - ) - - # Override bgp.structured configs since we don't want to deep-merge those - merged_svi.setdefault("bgp", {})["structured_config"] = default( - get(filtered_svi["nodes"][0], "bgp.structured_config"), - get(svi_profile["nodes"][0], "bgp.structured_config"), - get(svi_parent_profile["nodes"][0], "bgp.structured_config"), - get(filtered_svi, "bgp.structured_config"), - get(svi_profile, "bgp.structured_config"), - get(svi_parent_profile, "bgp.structured_config"), - ) + merged_svi.pop("profile", None) + merged_svi.pop("parent_profile", None) return merged_svi def filtered_svis(self: SharedUtils, vrf: dict) -> list[dict]: @@ -451,3 +435,39 @@ def get_additional_svi_config(svi_config: dict, svi: dict, vrf: dict) -> None: ospf_keys.append({"id": ospf_key["id"], "hash_algorithm": ospf_key.get("hash_algorithm", "sha512"), "key": ospf_key["key"]}) if ospf_keys: svi_config.update({"ospf_authentication": ospf_authentication, "ospf_message_digest_keys": ospf_keys}) + + @cached_property + def bgp_in_network_services(self: SharedUtils) -> bool: + """ + True if BGP is needed or forcefully enabled for any VRF under network services. + + Used to enable router_bgp even if there is no overlay or underlay routing protocol. + """ + if not self.network_services_l3: + return False + + return any(self.bgp_enabled_for_vrf(vrf) for tenant in self.filtered_tenants for vrf in tenant["vrfs"]) + + def bgp_enabled_for_vrf(self: SharedUtils, vrf: dict) -> bool: + """ + True if the given VRF should be included under Router BGP. + + - If bgp.enabled is set to True, we will always configure the VRF. + - If bgp.enabled is set to False, we will never configure the VRF. + + Otherwise we will autodetect: + - If the VRF is part of an overlay we will configure BGP for it. + - If any BGP peers are configured we will configure BGP for it. + - If uplink type is p2p_vrfs and the vrf is included in uplink VRFs. + """ + if (bgp_enabled := get(vrf, "bgp.enabled")) is not None: + return bgp_enabled + + vrf_address_families = [af for af in vrf.get("address_families", ["evpn"]) if af in self.overlay_address_families] + return any( + [ + vrf_address_families, + vrf["bgp_peers"], + (self.uplink_type == "p2p-vrfs" and vrf["name"] in (self.get_switch_fact("uplink_switch_vrfs", required=False) or [])), + ] + ) diff --git a/python-avd/pyavd/_eos_designs/shared_utils/flow_tracking.py b/python-avd/pyavd/_eos_designs/shared_utils/flow_tracking.py index 08bc391a594..b6b962068b1 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/flow_tracking.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/flow_tracking.py @@ -69,6 +69,7 @@ def get_flow_tracker( "mlag_interfaces", "l3_interfaces", "dps_interfaces", + "direct_wan_ha_links", ], ) -> dict: """Return flow_tracking settings for a link, falling back to the fabric flow_tracking_settings if not defined.""" diff --git a/python-avd/pyavd/_eos_designs/shared_utils/ip_addressing.py b/python-avd/pyavd/_eos_designs/shared_utils/ip_addressing.py index c60abe18bfa..e745dad3875 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/ip_addressing.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/ip_addressing.py @@ -6,8 +6,8 @@ from functools import cached_property from typing import TYPE_CHECKING -from pyavd._eos_designs.ip_addressing import AvdIpAddressing from pyavd._utils import get, load_python_class, merge +from pyavd.api.ip_addressing import AvdIpAddressing if TYPE_CHECKING: from . import SharedUtils diff --git a/python-avd/pyavd/_eos_designs/shared_utils/l3_interfaces.py b/python-avd/pyavd/_eos_designs/shared_utils/l3_interfaces.py index 4cfc3e6e406..298db2b4c87 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/l3_interfaces.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/l3_interfaces.py @@ -37,7 +37,8 @@ def apply_l3_interfaces_profile(self: SharedUtils, l3_interface: dict) -> dict: # Nothing to do return l3_interface - profile = get_item(self.l3_interface_profiles, "profile", l3_interface["profile"], default={}) + msg = f"Profile '{l3_interface['profile']}' applied under l3_interface '{l3_interface['name']}' does not exist in `l3_interface_profiles`." + profile = get_item(self.l3_interface_profiles, "profile", l3_interface["profile"], required=True, custom_error_msg=msg) merged_dict: dict = merge(profile, l3_interface, list_merge="replace", destructive_merge=False) merged_dict.pop("profile", None) return merged_dict @@ -46,18 +47,13 @@ def apply_l3_interfaces_profile(self: SharedUtils, l3_interface: dict) -> dict: def l3_interface_profiles(self: SharedUtils) -> list: return get(self.hostvars, "l3_interface_profiles", default=[]) - # TODO: Add sflow knob under fabric_sflow to cover l3_interfaces defined under the node_types. - # TODO: @cached_property - # TODO: def _l3_interfaces_sflow(self) -> bool | None: - # TODO: return get(self._hostvars, f"fabric_sflow.{self.data_model}") - @cached_property def l3_interfaces(self: SharedUtils) -> list: """Returns the list of l3_interfaces, where any referenced profiles are applied.""" if not (l3_interfaces := get(self.switch_data_combined, "l3_interfaces")): return [] - # Apply l3_interfaces._profile if set. Silently ignoring missing profile. + # Apply l3_interfaces._profile if set. if self.l3_interface_profiles: l3_interfaces = [self.apply_l3_interfaces_profile(l3_interface) for l3_interface in l3_interfaces] diff --git a/python-avd/pyavd/_eos_designs/shared_utils/misc.py b/python-avd/pyavd/_eos_designs/shared_utils/misc.py index 8f04cbc4202..74c80997699 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/misc.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/misc.py @@ -47,7 +47,7 @@ def id(self: SharedUtils) -> int | None: def trunk_groups(self: SharedUtils) -> dict: return { "mlag": {"name": get(self.hostvars, "trunk_groups.mlag.name", default="MLAG")}, - "mlag_l3": {"name": get(self.hostvars, "trunk_groups.mlag_l3.name", default="LEAF_PEER_L3")}, + "mlag_l3": {"name": get(self.hostvars, "trunk_groups.mlag_l3.name", default="MLAG")}, "uplink": {"name": get(self.hostvars, "trunk_groups.uplink.name", default="UPLINK")}, } @@ -193,7 +193,7 @@ def max_uplink_switches(self: SharedUtils) -> int: def p2p_uplinks_mtu(self: SharedUtils) -> int | None: if not self.platform_settings_feature_support_per_interface_mtu: return None - p2p_uplinks_mtu = get(self.hostvars, "p2p_uplinks_mtu", default=9214) + p2p_uplinks_mtu = default(self.platform_settings_p2p_uplinks_mtu, get(self.hostvars, "p2p_uplinks_mtu", default=9214)) return get(self.switch_data_combined, "uplink_mtu", default=p2p_uplinks_mtu) @cached_property @@ -202,11 +202,11 @@ def evpn_short_esi_prefix(self: SharedUtils) -> str: @cached_property def shutdown_interfaces_towards_undeployed_peers(self: SharedUtils) -> bool: - return get(self.hostvars, "shutdown_interfaces_towards_undeployed_peers") is True + return get(self.hostvars, "shutdown_interfaces_towards_undeployed_peers", default=True) is True @cached_property def shutdown_bgp_towards_undeployed_peers(self: SharedUtils) -> bool: - return get(self.hostvars, "shutdown_bgp_towards_undeployed_peers") is True + return get(self.hostvars, "shutdown_bgp_towards_undeployed_peers", default=True) is True @cached_property def bfd_multihop(self: SharedUtils) -> dict: @@ -252,7 +252,8 @@ def network_services_keys(self: SharedUtils) -> list[dict]: NOTE: This method is called _before_ any schema validation, since we need to resolve network_services_keys dynamically """ - default_network_services_keys = [{"name": "tenants"}] + # Reading default value from schema + default_network_services_keys = self.schema.get_default_value(["network_services_keys"]) network_services_keys = get(self.hostvars, "network_services_keys", default=default_network_services_keys) network_services_keys = [entry for entry in network_services_keys if entry.get("name") is not None and self.hostvars.get(entry["name"]) is not None] return natural_sort(network_services_keys, "name") @@ -322,6 +323,10 @@ def fabric_ip_addressing_mlag_ipv6_prefix_length(self: SharedUtils) -> int: def fabric_ip_addressing_p2p_uplinks_ipv4_prefix_length(self: SharedUtils) -> int: return get(self.hostvars, "fabric_ip_addressing.p2p_uplinks.ipv4_prefix_length", default=31) + @cached_property + def fabric_ip_addressing_wan_ha_ipv4_prefix_length(self: SharedUtils) -> int: + return get(self.hostvars, "fabric_ip_addressing.wan_ha.ipv4_prefix_length", default=31) + @cached_property def fabric_sflow_uplinks(self: SharedUtils) -> bool | None: return get(self.hostvars, "fabric_sflow.uplinks") @@ -338,6 +343,10 @@ def fabric_sflow_endpoints(self: SharedUtils) -> bool | None: def fabric_sflow_mlag_interfaces(self: SharedUtils) -> bool | None: return get(self.hostvars, "fabric_sflow.mlag_interfaces") + @cached_property + def fabric_sflow_l3_interfaces(self: SharedUtils) -> bool | None: + return get(self.hostvars, "fabric_sflow.l3_interfaces") + @cached_property def default_interface_mtu(self: SharedUtils) -> int | None: default_default_interface_mtu = get(self.hostvars, "default_interface_mtu") @@ -355,16 +364,6 @@ def get_switch_fact(self: SharedUtils, key: str, required: bool = True) -> Any: def evpn_multicast(self: SharedUtils) -> bool: return self.get_switch_fact("evpn_multicast", required=False) is True - @cached_property - def new_network_services_bgp_vrf_config(self: SharedUtils) -> bool: - """ - Return whether or not to use the new behavior when generating BGP VRF configuration. - - TODO: Change default to True in all cases in AVD 5.0.0 and remove in AVD 6.0.0 - """ - default_value = bool(self.uplink_type == "p2p-vrfs") - return get(self.hostvars, "new_network_services_bgp_vrf_config", default=default_value) - @cached_property def ipv4_acls(self: SharedUtils) -> dict: return {acl["name"]: acl for acl in get(self.hostvars, "ipv4_acls", default=[])} diff --git a/python-avd/pyavd/_eos_designs/shared_utils/mlag.py b/python-avd/pyavd/_eos_designs/shared_utils/mlag.py index 756372d963e..119851af576 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/mlag.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/mlag.py @@ -185,6 +185,14 @@ def mlag_port_channel_id(self: SharedUtils) -> int: default_mlag_port_channel_id = int("".join(findall(r"\d", self.mlag_interfaces[0]))) return get(self.switch_data_combined, "mlag_port_channel_id", default_mlag_port_channel_id) + @cached_property + def mlag_peer_port_channel_id(self: SharedUtils) -> int: + return get(self.mlag_peer_facts, "mlag_port_channel_id", default=self.mlag_port_channel_id) + + @cached_property + def mlag_peer_interfaces(self: SharedUtils) -> list: + return get(self.mlag_peer_facts, "mlag_interfaces", default=self.mlag_interfaces) + @cached_property def mlag_peer_vlan_structured_config(self: SharedUtils) -> dict | None: return get(self.switch_data_combined, "mlag_peer_vlan_structured_config") diff --git a/python-avd/pyavd/_eos_designs/shared_utils/node_type_keys.py b/python-avd/pyavd/_eos_designs/shared_utils/node_type_keys.py index 981833f4d68..f56708aa8f9 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/node_type_keys.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/node_type_keys.py @@ -7,12 +7,88 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdMissingVariableError -from pyavd._utils import get, replace_or_append_item +from pyavd._utils import get, get_item, replace_or_append_item if TYPE_CHECKING: from . import SharedUtils -# NOTE: There is a static list of default node_type_keys in the fabric documentation templates +MPLS_DEFAULT_NODE_TYPE_KEYS = [ + { + "key": "p", + "type": "p", + "mpls_lsr": True, + "default_mpls_overlay_role": "none", + "default_overlay_routing_protocol": "ibgp", + "default_underlay_routing_protocol": "isis-sr", + }, + { + "key": "pe", + "type": "pe", + "mpls_lsr": True, + "connected_endpoints": True, + "default_mpls_overlay_role": "client", + "default_evpn_role": "client", + "network_services": { + "l1": True, + "l2": True, + "l3": True, + }, + "default_overlay_routing_protocol": "ibgp", + "default_underlay_routing_protocol": "isis-sr", + "default_overlay_address_families": ["vpn-ipv4"], + "default_evpn_encapsulation": "mpls", + }, + { + "key": "rr", + "type": "rr", + "mpls_lsr": True, + "default_mpls_overlay_role": "server", + "default_evpn_role": "server", + "default_overlay_routing_protocol": "ibgp", + "default_underlay_routing_protocol": "isis-sr", + "default_overlay_address_families": ["vpn-ipv4"], + "default_evpn_encapsulation": "mpls", + }, +] +L2LS_DEFAULT_NODE_TYPE_KEYS = [ + { + "key": "l3spine", + "type": "l3spine", + "connected_endpoints": True, + "mlag_support": True, + "network_services": { + "l2": True, + "l3": True, + }, + "default_overlay_routing_protocol": "none", + "default_underlay_routing_protocol": "none", + }, + { + "key": "spine", + "type": "spine", + "connected_endpoints": True, + "mlag_support": True, + "network_services": { + "l2": True, + }, + "underlay_router": False, + "uplink_type": "port-channel", + }, + { + "key": "leaf", + "type": "leaf", + "connected_endpoints": True, + "mlag_support": True, + "network_services": { + "l2": True, + }, + "underlay_router": False, + "uplink_type": "port-channel", + }, +] + +# NOTE: There is a static list of default node_type_keys in the fabric documentation templates which must be updated as well + DEFAULT_NODE_TYPE_KEYS = { "l3ls-evpn": [ { @@ -48,6 +124,19 @@ "uplink_type": "port-channel", "cv_tags_topology_type": "leaf", }, + # Avoiding duplicate code + get_item(L2LS_DEFAULT_NODE_TYPE_KEYS, "key", "l3spine", required=True), + { + "key": "l2spine", + "type": "l2spine", + "connected_endpoints": True, + "mlag_support": True, + "network_services": { + "l2": True, + }, + "underlay_router": False, + "uplink_type": "port-channel", + }, { "key": "super_spine", "type": "super-spine", @@ -85,81 +174,11 @@ "l3": True, }, }, + # Avoiding duplicate code + *MPLS_DEFAULT_NODE_TYPE_KEYS, ], - "mpls": [ - { - "key": "p", - "type": "p", - "mpls_lsr": True, - "default_mpls_overlay_role": "none", - "default_overlay_routing_protocol": "ibgp", - "default_underlay_routing_protocol": "isis-sr", - }, - { - "key": "pe", - "type": "pe", - "mpls_lsr": True, - "connected_endpoints": True, - "default_mpls_overlay_role": "client", - "default_evpn_role": "client", - "network_services": { - "l1": True, - "l2": True, - "l3": True, - }, - "default_overlay_routing_protocol": "ibgp", - "default_underlay_routing_protocol": "isis-sr", - "default_overlay_address_families": ["vpn-ipv4"], - "default_evpn_encapsulation": "mpls", - }, - { - "key": "rr", - "type": "rr", - "mpls_lsr": True, - "default_mpls_overlay_role": "server", - "default_evpn_role": "server", - "default_overlay_routing_protocol": "ibgp", - "default_underlay_routing_protocol": "isis-sr", - "default_overlay_address_families": ["vpn-ipv4"], - "default_evpn_encapsulation": "mpls", - }, - ], - "l2ls": [ - { - "key": "l3spine", - "type": "l3spine", - "connected_endpoints": True, - "mlag_support": True, - "network_services": { - "l2": True, - "l3": True, - }, - "default_overlay_routing_protocol": "none", - "default_underlay_routing_protocol": "none", - }, - { - "key": "spine", - "type": "spine", - "connected_endpoints": True, - "mlag_support": True, - "network_services": { - "l2": True, - }, - "underlay_router": False, - "uplink_type": "port-channel", - }, - { - "key": "leaf", - "type": "leaf", - "connected_endpoints": True, - "mlag_support": True, - "network_services": { - "l2": True, - }, - "underlay_router": False, - "uplink_type": "port-channel", - }, - ], + "mpls": MPLS_DEFAULT_NODE_TYPE_KEYS, + "l2ls": L2LS_DEFAULT_NODE_TYPE_KEYS, } diff --git a/python-avd/pyavd/_eos_designs/shared_utils/overlay.py b/python-avd/pyavd/_eos_designs/shared_utils/overlay.py index 05bd5f5b8f8..92ec06a22d2 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/overlay.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/overlay.py @@ -46,7 +46,7 @@ def mpls_overlay_role(self: SharedUtils) -> str | None: @cached_property def overlay_rd_type(self: SharedUtils) -> dict: overlay_rd_type = get(self.hostvars, "overlay_rd_type", default={}) - admin_subfield = get(overlay_rd_type, "admin_subfield", default="overlay_loopback_ip") + admin_subfield = get(overlay_rd_type, "admin_subfield", default="router_id") admin_subfield_offset = int(get(overlay_rd_type, "admin_subfield_offset", default=0)) return { "admin_subfield": admin_subfield, @@ -79,7 +79,7 @@ def overlay_rd_type_vrf_admin_subfield(self: SharedUtils) -> str: return self.get_rd_admin_subfield_value(vrf_admin_subfield, vrf_admin_subfield_offset) def get_rd_admin_subfield_value(self: SharedUtils, admin_subfield: str, admin_subfield_offset: int) -> str: - if admin_subfield == "overlay_loopback_ip": + if admin_subfield in ["router_id", "overlay_loopback_ip"]: return self.router_id if admin_subfield == "vtep_loopback": diff --git a/python-avd/pyavd/_eos_designs/shared_utils/platform.py b/python-avd/pyavd/_eos_designs/shared_utils/platform.py index 6acfa6dc614..627c9523879 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/platform.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/platform.py @@ -12,178 +12,6 @@ if TYPE_CHECKING: from . import SharedUtils -# Campus platforms are separated out by their ability to support "trident_forwarding_table_partition". -# This is required for EVPN multicast, currently only supported on all 720XP platforms. -# This command is not supported on 710P or 722XP platforms. 720D range has some devices that support this -# and others that don't, but I've grouped them all together as none of them support EVPN multicast. -DEFAULT_PLATFORM_SETTINGS = [ - { - "platforms": ["default"], - "reload_delay": {"mlag": 300, "non_mlag": 330}, - "feature_support": { - "queue_monitor_length_notify": False, - }, - }, - { - "platforms": ["7050X3"], - "trident_forwarding_table_partition": "flexible exact-match 16384 l2-shared 98304 l3-shared 131072", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": { - "queue_monitor_length_notify": False, - }, - }, - { - "platforms": ["720XP"], - "trident_forwarding_table_partition": "flexible exact-match 16000 l2-shared 18000 l3-shared 22000", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": {"queue_monitor_length_notify": False, "poe": True}, - }, - { - "platforms": ["750", "755", "758"], - "management_interface": "Management0", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": {"queue_monitor_length_notify": False, "poe": True}, - }, - { - "platforms": ["720DP", "722XP", "710P"], - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": {"queue_monitor_length_notify": False, "poe": True}, - }, - { - "platforms": ["7010TX"], - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": {"queue_monitor_length_notify": False, "per_interface_mtu": False}, - }, - { - "platforms": ["7280R", "7280R2", "7020R"], - "tcam_profile": "vxlan-routing", - "lag_hardware_only": True, - "reload_delay": { - "mlag": 900, - "non_mlag": 1020, - }, - }, - { - "platforms": ["7280R3"], - "reload_delay": { - "mlag": 900, - "non_mlag": 1020, - }, - }, - { - "platforms": ["7500R", "7500R2"], - "tcam_profile": "vxlan-routing", - "lag_hardware_only": True, - "management_interface": "Management0", - "reload_delay": { - "mlag": 900, - "non_mlag": 1020, - }, - }, - { - "platforms": ["7500R3", "7800R3"], - "management_interface": "Management0", - "reload_delay": { - "mlag": 900, - "non_mlag": 1020, - }, - }, - { - "platforms": ["7358X4"], - "management_interface": "Management1/1", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": { - "queue_monitor_length_notify": False, - "interface_storm_control": True, - "bgp_update_wait_for_convergence": True, - "bgp_update_wait_install": False, - }, - }, - { - "platforms": ["7368X4"], - "management_interface": "Management0", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - }, - { - "platforms": ["7300X3"], - "management_interface": "Management0", - "trident_forwarding_table_partition": "flexible exact-match 16384 l2-shared 98304 l3-shared 131072", - "reload_delay": { - "mlag": 1200, - "non_mlag": 1320, - }, - }, - { - "platforms": ["VEOS", "VEOS-LAB", "vEOS", "vEOS-lab"], - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": { - "queue_monitor_length_notify": False, - "interface_storm_control": False, - "bgp_update_wait_for_convergence": False, - "bgp_update_wait_install": False, - }, - }, - { - "platforms": ["CEOS", "cEOS", "ceos", "cEOSLab"], - "management_interface": "Management0", - "reload_delay": { - "mlag": 300, - "non_mlag": 330, - }, - "feature_support": { - "queue_monitor_length_notify": False, - "interface_storm_control": False, - "bgp_update_wait_for_convergence": False, - "bgp_update_wait_install": False, - }, - }, - { - "platforms": ["AWE-5310", "AWE-5510", "AWE-7250R", "AWE-7230R"], - "management_interface": "Management1/1", - "feature_support": { - "queue_monitor_length_notify": False, - "interface_storm_control": False, - "bgp_update_wait_for_convergence": True, - "bgp_update_wait_install": False, - }, - }, - { - "platforms": ["AWE-7220R"], - "management_interface": "Management1", - "feature_support": { - "queue_monitor_length_notify": False, - "interface_storm_control": False, - "bgp_update_wait_for_convergence": True, - "bgp_update_wait_install": False, - "poe": True, - }, - }, -] - class PlatformMixin: """ @@ -200,7 +28,10 @@ def platform(self: SharedUtils) -> str | None: @cached_property def platform_settings(self: SharedUtils) -> dict: custom_platform_settings = get(self.hostvars, "custom_platform_settings", default=[]) - platform_settings = custom_platform_settings + get(self.hostvars, "platform_settings", default=DEFAULT_PLATFORM_SETTINGS) + + # Reading default value from schema + default_platform_settings = self.schema.get_default_value(["platform_settings"]) + platform_settings = custom_platform_settings + get(self.hostvars, "platform_settings", default=default_platform_settings) # First look for a matching platform setting specifying our platform for platform_setting in platform_settings: @@ -250,3 +81,7 @@ def platform_settings_feature_support_poe(self) -> bool: @cached_property def platform_settings_feature_support_per_interface_mtu(self) -> bool: return get(self.platform_settings, "feature_support.per_interface_mtu", default=True) is True + + @cached_property + def platform_settings_p2p_uplinks_mtu(self) -> int | None: + return get(self.platform_settings, "p2p_uplinks_mtu") diff --git a/python-avd/pyavd/_eos_designs/shared_utils/routing.py b/python-avd/pyavd/_eos_designs/shared_utils/routing.py index eabaf6af2c9..096157299b0 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/routing.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/routing.py @@ -51,6 +51,7 @@ def bgp(self: SharedUtils) -> bool: self.overlay_routing_protocol in ["ebgp", "ibgp"] and (self.evpn_role in ["client", "server"] or self.mpls_overlay_role in ["client", "server"]) ) + or self.bgp_in_network_services ) ) diff --git a/python-avd/pyavd/_eos_designs/shared_utils/utils.py b/python-avd/pyavd/_eos_designs/shared_utils/utils.py index dec1f54cf86..b611d54dc2a 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/utils.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/utils.py @@ -52,23 +52,30 @@ def template_var(self: SharedUtils, template_file: str, template_vars: dict) -> raise AristaAvdError(msg) from e @lru_cache # noqa: B019 - def get_merged_port_profile(self: SharedUtils, profile_name: str) -> list: + def get_merged_port_profile(self: SharedUtils, profile_name: str, context: str) -> list: """Return list of merged "port_profiles" where "parent_profile" has been applied.""" - port_profile = get_item(self.port_profiles, "profile", profile_name, default={}) + msg = f"Profile '{profile_name}' applied under '{context}' does not exist in `port_profiles`." + port_profile = get_item(self.port_profiles, "profile", profile_name, required=True, custom_error_msg=msg) if "parent_profile" in port_profile: - parent_profile = get_item(self.port_profiles, "profile", port_profile["parent_profile"], default={}) + msg = f"Profile '{port_profile['parent_profile']}' applied under port profile '{profile_name}' does not exist in `port_profiles`." + parent_profile = get_item(self.port_profiles, "profile", port_profile["parent_profile"], required=True, custom_error_msg=msg) # Notice reuse of the same variable with the merged content. port_profile = merge(parent_profile, port_profile, list_merge="replace", destructive_merge=False) port_profile.pop("parent_profile") return port_profile - def get_merged_adapter_settings(self: SharedUtils, adapter_or_network_port_settings: dict) -> dict: + def get_merged_adapter_settings(self: SharedUtils, adapter_or_network_port_settings: dict, context: str) -> dict: """ Applies port-profiles to the given adapter_or_network_port and returns the combined result. - adapter_or_network_port can either be an adapter of a connected endpoint or one item under network_ports. + Args: + adapter_or_network_port_settings: can either be an adapter of a connected endpoint or one item under network_ports. + context: a context string for error messages. """ - profile_name = adapter_or_network_port_settings.get("profile") - adapter_profile = self.get_merged_port_profile(profile_name) + if (profile_name := adapter_or_network_port_settings.get("profile")) is None: + # No profile to apply + return adapter_or_network_port_settings + + adapter_profile = self.get_merged_port_profile(profile_name, context) return merge(adapter_profile, adapter_or_network_port_settings, list_merge="replace", destructive_merge=False) diff --git a/python-avd/pyavd/_eos_designs/shared_utils/wan.py b/python-avd/pyavd/_eos_designs/shared_utils/wan.py index 47ecb39c665..6876a9d1a1b 100644 --- a/python-avd/pyavd/_eos_designs/shared_utils/wan.py +++ b/python-avd/pyavd/_eos_designs/shared_utils/wan.py @@ -4,10 +4,11 @@ from __future__ import annotations from functools import cached_property +from re import findall from typing import TYPE_CHECKING, Literal from pyavd._errors import AristaAvdError, AristaAvdMissingVariableError -from pyavd._utils import default, get, get_ip_from_ip_prefix, get_ip_from_pool, get_item, strip_empties_from_dict +from pyavd._utils import default, get, get_ip_from_ip_prefix, get_item, strip_empties_from_dict from pyavd.j2filters import natural_sort if TYPE_CHECKING: @@ -149,9 +150,9 @@ def wan_path_groups(self: SharedUtils) -> list: @cached_property def wan_local_path_groups(self: SharedUtils) -> list: """ - List of path_groups present on this router based on the local carriers. + List of path-groups present on this router based on the local carriers. - Also add for each path_groups the local interfaces in a data structure + Also add for each path-groups the local interfaces in a data structure interfaces: - name: ... public_ip: ... @@ -181,9 +182,22 @@ def wan_local_path_groups(self: SharedUtils) -> list: @cached_property def wan_local_path_group_names(self: SharedUtils) -> list: - """Return a list of wan_local_path_group names to be used by HA peer and in various places.""" + """Return a list of wan_local_path_group names.""" return [path_group["name"] for path_group in self.wan_local_path_groups] + @cached_property + def wan_ha_peer_path_groups(self: SharedUtils) -> list: + """List of WAN HA peer path-groups coming from facts.""" + if not self.is_wan_router or not self.wan_ha: + return [] + peer_facts = self.get_peer_facts(self.wan_ha_peer, required=True) + return get(peer_facts, "wan_path_groups", required=True) + + @cached_property + def wan_ha_peer_path_group_names(self: SharedUtils) -> list: + """Return a list of wan_ha_peer_path_group names.""" + return [path_group["name"] for path_group in self.wan_ha_peer_path_groups] + @cached_property def this_wan_route_server(self: SharedUtils) -> dict: """ @@ -347,18 +361,13 @@ def filtered_wan_route_servers(self: SharedUtils) -> dict: f"'vtep_ip' is missing for peering with {wan_rs}, either set it in under 'wan_route_servers' or something is wrong with the peer" " facts." ) - raise AristaAvdMissingVariableError( - msg, - ) + raise AristaAvdMissingVariableError(msg) if wan_path_groups is None: msg = ( f"'wan_path_groups' is missing for peering with {wan_rs}, either set it in under 'wan_route_servers'" " or something is wrong with the peer facts." ) - raise AristaAvdMissingVariableError( - msg, - ) - + raise AristaAvdMissingVariableError(msg) else: # Retrieve the values from the dictionary, making them required if the peer_facts were not found vtep_ip = get(wan_rs_dict, "vtep_ip", required=True) @@ -480,6 +489,11 @@ def wan_ha_peer(self: SharedUtils) -> str | None: msg = "Unable to find WAN HA peer within same node group" raise AristaAvdError(msg) + @cached_property + def configured_wan_ha_mtu(self: SharedUtils) -> int: + """Read the device wan_ha.mtu node settings.""" + return get(self.switch_data_combined, "wan_ha.mtu", default=9194) + @cached_property def configured_wan_ha_interfaces(self: SharedUtils) -> set: """Read the device wan_ha.ha_interfaces node settings.""" @@ -497,16 +511,21 @@ def vrf_default_uplink_interfaces(self: SharedUtils) -> list: @cached_property def use_uplinks_for_wan_ha(self: SharedUtils) -> bool: - """Return true or false.""" + """ + Indicates whether the device is using its uplinks for WAN HA or direct HA. + + Returns: + bool: True if uplinks are used for HA, False otherwise + + Raises: + AristaAvdError: when the list of configured interfaces is a mix of uplinks and none uplinks. + """ interfaces = set(self.configured_wan_ha_interfaces) uplink_interfaces = set(self.vrf_default_uplink_interfaces) if interfaces.issubset(uplink_interfaces): return True if not interfaces.intersection(uplink_interfaces): - if len(interfaces) > 1: - msg = "AVD does not support multiple HA interfaces when not using uplinks." - raise AristaAvdError(msg) return False msg = "Either all `wan_ha.ha_interfaces` must be uplink interfaces or all of them must not be uplinks." raise AristaAvdError(msg) @@ -524,6 +543,32 @@ def wan_ha_interfaces(self: SharedUtils) -> list: # Using node values return natural_sort(set(self.configured_wan_ha_interfaces), "name") + @cached_property + def wan_ha_port_channel_id(self: SharedUtils) -> int: + """ + Port-channel ID to use for direct WAN HA port-channel. + + If not provided, computed from the list of configured members. + """ + return get(self.switch_data_combined, "wan_ha.port_channel_id", default=int("".join(findall(r"\d", self.wan_ha_interfaces[0])))) + + @cached_property + def use_port_channel_for_direct_ha(self: SharedUtils) -> bool: + """ + Indicate if port-channel should be used for direct HA. + + Returns: + bool: False is use_uplinks_for_wan_ha is True + True if strictly there is more than one configured wan_ha.interfaces + otherwise the value of `wan_ha.use_port_channel_for_direct_ha` which defaults to True. + """ + if self.use_uplinks_for_wan_ha: + return False + + interfaces = set(self.configured_wan_ha_interfaces) + + return len(interfaces) > 1 or get(self.switch_data_combined, "wan_ha.use_port_channel_for_direct_ha", True) + @cached_property def wan_ha_peer_ip_addresses(self: SharedUtils) -> list: """ @@ -531,11 +576,11 @@ def wan_ha_peer_ip_addresses(self: SharedUtils) -> list: Used also to generate the prefix list of the PEER HA prefixes. """ - interfaces = set(self.configured_wan_ha_interfaces) ip_addresses = [] if self.use_uplinks_for_wan_ha: peer_facts = self.get_peer_facts(self.wan_ha_peer, required=True) vrf_default_peer_uplinks = [uplink for uplink in get(peer_facts, "uplinks", required=True) if get(uplink, "vrf") is None] + interfaces = set(self.configured_wan_ha_interfaces) for uplink in vrf_default_peer_uplinks: if not interfaces or uplink["interface"] in interfaces: ip_address = get( @@ -550,7 +595,7 @@ def wan_ha_peer_ip_addresses(self: SharedUtils) -> list: ip_addresses.append(f"{ip_address}/{prefix_length}") else: # Only one supported HA interface today when not using uplinks - ip_addresses.append(self.get_wan_ha_ip_address(local=False)) + ip_addresses.append(self.ip_addressing.wan_ha_peer_ip()) return ip_addresses @cached_property @@ -560,10 +605,10 @@ def wan_ha_ip_addresses(self: SharedUtils) -> list: Used to generate the prefix list. """ - interfaces = set(self.configured_wan_ha_interfaces) ip_addresses = [] if self.use_uplinks_for_wan_ha: + interfaces = set(self.configured_wan_ha_interfaces) for uplink in self.vrf_default_uplinks: if not interfaces or uplink["interface"] in interfaces: ip_address = get( @@ -577,42 +622,31 @@ def wan_ha_ip_addresses(self: SharedUtils) -> list: ip_addresses.append(f"{ip_address}/{prefix_length}") else: # Only one supported HA interface today when not using uplinks - ip_addresses.append(self.get_wan_ha_ip_address(local=True)) + ip_addresses.append(self.ip_addressing.wan_ha_ip()) return ip_addresses - def get_wan_ha_ip_address(self: SharedUtils, local: bool) -> str | None: - """ - Render ipv4 address for wan_ha_ip_address using dynamically loaded python module. - - local: When true, request the first IP address else request the remote peer IP. - TODO: Move this to ip_addressing module to allow for custom logic. - """ - wan_ha_ipv4_pool = get( + @cached_property + def wan_ha_ipv4_pool(self: SharedUtils) -> str: + """Return the configured wan_ha.ha_ipv4_pool.""" + return get( self.switch_data_combined, "wan_ha.ha_ipv4_pool", required=True, org_key="Missing `wan_ha.ha_ipv4_pool` node settings to allocate an IP address to defined HA interface", ) - first_ip_address = get_ip_from_pool(wan_ha_ipv4_pool, 31, 0, 0) - second_ip_address = get_ip_from_pool(wan_ha_ipv4_pool, 31, 0, 1) - - if self.is_first_ha_peer: - local_ip, remote_ip = first_ip_address, second_ip_address - else: - local_ip, remote_ip = second_ip_address, first_ip_address - - ip_address = local_ip if local else remote_ip - - return f"{ip_address}/31" - def generate_lb_policy_name(self: SharedUtils, name: str) -> str: """Returns LB-{name}.""" return f"LB-{name}" @cached_property def wan_stun_dtls_profile_name(self: SharedUtils) -> str | None: + """Return the DTLS profile name to use for STUN for WAN.""" if not self.is_wan_router or get(self.hostvars, "wan_stun_dtls_disable") is True: return None return get(self.hostvars, "wan_stun_dtls_profile_name", default="STUN-DTLS") + + @cached_property + def wan_encapsulation(self: SharedUtils) -> str: + return get(self.hostvars, "wan_encapsulation", default="path-selection") diff --git a/python-avd/pyavd/_eos_designs/structured_config/__init__.py b/python-avd/pyavd/_eos_designs/structured_config/__init__.py index ca73ad6b09a..c29309a4359 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/__init__.py +++ b/python-avd/pyavd/_eos_designs/structured_config/__init__.py @@ -55,27 +55,41 @@ def get_structured_config( output_schema_tools: AvdSchemaTools, result: dict, templar: object | None = None, + *, + validate: bool = True, ) -> dict: + """ + Generate structured_config for a device. + + Args: + vars: + The variable for the device + input_schema_tools: + An AvdSchemaTools object used to validate the input variables if enabled. + output_schema_tools: + An AvdSchemaTools object used to validate the structured_config. + result: + Dictionary to store results. + templar: + The templar to use for rendering templates. + validate: + Optional flag to disable validation for the input schema. + + Returns: + The structured_config as a dict + """ + # Validate input data + if validate: + result.update(input_schema_tools.convert_and_validate_data(vars)) + if result.get("failed"): + # Input data validation failed so return empty dict. Calling function should check result.get("failed"). + return {} + structured_config = {} - module_vars = ChainMap( - structured_config, - vars, - ) + module_vars = ChainMap(structured_config, vars) # Initialize SharedUtils class to be passed to each python_module below. - shared_utils = SharedUtils(module_vars, templar) - - # Insert dynamic keys into the input data if not set. - # These keys are required by the schema, but the default values are set inside shared_utils. - vars.setdefault("node_type_keys", shared_utils.node_type_keys) - vars.setdefault("connected_endpoints_keys", shared_utils.connected_endpoints_keys) - vars.setdefault("network_services_keys", shared_utils.network_services_keys) - - # Validate input data - result.update(input_schema_tools.convert_and_validate_data(vars)) - if result.get("failed"): - # Input data validation failed so return empty dict. Calling function should check result.get("failed"). - return {} + shared_utils = SharedUtils(hostvars=module_vars, templar=templar, schema=input_schema_tools.avdschema) for cls in AVD_STRUCTURED_CONFIG_CLASSES: eos_designs_module: AvdFacts = cls(module_vars, shared_utils) diff --git a/python-avd/pyavd/_eos_designs/structured_config/base/__init__.py b/python-avd/pyavd/_eos_designs/structured_config/base/__init__.py index 726ac4e2a39..62554e10f06 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/base/__init__.py +++ b/python-avd/pyavd/_eos_designs/structured_config/base/__init__.py @@ -293,14 +293,28 @@ def vlan_internal_order(self) -> dict | None: return get(self._hostvars, "internal_vlan_order", default=default_internal_vlan_order) @cached_property - def transceiver_qsfp_default_mode_4x10(self) -> bool | None: + def aaa_root(self) -> dict: + """aaa_root.disable is always set to match EOS default config and historic configs.""" + return {"disabled": True} + + @cached_property + def config_end(self) -> bool: + """config_end is always set to match EOS default config and historic configs.""" + return True + + @cached_property + def enable_password(self) -> dict: + """enable_password.disable is always set to match EOS default config and historic configs.""" + return {"disabled": True} + + @cached_property + def transceiver_qsfp_default_mode_4x10(self) -> bool: """ - transceiver_qsfp_default_mode_4x10 is on by default in eos_cli_config_gen. + transceiver_qsfp_default_mode_4x10 is on for all devices except WAN routers. - Set to false for WAN routers. TODO: Add platform_setting to control this. """ - return False if self.shared_utils.wan_role else None + return not self.shared_utils.is_wan_router @cached_property def event_monitor(self) -> dict | None: @@ -436,7 +450,7 @@ def management_interfaces(self) -> list | None: ): interface_settings = { "name": mgmt_interface, - "description": get(self._hostvars, "mgmt_interface_description", default="oob_management"), + "description": get(self._hostvars, "mgmt_interface_description", default="OOB_MANAGEMENT"), "shutdown": False, "vrf": self.shared_utils.mgmt_interface_vrf, "ip_address": self.shared_utils.mgmt_ip, diff --git a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/ethernet_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/ethernet_interfaces.py index f8d087f0e7e..7f4486c8f09 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/ethernet_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/ethernet_interfaces.py @@ -42,9 +42,9 @@ def ethernet_interfaces(self: AvdStructuredConfigConnectedEndpoints) -> list | N non_overwritable_ethernet_interfaces = [] - for network_port in self._filtered_network_ports: + for index, network_port in enumerate(self._filtered_network_ports): connected_endpoint = { - "name": network_port.get("description"), + "name": network_port.get("endpoint"), "type": "network_port", } for ethernet_interface_name in range_expand(network_port["switch_ports"]): @@ -56,16 +56,16 @@ def ethernet_interfaces(self: AvdStructuredConfigConnectedEndpoints) -> list | N }, network_port, ) - ethernet_interface = self._get_ethernet_interface_cfg(tmp_network_port, 0, connected_endpoint) + ethernet_interface = self._get_ethernet_interface_cfg(tmp_network_port, 0, connected_endpoint, index) replace_or_append_item(ethernet_interfaces, "name", ethernet_interface) - for connected_endpoint in self._filtered_connected_endpoints: + for index, connected_endpoint in enumerate(self._filtered_connected_endpoints): for adapter in connected_endpoint["adapters"]: for node_index, node_name in enumerate(adapter["switches"]): if node_name != self.shared_utils.hostname: continue - ethernet_interface = self._get_ethernet_interface_cfg(adapter, node_index, connected_endpoint) + ethernet_interface = self._get_ethernet_interface_cfg(adapter, node_index, connected_endpoint, index) append_if_not_duplicate( list_of_dicts=non_overwritable_ethernet_interfaces, primary_key="name", @@ -84,21 +84,26 @@ def ethernet_interfaces(self: AvdStructuredConfigConnectedEndpoints) -> list | N def _update_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, adapter: dict, ethernet_interface: dict, connected_endpoint: dict) -> dict: ethernet_interface.update( { - "type": "switched", "mtu": adapter.get("mtu") if self.shared_utils.platform_settings_feature_support_per_interface_mtu else None, "l2_mtu": adapter.get("l2_mtu"), "l2_mru": adapter.get("l2_mru"), - "mode": adapter.get("mode"), - "vlans": adapter.get("vlans"), - "trunk_groups": self._get_adapter_trunk_groups(adapter, connected_endpoint), - "native_vlan_tag": adapter.get("native_vlan_tag"), - "native_vlan": adapter.get("native_vlan"), + "switchport": { + "enabled": True, + "mode": adapter.get("mode"), + "trunk": { + "allowed_vlan": adapter.get("vlans") if adapter.get("mode") == "trunk" else None, + "groups": self._get_adapter_trunk_groups(adapter, connected_endpoint), + "native_vlan_tag": adapter.get("native_vlan_tag"), + "native_vlan": adapter.get("native_vlan"), + }, + "access_vlan": adapter.get("vlans") if adapter.get("mode") in ["access", "dot1q-tunnel"] else None, + "phone": self._get_adapter_phone(adapter, connected_endpoint), + }, "spanning_tree_portfast": adapter.get("spanning_tree_portfast"), "spanning_tree_bpdufilter": adapter.get("spanning_tree_bpdufilter"), "spanning_tree_bpduguard": adapter.get("spanning_tree_bpduguard"), "storm_control": self._get_adapter_storm_control(adapter), "dot1x": adapter.get("dot1x"), - "phone": self._get_adapter_phone(adapter, connected_endpoint), "poe": self._get_adapter_poe(adapter), "ptp": self._get_adapter_ptp(adapter), "service_profile": adapter.get("qos_profile"), @@ -107,9 +112,9 @@ def _update_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, "link_tracking_groups": self._get_adapter_link_tracking_groups(adapter), }, ) - return ethernet_interface + return strip_null_from_data(ethernet_interface, strip_values_tuple=(None, "", {})) - def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, adapter: dict, node_index: int, connected_endpoint: dict) -> dict: + def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, adapter: dict, node_index: int, connected_endpoint: dict, index: int) -> dict: """Return structured_config for one ethernet_interface.""" peer = connected_endpoint["name"] endpoint_ports: list = default( @@ -136,7 +141,7 @@ def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, ada if (interface_descriptions := adapter.get("descriptions")) is not None: interface_description = interface_descriptions[node_index] else: - interface_description = adapter.get("description") + interface_description = get(adapter, "description") # Common ethernet_interface settings ethernet_interface = { @@ -151,9 +156,11 @@ def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, ada interface=adapter["switch_ports"][node_index], peer=peer, peer_interface=peer_interface, + peer_type=connected_endpoint["type"], description=interface_description, ), - ), + ) + or None, "speed": adapter.get("speed"), "shutdown": not adapter.get("enabled", True), "validate_state": None if adapter.get("validate_state", True) else False, @@ -165,7 +172,6 @@ def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, ada if (port_channel_mode := get(adapter, "port_channel.mode")) is not None: ethernet_interface.update( { - "type": "port-channel-member", "channel_group": { "id": channel_group_id, "mode": port_channel_mode, @@ -186,16 +192,9 @@ def _get_ethernet_interface_cfg(self: AvdStructuredConfigConnectedEndpoints, ada msg, ) - # Verify that the referred profile exists under port_profiles - if not (profile := self.shared_utils.get_merged_port_profile(profile_name)): - msg = ( - "The 'profile' of every port-channel lacp fallback individual setting must be defined in the 'port_profiles'. First occurrence seen" - f" of a missing profile is '{get(adapter, 'port_channel.lacp_fallback.individual.profile')}' for the connected endpoint with the" - f" name '{connected_endpoint['name']}'." - ) - raise AristaAvdMissingVariableError( - msg, - ) + profile = self.shared_utils.get_merged_port_profile( + profile_name, context=f"{connected_endpoint['type']}[{connected_endpoint['name']}].adapters[{index}].port_channel.lacp_fallback.individual" + ) ethernet_interface = self._update_ethernet_interface_cfg(profile, ethernet_interface, connected_endpoint) diff --git a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/port_channel_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/port_channel_interfaces.py index 2ddf5a4549f..b0d2a575171 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/port_channel_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/port_channel_interfaces.py @@ -80,7 +80,7 @@ def port_channel_interfaces(self: AvdStructuredConfigConnectedEndpoints) -> list continue connected_endpoint = { - "name": network_port.get("description"), + "name": network_port.get("endpoint"), "type": "network_port", } for ethernet_interface_name in range_expand(network_port["switch_ports"]): @@ -124,11 +124,17 @@ def _get_port_channel_interface_cfg( """Return structured_config for one port_channel_interface.""" peer = connected_endpoint["name"] adapter_description = get(adapter, "description") - adapter_port_channel_description = get(adapter, "port_channel.description") - port_channel_type = "routed" if get(adapter, "port_channel.subinterfaces") else "switched" + port_channel_description = get(adapter, "port_channel.description") port_channel_mode = get(adapter, "port_channel.mode") + peer_interface = get(adapter, "port_channel.endpoint_port_channel") node_index = adapter["switches"].index(self.shared_utils.hostname) + # if 'descriptions' is set, it is preferred + if (interface_descriptions := adapter.get("descriptions")) is not None: + adapter_description = interface_descriptions[node_index] + else: + adapter_description = adapter.get("description") + # Common port_channel_interface settings port_channel_interface = { "name": port_channel_interface_name, @@ -137,11 +143,13 @@ def _get_port_channel_interface_cfg( shared_utils=self.shared_utils, interface=port_channel_interface_name, peer=peer, + peer_interface=peer_interface, + peer_type=connected_endpoint["type"], description=adapter_description, - port_channel_description=adapter_port_channel_description, + port_channel_id=channel_group_id, + port_channel_description=port_channel_description, ), ), - "type": port_channel_type, "shutdown": not get(adapter, "port_channel.enabled", default=True), "mtu": adapter.get("mtu") if self.shared_utils.platform_settings_feature_support_per_interface_mtu else None, "service_profile": adapter.get("qos_profile"), @@ -154,18 +162,26 @@ def _get_port_channel_interface_cfg( "struct_cfg": get(adapter, "port_channel.structured_config"), } - # Only switches interfaces - if port_channel_type == "switched": + if get(adapter, "port_channel.subinterfaces"): + port_channel_interface.update({"switchport": {"enabled": False}}) + else: + # switchport port_channel_interface.update( { - "mode": adapter.get("mode"), + "switchport": { + "enabled": True, + "mode": adapter.get("mode"), + "trunk": { + "allowed_vlan": adapter.get("vlans") if adapter.get("mode") == "trunk" else None, + "groups": self._get_adapter_trunk_groups(adapter, connected_endpoint), + "native_vlan_tag": adapter.get("native_vlan_tag"), + "native_vlan": adapter.get("native_vlan"), + }, + "phone": self._get_adapter_phone(adapter, connected_endpoint), + "access_vlan": adapter.get("vlans") if adapter.get("mode") in ["access", "dot1q-tunnel"] else None, + }, "l2_mtu": adapter.get("l2_mtu"), "l2_mru": adapter.get("l2_mru"), - "vlans": adapter.get("vlans"), - "trunk_groups": self._get_adapter_trunk_groups(adapter, connected_endpoint), - "native_vlan_tag": adapter.get("native_vlan_tag"), - "native_vlan": adapter.get("native_vlan"), - "phone": self._get_adapter_phone(adapter, connected_endpoint), "spanning_tree_portfast": adapter.get("spanning_tree_portfast"), "spanning_tree_bpdufilter": adapter.get("spanning_tree_bpdufilter"), "spanning_tree_bpduguard": adapter.get("spanning_tree_bpduguard"), @@ -194,7 +210,7 @@ def _get_port_channel_interface_cfg( }, ) - return strip_null_from_data(port_channel_interface, strip_values_tuple=(None, "")) + return strip_null_from_data(port_channel_interface, strip_values_tuple=(None, "", {})) def _get_port_channel_subinterface_cfg( self: AvdStructuredConfigConnectedEndpoints, @@ -207,16 +223,14 @@ def _get_port_channel_subinterface_cfg( # Common port_channel_interface settings port_channel_interface = { "name": port_channel_subinterface_name, - "type": "l2dot1q", "vlan_id": subinterface.get("vlan_id", subinterface["number"]), "encapsulation_vlan": { "client": { - "dot1q": { - "vlan": get(subinterface, "encapsulation_vlan.client_dot1q", default=subinterface["number"]), - }, + "encapsulation": "dot1q", + "vlan": get(subinterface, "encapsulation_vlan.client_dot1q", default=subinterface["number"]), }, "network": { - "client": True, + "encapsulation": "client", }, }, } diff --git a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/utils.py b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/utils.py index 29124c9fe02..22654b41fb8 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/utils.py +++ b/python-avd/pyavd/_eos_designs/structured_config/connected_endpoints/utils.py @@ -38,7 +38,9 @@ def _filtered_connected_endpoints(self: AvdStructuredConfigConnectedEndpoints) - filtered_adapters = [] for adapter_index, adapter in enumerate(connected_endpoint["adapters"]): - adapter_settings = self.shared_utils.get_merged_adapter_settings(adapter) + adapter_settings = self.shared_utils.get_merged_adapter_settings( + adapter, context=f"{connected_endpoints_key['key']}[{connected_endpoint['name']}].adapters[{adapter_index}]" + ) if self.shared_utils.hostname not in adapter_settings.get("switches", []): continue @@ -71,8 +73,8 @@ def _filtered_connected_endpoints(self: AvdStructuredConfigConnectedEndpoints) - def _filtered_network_ports(self: AvdStructuredConfigConnectedEndpoints) -> list: """Return list of endpoints defined under "network_ports" which are connected to this switch.""" filtered_network_ports = [] - for network_port in get(self._hostvars, "network_ports", default=[]): - network_port_settings = self.shared_utils.get_merged_adapter_settings(network_port) + for index, network_port in enumerate(get(self._hostvars, "network_ports", default=[])): + network_port_settings = self.shared_utils.get_merged_adapter_settings(network_port, context=f"network_ports[{index}]") if not self._match_regexes(network_port_settings.get("switches"), self.shared_utils.hostname): continue diff --git a/python-avd/pyavd/_eos_designs/structured_config/core_interfaces_and_l3_edge/utils.py b/python-avd/pyavd/_eos_designs/structured_config/core_interfaces_and_l3_edge/utils.py index 1ebc3cd6a74..08fbf08d6f7 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/core_interfaces_and_l3_edge/utils.py +++ b/python-avd/pyavd/_eos_designs/structured_config/core_interfaces_and_l3_edge/utils.py @@ -216,7 +216,7 @@ def _get_common_interface_cfg(self: AvdStructuredConfigCoreInterfacesAndL3Edge, "peer_interface": peer_interface, "peer_type": p2p_link["data"]["peer_type"], "description": get(p2p_link, "data.description", default=default_description), - "type": "routed", + "switchport": {"enabled": False}, "shutdown": False, "mtu": p2p_link.get("mtu", self.shared_utils.p2p_uplinks_mtu) if self.shared_utils.platform_settings_feature_support_per_interface_mtu else None, "service_profile": p2p_link.get("qos_profile", self.shared_utils.p2p_uplinks_qos_profile), @@ -310,15 +310,12 @@ def _get_port_channel_member_cfg(self: AvdStructuredConfigCoreInterfacesAndL3Edg Return partial structured_config for one p2p_link. Covers config for ethernet interfaces that are port-channel members. - - TODO: Change description for members to be the physical peer interface instead of port-channel """ peer = p2p_link["data"]["peer"] peer_interface = member["peer_interface"] default_description = f"P2P_LINK_TO_{peer}_{peer_interface}" return { "name": member["interface"], - "type": "port-channel-member", "peer": peer, "peer_interface": peer_interface, "peer_type": p2p_link["data"]["peer_type"], diff --git a/python-avd/pyavd/_eos_designs/structured_config/flows/__init__.py b/python-avd/pyavd/_eos_designs/structured_config/flows/__init__.py index 3b2ad62e422..0877130df95 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/flows/__init__.py +++ b/python-avd/pyavd/_eos_designs/structured_config/flows/__init__.py @@ -37,9 +37,8 @@ def sflow(self) -> dict | None: destinations = get(self._hostvars, "sflow_settings.destinations") if destinations is None: - # TODO: AVD5.0.0 raise an error if sflow is enabled on an interface but there are no destinations configured. - # This cannot be implemented today since it would be breaking for already released support for sflow on interfaces. - return None + msg = "`sflow_settings.destinations` is required to configure `sflow`." + raise AristaAvdMissingVariableError(msg) sflow_settings_vrfs = get(self._hostvars, "sflow_settings.vrfs", default=[]) diff --git a/python-avd/pyavd/_eos_designs/structured_config/mlag/__init__.py b/python-avd/pyavd/_eos_designs/structured_config/mlag/__init__.py index c7be0da8278..cd2f0669e11 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/mlag/__init__.py +++ b/python-avd/pyavd/_eos_designs/structured_config/mlag/__init__.py @@ -6,7 +6,7 @@ from functools import cached_property from pyavd._eos_designs.avdfacts import AvdFacts -from pyavd._utils import default, get, strip_empties_from_dict +from pyavd._utils import AvdStringFormatter, default, get, strip_empties_from_dict from pyavd.api.interface_descriptions import InterfaceDescriptionData from pyavd.j2filters import list_compress @@ -37,12 +37,14 @@ def spanning_tree(self) -> dict: @cached_property def vlans(self) -> list: vlans = [] - if self.shared_utils.mlag_peer_l3_vlan is not None: + if self.shared_utils.mlag_peer_l3_vlan is not None and self.shared_utils.underlay_routing_protocol != "none": vlans.append( { "id": self.shared_utils.mlag_peer_l3_vlan, "tenant": "system", - "name": "LEAF_PEER_L3", + "name": AvdStringFormatter().format( + self.shared_utils.mlag_peer_l3_vlan_name, mlag_peer=self.shared_utils.mlag_peer, mlag_peer_l3_vlan=self.shared_utils.mlag_peer_l3_vlan + ), "trunk_groups": [self._trunk_groups_mlag_l3_name], }, ) @@ -51,7 +53,9 @@ def vlans(self) -> list: { "id": self.shared_utils.mlag_peer_vlan, "tenant": "system", - "name": "MLAG_PEER", + "name": AvdStringFormatter().format( + self.shared_utils.mlag_peer_vlan_name, mlag_peer=self.shared_utils.mlag_peer, mlag_peer_vlan=self.shared_utils.mlag_peer_vlan + ), "trunk_groups": [self._trunk_groups_mlag_name], }, ) @@ -62,14 +66,16 @@ def vlan_interfaces(self) -> list | None: """ Return list with VLAN Interfaces used for MLAG. - May return both the main MLAG VLAN as well as a dedicated L3 VLAN + May return both the main MLAG VLAN as well as a dedicated L3 VLAN if we have an underlay routing protocol. Can also combine L3 configuration on the main MLAG VLAN """ # Create Main MLAG VLAN Interface main_vlan_interface_name = f"Vlan{self.shared_utils.mlag_peer_vlan}" main_vlan_interface = { "name": main_vlan_interface_name, - "description": "MLAG_PEER", + "description": self.shared_utils.interface_descriptions.mlag_peer_svi( + InterfaceDescriptionData(shared_utils=self.shared_utils, interface=main_vlan_interface_name) + ), "shutdown": False, "no_autostate": True, "struct_cfg": self.shared_utils.mlag_peer_vlan_structured_config, @@ -80,7 +86,7 @@ def vlan_interfaces(self) -> list | None: main_vlan_interface["ipv6_address"] = f"{self.shared_utils.mlag_ip}/{self.shared_utils.fabric_ip_addressing_mlag_ipv6_prefix_length}" else: main_vlan_interface["ip_address"] = f"{self.shared_utils.mlag_ip}/{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}" - if not self.shared_utils.mlag_l3: + if not self.shared_utils.mlag_l3 or self.shared_utils.underlay_routing_protocol == "none": return [strip_empties_from_dict(main_vlan_interface)] # Create L3 data which will go on either a dedicated l3 vlan or the main mlag vlan @@ -124,7 +130,9 @@ def vlan_interfaces(self) -> list | None: l3_vlan_interface_name = f"Vlan{self.shared_utils.mlag_peer_l3_vlan}" l3_vlan_interface = { "name": l3_vlan_interface_name, - "description": "MLAG_PEER_L3_PEERING", + "description": self.shared_utils.interface_descriptions.mlag_peer_l3_svi( + InterfaceDescriptionData(shared_utils=self.shared_utils, interface=l3_vlan_interface_name) + ), "shutdown": False, "mtu": self.shared_utils.p2p_uplinks_mtu, } @@ -145,25 +153,32 @@ def port_channel_interfaces(self) -> list: port_channel_interface = { "name": port_channel_interface_name, "description": self.shared_utils.interface_descriptions.mlag_port_channel_interface( - InterfaceDescriptionData(shared_utils=self.shared_utils, interface=port_channel_interface_name), + InterfaceDescriptionData( + shared_utils=self.shared_utils, + interface=port_channel_interface_name, + peer_interface=f"Port-Channel{self.shared_utils.mlag_peer_port_channel_id}", + # The description class has @property methods for other mlag related facts. + ), ), - "type": "switched", + "switchport": { + "enabled": True, + "mode": "trunk", + "trunk": { + "groups": [self._trunk_groups_mlag_name], + "allowed_vlan": get(self.shared_utils.switch_data_combined, "mlag_peer_link_allowed_vlans"), + }, + }, "shutdown": False, - "vlans": get(self.shared_utils.switch_data_combined, "mlag_peer_link_allowed_vlans"), - "mode": "trunk", "service_profile": self.shared_utils.p2p_uplinks_qos_profile, - "trunk_groups": [self._trunk_groups_mlag_name], "struct_cfg": get(self.shared_utils.switch_data_combined, "mlag_port_channel_structured_config"), "flow_tracker": self.shared_utils.get_flow_tracker(None, "mlag_interfaces"), } if self.shared_utils.mlag_l3 is True and self._trunk_groups_mlag_l3_name != self._trunk_groups_mlag_name: - # Add LEAF_PEER_L3 even if we reuse the MLAG trunk group for underlay peering + # Add mlag_l3 trunk group even if we reuse the MLAG trunk group for underlay peering # since this trunk group is also used for overlay iBGP peerings # except in the case where the same trunk group name is defined. - port_channel_interface["trunk_groups"].append(self._trunk_groups_mlag_l3_name) - # Retain legacy order - port_channel_interface["trunk_groups"].reverse() + port_channel_interface["switchport"]["trunk"]["groups"].append(self._trunk_groups_mlag_l3_name) if (self.shared_utils.fabric_sflow_mlag_interfaces) is not None: port_channel_interface["sflow"] = {"enable": self.shared_utils.fabric_sflow_mlag_interfaces} @@ -189,16 +204,20 @@ def ethernet_interfaces(self) -> list: return None ethernet_interfaces = [] - for mlag_interface in mlag_interfaces: + for index, mlag_interface in enumerate(mlag_interfaces): ethernet_interface = { "name": mlag_interface, "peer": self.shared_utils.mlag_peer, "peer_interface": mlag_interface, "peer_type": "mlag_peer", "description": self.shared_utils.interface_descriptions.mlag_ethernet_interface( - InterfaceDescriptionData(shared_utils=self.shared_utils, interface=mlag_interface, peer_interface=mlag_interface), + InterfaceDescriptionData( + shared_utils=self.shared_utils, + interface=mlag_interface, + peer_interface=self.shared_utils.mlag_peer_interfaces[index], + # The description class has @property methods for other mlag related facts. + ), ), - "type": "port-channel-member", "shutdown": False, "channel_group": { "id": self.shared_utils.mlag_port_channel_id, @@ -207,7 +226,9 @@ def ethernet_interfaces(self) -> list: "speed": self.shared_utils.mlag_interfaces_speed, } if self.shared_utils.get_mlag_peer_fact("inband_ztp", required=False) is True: - ethernet_interface.update({"mode": "access", "vlans": self.shared_utils.get_mlag_peer_fact("inband_ztp_vlan")}) + ethernet_interface.update( + {"switchport": {"enabled": True, "mode": "access", "access_vlan": self.shared_utils.get_mlag_peer_fact("inband_ztp_vlan")}} + ) ethernet_interfaces.append(strip_empties_from_dict(ethernet_interface)) return ethernet_interfaces @@ -281,17 +302,23 @@ def router_bgp(self) -> dict | None: peer_group_name = self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["name"] router_bgp = self._router_bgp_mlag_peer_group() + vlan = default(self.shared_utils.mlag_peer_l3_vlan, self.shared_utils.mlag_peer_vlan) + interface_name = f"Vlan{vlan}" + # Underlay MLAG peering if self.shared_utils.underlay_rfc5549: - vlan = default(self.shared_utils.mlag_peer_l3_vlan, self.shared_utils.mlag_peer_vlan) - neighbor_interface_name = f"Vlan{vlan}" router_bgp["neighbor_interfaces"] = [ { - "name": neighbor_interface_name, + "name": interface_name, "peer_group": peer_group_name, "peer": self.shared_utils.mlag_peer, "remote_as": self.shared_utils.bgp_as, - "description": self.shared_utils.mlag_peer, + "description": AvdStringFormatter().format( + self.shared_utils.mlag_bgp_peer_description, + mlag_peer=self.shared_utils.mlag_peer, + interface=interface_name, + peer_interface=interface_name, + ), }, ] @@ -302,7 +329,12 @@ def router_bgp(self) -> dict | None: "ip_address": neighbor_ip, "peer_group": peer_group_name, "peer": self.shared_utils.mlag_peer, - "description": self.shared_utils.mlag_peer, + "description": AvdStringFormatter().format( + self.shared_utils.mlag_bgp_peer_description, + mlag_peer=self.shared_utils.mlag_peer, + interface=interface_name, + peer_interface=interface_name, + ), }, ] @@ -321,7 +353,7 @@ def _router_bgp_mlag_peer_group(self) -> dict: "type": "ipv4", "remote_as": self.shared_utils.bgp_as, "next_hop_self": True, - "description": self.shared_utils.mlag_peer, + "description": AvdStringFormatter().format(self.shared_utils.mlag_bgp_peer_group_description, mlag_peer=self.shared_utils.mlag_peer), "password": self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["password"], "bfd": self.shared_utils.bgp_peer_groups["ipv4_underlay_peers"]["bfd"], "maximum_routes": 12000, diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/dps_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/dps_interfaces.py index 0c3d4fa129f..ce85f42b094 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/dps_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/dps_interfaces.py @@ -33,7 +33,7 @@ def dps_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None: "name": "Dps1", "description": "DPS Interface", # Recommended MTU value to avoid double fragmentation in certain cases - "mtu": 9214, + "mtu": 9194, } if self.shared_utils.vtep_loopback.lower().startswith("dps"): diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/ethernet_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/ethernet_interfaces.py index 32a04eeb9f1..1af65d58d07 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/ethernet_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/ethernet_interfaces.py @@ -77,6 +77,9 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None "flow_tracker": self.shared_utils.get_flow_tracker(l3_interface, "l3_interfaces"), } + if self.shared_utils.fabric_sflow_l3_interfaces is not None: + interface["sflow"] = {"enable": self.shared_utils.fabric_sflow_l3_interfaces} + if self._l3_interface_acls is not None: interface.update( { @@ -90,15 +93,13 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None parent_interface_name, subif_id = interface_name.split(".", maxsplit=1) subif_parent_interface_names.add(parent_interface_name) - interface["type"] = "l3dot1q" encapsulation_dot1q_vlans = l3_interface.get("encapsulation_dot1q_vlan", []) if len(encapsulation_dot1q_vlans) > node_index: - interface["encapsulation_dot1q_vlan"] = encapsulation_dot1q_vlans[node_index] + interface["encapsulation_dot1q"] = {"vlan": encapsulation_dot1q_vlans[node_index]} else: - interface["encapsulation_dot1q_vlan"] = int(subif_id) - + interface["encapsulation_dot1q"] = {"vlan": int(subif_id)} else: - interface["type"] = "routed" + interface.update({"switchport": {"enabled": False}}) if vrf["name"] != "default": interface["vrf"] = vrf["name"] @@ -134,10 +135,17 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None if get(l3_interface, "pim.enabled"): if not vrf.get("_evpn_l3_multicast_enabled"): - msg = ( - f"'pim: enabled' set on l3_interface '{interface_name}' on '{self.shared_utils.hostname}' requires evpn_l3_multicast:" - f" enabled: true under VRF '{vrf['name']}' or Tenant '{tenant['name']}'" - ) + # Possibly the key was not set because `evpn_multicast` is not set to `true`. + if not self.shared_utils.evpn_multicast: + msg = ( + f"'pim: enabled' set on l3_interface '{interface_name}' on '{self.shared_utils.hostname}' requires " + "'evpn_multicast: true' at the fabric level" + ) + else: + msg = ( + f"'pim: enabled' set on l3_interface '{interface_name}' on '{self.shared_utils.hostname}' requires " + f"'evpn_l3_multicast.enabled: true' under VRF '{vrf['name']}' or Tenant '{tenant['name']}'" + ) raise AristaAvdError( msg, ) @@ -185,7 +193,6 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None channel_group_id = int("".join(re.findall(r"\d", first_interface_name))) ethernet_interface = { "name": interface_name, - "type": "port-channel-member", "peer_type": "point_to_point_service", "shutdown": False, "channel_group": { @@ -212,16 +219,14 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None subif_name = f"{interface_name}.{subif['number']}" ethernet_interface = { "name": subif_name, - "type": "l2dot1q", "peer_type": "point_to_point_service", "encapsulation_vlan": { "client": { - "dot1q": { - "vlan": subif["number"], - }, + "encapsulation": "dot1q", + "vlan": subif["number"], }, "network": { - "client": True, + "encapsulation": "client", }, }, "shutdown": False, @@ -239,7 +244,7 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None else: interface = { "name": interface_name, - "type": "routed", + "switchport": {"enabled": False}, "peer_type": "point_to_point_service", "shutdown": False, } @@ -263,7 +268,7 @@ def ethernet_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None ethernet_interfaces.extend( { "name": interface_name, - "type": "routed", + "switchport": {"enabled": False}, "peer_type": "l3_interface", "shutdown": False, } diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/ip_igmp_snooping.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/ip_igmp_snooping.py index adf8b8eec0d..a0aaa6c3465 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/ip_igmp_snooping.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/ip_igmp_snooping.py @@ -100,18 +100,17 @@ def _ip_igmp_snooping_vlan(self: AvdStructuredConfigNetworkServices, vlan: dict, if igmp_snooping_querier_enabled is not None: ip_igmp_snooping_vlan["querier"] = {"enabled": igmp_snooping_querier_enabled} - # TODO: The if below should be uncommented when we have settled the behavioral change - # if svi_igmp_snooping_querier_enabled is True: - address = default(igmp_snooping_querier.get("source_address"), tenant_igmp_snooping_querier.get("source_address"), self.shared_utils.router_id) - if address is not None: - ip_igmp_snooping_vlan["querier"]["address"] = address - - version = default( - igmp_snooping_querier.get("version"), - tenant_igmp_snooping_querier.get("version"), - ) - if version is not None: - ip_igmp_snooping_vlan["querier"]["version"] = version + if igmp_snooping_querier_enabled is True: + address = default(igmp_snooping_querier.get("source_address"), tenant_igmp_snooping_querier.get("source_address"), self.shared_utils.router_id) + if address is not None: + ip_igmp_snooping_vlan["querier"]["address"] = address + + version = default( + igmp_snooping_querier.get("version"), + tenant_igmp_snooping_querier.get("version"), + ) + if version is not None: + ip_igmp_snooping_vlan["querier"]["version"] = version # IGMP snooping fast-leave feature is enabled only when evpn_l2_multicast is enabled if evpn_l2_multicast_enabled is True: diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/port_channel_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/port_channel_interfaces.py index de4323c7a83..458acc5f53d 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/port_channel_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/port_channel_interfaces.py @@ -59,7 +59,7 @@ def port_channel_interfaces(self: AvdStructuredConfigNetworkServices) -> list | # This is a subinterface so we need to ensure that the parent is created parent_interface = { "name": interface_name, - "type": "routed", + "switchport": {"enabled": False}, "peer_type": "system", "shutdown": False, } @@ -82,16 +82,14 @@ def port_channel_interfaces(self: AvdStructuredConfigNetworkServices) -> list | port_channel_interface = { "name": subif_name, - "type": "l2dot1q", "peer_type": "point_to_point_service", "encapsulation_vlan": { "client": { - "dot1q": { - "vlan": subif["number"], - }, + "encapsulation": "dot1q", + "vlan": subif["number"], }, "network": { - "client": True, + "encapsulation": "client", }, }, "shutdown": False, @@ -108,7 +106,7 @@ def port_channel_interfaces(self: AvdStructuredConfigNetworkServices) -> list | else: interface = { "name": interface_name, - "type": "routed", + "switchport": {"enabled": False}, "peer_type": "point_to_point_service", "shutdown": False, } diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/prefix_lists.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/prefix_lists.py index a4bf84e500a..fdaabb2f6c2 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/prefix_lists.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/prefix_lists.py @@ -85,7 +85,7 @@ def _mlag_ibgp_peering_subnets_without_redistribution(self: AvdStructuredConfigN # By default the BGP peering is redistributed, so we only need the prefix-list for the false case. continue - if (mlag_ip_address := self._get_vlan_interface_config_for_mlag_peering(vrf).get("ip_address")) is None: + if (mlag_ip_address := self._get_vlan_ip_config_for_mlag_peering(vrf).get("ip_address")) is None: # No MLAG prefix for this VRF (could be RFC5549) continue diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_bgp.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_bgp.py index e545deda6c3..18101c777ee 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_bgp.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_bgp.py @@ -10,7 +10,7 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdMissingVariableError -from pyavd._utils import append_if_not_duplicate, default, get, get_item, merge, strip_empties_from_dict +from pyavd._utils import AvdStringFormatter, append_if_not_duplicate, default, get, get_item, merge, strip_empties_from_dict from pyavd.j2filters import list_compress, natural_sort from .utils import UtilsMixin @@ -40,14 +40,21 @@ def router_bgp(self: AvdStructuredConfigNetworkServices) -> dict | None: tenant_svis_l2vlans_dict = self._router_bgp_sorted_vlans_and_svis_lists() - router_bgp = { - **self._router_bgp_peer_groups(), - "vrfs": self._router_bgp_vrfs, - "vlans": self._router_bgp_vlans(tenant_svis_l2vlans_dict), - "vlan_aware_bundles": self._router_bgp_vlan_aware_bundles(tenant_svis_l2vlans_dict), - "redistribute_routes": self._router_bgp_redistribute_routes, - "vpws": self._router_bgp_vpws, - } + router_bgp = {} + merge( + router_bgp, + self._router_bgp_peer_groups(), + self._router_bgp_vrfs, + # stripping empties here to avoid overwriting keys with None values. + strip_empties_from_dict( + { + "vlans": self._router_bgp_vlans(tenant_svis_l2vlans_dict), + "vlan_aware_bundles": self._router_bgp_vlan_aware_bundles(tenant_svis_l2vlans_dict), + "redistribute_routes": self._router_bgp_redistribute_routes, + "vpws": self._router_bgp_vpws, + } + ), + ) # Configure MLAG iBGP peer-group if needed if self._configure_bgp_mlag_peer_group: merge(router_bgp, self._router_bgp_mlag_peer_group()) @@ -125,59 +132,75 @@ def _router_bgp_peer_groups(self: AvdStructuredConfigNetworkServices) -> dict: }, ) - if router_bgp["peer_groups"]: - return router_bgp - - return {} + return strip_empties_from_dict(router_bgp) @cached_property - def _router_bgp_vrfs(self: AvdStructuredConfigNetworkServices) -> list | None: + def _router_bgp_vrfs(self: AvdStructuredConfigNetworkServices) -> dict: """ - Return structured config for router_bgp.vrfs. + Return partial structured config for router_bgp. - TODO: Optimize this to allow bgp VRF config without overlays (vtep or mpls) + Covers these areas: + - vrfs for all VRFs. + - neighbors and address_family_ipv4/6 for VRF default. """ - if not self.shared_utils.overlay_vtep and not self.shared_utils.overlay_ler and not self.shared_utils.new_network_services_bgp_vrf_config: - return None - if not self.shared_utils.network_services_l3: - return None + return {} - vrfs = [] + router_bgp = {"vrfs": []} for tenant in self.shared_utils.filtered_tenants: for vrf in tenant["vrfs"]: - vrf_name = vrf["name"] + if not self.shared_utils.bgp_enabled_for_vrf(vrf): + continue - bgp_vrf = { - "name": vrf_name, - # Adding router_id here to avoid reordering structured config for all hosts. TODO: Remove router_id. - "router_id": None, - "eos_cli": get(vrf, "bgp.raw_eos_cli"), - "struct_cfg": get(vrf, "bgp.structured_config"), - } + vrf_name = vrf["name"] + bgp_vrf = strip_empties_from_dict( + { + "eos_cli": get(vrf, "bgp.raw_eos_cli"), + "struct_cfg": get(vrf, "bgp.structured_config"), + } + ) if vrf_address_families := [af for af in vrf.get("address_families", ["evpn"]) if af in self.shared_utils.overlay_address_families]: - # For EVPN configs get evpn keys and continue after the elif block below. + # The called function in-place updates the bgp_vrf dict. self._update_router_bgp_vrf_evpn_or_mpls_cfg(bgp_vrf, vrf, vrf_address_families) - elif self.shared_utils.new_network_services_bgp_vrf_config is False: - # To be non-breaking we only support wide BGP configs when the knob - # `new_network_services_bgp_vrf_config` is set to True. The default is False. - # TODO: AVD 5.0 make True the default behavior. - continue if vrf_name != "default": + # Non-default VRF bgp_vrf |= { "router_id": self.shared_utils.router_id, "redistribute_routes": [{"source_protocol": "connected"}], } - bgp_vrf_redistribute_static = vrf.get("redistribute_static") - if bgp_vrf_redistribute_static is True or (vrf["static_routes"] and bgp_vrf_redistribute_static is not False): - bgp_vrf.setdefault("redistribute_routes", []).append({"source_protocol": "static"}) + # Redistribution of static routes for VRF default are handled elsewhere + # since there is a choice between redistributing to underlay or overlay. + if (bgp_vrf_redistribute_static := vrf.get("redistribute_static")) is True or ( + vrf["static_routes"] and bgp_vrf_redistribute_static is not False + ): + bgp_vrf["redistribute_routes"].append({"source_protocol": "static"}) - # MLAG IBGP Peering VLANs per VRF (except VRF default) - if (vlan_id := self._mlag_ibgp_peering_vlan_vrf(vrf, tenant)) is not None: - self._update_router_bgp_vrf_mlag_neighbor_cfg(bgp_vrf, vrf, tenant, vlan_id) + else: + # VRF default + if bgp_vrf: + # RD/RT and/or eos_cli/struct_cfg which should go under the vrf default context. + # Any peers added later will be put directly under router_bgp + append_if_not_duplicate( + list_of_dicts=router_bgp["vrfs"], + primary_key="name", + new_dict={"name": vrf_name, **bgp_vrf}, + context="BGP VRFs defined under network services", + context_keys=["name"], + ) + # Resetting bgp_vrf so we only add global keys if there are any neighbors for VRF default + bgp_vrf = {} + + if self.shared_utils.underlay_routing_protocol == "none": + # We need to add redistribute connected for the default VRF when underlay_routing_protocol is "none" + bgp_vrf["redistribute_routes"] = [{"source_protocol": "connected"}] + + # MLAG IBGP Peering VLANs per VRF + # Will only be configured for VRF default if underlay_routing_protocol == "none". + if (vlan_id := self._mlag_ibgp_peering_vlan_vrf(vrf, tenant)) is not None: + self._update_router_bgp_vrf_mlag_neighbor_cfg(bgp_vrf, vrf, tenant, vlan_id) for bgp_peer in vrf["bgp_peers"]: # Below we pop various keys that are not supported by the eos_cli_config_gen schema. @@ -237,25 +260,26 @@ def _router_bgp_vrfs(self: AvdStructuredConfigNetworkServices) -> list | None: bgp_vrf = strip_empties_from_dict(bgp_vrf) # Skip adding the VRF if we have no config. - if bgp_vrf == {"name": vrf_name}: + if not bgp_vrf: continue - append_if_not_duplicate( - list_of_dicts=vrfs, - primary_key="name", - new_dict=bgp_vrf, - context="BGP VRFs defined under network services", - context_keys=["name"], - ) - - return vrfs or None + if vrf_name == "default": + # VRF default is added directly under router_bgp + router_bgp.update(bgp_vrf) + else: + append_if_not_duplicate( + list_of_dicts=router_bgp["vrfs"], + primary_key="name", + new_dict={"name": vrf_name, **bgp_vrf}, + context="BGP VRFs defined under network services", + context_keys=["name"], + ) + return strip_empties_from_dict(router_bgp) def _update_router_bgp_vrf_evpn_or_mpls_cfg(self: AvdStructuredConfigNetworkServices, bgp_vrf: dict, vrf: dict, vrf_address_families: list) -> None: """In-place update EVPN/MPLS part of structured config for *one* VRF under router_bgp.vrfs.""" vrf_name = vrf["name"] - bgp_vrf["rd"] = self.get_vrf_rd(vrf) - vrf_rt = self.get_vrf_rt(vrf) route_targets = {"import": [], "export": []} @@ -300,14 +324,19 @@ def _update_router_bgp_vrf_mlag_neighbor_cfg(self: AvdStructuredConfigNetworkSer if not self._mlag_ibgp_peering_redistribute(vrf, tenant): bgp_vrf["redistribute_routes"][0]["route_map"] = "RM-CONN-2-BGP-VRFS" + interface_name = f"Vlan{vlan_id}" if self.shared_utils.underlay_rfc5549 and self.shared_utils.overlay_mlag_rfc5549: - interface_name = f"Vlan{vlan_id}" bgp_vrf.setdefault("neighbor_interfaces", []).append( { "name": interface_name, "peer_group": self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["name"], "remote_as": self.shared_utils.bgp_as, - "description": self.shared_utils.mlag_peer, + "description": AvdStringFormatter().format( + self.shared_utils.mlag_bgp_peer_description, + mlag_peer=self.shared_utils.mlag_peer, + interface=interface_name, + peer_interface=interface_name, + ), }, ) else: @@ -322,6 +351,12 @@ def _update_router_bgp_vrf_mlag_neighbor_cfg(self: AvdStructuredConfigNetworkSer { "ip_address": ip_address, "peer_group": self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["name"], + "description": AvdStringFormatter().format( + self.shared_utils.mlag_bgp_peer_description, + **strip_empties_from_dict( + {"mlag_peer": self.shared_utils.mlag_peer, "interface": interface_name, "peer_interface": interface_name, "vrf": vrf["name"]} + ), + ), }, ) if self.shared_utils.underlay_rfc5549: @@ -329,9 +364,7 @@ def _update_router_bgp_vrf_mlag_neighbor_cfg(self: AvdStructuredConfigNetworkSer { "ip_address": ip_address, "next_hop": { - "address_family_ipv6": { - "enabled": False, - }, + "address_family_ipv6": {"enabled": False}, }, }, ) @@ -420,7 +453,6 @@ def _router_bgp_vlans(self: AvdStructuredConfigNetworkServices, tenant_svis_l2vl context_keys=["id", "tenant"], ignore_keys={"tenant"}, ) - return vlans or None def _router_bgp_vlans_vlan(self: AvdStructuredConfigNetworkServices, vlan: dict, tenant: dict, vrf: dict) -> dict | None: @@ -446,19 +478,28 @@ def _router_bgp_vlans_vlan(self: AvdStructuredConfigNetworkServices, vlan: dict, bgp_vlan["rd_evpn_domain"] = {"domain": "remote", "rd": vlan_rd} bgp_vlan["route_targets"]["import_export_evpn_domains"] = [{"domain": "remote", "route_target": vlan_rt}] - vlan_evpn_l2_multicast_enabled = default(get(vlan, "evpn_l2_multicast.enabled"), get(tenant, "evpn_l2_multicast.enabled")) + vlan_evpn_l2_multicast_enabled = ( + default(get(vlan, "evpn_l2_multicast.enabled"), get(tenant, "evpn_l2_multicast.enabled")) and self.shared_utils.evpn_multicast is True + ) if vlan_evpn_l2_multicast_enabled is True: - bgp_vlan["redistribute_routes"].append("igmp") + always_redistribute_igmp = default( + get(vlan, "evpn_l2_multicast.always_redistribute_igmp"), + get(tenant, "evpn_l2_multicast.always_redistribute_igmp"), + False, # noqa: FBT003 + ) + # For l2vlans vrf is an empty dict so this will always configure redistribute igmp + if not get(vrf, "_evpn_l3_multicast_enabled") or always_redistribute_igmp: + bgp_vlan["redistribute_routes"].append("igmp") # Strip None values from vlan before returning return {key: value for key, value in bgp_vlan.items() if value is not None} @cached_property - def _evpn_vlan_bundles(self) -> list: + def _evpn_vlan_bundles(self: AvdStructuredConfigNetworkServices) -> list: return get(self._hostvars, "evpn_vlan_bundles", default=[]) @cached_property - def _evpn_vlan_aware_bundles(self) -> bool: + def _evpn_vlan_aware_bundles(self: AvdStructuredConfigNetworkServices) -> bool: return get(self._hostvars, "evpn_vlan_aware_bundles", default=False) def _get_vlan_aware_bundle_name_tuple_for_l2vlans(self: AvdStructuredConfigNetworkServices, vlan: dict) -> tuple[str, bool] | None: @@ -609,13 +650,7 @@ def _router_bgp_vlan_aware_bundles_vrf(self: AvdStructuredConfigNetworkServices, ) def _router_bgp_vlan_aware_bundle( - self: AvdStructuredConfigNetworkServices, - name: str, - vlans: list, - rd: str, - rt: str, - evpn_l2_multi_domain: bool, - tenant: dict, + self: AvdStructuredConfigNetworkServices, name: str, vlans: list, rd: str, rt: str, evpn_l2_multi_domain: bool, tenant: dict ) -> dict | None: """ Return structured config for one vlan-aware-bundle. @@ -934,7 +969,7 @@ def _router_bgp_mlag_peer_group(self: AvdStructuredConfigNetworkServices) -> dic "type": "ipv4", "remote_as": self.shared_utils.bgp_as, "next_hop_self": True, - "description": self.shared_utils.mlag_peer, + "description": AvdStringFormatter().format(self.shared_utils.mlag_bgp_peer_group_description, mlag_peer=self.shared_utils.mlag_peer), "password": self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["password"], "maximum_routes": 12000, "send_community": "all", diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_ospf.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_ospf.py index 6a18a69cff9..8ae4b506748 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_ospf.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_ospf.py @@ -74,12 +74,12 @@ def router_ospf(self: AvdStructuredConfigNetworkServices) -> dict | None: process_redistribute = {} if get(vrf, "ospf.redistribute_bgp.enabled", default=True) is True: - process_redistribute["bgp"] = {} + process_redistribute["bgp"] = {"enabled": True} if (route_map := get(vrf, "ospf.redistribute_bgp.route_map")) is not None: process_redistribute["bgp"]["route_map"] = route_map if get(vrf, "ospf.redistribute_connected.enabled", default=False) is True: - process_redistribute["connected"] = {} + process_redistribute["connected"] = {"enabled": True} if (route_map := get(vrf, "ospf.redistribute_connected.route_map")) is not None: process_redistribute["connected"]["route_map"] = route_map @@ -99,7 +99,7 @@ def router_ospf(self: AvdStructuredConfigNetworkServices) -> dict | None: # If we have static_routes in default VRF and not EPVN, and underlay is OSPF # Then add redistribute static to the underlay OSPF process. if self._vrf_default_ipv4_static_routes["redistribute_in_underlay"] and self.shared_utils.underlay_routing_protocol in ["ospf", "ospf-ldp"]: - ospf_processes.append({"id": int(self.shared_utils.underlay_ospf_process_id), "redistribute": {"static": {}}}) + ospf_processes.append({"id": int(self.shared_utils.underlay_ospf_process_id), "redistribute": {"static": {"enabled": True}}}) if ospf_processes: return {"process_ids": ospf_processes} diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_path_selection.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_path_selection.py index 7c08ecdfaea..a4fb65343ec 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/router_path_selection.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/router_path_selection.py @@ -32,13 +32,13 @@ def router_path_selection(self: AvdStructuredConfigNetworkServices) -> dict | No } # When running CV Pathfinder, only load balance policies are configured - # for AutoVPN, need also vrfs and policies. - if self.shared_utils.wan_mode == "autovpn": + # for Legacy AutoVPN, need also vrfs and policies. + if self.shared_utils.wan_mode == "legacy-autovpn": vrfs = [{"name": vrf["name"], "path_selection_policy": vrf["policy"]} for vrf in self._filtered_wan_vrfs] router_path_selection.update( { - "policies": self._autovpn_policies(), + "policies": self._legacy_autovpn_policies(), "vrfs": vrfs, }, ) @@ -68,8 +68,8 @@ def _wan_load_balance_policies(self: AvdStructuredConfigNetworkServices) -> list return load_balance_policies - def _autovpn_policies(self: AvdStructuredConfigNetworkServices) -> list: - """Return a list of policies for AutoVPN.""" + def _legacy_autovpn_policies(self: AvdStructuredConfigNetworkServices) -> list: + """Return a list of policies for Legacy AutoVPN.""" policies = [] for policy in self._filtered_wan_policies: autovpn_policy = {"name": policy["name"], "rules": []} diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/utils.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils.py index 85db3c4ce09..67adad6a35c 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/utils.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils.py @@ -5,20 +5,20 @@ import ipaddress from functools import cached_property -from typing import TYPE_CHECKING, Literal +from typing import TYPE_CHECKING from pyavd._errors import AristaAvdError, AristaAvdMissingVariableError -from pyavd._utils import default, get, get_ip_from_ip_prefix, get_item -from pyavd._utils.password_utils.password import simple_7_encrypt -from pyavd.j2filters import natural_sort, range_expand +from pyavd._utils import default, get, get_item +from pyavd.j2filters import natural_sort +from .utils_wan import UtilsWanMixin from .utils_zscaler import UtilsZscalerMixin if TYPE_CHECKING: from . import AvdStructuredConfigNetworkServices -class UtilsMixin(UtilsZscalerMixin): +class UtilsMixin(UtilsWanMixin, UtilsZscalerMixin): """ Mixin Class with internal functions. @@ -130,13 +130,15 @@ def _mlag_ibgp_peering_enabled(self: AvdStructuredConfigNetworkServices, vrf: di """ Returns True if mlag ibgp_peering is enabled. + For VRF default we return False unless there is no underlay routing protocol. + False otherwise. """ if not self.shared_utils.mlag_l3 or not self.shared_utils.network_services_l3: return False mlag_ibgp_peering: bool = default(vrf.get("enable_mlag_ibgp_peering_vrfs"), tenant.get("enable_mlag_ibgp_peering_vrfs"), True) # noqa: FBT003 - return vrf["name"] != "default" and mlag_ibgp_peering + return (vrf["name"] != "default" or self.shared_utils.underlay_routing_protocol == "none") and mlag_ibgp_peering def _mlag_ibgp_peering_vlan_vrf(self: AvdStructuredConfigNetworkServices, vrf: dict, tenant: dict) -> int | None: """ @@ -180,10 +182,15 @@ def _configure_bgp_mlag_peer_group(self: AvdStructuredConfigNetworkServices) -> Decides if MLAG BGP peer-group should be configured. Catches cases where underlay is not BGP but we still need MLAG iBGP peering. """ - if self.shared_utils.underlay_bgp or (bgp_vrfs := self._router_bgp_vrfs) is None: + if self.shared_utils.underlay_bgp: return False - for bgp_vrf in bgp_vrfs: + # Checking neighbors directly under BGP to cover VRF default case. + for neighbor_settings in get(self._router_bgp_vrfs, "neighbors", default=[]): + if neighbor_settings.get("peer_group") == self.shared_utils.bgp_peer_groups["mlag_ipv4_underlay_peer"]["name"]: + return True + + for bgp_vrf in get(self._router_bgp_vrfs, "vrfs", default=[]): if "neighbors" not in bgp_vrf: continue for neighbor_settings in bgp_vrf["neighbors"]: @@ -191,792 +198,3 @@ def _configure_bgp_mlag_peer_group(self: AvdStructuredConfigNetworkServices) -> return True return False - - @cached_property - def _filtered_wan_vrfs(self: AvdStructuredConfigNetworkServices) -> list: - """Loop through all the VRFs defined under `wan_virtual_topologies.vrfs` and returns a list of mode.""" - wan_vrfs = [] - - for vrf in get(self._hostvars, "wan_virtual_topologies.vrfs", []): - vrf_name = vrf["name"] - if vrf_name in self.shared_utils.vrfs or self.shared_utils.is_wan_server: - wan_vrf = { - "name": vrf_name, - "policy": get(vrf, "policy", default=self._default_wan_policy_name), - "wan_vni": get( - vrf, - "wan_vni", - required=True, - org_key=f"Required `wan_vni` is missing for VRF {vrf_name} under `wan_virtual_topologies.vrfs`.", - ), - } - - wan_vrfs.append(wan_vrf) - - # Check that default is in the list as it is required everywhere - if (vrf_default := get_item(wan_vrfs, "name", "default")) is None: - wan_vrfs.append( - { - "name": "default", - "policy": f"{self._default_wan_policy_name}-WITH-CP", - "wan_vni": 1, - "original_policy": self._default_wan_policy_name, - }, - ) - else: - vrf_default["original_policy"] = vrf_default["policy"] - vrf_default["policy"] = f"{vrf_default['policy']}-WITH-CP" - - return wan_vrfs - - @cached_property - def _wan_virtual_topologies_policies(self: AvdStructuredConfigNetworkServices) -> list: - """This function parses the input data and append the default-policy if not already present.""" - policies = get(self._hostvars, "wan_virtual_topologies.policies", default=[]) - # If not overwritten, inject the default policy in case it is required for one of the VRFs - if get_item(policies, "name", self._default_wan_policy_name) is None: - policies.append(self._default_wan_policy) - - return policies - - @cached_property - def _filtered_wan_policies(self: AvdStructuredConfigNetworkServices) -> list: - """ - Loop through all the VRFs defined under `wan_virtual_topologies.vrfs` and returns a list of policies to configure on this device. - - This returns a structure where every policy contains a list of match statement and a default_match statement if any is required by inputs. - Inside each match and default_match statetement, the fully resolved load_balancing policy is present (it guarantees that the load-balance policy - is not empty). - - The default VRF is marked as non default. - """ - # to track the names already injected - filtered_policy_names = [] - filtered_policies = [] - - for vrf in self._filtered_wan_vrfs: - # Need to handle VRF default differently and lookup for the original policy - lookup_name = get(vrf, "original_policy", default=vrf["policy"]) - vrf_policy = get_item( - self._wan_virtual_topologies_policies, - "name", - lookup_name, - required=True, - custom_error_msg=( - f"The policy {lookup_name} applied to vrf {vrf['name']} under `wan_virtual_topologies.vrfs` is not " - "defined under `wan_virtual_topologies.policies`." - ), - ).copy() - - vrf_policy["profile_prefix"] = lookup_name - - if vrf["name"] == "default": - vrf_policy["is_default"] = True - vrf_policy["name"] = f"{vrf_policy['name']}-WITH-CP" - - if vrf_policy["name"] in filtered_policy_names: - continue - - self._update_policy_match_statements(vrf_policy) - - filtered_policy_names.append(vrf_policy["name"]) - filtered_policies.append(vrf_policy) - - return filtered_policies - - def _update_policy_match_statements(self: AvdStructuredConfigNetworkServices, policy: dict) -> None: - """ - Update the policy dict with two keys: `matches` and `default_match`. - - For each match (or default_match), the load_balancing policy is resolved and if it is empty - the match statement is not included. - """ - matches = [] - - if get(policy, "is_default", default=False): - control_plane_virtual_topology = self._wan_control_plane_virtual_topology - load_balance_policy_name = self.shared_utils.generate_lb_policy_name(self._wan_control_plane_profile_name) - - if ( - load_balance_policy := self._generate_wan_load_balance_policy( - load_balance_policy_name, - control_plane_virtual_topology, - policy["name"], - ) - ) is None: - msg = "The WAN control-plane load-balance policy is empty. Make sure at least one path-group can be used in the policy" - raise AristaAvdError(msg) - matches.append( - { - "application_profile": self._wan_control_plane_application_profile_name, - "avt_profile": self._wan_control_plane_profile_name, - "internet_exit_policy_name": get(control_plane_virtual_topology, "internet_exit.policy"), - "traffic_class": get(control_plane_virtual_topology, "traffic_class"), - "dscp": get(control_plane_virtual_topology, "dscp"), - "load_balance_policy": load_balance_policy, - "id": 254, - }, - ) - - for application_virtual_topology in get(policy, "application_virtual_topologies", []): - name = get( - application_virtual_topology, - "name", - default=self._default_profile_name(policy["profile_prefix"], application_virtual_topology["application_profile"]), - ) - - load_balance_policy_name = self.shared_utils.generate_lb_policy_name(name) - context_path = ( - f"wan_virtual_topologies.policies[{policy['profile_prefix']}]." - f"application_virtual_topologies[{application_virtual_topology['application_profile']}]" - ) - load_balance_policy = self._generate_wan_load_balance_policy(load_balance_policy_name, application_virtual_topology, context_path) - if not load_balance_policy: - # Empty load balance policy so skipping - # TODO: Add "nodes" or similar under the profile and raise here - # if the node is set and there are no matching path groups. - continue - - application_profile = get(application_virtual_topology, "application_profile", required=True) - profile_id = get( - application_virtual_topology, - "id", - required=self.shared_utils.is_cv_pathfinder_router, - org_key=( - f"Missing mandatory `id` in " - f"`wan_virtual_topologies.policies[{policy['name']}].application_virtual_topologies[{application_profile}]` " - "when `wan_mode` is 'cv-pathfinder" - ), - ) - - matches.append( - { - "application_profile": application_profile, - "avt_profile": name, - "internet_exit_policy_name": get(application_virtual_topology, "internet_exit.policy"), - "traffic_class": get(application_virtual_topology, "traffic_class"), - "dscp": get(application_virtual_topology, "dscp"), - "load_balance_policy": load_balance_policy, - "id": profile_id, - }, - ) - - default_virtual_topology = get( - policy, - "default_virtual_topology", - required=True, - org_key=f"wan_virtual_topologies.policies[{policy['profile_prefix']}].default_virtual_toplogy", - ) - # Separating default_match as it is used differently - default_match = None - if not get(default_virtual_topology, "drop_unmatched", default=False): - name = get( - default_virtual_topology, - "name", - default=self._default_profile_name(policy["profile_prefix"], "DEFAULT"), - ) - context_path = f"wan_virtual_topologies.policies[{policy['profile_prefix']}].default_virtual_topology" - # Verify that path_groups are set or raise - get( - default_virtual_topology, - "path_groups", - required=True, - org_key=f"Either 'drop_unmatched' or 'path_groups' must be set under '{context_path}'.", - ) - load_balance_policy_name = self.shared_utils.generate_lb_policy_name(name) - load_balance_policy = self._generate_wan_load_balance_policy(load_balance_policy_name, default_virtual_topology, context_path) - if not load_balance_policy: - msg = ( - f"The `default_virtual_topology` path-groups configuration for `wan_virtual_toplogies.policies[{policy['name']}]` produces " - "an empty load-balancing policy. Make sure at least one path-group present on the device is allowed in the " - "`default_virtual_topology` path-groups." - ) - raise AristaAvdError( - msg, - ) - application_profile = get(default_virtual_topology, "application_profile", default="default") - - default_match = { - "application_profile": application_profile, - "avt_profile": name, - "internet_exit_policy_name": get(default_virtual_topology, "internet_exit.policy"), - "traffic_class": get(default_virtual_topology, "traffic_class"), - "dscp": get(default_virtual_topology, "dscp"), - "load_balance_policy": load_balance_policy, - "id": 1, - } - - if not matches and not default_match: - # The policy is empty but should be assigned to a VRF - msg = ( - f"The policy `wan_virtual_toplogies.policies[{policy['name']}]` cannot match any traffic but is assigned to a VRF. " - "Make sure at least one path-group present on the device is used in the policy." - ) - raise AristaAvdError( - msg, - ) - - policy["matches"] = matches - policy["default_match"] = default_match - - def _generate_wan_load_balance_policy(self: AvdStructuredConfigNetworkServices, name: str, input_dict: dict, context_path: str) -> dict | None: - """ - Generate and return a router path-selection load-balance policy. - - If HA is enabled, inject the HA path-group with priority 1. - - Attrs: - ------ - name (str): The name of the load balance policy - input_dict (dict): The dictionary containing the list of path-groups and their preference. - context_path (str): Key used for context for error messages. - """ - wan_load_balance_policy = { - "name": name, - "path_groups": [], - **get(input_dict, "constraints", default={}), - } - - if self.shared_utils.wan_mode == "cv-pathfinder": - wan_load_balance_policy["lowest_hop_count"] = get(input_dict, "lowest_hop_count") - - # An entry is composed of a list of path-groups in `names` and a `priority` - policy_entries = get(input_dict, "path_groups", []) - - for policy_entry in policy_entries: - policy_entry_priority = None - if preference := get(policy_entry, "preference"): - policy_entry_priority = self._path_group_preference_to_eos_priority(preference, f"{context_path}[{policy_entry.get('names')}]") - - for path_group_name in policy_entry.get("names"): - if (priority := policy_entry_priority) is None: - # No preference defined at the policy level, need to retrieve the default preference - wan_path_group = get_item( - self.shared_utils.wan_path_groups, - "name", - path_group_name, - required=True, - custom_error_msg=( - f"Failed to retrieve path-group {path_group_name} from `wan_path_groups` when generating load balance policy {name}. " - f"Verify the path-groups defined under {context_path}." - ), - ) - priority = self._path_group_preference_to_eos_priority(wan_path_group["default_preference"], f"wan_path_groups[{wan_path_group['name']}]") - - # Skip path-group on this device if not present on the router except for pathfinders - if self.shared_utils.is_wan_client and path_group_name not in self.shared_utils.wan_local_path_group_names: - continue - - path_group = { - "name": path_group_name, - "priority": priority if priority != 1 else None, - } - - wan_load_balance_policy["path_groups"].append(path_group) - - if len(wan_load_balance_policy["path_groups"]) == 0: - # The policy is empty - return None - - # TODO: for now adding LAN_HA only if the path-groups list is not empty - # then need to add the logic to check HA peer path-group and maybe return a policy with LAN_HA only. - if self.shared_utils.wan_ha or self.shared_utils.is_cv_pathfinder_server: - # Adding HA path-group with priority 1 - it does not count as an entry with priority 1 - wan_load_balance_policy["path_groups"].append({"name": self.shared_utils.wan_ha_path_group_name}) - - return wan_load_balance_policy - - def _path_group_preference_to_eos_priority(self: AvdStructuredConfigNetworkServices, path_group_preference: int | str, context_path: str) -> int: - """ - Convert "preferred" to 1 and "alternate" to 2. Everything else is returned as is. - - Arguments: - ---------- - path_group_preference (str|int): The value of the preference key to be converted. It must be either "preferred", "alternate" or an integer. - context_path (str): Input path context for the error message. - """ - if path_group_preference == "preferred": - return 1 - if path_group_preference == "alternate": - return 2 - - failed_conversion = False - try: - priority = int(path_group_preference) - except ValueError: - failed_conversion = True - - if failed_conversion or not 1 <= priority <= 65535: - msg = ( - f"Invalid value '{path_group_preference}' for Path-Group preference - should be either 'preferred', " - f"'alternate' or an integer[1-65535] for {context_path}." - ) - raise AristaAvdError( - msg, - ) - - return priority - - @cached_property - def _default_wan_policy_name(self: AvdStructuredConfigNetworkServices) -> str: - """TODO: make this configurable.""" - return "DEFAULT-POLICY" - - @cached_property - def _default_policy_path_group_names(self: AvdStructuredConfigNetworkServices) -> list: - """ - Return a list of path group names for the default policy. - - Return the list of path-groups to consider when generating a default policy with AVD - whether for the default policy or the special Control-plane policy. - """ - path_group_names = { - path_group["name"] for path_group in self.shared_utils.wan_path_groups if not get(path_group, "excluded_from_default_policy", default=False) - } - if not path_group_names.intersection(self.shared_utils.wan_local_path_group_names): - # No common path-group between this device local path-groups and the available path-group for the default policy - msg = ( - f"Unable to generate the default WAN policy as none of the device local path-groups {self.shared_utils.wan_local_path_group_names} " - "is eligible to be included. Make sure that at least one path-group for the device is not configured with " - "`excluded_from_default_policy: true` under `wan_path_groups`." - ) - raise AristaAvdError( - msg, - ) - return natural_sort(path_group_names) - - @cached_property - def _default_wan_policy(self: AvdStructuredConfigNetworkServices) -> dict: - """ - Returning policy containing all path groups not excluded from default policy. - - If no policy is defined for a VRF under 'wan_virtual_topologies.vrfs', a default policy named DEFAULT-POLICY is used - where all traffic is matched in the default category and distributed amongst all path-groups. - """ - return { - "name": self._default_wan_policy_name, - "default_virtual_topology": {"path_groups": [{"names": self._default_policy_path_group_names}]}, - } - - def _default_profile_name(self: AvdStructuredConfigNetworkServices, profile_name: str, application_profile: str) -> str: - """ - Helper function to consistently return the default name of a profile. - - Returns {profile_name}-{application_profile} - """ - return f"{profile_name}-{application_profile}" - - @cached_property - def _wan_control_plane_virtual_topology(self: AvdStructuredConfigNetworkServices) -> dict: - """ - Return the Control plane virtual topology or the default one. - - The default control_plane_virtual_topology, excluding path_groups with excluded_from_default_policy - """ - if (control_plane_virtual_topology := get(self._hostvars, "wan_virtual_topologies.control_plane_virtual_topology")) is None: - path_groups = self._default_policy_path_group_names - if self.shared_utils.is_wan_client: - # Filter only the path-groups connected to pathfinder - path_groups = [path_group for path_group in path_groups if path_group in self._local_path_groups_connected_to_pathfinder] - control_plane_virtual_topology = {"path_groups": [{"names": path_groups}]} - return control_plane_virtual_topology - - @cached_property - def _wan_control_plane_profile_name(self: AvdStructuredConfigNetworkServices) -> str: - """Control plane profile name.""" - vrf_default_policy_name = get(get_item(self._filtered_wan_vrfs, "name", "default"), "original_policy") - return get(self._wan_control_plane_virtual_topology, "name", default=f"{vrf_default_policy_name}-CONTROL-PLANE") - - @cached_property - def _wan_control_plane_application_profile_name(self: AvdStructuredConfigNetworkServices) -> str: - """Control plane application profile name.""" - return get(self._hostvars, "wan_virtual_topologies.control_plane_virtual_topology.application_profile", default="APP-PROFILE-CONTROL-PLANE") - - @cached_property - def _local_path_groups_connected_to_pathfinder(self: AvdStructuredConfigNetworkServices) -> list: - """Return list of names of local path_groups connected to pathfinder.""" - return [ - path_group["name"] - for path_group in self.shared_utils.wan_local_path_groups - if any(wan_interface["connected_to_pathfinder"] for wan_interface in path_group["interfaces"]) - ] - - @cached_property - def _svi_acls(self: AvdStructuredConfigNetworkServices) -> dict[str, dict[str, dict]] | None: - """ - Returns a dict of SVI ACLs. - - : { - "ipv4_acl_in": , - "ipv4_acl_out": , - } - - Only contains interfaces with ACLs and only the ACLs that are set, - so use `get(self._svi_acls, f"{interface_name}.ipv4_acl_in")` to get the value. - """ - if not self.shared_utils.network_services_l3: - return None - - svi_acls = {} - for tenant in self.shared_utils.filtered_tenants: - for vrf in tenant["vrfs"]: - for svi in vrf["svis"]: - ipv4_acl_in = get(svi, "ipv4_acl_in") - ipv4_acl_out = get(svi, "ipv4_acl_out") - if ipv4_acl_in is None and ipv4_acl_out is None: - continue - - interface_name = f"Vlan{svi['id']}" - interface_ip: str | None = svi.get("ip_address_virtual") - if interface_ip is not None and "/" in interface_ip: - interface_ip = get_ip_from_ip_prefix(interface_ip) - - if ipv4_acl_in is not None: - svi_acls.setdefault(interface_name, {})["ipv4_acl_in"] = self.shared_utils.get_ipv4_acl( - name=ipv4_acl_in, - interface_name=interface_name, - interface_ip=interface_ip, - ) - if ipv4_acl_out is not None: - svi_acls.setdefault(interface_name, {})["ipv4_acl_out"] = self.shared_utils.get_ipv4_acl( - name=ipv4_acl_out, - interface_name=interface_name, - interface_ip=interface_ip, - ) - - return svi_acls - - def get_internet_exit_nat_profile_name(self: AvdStructuredConfigNetworkServices, internet_exit_policy_type: Literal["zscaler", "direct"]) -> str: - if internet_exit_policy_type == "zscaler": - return "NAT-IE-ZSCALER" - return "NAT-IE-DIRECT" - - def get_internet_exit_nat_acl_name(self: AvdStructuredConfigNetworkServices, internet_exit_policy_type: Literal["zscaler", "direct"]) -> str: - return f"ACL-{self.get_internet_exit_nat_profile_name(internet_exit_policy_type)}" - - def get_internet_exit_nat_pool_and_profile( - self: AvdStructuredConfigNetworkServices, - internet_exit_policy_type: Literal["zscaler", "direct"], - ) -> tuple[dict | None, dict | None]: - if internet_exit_policy_type == "zscaler": - pool = { - "name": "PORT-ONLY-POOL", - "type": "port-only", - "ranges": [ - { - "first_port": 1500, - "last_port": 65535, - }, - ], - } - - profile = { - "name": self.get_internet_exit_nat_profile_name(internet_exit_policy_type), - "source": { - "dynamic": [ - { - "access_list": self.get_internet_exit_nat_acl_name(internet_exit_policy_type), - "pool_name": "PORT-ONLY-POOL", - "nat_type": "pool", - }, - ], - }, - } - return pool, profile - if internet_exit_policy_type == "direct": - profile_name = self.get_internet_exit_nat_profile_name(internet_exit_policy_type) - profile = { - "name": profile_name, - "source": { - "dynamic": [ - { - "access_list": self.get_internet_exit_nat_acl_name(internet_exit_policy_type), - "nat_type": "overload", - }, - ], - }, - } - return None, profile - return None - - @cached_property - def _filtered_internet_exit_policy_types(self: AvdStructuredConfigNetworkServices) -> list: - return sorted({internet_exit_policy["type"] for internet_exit_policy in self._filtered_internet_exit_policies}) - - @cached_property - def _l3_interface_acls(self: AvdStructuredConfigNetworkServices) -> dict | None: - """ - Returns a dict of interfaces and ACLs set on the interfaces. - - { - : { - "ipv4_acl_in": , - "ipv4_acl_out": , - } - } - Only contains interfaces with ACLs and only the ACLs that are set, - so use `get(self._l3_interface_acls, f"{interface_name}..ipv4_acl_in", separator="..")` to get the value. - """ - if not self.shared_utils.network_services_l3: - return None - - l3_interface_acls = {} - for tenant in self.shared_utils.filtered_tenants: - for vrf in tenant["vrfs"]: - for l3_interface in vrf["l3_interfaces"]: - for interface_idx, interface in enumerate(l3_interface["interfaces"]): - if l3_interface["nodes"][interface_idx] != self.shared_utils.hostname: - continue - - ipv4_acl_in = get(l3_interface, "ipv4_acl_in") - ipv4_acl_out = get(l3_interface, "ipv4_acl_out") - if ipv4_acl_in is None and ipv4_acl_out is None: - continue - interface_name = interface - interface_ip: str | None = l3_interface["ip_addresses"][interface_idx] - if interface_ip is not None: - interface_ip = get_ip_from_ip_prefix(interface_ip) - if ipv4_acl_in is not None: - l3_interface_acls.setdefault(interface_name, {})["ipv4_acl_in"] = self.shared_utils.get_ipv4_acl( - name=ipv4_acl_in, - interface_name=interface_name, - interface_ip=interface_ip, - ) - if ipv4_acl_out is not None: - l3_interface_acls.setdefault(interface_name, {})["ipv4_acl_out"] = self.shared_utils.get_ipv4_acl( - name=ipv4_acl_out, - interface_name=interface_name, - interface_ip=interface_ip, - ) - return l3_interface_acls - - @cached_property - def _filtered_internet_exit_policies(self: AvdStructuredConfigNetworkServices) -> list: - """ - Only supported for CV Pathfinder Edge routers. Returns an empty list for pathfinders. - - - Parse self._filtered_wan_policies looking to internet_exit_policies. - - Verify each internet_exit_policy is present in inputs `cv_pathfinder_internet_exit_policies`. - - get_internet_exit_connections and insert into the policy dict. - - Return the list of relevant internet_exit_policies. - """ - if not self.shared_utils.is_cv_pathfinder_client: - return [] - - internet_exit_policy_names = set() - candidate_internet_exit_policies = [] - configured_internet_exit_policies = get(self._hostvars, "cv_pathfinder_internet_exit_policies", []) - - for policy in self._filtered_wan_policies: - for match in get(policy, "matches", default=[]): - internet_exit_policy_name = match.get("internet_exit_policy_name") - if not internet_exit_policy_name or internet_exit_policy_name in internet_exit_policy_names: - continue - internet_exit_policy = get_item( - configured_internet_exit_policies, - "name", - internet_exit_policy_name, - required=True, - custom_error_msg=( - f"The internet exit policy {internet_exit_policy_name} configured under " - f"`wan_virtual_topologies.policies[name={policy['name']}].internet_exit.policy` " - "is not defined under `cv_pathfinder_internet_exit_policies`." - ), - ).copy() - internet_exit_policy_names.add(internet_exit_policy_name) - candidate_internet_exit_policies.append(internet_exit_policy) - - if (default_match := policy.get("default_match")) is not None: - internet_exit_policy_name = default_match.get("internet_exit_policy_name") - if not internet_exit_policy_name or internet_exit_policy_name in internet_exit_policy_names: - continue - internet_exit_policy = get_item( - configured_internet_exit_policies, - "name", - internet_exit_policy_name, - required=True, - custom_error_msg=( - f"The internet exit policy {internet_exit_policy_name} configured under " - f"`wan_virtual_topologies.policies[name={policy['name']}].internet_exit.policy` " - "is not defined under `cv_pathfinder_internet_exit_policies`." - ), - ).copy() - internet_exit_policy_names.add(internet_exit_policy_name) - candidate_internet_exit_policies.append(internet_exit_policy) - - if not internet_exit_policy_names: - return [] - - internet_exit_policies = [] - - for internet_exit_policy in candidate_internet_exit_policies: - internet_exit_policy["connections"] = self.get_internet_exit_connections(internet_exit_policy) - if not internet_exit_policy["connections"]: - # No local interface for this policy - # TODO: Decide if we should raise here instead - continue - internet_exit_policies.append(internet_exit_policy) - - return internet_exit_policies - - def get_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict) -> list: - """ - Return a list of connections (dicts) for the given internet_exit_policy. - - These are useful for easy creation of connectivity-monitor, service-insertion connections, exit-groups, tunnels etc. - """ - policy_name = internet_exit_policy["name"] - policy_type = internet_exit_policy["type"] - - if policy_type == "direct": - return self.get_direct_internet_exit_connections(internet_exit_policy) - - if policy_type == "zscaler": - return self.get_zscaler_internet_exit_connections(internet_exit_policy) - - msg = f"Unsupported type '{policy_type}' found in cv_pathfinder_internet_exit[name={policy_name}]." - raise AristaAvdError(msg) - - def get_direct_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict) -> list: - """Return a list of connections (dicts) for the given internet_exit_policy of type direct.""" - if get(internet_exit_policy, "type") != "direct": - return [] - - connections = [] - - # Check if the policy has any local interface - for wan_interface in self.shared_utils.wan_interfaces: - wan_interface_internet_exit_policies = get(wan_interface, "cv_pathfinder_internet_exit.policies", default=[]) - if get_item(wan_interface_internet_exit_policies, "name", internet_exit_policy["name"]) is None: - continue - - if not wan_interface.get("peer_ip"): - msg = ( - f"{wan_interface['name']} peer_ip needs to be set. When using wan interface " - "for direct type internet exit, peer_ip is used for nexthop, and connectivity monitoring." - ) - raise AristaAvdMissingVariableError( - msg, - ) - - # wan interface ip will be used for acl, hence raise error if ip is not available - if (ip_address := wan_interface.get("ip_address")) == "dhcp" and not (ip_address := wan_interface.get("dhcp_ip")): - msg = ( - f"{wan_interface['name']} 'dhcp_ip' needs to be set. When using WAN interface for 'direct' type Internet exit, " - "'dhcp_ip' is used in the NAT ACL." - ) - raise AristaAvdMissingVariableError( - msg, - ) - - sanitized_interface_name = self.shared_utils.sanitize_interface_name(wan_interface["name"]) - connections.append( - { - "type": "ethernet", - "name": f"IE-{sanitized_interface_name}", - "source_interface_ip_address": ip_address, - "monitor_name": f"IE-{sanitized_interface_name}", - "monitor_host": wan_interface["peer_ip"], - "next_hop": wan_interface["peer_ip"], - "source_interface": wan_interface["name"], - "description": f"Internet Exit {internet_exit_policy['name']}", - "exit_group": f"{internet_exit_policy['name']}", - }, - ) - - return connections - - def get_zscaler_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict) -> list: - """Return a list of connections (dicts) for the given internet_exit_policy of type zscaler.""" - if get(internet_exit_policy, "type") != "zscaler": - return [] - - policy_name = internet_exit_policy["name"] - - cloud_name = get(self._zscaler_endpoints, "cloud_name", required=True) - connections = [] - - # Check if the policy has any local interface - for wan_interface in self.shared_utils.wan_interfaces: - wan_interface_internet_exit_policies = get(wan_interface, "cv_pathfinder_internet_exit.policies", default=[]) - if (interface_policy_config := get_item(wan_interface_internet_exit_policies, "name", internet_exit_policy["name"])) is None: - continue - - connection_base = { - "type": "tunnel", - "source_interface": wan_interface["name"], - "next_hop": get( - wan_interface, - "peer_ip", - required=True, - org_key=f"The configured internet-exit policy requires `peer_ip` configured under the WAN Interface {wan_interface['name']}", - ), - # Accepting SonarLint issue: The URL is just for verifying connectivity. No data is passed. - "monitor_url": f"http://gateway.{cloud_name}.net/vpntest", # NOSONAR - } - - tunnel_interface_numbers = get(interface_policy_config, "tunnel_interface_numbers") - if tunnel_interface_numbers is None: - msg = ( - f"{wan_interface['name']}.cv_pathfinder_internet_exit.policies[{internet_exit_policy['name']}]." - "tunnel_interface_numbers needs to be set, when using wan interface for zscaler type internet exit." - ) - raise AristaAvdMissingVariableError( - msg, - ) - - tunnel_id_range = range_expand(tunnel_interface_numbers) - - zscaler_endpoint_keys = ("primary", "secondary", "tertiary") - for index, zscaler_endpoint_key in enumerate(zscaler_endpoint_keys): - if zscaler_endpoint_key not in self._zscaler_endpoints: - continue - - zscaler_endpoint = self._zscaler_endpoints[zscaler_endpoint_key] - - # PRI, SEC, TER used for groups - # TODO: consider if we should use DC names as group suffix. - suffix = zscaler_endpoint_key[0:3].upper() - - destination_ip = zscaler_endpoint["ip_address"] - tunnel_id = tunnel_id_range[index] - connections.append( - { - **connection_base, - "name": f"IE-Tunnel{tunnel_id}", - "monitor_name": f"IE-Tunnel{tunnel_id}", - "monitor_host": destination_ip, - "tunnel_id": tunnel_id, - # Using Loopback0 as source interface as using the WAN interface causes issues for DPS. - "tunnel_ip_address": "unnumbered Loopback0", - "tunnel_destination_ip": destination_ip, - "ipsec_profile": f"IE-{policy_name}-PROFILE", - "description": f"Internet Exit {policy_name} {suffix}", - "exit_group": f"{policy_name}_{suffix}", - "preference": zscaler_endpoint_key, - "suffix": suffix, - }, - ) - - return connections - - def _get_ipsec_credentials(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict) -> tuple[str, str]: - """Returns ufqdn, shared_key based on various details from the given internet_exit_policy.""" - policy_name = internet_exit_policy["name"] - domain_name = get(internet_exit_policy, "zscaler.domain_name", required=True) - ipsec_key_salt = get(internet_exit_policy, "zscaler.ipsec_key_salt", required=True) - ipsec_key = self._generate_ipsec_key(name=policy_name, salt=ipsec_key_salt) - ufqdn = f"{self.shared_utils.hostname}_{policy_name}@{domain_name}" - return ufqdn, ipsec_key - - def _generate_ipsec_key(self: AvdStructuredConfigNetworkServices, name: str, salt: str) -> str: - """ - Build a secret containing various components for this policy and device. - - Run type-7 obfuscation using a algorithmic salt so we ensure the same key every time. - - TODO: Maybe introduce some formatting with max length of each element, since the keys can be come very very long. - """ - secret = f"{self.shared_utils.hostname}_{name}_{salt}" - type_7_salt = sum(salt.encode("utf-8")) % 16 - return simple_7_encrypt(secret, type_7_salt) diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_wan.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_wan.py new file mode 100644 index 00000000000..87e1e6f9bdb --- /dev/null +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_wan.py @@ -0,0 +1,825 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from __future__ import annotations + +from functools import cached_property +from typing import TYPE_CHECKING, Literal + +from pyavd._errors import AristaAvdError, AristaAvdMissingVariableError +from pyavd._utils import get, get_all, get_ip_from_ip_prefix, get_item +from pyavd._utils.password_utils.password import simple_7_encrypt +from pyavd.j2filters import natural_sort, range_expand + +if TYPE_CHECKING: + from . import AvdStructuredConfigNetworkServices + + +class UtilsWanMixin: + """ + Mixin Class with internal functions for WAN. + + Class should only be used as Mixin to a AvdStructuredConfig class. + """ + + @cached_property + def _filtered_wan_vrfs(self: AvdStructuredConfigNetworkServices) -> list: + """Loop through all the VRFs defined under `wan_virtual_topologies.vrfs` and returns a list of mode.""" + wan_vrfs = [] + + for vrf in get(self._hostvars, "wan_virtual_topologies.vrfs", []): + vrf_name = vrf["name"] + if vrf_name in self.shared_utils.vrfs or self.shared_utils.is_wan_server: + wan_vrf = { + "name": vrf_name, + "policy": get(vrf, "policy", default=self._default_wan_policy_name), + "wan_vni": get( + vrf, + "wan_vni", + required=True, + org_key=f"Required `wan_vni` is missing for VRF {vrf_name} under `wan_virtual_topologies.vrfs`.", + ), + } + + wan_vrfs.append(wan_vrf) + + # Check that default is in the list as it is required everywhere + if (vrf_default := get_item(wan_vrfs, "name", "default")) is None: + wan_vrfs.append( + { + "name": "default", + "policy": f"{self._default_wan_policy_name}-WITH-CP", + "wan_vni": 1, + "original_policy": self._default_wan_policy_name, + }, + ) + else: + vrf_default["original_policy"] = vrf_default["policy"] + vrf_default["policy"] = f"{vrf_default['policy']}-WITH-CP" + + return wan_vrfs + + @cached_property + def _wan_virtual_topologies_policies(self: AvdStructuredConfigNetworkServices) -> list: + """This function parses the input data and append the default-policy if not already present.""" + policies = get(self._hostvars, "wan_virtual_topologies.policies", default=[]) + # If not overwritten, inject the default policy in case it is required for one of the VRFs + if get_item(policies, "name", self._default_wan_policy_name) is None: + policies.append(self._default_wan_policy) + + return policies + + @cached_property + def _filtered_wan_policies(self: AvdStructuredConfigNetworkServices) -> list: + """ + Loop through all the VRFs defined under `wan_virtual_topologies.vrfs` and returns a list of policies to configure on this device. + + This returns a structure where every policy contains a list of match statement and a default_match statement if any is required by inputs. + Inside each match and default_match statetement, the fully resolved load_balancing policy is present (it guarantees that the load-balance policy + is not empty). + + The default VRF is marked as default. + """ + # to track the names already injected + filtered_policy_names = [] + filtered_policies = [] + + for vrf in self._filtered_wan_vrfs: + # Need to handle VRF default differently and lookup for the original policy + lookup_name = get(vrf, "original_policy", default=vrf["policy"]) + vrf_policy = get_item( + self._wan_virtual_topologies_policies, + "name", + lookup_name, + required=True, + custom_error_msg=( + f"The policy {lookup_name} applied to vrf {vrf['name']} under `wan_virtual_topologies.vrfs` is not " + "defined under `wan_virtual_topologies.policies`." + ), + ).copy() + + vrf_policy["profile_prefix"] = lookup_name + + if vrf["name"] == "default": + vrf_policy["is_default"] = True + vrf_policy["name"] = f"{vrf_policy['name']}-WITH-CP" + + if vrf_policy["name"] in filtered_policy_names: + continue + + self._update_policy_match_statements(vrf_policy) + + filtered_policy_names.append(vrf_policy["name"]) + filtered_policies.append(vrf_policy) + + return filtered_policies + + def _update_policy_match_statements(self: AvdStructuredConfigNetworkServices, policy: dict) -> None: + """ + Update the policy dict with two keys: `matches` and `default_match`. + + For each match (or default_match), the load_balancing policy is resolved and if it is empty + the match statement is not included. + """ + matches = [] + + if get(policy, "is_default", default=False): + control_plane_virtual_topology = self._wan_control_plane_virtual_topology + load_balance_policy_name = self.shared_utils.generate_lb_policy_name(self._wan_control_plane_profile_name) + + if ( + load_balance_policy := self._generate_wan_load_balance_policy( + load_balance_policy_name, + control_plane_virtual_topology, + policy["name"], + ) + ) is None: + msg = "The WAN control-plane load-balance policy is empty. Make sure at least one path-group can be used in the policy" + raise AristaAvdError(msg) + matches.append( + { + "application_profile": self._wan_control_plane_application_profile_name, + "avt_profile": self._wan_control_plane_profile_name, + "internet_exit_policy_name": get(control_plane_virtual_topology, "internet_exit.policy"), + "traffic_class": get(control_plane_virtual_topology, "traffic_class"), + "dscp": get(control_plane_virtual_topology, "dscp"), + "load_balance_policy": load_balance_policy, + "id": 254, + }, + ) + + for application_virtual_topology in get(policy, "application_virtual_topologies", []): + name = get( + application_virtual_topology, + "name", + default=self._default_profile_name(policy["profile_prefix"], application_virtual_topology["application_profile"]), + ) + + load_balance_policy_name = self.shared_utils.generate_lb_policy_name(name) + context_path = ( + f"wan_virtual_topologies.policies[{policy['profile_prefix']}]." + f"application_virtual_topologies[{application_virtual_topology['application_profile']}]" + ) + load_balance_policy = self._generate_wan_load_balance_policy(load_balance_policy_name, application_virtual_topology, context_path) + if not load_balance_policy: + # Empty load balance policy so skipping + # TODO: Add "nodes" or similar under the profile and raise here + # if the node is set and there are no matching path groups. + continue + + application_profile = get(application_virtual_topology, "application_profile", required=True) + profile_id = get( + application_virtual_topology, + "id", + required=self.shared_utils.is_cv_pathfinder_router, + org_key=( + f"Missing mandatory `id` in " + f"`wan_virtual_topologies.policies[{policy['name']}].application_virtual_topologies[{application_profile}]` " + "when `wan_mode` is 'cv-pathfinder" + ), + ) + + matches.append( + { + "application_profile": application_profile, + "avt_profile": name, + "internet_exit_policy_name": get(application_virtual_topology, "internet_exit.policy"), + "traffic_class": get(application_virtual_topology, "traffic_class"), + "dscp": get(application_virtual_topology, "dscp"), + "load_balance_policy": load_balance_policy, + "id": profile_id, + }, + ) + + default_virtual_topology = get( + policy, + "default_virtual_topology", + required=True, + org_key=f"wan_virtual_topologies.policies[{policy['profile_prefix']}].default_virtual_toplogy", + ) + # Separating default_match as it is used differently + default_match = None + if not get(default_virtual_topology, "drop_unmatched", default=False): + name = get( + default_virtual_topology, + "name", + default=self._default_profile_name(policy["profile_prefix"], "DEFAULT"), + ) + context_path = f"wan_virtual_topologies.policies[{policy['profile_prefix']}].default_virtual_topology" + # Verify that path_groups are set or raise + get( + default_virtual_topology, + "path_groups", + required=True, + org_key=f"Either 'drop_unmatched' or 'path_groups' must be set under '{context_path}'.", + ) + load_balance_policy_name = self.shared_utils.generate_lb_policy_name(name) + load_balance_policy = self._generate_wan_load_balance_policy(load_balance_policy_name, default_virtual_topology, context_path) + if not load_balance_policy: + msg = ( + f"The `default_virtual_topology` path-groups configuration for `wan_virtual_toplogies.policies[{policy['name']}]` produces " + "an empty load-balancing policy. Make sure at least one path-group present on the device is allowed in the " + "`default_virtual_topology` path-groups." + ) + raise AristaAvdError( + msg, + ) + application_profile = get(default_virtual_topology, "application_profile", default="default") + + default_match = { + "application_profile": application_profile, + "avt_profile": name, + "internet_exit_policy_name": get(default_virtual_topology, "internet_exit.policy"), + "traffic_class": get(default_virtual_topology, "traffic_class"), + "dscp": get(default_virtual_topology, "dscp"), + "load_balance_policy": load_balance_policy, + "id": 1, + } + + if not matches and not default_match: + # The policy is empty but should be assigned to a VRF + msg = ( + f"The policy `wan_virtual_toplogies.policies[{policy['name']}]` cannot match any traffic but is assigned to a VRF. " + "Make sure at least one path-group present on the device is used in the policy." + ) + raise AristaAvdError( + msg, + ) + + policy["matches"] = matches + policy["default_match"] = default_match + + def _generate_wan_load_balance_policy(self: AvdStructuredConfigNetworkServices, name: str, input_dict: dict, context_path: str) -> dict | None: + """ + Generate and return a router path-selection load-balance policy. + + If HA is enabled: + * the remote peer path-groups are considered. + * inject the HA path-group with priority 1. + + Attrs: + ------ + name (str): The name of the load balance policy + input_dict (dict): The dictionary containing the list of path-groups and their preference. + context_path (str): Key used for context for error messages. + """ + wan_load_balance_policy = { + "name": name, + "path_groups": [], + **get(input_dict, "constraints", default={}), + } + + if self.shared_utils.wan_mode == "cv-pathfinder": + wan_load_balance_policy["lowest_hop_count"] = get(input_dict, "lowest_hop_count") + + # An entry is composed of a list of path-groups in `names` and a `priority` + policy_entries = get(input_dict, "path_groups", []) + + # Using this flag while looping through all entries to keep track of any path group present on the remote host + any_path_group_on_wan_ha_peer = self.shared_utils.wan_ha + + for policy_entry in policy_entries: + policy_entry_priority = None + if preference := get(policy_entry, "preference"): + policy_entry_priority = self._path_group_preference_to_eos_priority(preference, f"{context_path}[{policy_entry.get('names')}]") + + entry_path_groups = policy_entry.get("names") + for path_group_name in entry_path_groups: + if (priority := policy_entry_priority) is None: + # No preference defined at the policy level, need to retrieve the default preference + wan_path_group = get_item( + self.shared_utils.wan_path_groups, + "name", + path_group_name, + required=True, + custom_error_msg=( + f"Failed to retrieve path-group {path_group_name} from `wan_path_groups` when generating load balance policy {name}. " + f"Verify the path-groups defined under {context_path}." + ), + ) + priority = self._path_group_preference_to_eos_priority(wan_path_group["default_preference"], f"wan_path_groups[{wan_path_group['name']}]") + + # Skip path-group on this device if not present on the router except for pathfinders + if self.shared_utils.is_wan_client and path_group_name not in self.shared_utils.wan_local_path_group_names: + continue + + path_group = { + "name": path_group_name, + "priority": priority if priority != 1 else None, + } + + wan_load_balance_policy["path_groups"].append(path_group) + + # Updating peer path-groups tracking + any_path_group_on_wan_ha_peer = any_path_group_on_wan_ha_peer and set(self.shared_utils.wan_ha_peer_path_group_names).union(set(entry_path_groups)) + + if len(wan_load_balance_policy["path_groups"]) == 0 and not any_path_group_on_wan_ha_peer: + # The policy is empty, and either the site is not using HA or no path-group in the policy is present on the HA peer + return None + + if self.shared_utils.wan_ha or self.shared_utils.is_cv_pathfinder_server: + # Adding HA path-group with priority 1 + wan_load_balance_policy["path_groups"].append({"name": self.shared_utils.wan_ha_path_group_name}) + + return wan_load_balance_policy + + def _path_group_preference_to_eos_priority(self: AvdStructuredConfigNetworkServices, path_group_preference: int | str, context_path: str) -> int: + """ + Convert "preferred" to 1 and "alternate" to 2. Everything else is returned as is. + + Arguments: + ---------- + path_group_preference (str|int): The value of the preference key to be converted. It must be either "preferred", "alternate" or an integer. + context_path (str): Input path context for the error message. + """ + if path_group_preference == "preferred": + return 1 + if path_group_preference == "alternate": + return 2 + + failed_conversion = False + try: + priority = int(path_group_preference) + except ValueError: + failed_conversion = True + + if failed_conversion or not 1 <= priority <= 65535: + msg = ( + f"Invalid value '{path_group_preference}' for Path-Group preference - should be either 'preferred', " + f"'alternate' or an integer[1-65535] for {context_path}." + ) + raise AristaAvdError( + msg, + ) + + return priority + + @cached_property + def _default_wan_policy_name(self: AvdStructuredConfigNetworkServices) -> str: + """TODO: make this configurable.""" + return "DEFAULT-POLICY" + + @cached_property + def _default_policy_path_group_names(self: AvdStructuredConfigNetworkServices) -> list: + """ + Return a list of path group names for the default policy. + + Return the list of path-groups to consider when generating a default policy with AVD + whether for the default policy or the special Control-plane policy. + """ + path_group_names = { + path_group["name"] for path_group in self.shared_utils.wan_path_groups if not get(path_group, "excluded_from_default_policy", default=False) + } + if not path_group_names.intersection(self.shared_utils.wan_local_path_group_names): + # No common path-group between this device local path-groups and the available path-group for the default policy + msg = ( + f"Unable to generate the default WAN policy as none of the device local path-groups {self.shared_utils.wan_local_path_group_names} " + "is eligible to be included. Make sure that at least one path-group for the device is not configured with " + "`excluded_from_default_policy: true` under `wan_path_groups`." + ) + raise AristaAvdError( + msg, + ) + return natural_sort(path_group_names) + + @cached_property + def _default_wan_policy(self: AvdStructuredConfigNetworkServices) -> dict: + """ + Returning policy containing all path groups not excluded from default policy. + + If no policy is defined for a VRF under 'wan_virtual_topologies.vrfs', a default policy named DEFAULT-POLICY is used + where all traffic is matched in the default category and distributed amongst all path-groups. + """ + return { + "name": self._default_wan_policy_name, + "default_virtual_topology": {"path_groups": [{"names": self._default_policy_path_group_names}]}, + } + + def _default_profile_name(self: AvdStructuredConfigNetworkServices, profile_name: str, application_profile: str) -> str: + """ + Helper function to consistently return the default name of a profile. + + Returns {profile_name}-{application_profile} + """ + return f"{profile_name}-{application_profile}" + + @cached_property + def _wan_control_plane_virtual_topology(self: AvdStructuredConfigNetworkServices) -> dict: + """ + Return the Control plane virtual topology or the default one. + + The default control_plane_virtual_topology, excluding path_groups with excluded_from_default_policy + """ + if (control_plane_virtual_topology := get(self._hostvars, "wan_virtual_topologies.control_plane_virtual_topology")) is None: + path_groups = self._default_policy_path_group_names + if self.shared_utils.is_wan_client: + # Filter only the path-groups connected to pathfinder + path_groups = [path_group for path_group in path_groups if path_group in self._local_path_groups_connected_to_pathfinder] + control_plane_virtual_topology = {"path_groups": [{"names": path_groups}]} + return control_plane_virtual_topology + + @cached_property + def _wan_control_plane_profile_name(self: AvdStructuredConfigNetworkServices) -> str: + """Control plane profile name.""" + vrf_default_policy_name = get(get_item(self._filtered_wan_vrfs, "name", "default"), "original_policy") + return get(self._wan_control_plane_virtual_topology, "name", default=f"{vrf_default_policy_name}-CONTROL-PLANE") + + @cached_property + def _wan_control_plane_application_profile_name(self: AvdStructuredConfigNetworkServices) -> str: + """Control plane application profile name.""" + return get(self._hostvars, "wan_virtual_topologies.control_plane_virtual_topology.application_profile", default="APP-PROFILE-CONTROL-PLANE") + + @cached_property + def _local_path_groups_connected_to_pathfinder(self: AvdStructuredConfigNetworkServices) -> list: + """Return list of names of local path_groups connected to pathfinder.""" + return [ + path_group["name"] + for path_group in self.shared_utils.wan_local_path_groups + if any(wan_interface["connected_to_pathfinder"] for wan_interface in path_group["interfaces"]) + ] + + @cached_property + def _svi_acls(self: AvdStructuredConfigNetworkServices) -> dict[str, dict[str, dict]] | None: + """ + Returns a dict of SVI ACLs. + + : { + "ipv4_acl_in": , + "ipv4_acl_out": , + } + + Only contains interfaces with ACLs and only the ACLs that are set, + so use `get(self._svi_acls, f"{interface_name}.ipv4_acl_in")` to get the value. + """ + if not self.shared_utils.network_services_l3: + return None + + svi_acls = {} + for tenant in self.shared_utils.filtered_tenants: + for vrf in tenant["vrfs"]: + for svi in vrf["svis"]: + ipv4_acl_in = get(svi, "ipv4_acl_in") + ipv4_acl_out = get(svi, "ipv4_acl_out") + if ipv4_acl_in is None and ipv4_acl_out is None: + continue + + interface_name = f"Vlan{svi['id']}" + interface_ip: str | None = svi.get("ip_address_virtual") + if interface_ip is not None and "/" in interface_ip: + interface_ip = get_ip_from_ip_prefix(interface_ip) + + if ipv4_acl_in is not None: + svi_acls.setdefault(interface_name, {})["ipv4_acl_in"] = self.shared_utils.get_ipv4_acl( + name=ipv4_acl_in, + interface_name=interface_name, + interface_ip=interface_ip, + ) + if ipv4_acl_out is not None: + svi_acls.setdefault(interface_name, {})["ipv4_acl_out"] = self.shared_utils.get_ipv4_acl( + name=ipv4_acl_out, + interface_name=interface_name, + interface_ip=interface_ip, + ) + + return svi_acls + + def get_internet_exit_nat_profile_name(self: AvdStructuredConfigNetworkServices, internet_exit_policy_type: Literal["zscaler", "direct"]) -> str: + if internet_exit_policy_type == "zscaler": + return "NAT-IE-ZSCALER" + return "NAT-IE-DIRECT" + + def get_internet_exit_nat_acl_name(self: AvdStructuredConfigNetworkServices, internet_exit_policy_type: Literal["zscaler", "direct"]) -> str: + return f"ACL-{self.get_internet_exit_nat_profile_name(internet_exit_policy_type)}" + + def get_internet_exit_nat_pool_and_profile( + self: AvdStructuredConfigNetworkServices, + internet_exit_policy_type: Literal["zscaler", "direct"], + ) -> tuple[dict | None, dict | None]: + if internet_exit_policy_type == "zscaler": + pool = { + "name": "PORT-ONLY-POOL", + "type": "port-only", + "ranges": [ + { + "first_port": 1500, + "last_port": 65535, + }, + ], + } + + profile = { + "name": self.get_internet_exit_nat_profile_name(internet_exit_policy_type), + "source": { + "dynamic": [ + { + "access_list": self.get_internet_exit_nat_acl_name(internet_exit_policy_type), + "pool_name": "PORT-ONLY-POOL", + "nat_type": "pool", + }, + ], + }, + } + return pool, profile + if internet_exit_policy_type == "direct": + profile_name = self.get_internet_exit_nat_profile_name(internet_exit_policy_type) + profile = { + "name": profile_name, + "source": { + "dynamic": [ + { + "access_list": self.get_internet_exit_nat_acl_name(internet_exit_policy_type), + "nat_type": "overload", + }, + ], + }, + } + return None, profile + return None + + @cached_property + def _filtered_internet_exit_policy_types(self: AvdStructuredConfigNetworkServices) -> list: + return sorted({internet_exit_policy["type"] for internet_exit_policy in self._filtered_internet_exit_policies}) + + @cached_property + def _l3_interface_acls(self: AvdStructuredConfigNetworkServices) -> dict | None: + """ + Returns a dict of interfaces and ACLs set on the interfaces. + + { + : { + "ipv4_acl_in": , + "ipv4_acl_out": , + } + } + Only contains interfaces with ACLs and only the ACLs that are set, + so use `get(self._l3_interface_acls, f"{interface_name}..ipv4_acl_in", separator="..")` to get the value. + """ + if not self.shared_utils.network_services_l3: + return None + + l3_interface_acls = {} + for tenant in self.shared_utils.filtered_tenants: + for vrf in tenant["vrfs"]: + for l3_interface in vrf["l3_interfaces"]: + for interface_idx, interface in enumerate(l3_interface["interfaces"]): + if l3_interface["nodes"][interface_idx] != self.shared_utils.hostname: + continue + + ipv4_acl_in = get(l3_interface, "ipv4_acl_in") + ipv4_acl_out = get(l3_interface, "ipv4_acl_out") + if ipv4_acl_in is None and ipv4_acl_out is None: + continue + interface_name = interface + interface_ip: str | None = l3_interface["ip_addresses"][interface_idx] + if interface_ip is not None: + interface_ip = get_ip_from_ip_prefix(interface_ip) + if ipv4_acl_in is not None: + l3_interface_acls.setdefault(interface_name, {})["ipv4_acl_in"] = self.shared_utils.get_ipv4_acl( + name=ipv4_acl_in, + interface_name=interface_name, + interface_ip=interface_ip, + ) + if ipv4_acl_out is not None: + l3_interface_acls.setdefault(interface_name, {})["ipv4_acl_out"] = self.shared_utils.get_ipv4_acl( + name=ipv4_acl_out, + interface_name=interface_name, + interface_ip=interface_ip, + ) + return l3_interface_acls + + @cached_property + def _filtered_internet_exit_policies(self: AvdStructuredConfigNetworkServices) -> list: + """ + Only supported for CV Pathfinder Edge routers. Returns an empty list for pathfinders. + + - Parse self._filtered_wan_policies looking to internet_exit_policies. + - Verify each internet_exit_policy is present in inputs `cv_pathfinder_internet_exit_policies`. + - get_internet_exit_connections and insert into the policy dict. + - Return the list of relevant internet_exit_policies. + """ + if not self.shared_utils.is_cv_pathfinder_client: + return [] + + internet_exit_policy_names = set() + candidate_internet_exit_policies = [] + configured_internet_exit_policies = get(self._hostvars, "cv_pathfinder_internet_exit_policies", []) + + for policy in self._filtered_wan_policies: + for match in get(policy, "matches", default=[]): + internet_exit_policy_name = match.get("internet_exit_policy_name") + if not internet_exit_policy_name or internet_exit_policy_name in internet_exit_policy_names: + continue + internet_exit_policy = get_item( + configured_internet_exit_policies, + "name", + internet_exit_policy_name, + required=True, + custom_error_msg=( + f"The internet exit policy {internet_exit_policy_name} configured under " + f"`wan_virtual_topologies.policies[name={policy['name']}].internet_exit.policy` " + "is not defined under `cv_pathfinder_internet_exit_policies`." + ), + ).copy() + internet_exit_policy_names.add(internet_exit_policy_name) + candidate_internet_exit_policies.append(internet_exit_policy) + + if (default_match := policy.get("default_match")) is not None: + internet_exit_policy_name = default_match.get("internet_exit_policy_name") + if not internet_exit_policy_name or internet_exit_policy_name in internet_exit_policy_names: + continue + internet_exit_policy = get_item( + configured_internet_exit_policies, + "name", + internet_exit_policy_name, + required=True, + custom_error_msg=( + f"The internet exit policy {internet_exit_policy_name} configured under " + f"`wan_virtual_topologies.policies[name={policy['name']}].internet_exit.policy` " + "is not defined under `cv_pathfinder_internet_exit_policies`." + ), + ).copy() + internet_exit_policy_names.add(internet_exit_policy_name) + candidate_internet_exit_policies.append(internet_exit_policy) + + if not internet_exit_policy_names: + return [] + + internet_exit_policies = [] + + for internet_exit_policy in candidate_internet_exit_policies: + local_interfaces = [ + wan_interface + for wan_interface in self.shared_utils.wan_interfaces + if internet_exit_policy["name"] in get_all(wan_interface, "cv_pathfinder_internet_exit.policies.name") + ] + if not local_interfaces: + # No local interface for this policy + # TODO: Decide if we should raise here instead + continue + + internet_exit_policy["connections"] = self.get_internet_exit_connections(internet_exit_policy, local_interfaces) + internet_exit_policies.append(internet_exit_policy) + + return internet_exit_policies + + def get_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict, local_interfaces: list[dict]) -> list: + """ + Return a list of connections (dicts) for the given internet_exit_policy. + + These are useful for easy creation of connectivity-monitor, service-insertion connections, exit-groups, tunnels etc. + """ + policy_name = internet_exit_policy["name"] + policy_type = internet_exit_policy["type"] + + if policy_type == "direct": + return self.get_direct_internet_exit_connections(internet_exit_policy, local_interfaces) + + if policy_type == "zscaler": + return self.get_zscaler_internet_exit_connections(internet_exit_policy, local_interfaces) + + msg = f"Unsupported type '{policy_type}' found in cv_pathfinder_internet_exit[name={policy_name}]." + raise AristaAvdError(msg) + + def get_direct_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict, local_interfaces: list[dict]) -> list: + """Return a list of connections (dicts) for the given internet_exit_policy of type direct.""" + if get(internet_exit_policy, "type") != "direct": + return [] + + connections = [] + + # Build internet exit connection for each local interface (wan_interface) + for wan_interface in local_interfaces: + wan_interface_internet_exit_policies = get(wan_interface, "cv_pathfinder_internet_exit.policies", default=[]) + if get_item(wan_interface_internet_exit_policies, "name", internet_exit_policy["name"]) is None: + continue + + if not wan_interface.get("peer_ip"): + msg = ( + f"{wan_interface['name']} peer_ip needs to be set. When using wan interface " + "for direct type internet exit, peer_ip is used for nexthop, and connectivity monitoring." + ) + raise AristaAvdMissingVariableError( + msg, + ) + + # wan interface ip will be used for acl, hence raise error if ip is not available + if (ip_address := wan_interface.get("ip_address")) == "dhcp" and not (ip_address := wan_interface.get("dhcp_ip")): + msg = ( + f"{wan_interface['name']} 'dhcp_ip' needs to be set. When using WAN interface for 'direct' type Internet exit, " + "'dhcp_ip' is used in the NAT ACL." + ) + raise AristaAvdMissingVariableError( + msg, + ) + + sanitized_interface_name = self.shared_utils.sanitize_interface_name(wan_interface["name"]) + connections.append( + { + "type": "ethernet", + "name": f"IE-{sanitized_interface_name}", + "source_interface_ip_address": ip_address, + "monitor_name": f"IE-{sanitized_interface_name}", + "monitor_host": wan_interface["peer_ip"], + "next_hop": wan_interface["peer_ip"], + "source_interface": wan_interface["name"], + "description": f"Internet Exit {internet_exit_policy['name']}", + "exit_group": f"{internet_exit_policy['name']}", + }, + ) + + return connections + + def get_zscaler_internet_exit_connections(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict, local_interfaces: list[dict]) -> list: + """Return a list of connections (dicts) for the given internet_exit_policy of type zscaler.""" + if get(internet_exit_policy, "type") != "zscaler": + return [] + + policy_name = internet_exit_policy["name"] + + cloud_name = get(self._zscaler_endpoints, "cloud_name", required=True) + connections = [] + + # Build internet exit connection for each local interface (wan_interface) + for wan_interface in local_interfaces: + wan_interface_internet_exit_policies = get(wan_interface, "cv_pathfinder_internet_exit.policies", default=[]) + if (interface_policy_config := get_item(wan_interface_internet_exit_policies, "name", internet_exit_policy["name"])) is None: + continue + + connection_base = { + "type": "tunnel", + "source_interface": wan_interface["name"], + "next_hop": get( + wan_interface, + "peer_ip", + required=True, + org_key=f"The configured internet-exit policy requires `peer_ip` configured under the WAN Interface {wan_interface['name']}", + ), + # Accepting SonarLint issue: The URL is just for verifying connectivity. No data is passed. + "monitor_url": f"http://gateway.{cloud_name}.net/vpntest", # NOSONAR + } + + tunnel_interface_numbers = get(interface_policy_config, "tunnel_interface_numbers") + if tunnel_interface_numbers is None: + msg = ( + f"{wan_interface['name']}.cv_pathfinder_internet_exit.policies[{internet_exit_policy['name']}]." + "tunnel_interface_numbers needs to be set, when using wan interface for zscaler type internet exit." + ) + raise AristaAvdMissingVariableError( + msg, + ) + + tunnel_id_range = range_expand(tunnel_interface_numbers) + + zscaler_endpoint_keys = ("primary", "secondary", "tertiary") + for index, zscaler_endpoint_key in enumerate(zscaler_endpoint_keys): + if zscaler_endpoint_key not in self._zscaler_endpoints: + continue + + zscaler_endpoint = self._zscaler_endpoints[zscaler_endpoint_key] + + # PRI, SEC, TER used for groups + # TODO: consider if we should use DC names as group suffix. + suffix = zscaler_endpoint_key[0:3].upper() + + destination_ip = zscaler_endpoint["ip_address"] + tunnel_id = tunnel_id_range[index] + connections.append( + { + **connection_base, + "name": f"IE-Tunnel{tunnel_id}", + "monitor_name": f"IE-Tunnel{tunnel_id}", + "monitor_host": destination_ip, + "tunnel_id": tunnel_id, + # Using Loopback0 as source interface as using the WAN interface causes issues for DPS. + "tunnel_ip_address": "unnumbered Loopback0", + "tunnel_destination_ip": destination_ip, + "ipsec_profile": f"IE-{policy_name}-PROFILE", + "description": f"Internet Exit {policy_name} {suffix}", + "exit_group": f"{policy_name}_{suffix}", + "preference": zscaler_endpoint_key, + "suffix": suffix, + }, + ) + + return connections + + def _get_ipsec_credentials(self: AvdStructuredConfigNetworkServices, internet_exit_policy: dict) -> tuple[str, str]: + """Returns ufqdn, shared_key based on various details from the given internet_exit_policy.""" + policy_name = internet_exit_policy["name"] + domain_name = get(internet_exit_policy, "zscaler.domain_name", required=True) + ipsec_key_salt = get(internet_exit_policy, "zscaler.ipsec_key_salt", required=True) + ipsec_key = self._generate_ipsec_key(name=policy_name, salt=ipsec_key_salt) + ufqdn = f"{self.shared_utils.hostname}_{policy_name}@{domain_name}" + return ufqdn, ipsec_key + + def _generate_ipsec_key(self: AvdStructuredConfigNetworkServices, name: str, salt: str) -> str: + """ + Build a secret containing various components for this policy and device. + + Run type-7 obfuscation using a algorithmic salt so we ensure the same key every time. + + TODO: Maybe introduce some formatting with max length of each element, since the keys can become very very long. + """ + secret = f"{self.shared_utils.hostname}_{name}_{salt}" + type_7_salt = sum(salt.encode("utf-8")) % 16 + return simple_7_encrypt(secret, type_7_salt) diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_zscaler.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_zscaler.py index de50545ab65..20155d7bbd9 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_zscaler.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/utils_zscaler.py @@ -24,7 +24,7 @@ class UtilsZscalerMixin: """ - Mixin Class with internal functions. + Mixin Class with internal functions for Zscaler. Class should only be used as Mixin to a AvdStructuredConfig class. """ diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/vlan_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/vlan_interfaces.py index 483e8edf489..d8e044697f4 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/vlan_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/vlan_interfaces.py @@ -8,6 +8,7 @@ from pyavd._errors import AristaAvdMissingVariableError from pyavd._utils import append_if_not_duplicate, default, get, strip_empties_from_dict +from pyavd.api.interface_descriptions import InterfaceDescriptionData from .utils import UtilsMixin @@ -51,7 +52,7 @@ def vlan_interfaces(self: AvdStructuredConfigNetworkServices) -> list | None: if (vlan_id := self._mlag_ibgp_peering_vlan_vrf(vrf, tenant)) is None: continue - vlan_interface = {"name": f"Vlan{vlan_id}", **self._get_vlan_interface_config_for_mlag_peering(vrf)} + vlan_interface = {"name": f"Vlan{vlan_id}", **self._get_vlan_interface_config_for_mlag_peering(vrf, vlan_id)} append_if_not_duplicate( list_of_dicts=vlan_interfaces, primary_key="name", @@ -152,34 +153,44 @@ def _check_virtual_router_mac_address(vlan_interface_config: dict, variables: li return strip_empties_from_dict(vlan_interface_config) - def _get_vlan_interface_config_for_mlag_peering(self: AvdStructuredConfigNetworkServices, vrf: dict) -> dict: - """ - Build config for MLAG peering SVI for the given SVI. - - Called from vlan_interfaces and prefix_lists. - """ + def _get_vlan_interface_config_for_mlag_peering(self: AvdStructuredConfigNetworkServices, vrf: dict, vlan_id: int) -> dict: + """Build full config for MLAG peering SVI for the given VRF.""" vlan_interface_config = { "tenant": vrf["tenant"], "type": "underlay_peering", "shutdown": False, - "description": f"MLAG_PEER_L3_iBGP: vrf {vrf['name']}", + "description": self.shared_utils.interface_descriptions.mlag_peer_l3_vrf_svi( + InterfaceDescriptionData(shared_utils=self.shared_utils, interface=f"Vlan{vlan_id}", vrf=vrf["name"], vlan=vlan_id) + ), "vrf": vrf["name"], "mtu": self.shared_utils.p2p_uplinks_mtu, } + vlan_interface_config.update(self._get_vlan_ip_config_for_mlag_peering(vrf)) + return vlan_interface_config + + def _get_vlan_ip_config_for_mlag_peering(self: AvdStructuredConfigNetworkServices, vrf: dict) -> dict: + """ + Build IP config for MLAG peering SVI for the given VRF. + + Called from _get_vlan_interface_config_for_mlag_peering and prefix_lists. + """ if self.shared_utils.underlay_rfc5549 and self.shared_utils.overlay_mlag_rfc5549: - vlan_interface_config["ipv6_enable"] = True - elif (mlag_ibgp_peering_ipv4_pool := vrf.get("mlag_ibgp_peering_ipv4_pool")) is not None: + return {"ipv6_enable": True} + + if (mlag_ibgp_peering_ipv4_pool := vrf.get("mlag_ibgp_peering_ipv4_pool")) is not None: if self.shared_utils.mlag_role == "primary": - vlan_interface_config["ip_address"] = ( - f"{self.shared_utils.ip_addressing.mlag_ibgp_peering_ip_primary(mlag_ibgp_peering_ipv4_pool)}/" - f"{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}" - ) - else: - vlan_interface_config["ip_address"] = ( + return { + "ip_address": ( + f"{self.shared_utils.ip_addressing.mlag_ibgp_peering_ip_primary(mlag_ibgp_peering_ipv4_pool)}/" + f"{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}" + ) + } + + return { + "ip_address": ( f"{self.shared_utils.ip_addressing.mlag_ibgp_peering_ip_secondary(mlag_ibgp_peering_ipv4_pool)}/" f"{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}" ) - else: - vlan_interface_config["ip_address"] = f"{self.shared_utils.mlag_ibgp_ip}/{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}" + } - return vlan_interface_config + return {"ip_address": f"{self.shared_utils.mlag_ibgp_ip}/{self.shared_utils.fabric_ip_addressing_mlag_ipv4_prefix_length}"} diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/vlans.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/vlans.py index 1e74c6623d7..bf5eca7445d 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/vlans.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/vlans.py @@ -6,7 +6,7 @@ from functools import cached_property from typing import TYPE_CHECKING -from pyavd._utils import append_if_not_duplicate +from pyavd._utils import AvdStringFormatter, append_if_not_duplicate from pyavd.j2filters import natural_sort from .utils import UtilsMixin @@ -56,7 +56,9 @@ def vlans(self: AvdStructuredConfigNetworkServices) -> list | None: vlan = { "id": vlan_id, - "name": f"MLAG_iBGP_{vrf['name']}", + "name": AvdStringFormatter().format( + self.shared_utils.mlag_peer_l3_vrf_vlan_name, mlag_peer=self.shared_utils.mlag_peer, vlan=vlan_id, vrf=vrf["name"] + ), "trunk_groups": [self._trunk_groups_mlag_l3_name], "tenant": tenant["name"], } diff --git a/python-avd/pyavd/_eos_designs/structured_config/network_services/vxlan_interface.py b/python-avd/pyavd/_eos_designs/structured_config/network_services/vxlan_interface.py index 3bad01cd7c6..6e931e88353 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/network_services/vxlan_interface.py +++ b/python-avd/pyavd/_eos_designs/structured_config/network_services/vxlan_interface.py @@ -179,19 +179,22 @@ def _get_vxlan_interface_config_for_vrf(self: AvdStructuredConfigNetworkServices vrf_data = {"name": vrf_name, "vni": vni} if get(vrf, "_evpn_l3_multicast_enabled"): - underlay_l3_multicast_group_ipv4_pool = get( - tenant, - "evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool", - required=True, - org_key=f"'evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool' for Tenant: {tenant['name']}", - ) - underlay_l3_mcast_group_ipv4_pool_offset = get(tenant, "evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset", default=0) - vrf_data["multicast_group"] = self.shared_utils.ip_addressing.evpn_underlay_l3_multicast_group( - underlay_l3_multicast_group_ipv4_pool, - vni, - vrf_id, - underlay_l3_mcast_group_ipv4_pool_offset, - ) + if vrf_multicast_group := get(vrf, "_evpn_l3_multicast_group_ip"): + vrf_data["multicast_group"] = vrf_multicast_group + else: + underlay_l3_multicast_group_ipv4_pool = get( + tenant, + "evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool", + required=True, + org_key=f"'evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool' for Tenant: {tenant['name']}", + ) + underlay_l3_mcast_group_ipv4_pool_offset = get(tenant, "evpn_l3_multicast.evpn_underlay_l3_multicast_group_ipv4_pool_offset", default=0) + vrf_data["multicast_group"] = self.shared_utils.ip_addressing.evpn_underlay_l3_multicast_group( + underlay_l3_multicast_group_ipv4_pool, + vni, + vrf_id, + underlay_l3_mcast_group_ipv4_pool_offset, + ) # Duplicate check is not done on the actual list of vlans, but instead on our local "vnis" list. # This is necessary to find duplicate VNIs across multiple object types. diff --git a/python-avd/pyavd/_eos_designs/structured_config/overlay/ip_security.py b/python-avd/pyavd/_eos_designs/structured_config/overlay/ip_security.py index 7b6584d31ae..31e289b7669 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/overlay/ip_security.py +++ b/python-avd/pyavd/_eos_designs/structured_config/overlay/ip_security.py @@ -47,7 +47,7 @@ def ip_security(self: AvdStructuredConfigOverlay) -> dict | None: return strip_null_from_data(ip_security) def _append_data_plane(self: AvdStructuredConfigOverlay, ip_security: dict, data_plane_config: dict) -> None: - """In place update of ip_security.""" + """In place update of ip_security for DataPlane.""" ike_policy_name = get(data_plane_config, "ike_policy_name", default="DP-IKE-POLICY") if self.shared_utils.wan_ha_ipsec else None sa_policy_name = get(data_plane_config, "sa_policy_name", default="DP-SA-POLICY") profile_name = get(data_plane_config, "profile_name", default="DP-PROFILE") @@ -66,7 +66,7 @@ def _append_control_plane(self: AvdStructuredConfigOverlay, ip_security: dict, c """ In place update of ip_security for control plane data. - expected to be called AFTER _append_data_plane + expected to be called AFTER _append_data_plane as CP is used for data-plane as well if not configured. """ ike_policy_name = get(control_plane_config, "ike_policy_name", default="CP-IKE-POLICY") sa_policy_name = get(control_plane_config, "sa_policy_name", default="CP-SA-POLICY") @@ -78,7 +78,7 @@ def _append_control_plane(self: AvdStructuredConfigOverlay, ip_security: dict, c ip_security["profiles"].append(self._profile(profile_name, ike_policy_name, sa_policy_name, key)) if not ip_security.get("key_controller"): - # If there is not data plane IPSec profile, use the control plane one for key controller + # If there is no data plane IPSec profile, use the control plane one for key controller ip_security["key_controller"] = self._key_controller(profile_name) def _ike_policy(self: AvdStructuredConfigOverlay, name: str) -> dict | None: @@ -126,7 +126,4 @@ def _profile(self: AvdStructuredConfigOverlay, profile_name: str, ike_policy_nam def _key_controller(self: AvdStructuredConfigOverlay, profile_name: str) -> dict | None: """Return a key_controller structure if the device is not a RR or pathfinder.""" - if self.shared_utils.is_wan_server: - return None - - return {"profile": profile_name} + return None if self.shared_utils.is_wan_server else {"profile": profile_name} diff --git a/python-avd/pyavd/_eos_designs/structured_config/overlay/router_bgp.py b/python-avd/pyavd/_eos_designs/structured_config/overlay/router_bgp.py index 620baac3058..e9df868c208 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/overlay/router_bgp.py +++ b/python-avd/pyavd/_eos_designs/structured_config/overlay/router_bgp.py @@ -8,7 +8,7 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdError -from pyavd._utils import default, get, get_item, strip_empties_from_dict +from pyavd._utils import AvdStringFormatter, default, get, strip_empties_from_dict from pyavd.j2filters import natural_sort from .utils import UtilsMixin @@ -64,7 +64,7 @@ def _bgp_listen_ranges(self: AvdStructuredConfigOverlay) -> list | None: return [ { "prefix": prefix, - "peer_group": self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"], + "peer_group": self._get_peer_group_name("wan_overlay_peers"), "remote_as": self.shared_utils.bgp_as, } for prefix in self.shared_utils.wan_listen_ranges @@ -182,49 +182,57 @@ def _address_family_ipv4(self: AvdStructuredConfigOverlay) -> dict: peer_groups = [] if self.shared_utils.is_wan_router: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("wan_overlay_peers"), "activate": False}) # TODO: no elif elif self.shared_utils.overlay_evpn_vxlan is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("evpn_overlay_peers"), "activate": False}) if self.shared_utils.overlay_routing_protocol == "ebgp" and ( self.shared_utils.evpn_gateway_vxlan_l2 is True or self.shared_utils.evpn_gateway_vxlan_l3 is True ): - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["evpn_overlay_core"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("evpn_overlay_core"), "activate": False}) if self.shared_utils.overlay_routing_protocol == "ibgp": if self.shared_utils.overlay_mpls is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("mpls_overlay_peers"), "activate": False}) if self._is_mpls_server is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["rr_overlay_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("rr_overlay_peers"), "activate": False}) if self._is_wan_server_with_peers: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("wan_rr_overlay_peers"), "activate": False}) if self.shared_utils.overlay_ipvpn_gateway is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["ipvpn_gateway_peers"]["name"], "activate": False}) + peer_groups.append({"name": self._get_peer_group_name("ipvpn_gateway_peers"), "activate": False}) return {"peer_groups": peer_groups} - def _address_family_evpn(self: AvdStructuredConfigOverlay) -> dict: + def _get_peer_group_name(self: AvdStructuredConfigOverlay, key: str) -> str: + """Helper to retrieve the configured peer_group name for the given key.""" + return self.shared_utils.bgp_peer_groups[key]["name"] + + def _address_family_evpn(self: AvdStructuredConfigOverlay) -> dict | None: address_family_evpn = {} peer_groups = [] + overlay_peer_group = {} if self.shared_utils.overlay_evpn_vxlan is True: if self.shared_utils.is_wan_router: - overlay_peer_group_name = self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"] + overlay_peer_group = { + "name": self._get_peer_group_name("wan_overlay_peers"), + "activate": True, + "encapsulation": self.shared_utils.wan_encapsulation, + } else: - overlay_peer_group_name = self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"] - peer_groups.append({"name": overlay_peer_group_name, "activate": True}) + overlay_peer_group = {"name": self._get_peer_group_name("evpn_overlay_peers"), "activate": True} if self.shared_utils.overlay_routing_protocol == "ebgp": if self.shared_utils.evpn_gateway_vxlan_l2 is True or self.shared_utils.evpn_gateway_vxlan_l3 is True: peer_groups.append( { - "name": self.shared_utils.bgp_peer_groups["evpn_overlay_core"]["name"], + "name": self._get_peer_group_name("evpn_overlay_core"), "domain_remote": True, "activate": True, }, @@ -239,34 +247,38 @@ def _address_family_evpn(self: AvdStructuredConfigOverlay) -> dict: } if self.shared_utils.overlay_routing_protocol == "ibgp": - # TODO: - assess this condition + # TODO: - assess this condition - both can't be true at the same time. if self.shared_utils.overlay_evpn_mpls is True and self.shared_utils.overlay_evpn_vxlan is not True: - overlay_peer_group_name = self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"] - peer_groups.append({"name": overlay_peer_group_name, "activate": True}) + overlay_peer_group = {"name": self._get_peer_group_name("mpls_overlay_peers"), "activate": True} address_family_evpn["neighbor_default"] = {"encapsulation": "mpls"} if self.shared_utils.overlay_ler is True: address_family_evpn["neighbor_default"]["next_hop_self_source_interface"] = "Loopback0" - # partly duplicate with ebgp - if ( - self.shared_utils.overlay_vtep is True - and self.shared_utils.evpn_role != "server" - and (peer_group := get_item(peer_groups, "name", overlay_peer_group_name)) is not None - ): - peer_group.update( + if self._is_mpls_server is True: + peer_groups.append({"name": self._get_peer_group_name("rr_overlay_peers"), "activate": True}) + + if self.shared_utils.overlay_vtep is True and self.shared_utils.evpn_role != "server" and overlay_peer_group: + overlay_peer_group.update( { "route_map_in": "RM-EVPN-SOO-IN", "route_map_out": "RM-EVPN-SOO-OUT", }, ) - if self._is_mpls_server is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["rr_overlay_peers"]["name"], "activate": True}) - if self._is_wan_server_with_peers: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"], "activate": True}) + peer_groups.append( + { + "name": self._get_peer_group_name("wan_rr_overlay_peers"), + "activate": True, + "encapsulation": self.shared_utils.wan_encapsulation, + } + ) - address_family_evpn["peer_groups"] = peer_groups + if overlay_peer_group: + peer_groups.append(overlay_peer_group) + + if peer_groups: + address_family_evpn["peer_groups"] = peer_groups # host flap detection & route pruning if self.shared_utils.overlay_vtep is True: @@ -295,9 +307,15 @@ def _address_family_evpn(self: AvdStructuredConfigOverlay) -> dict: "enable": True, }, } - address_family_evpn["neighbors"] = [{"ip_address": self._wan_ha_peer_vtep_ip(), "activate": True}] + address_family_evpn["neighbors"] = [ + { + "ip_address": self._wan_ha_peer_vtep_ip(), + "activate": True, + "encapsulation": self.shared_utils.wan_encapsulation, + } + ] - return address_family_evpn + return address_family_evpn or None def _address_family_ipv4_sr_te(self: AvdStructuredConfigOverlay) -> dict | None: """Generate structured config for IPv4 SR-TE address family.""" @@ -307,14 +325,14 @@ def _address_family_ipv4_sr_te(self: AvdStructuredConfigOverlay) -> dict | None: address_family_ipv4_sr_te = { "peer_groups": [ { - "name": self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"], + "name": self._get_peer_group_name("wan_overlay_peers"), "activate": True, }, ], } if self._is_wan_server_with_peers: - address_family_ipv4_sr_te["peer_groups"].append({"name": self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"], "activate": True}) + address_family_ipv4_sr_te["peer_groups"].append({"name": self._get_peer_group_name("wan_rr_overlay_peers"), "activate": True}) return address_family_ipv4_sr_te @@ -326,7 +344,7 @@ def _address_family_link_state(self: AvdStructuredConfigOverlay) -> dict | None: address_family_link_state = { "peer_groups": [ { - "name": self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"], + "name": self._get_peer_group_name("wan_overlay_peers"), "activate": True, }, ], @@ -345,7 +363,7 @@ def _address_family_link_state(self: AvdStructuredConfigOverlay) -> dict | None: address_family_link_state["path_selection"] = {"roles": {"producer": True}} if self._is_wan_server_with_peers: - address_family_link_state["peer_groups"].append({"name": self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"], "activate": True}) + address_family_link_state["peer_groups"].append({"name": self._get_peer_group_name("wan_rr_overlay_peers"), "activate": True}) return address_family_link_state @@ -356,7 +374,7 @@ def _address_family_path_selection(self: AvdStructuredConfigOverlay) -> dict | N address_family_path_selection = { "peer_groups": [ { - "name": self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"], + "name": self._get_peer_group_name("wan_overlay_peers"), "activate": True, }, ], @@ -364,7 +382,7 @@ def _address_family_path_selection(self: AvdStructuredConfigOverlay) -> dict | N } if self._is_wan_server_with_peers: - address_family_path_selection["peer_groups"].append({"name": self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"], "activate": True}) + address_family_path_selection["peer_groups"].append({"name": self._get_peer_group_name("wan_rr_overlay_peers"), "activate": True}) return address_family_path_selection @@ -380,26 +398,26 @@ def _address_family_rtc(self: AvdStructuredConfigOverlay) -> dict | None: address_family_rtc = {} peer_groups = [] - evpn_overlay_peers = {"name": self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"]} + evpn_overlay_peers = {"name": self._get_peer_group_name("evpn_overlay_peers")} if self.shared_utils.overlay_evpn_vxlan is True: evpn_overlay_peers["activate"] = True if self.shared_utils.overlay_routing_protocol == "ebgp": if self.shared_utils.evpn_gateway_vxlan_l2 is True or self.shared_utils.evpn_gateway_vxlan_l3 is True: - core_peer_group = {"name": self.shared_utils.bgp_peer_groups["evpn_overlay_core"]["name"], "activate": True} + core_peer_group = {"name": self._get_peer_group_name("evpn_overlay_core"), "activate": True} # TODO: (@Claus) told me to remove this if self.shared_utils.evpn_role == "server": core_peer_group["default_route_target"] = {"only": True} peer_groups.append(core_peer_group) - # Transposing the Jinja2 logic which is that if the selfevpn_overlay_core peer group is not - # configured thenthe default_route_target is applied in the evpn_overlay_peers peer group. + # Transposing the Jinja2 logic: if the evpn_overlay_core peer group is not + # configured then the default_route_target is applied in the evpn_overlay_peers peer group. elif self.shared_utils.evpn_role == "server": evpn_overlay_peers["default_route_target"] = {"only": True} if self.shared_utils.overlay_routing_protocol == "ibgp": if self.shared_utils.overlay_mpls is True: - mpls_peer_group = {"name": self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"], "activate": True} + mpls_peer_group = {"name": self._get_peer_group_name("mpls_overlay_peers"), "activate": True} if self.shared_utils.evpn_role == "server" or self.shared_utils.mpls_overlay_role == "server": mpls_peer_group["default_route_target"] = {"only": True} peer_groups.append(mpls_peer_group) @@ -428,14 +446,14 @@ def _address_family_vpn_ipvx(self: AvdStructuredConfigOverlay, version: int) -> peer_groups = [] if self.shared_utils.overlay_ipvpn_gateway is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["ipvpn_gateway_peers"]["name"], "activate": True}) + peer_groups.append({"name": self._get_peer_group_name("ipvpn_gateway_peers"), "activate": True}) if self.shared_utils.overlay_routing_protocol == "ibgp": if self.shared_utils.overlay_mpls is True: - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"], "activate": True}) + peer_groups.append({"name": self._get_peer_group_name("mpls_overlay_peers"), "activate": True}) if self.shared_utils.mpls_overlay_role == "server": - peer_groups.append({"name": self.shared_utils.bgp_peer_groups["rr_overlay_peers"]["name"], "activate": True}) + peer_groups.append({"name": self._get_peer_group_name("rr_overlay_peers"), "activate": True}) if peer_groups: address_family_vpn_ipvx["peer_groups"] = peer_groups @@ -445,14 +463,27 @@ def _address_family_vpn_ipvx(self: AvdStructuredConfigOverlay, version: int) -> return address_family_vpn_ipvx - def _create_neighbor(self: AvdStructuredConfigOverlay, ip_address: str, name: str, peer_group: str, remote_as: str | None = None) -> dict: - neighbor = {"ip_address": ip_address, "peer_group": peer_group, "peer": name, "description": name} + def _create_neighbor( + self: AvdStructuredConfigOverlay, + ip_address: str, + name: str, + peer_group: str, + remote_as: str | None = None, + overlay_peering_interface: str | None = None, + ) -> dict: + neighbor = { + "ip_address": ip_address, + "peer_group": peer_group, + "peer": name, + "description": AvdStringFormatter().format( + self.shared_utils.overlay_bgp_peer_description, **strip_empties_from_dict({"peer": name, "peer_interface": overlay_peering_interface}) + ), + } if self.shared_utils.overlay_routing_protocol == "ebgp": if remote_as is None: msg = "Configuring eBGP neighbor without a remote_as" raise AristaAvdError(msg) - neighbor["remote_as"] = remote_as if self.shared_utils.shutdown_bgp_towards_undeployed_peers is True and name in self._avd_overlay_peers: @@ -470,8 +501,9 @@ def _neighbors(self: AvdStructuredConfigOverlay) -> list | None: neighbor = self._create_neighbor( data["ip_address"], route_server, - self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"], + self._get_peer_group_name("evpn_overlay_peers"), remote_as=data["bgp_as"], + overlay_peering_interface=data.get("overlay_peering_interface"), ) if self.shared_utils.evpn_prevent_readvertise_to_server is True: @@ -482,8 +514,9 @@ def _neighbors(self: AvdStructuredConfigOverlay) -> list | None: neighbor = self._create_neighbor( data["ip_address"], route_client, - self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"], + self._get_peer_group_name("evpn_overlay_peers"), remote_as=data["bgp_as"], + overlay_peering_interface=data.get("overlay_peering_interface"), ) neighbors.append(neighbor) @@ -491,48 +524,81 @@ def _neighbors(self: AvdStructuredConfigOverlay) -> list | None: neighbor = self._create_neighbor( data["ip_address"], gw_remote_peer, - self.shared_utils.bgp_peer_groups["evpn_overlay_core"]["name"], + self._get_peer_group_name("evpn_overlay_core"), remote_as=data["bgp_as"], + overlay_peering_interface=data.get("overlay_peering_interface"), ) neighbors.append(neighbor) if self.shared_utils.overlay_routing_protocol == "ibgp": if self.shared_utils.overlay_mpls is True: for route_reflector, data in natural_sort(self._mpls_route_reflectors.items()): - neighbor = self._create_neighbor(data["ip_address"], route_reflector, self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + route_reflector, + self._get_peer_group_name("mpls_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) for route_client, data in natural_sort(self._mpls_route_clients.items()): - neighbor = self._create_neighbor(data["ip_address"], route_client, self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + route_client, + self._get_peer_group_name("mpls_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) for mesh_pe, data in natural_sort(self._mpls_mesh_pe.items()): - neighbor = self._create_neighbor(data["ip_address"], mesh_pe, self.shared_utils.bgp_peer_groups["mpls_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + mesh_pe, + self._get_peer_group_name("mpls_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) if self._is_mpls_server is True: for rr_peer, data in natural_sort(self._mpls_rr_peers.items()): - neighbor = self._create_neighbor(data["ip_address"], rr_peer, self.shared_utils.bgp_peer_groups["rr_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + rr_peer, + self._get_peer_group_name("rr_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) if self.shared_utils.overlay_evpn_vxlan is True: for route_server, data in natural_sort(self._evpn_route_servers.items()): - neighbor = self._create_neighbor(data["ip_address"], route_server, self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + route_server, + self._get_peer_group_name("evpn_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) for route_client, data in natural_sort(self._evpn_route_clients.items()): - neighbor = self._create_neighbor(data["ip_address"], route_client, self.shared_utils.bgp_peer_groups["evpn_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["ip_address"], + route_client, + self._get_peer_group_name("evpn_overlay_peers"), + overlay_peering_interface=data.get("overlay_peering_interface"), + ) neighbors.append(neighbor) if self.shared_utils.is_wan_client: if not self._ip_in_listen_ranges(self.shared_utils.vtep_ip, self.shared_utils.wan_listen_ranges): - msg = ( - f"{self.shared_utils.vtep_loopback} IP {self.shared_utils.vtep_ip} is not in the Route Reflector listen range prefixes" - " 'bgp_peer_groups.wan_overlay_peers.listen_range_prefixes'." - ) + msg = f"{self.shared_utils.vtep_loopback} IP {self.shared_utils.vtep_ip} is not in the Route Reflector listen range prefixes" raise AristaAvdError(msg) for wan_route_server, data in self.shared_utils.filtered_wan_route_servers.items(): - neighbor = self._create_neighbor(data["vtep_ip"], wan_route_server, self.shared_utils.bgp_peer_groups["wan_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["vtep_ip"], + wan_route_server, + self._get_peer_group_name("wan_overlay_peers"), + overlay_peering_interface=self.shared_utils.vtep_loopback, + ) neighbors.append(neighbor) if self.shared_utils.wan_ha: @@ -552,15 +618,21 @@ def _neighbors(self: AvdStructuredConfigOverlay) -> list | None: if self.shared_utils.is_wan_server: # No neighbor configured on the `wan_overlay_peers` peer group as it is covered by listen ranges for wan_route_server, data in self.shared_utils.filtered_wan_route_servers.items(): - neighbor = self._create_neighbor(data["vtep_ip"], wan_route_server, self.shared_utils.bgp_peer_groups["wan_rr_overlay_peers"]["name"]) + neighbor = self._create_neighbor( + data["vtep_ip"], + wan_route_server, + self._get_peer_group_name("wan_rr_overlay_peers"), + overlay_peering_interface=self.shared_utils.vtep_loopback, + ) neighbors.append(neighbor) for ipvpn_gw_peer, data in natural_sort(self._ipvpn_gateway_remote_peers.items()): neighbor = self._create_neighbor( data["ip_address"], ipvpn_gw_peer, - self.shared_utils.bgp_peer_groups["ipvpn_gateway_peers"]["name"], + self._get_peer_group_name("ipvpn_gateway_peers"), remote_as=data["bgp_as"], + overlay_peering_interface=data.get("overlay_peering_interface"), ) # Add ebgp_multihop if the gw peer is an ebgp peer. if data["bgp_as"] != default(self._ipvpn_gateway_local_as, self.shared_utils.bgp_as): diff --git a/python-avd/pyavd/_eos_designs/structured_config/overlay/router_path_selection.py b/python-avd/pyavd/_eos_designs/structured_config/overlay/router_path_selection.py index 9756432525d..acfd3497703 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/overlay/router_path_selection.py +++ b/python-avd/pyavd/_eos_designs/structured_config/overlay/router_path_selection.py @@ -45,9 +45,13 @@ def _cp_ipsec_profile_name(self: AvdStructuredConfigOverlay) -> str: @cached_property def _dp_ipsec_profile_name(self: AvdStructuredConfigOverlay) -> str: - """Returns the IPsec profile name to use for Data-Plane.""" - # TODO: need to use CP one if 'wan_ipsec_profiles.data_plane' not present - return get(self._hostvars, "wan_ipsec_profiles.data_plane.profile_name", default="DP-PROFILE") + """Returns the IPsec profile name to use for Data-Plane. + + If no data-plane config is present for IPsec, default to _cp_ipsec_profile_name + """ + if (data_plane := get(self._hostvars, "wan_ipsec_profiles.data_plane")) is not None: + return get(data_plane, "profile_name", default="DP-PROFILE") + return self._cp_ipsec_profile_name def _get_path_groups(self: AvdStructuredConfigOverlay) -> list: """Generate the required path-groups locally.""" @@ -111,11 +115,16 @@ def _generate_ha_path_group(self: AvdStructuredConfigOverlay) -> dict: if self.shared_utils.is_cv_pathfinder_server: return ha_path_group + if self.shared_utils.use_port_channel_for_direct_ha is True: + local_interfaces = [{"name": f"Port-Channel{self.shared_utils.wan_ha_port_channel_id}"}] + else: + local_interfaces = [{"name": interface} for interface in self.shared_utils.wan_ha_interfaces] + # not a pathfinder device ha_path_group.update( { # This should be the LAN interface over which a DPS tunnel is built - "local_interfaces": [{"name": interface} for interface in self.shared_utils.wan_ha_interfaces], + "local_interfaces": local_interfaces, "static_peers": [ { "router_ip": self._wan_ha_peer_vtep_ip(), diff --git a/python-avd/pyavd/_eos_designs/structured_config/overlay/utils.py b/python-avd/pyavd/_eos_designs/structured_config/overlay/utils.py index e6a7d4ea551..3a815bf76ee 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/overlay/utils.py +++ b/python-avd/pyavd/_eos_designs/structured_config/overlay/utils.py @@ -6,7 +6,8 @@ from functools import cached_property from typing import TYPE_CHECKING -from pyavd._utils import get +from pyavd._errors import AristaAvdError +from pyavd._utils import get, strip_empties_from_dict from pyavd.j2filters import natural_sort if TYPE_CHECKING: @@ -40,24 +41,30 @@ def _evpn_gateway_remote_peers(self: AvdStructuredConfigOverlay) -> dict: evpn_gateway_remote_peers_list = get(self.shared_utils.switch_data_combined, "evpn_gateway.remote_peers", default=[]) for gw_remote_peer_dict in natural_sort(evpn_gateway_remote_peers_list, sort_key="hostname"): - # These remote gw can be outside of the inventory + # These remote gateways can be outside of the inventory or in the inventory gw_remote_peer = gw_remote_peer_dict["hostname"] - peer_facts = self.shared_utils.get_peer_facts(gw_remote_peer, required=False) - if peer_facts is not None: - # Found a matching server in inventory - self._append_peer(evpn_gateway_remote_peers, gw_remote_peer, peer_facts) + gw_info = strip_empties_from_dict( + { + "bgp_as": str(_as) if (_as := gw_remote_peer_dict.get("bgp_as")) else None, + "ip_address": gw_remote_peer_dict.get("ip_address"), + # Not adding the "overlay_peering_interface" since we do not know it for this device. Only used for description. + } + ) + peer_facts = self.shared_utils.get_peer_facts(gw_remote_peer, required=False) + if peer_facts is None: + # No matching host found in the inventory for this remote gateway + evpn_gateway_remote_peers[gw_remote_peer] = gw_info else: - # Server not found in inventory, adding manually - # TODO: - what if the values are None - this is not handled by the template today - bgp_as = str(_as) if (_as := gw_remote_peer_dict.get("bgp_as")) else None - ip_address = gw_remote_peer_dict.get("ip_address") - - evpn_gateway_remote_peers[gw_remote_peer] = { - "bgp_as": bgp_as, - "ip_address": ip_address, - } + # Found a matching name for this remote gateway in the inventory + self._append_peer(evpn_gateway_remote_peers, gw_remote_peer, peer_facts) + # Apply potential override if present in the input variables + evpn_gateway_remote_peers[gw_remote_peer].update(strip_empties_from_dict(gw_info)) + + if any(key not in evpn_gateway_remote_peers[gw_remote_peer] for key in ["bgp_as", "ip_address"]): + msg = f"The EVPN Gateway remote peer '{gw_remote_peer}' is missing either a `bpg_as` or an `ip_address`." + raise AristaAvdError(msg) return evpn_gateway_remote_peers @@ -139,6 +146,7 @@ def _ipvpn_gateway_remote_peers(self: AvdStructuredConfigOverlay) -> dict: ipvpn_gateway_remote_peers[ipvpn_gw_peer_dict["hostname"]] = { "bgp_as": str(bgp_as) if bgp_as is not None else None, "ip_address": ipvpn_gw_peer_dict["ip_address"], + # Not adding the "overlay_peering_interface" since we do not know it for this device. Only used for description. } return ipvpn_gateway_remote_peers @@ -242,6 +250,7 @@ def _append_peer(self: AvdStructuredConfigOverlay, peers_dict: dict, peer_name: peer_name: { "bgp_as": bgp_as, "ip_address": overlay.peering_address, + "overlay_peering_interface": "Loopback0" } }. """ @@ -254,6 +263,7 @@ def _append_peer(self: AvdStructuredConfigOverlay, peers_dict: dict, peer_name: required=True, org_key=f"switch.overlay.peering_address for {peer_name}", ), + "overlay_peering_interface": "Loopback0", } @cached_property diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/ethernet_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/ethernet_interfaces.py index e2f2b769cdb..896941c93d7 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/ethernet_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/ethernet_interfaces.py @@ -7,7 +7,7 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdError -from pyavd._utils import append_if_not_duplicate, get +from pyavd._utils import append_if_not_duplicate, get, strip_null_from_data from pyavd.api.interface_descriptions import InterfaceDescriptionData from pyavd.j2filters import encrypt, natural_sort @@ -58,7 +58,7 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: "mtu": self.shared_utils.p2p_uplinks_mtu, "service_profile": self.shared_utils.p2p_uplinks_qos_profile, "mac_security": link.get("mac_security"), - "type": "routed", + "switchport": {"enabled": False}, "ipv6_enable": link.get("ipv6_enable"), "link_tracking_groups": link.get("link_tracking_groups"), "sflow": link.get("sflow"), @@ -158,7 +158,6 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: # Render port-channel member ethernet_interface.update( { - "type": "port-channel-member", "channel_group": { "id": int(channel_group_id), "mode": "active", @@ -166,15 +165,19 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: }, ) if get(link, "inband_ztp_vlan"): - ethernet_interface.update({"mode": "access", "vlans": link["inband_ztp_vlan"]}) + ethernet_interface.update({"switchport": {"enabled": True, "mode": "access", "access_vlan": link["inband_ztp_vlan"]}}) else: # Render trunk interface ethernet_interface.update( { - "type": "switched", - "vlans": link["vlans"], - "mode": "trunk", - "native_vlan": link.get("native_vlan"), + "switchport": { + "enabled": True, + "mode": "trunk", + "trunk": { + "allowed_vlan": link["vlans"], + "native_vlan": link.get("native_vlan"), + }, + }, "service_profile": self.shared_utils.p2p_uplinks_qos_profile, "link_tracking_groups": link.get("link_tracking_groups"), "spanning_tree_portfast": link.get("spanning_tree_portfast"), @@ -183,7 +186,8 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: ) # Remove None values - ethernet_interface = {key: value for key, value in ethernet_interface.items() if value is not None} + ethernet_interface = strip_null_from_data(ethernet_interface, strip_values_tuple=(None, "", {})) + append_if_not_duplicate( list_of_dicts=ethernet_interfaces, primary_key="name", @@ -215,8 +219,7 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: # subinterface name "description": description, "shutdown": self.shared_utils.shutdown_interfaces_towards_undeployed_peers and not link["peer_is_deployed"], - "type": "l3dot1q", - "encapsulation_dot1q_vlan": subinterface["encapsulation_dot1q_vlan"], + "encapsulation_dot1q": {"vlan": subinterface["encapsulation_dot1q_vlan"]}, "ipv6_enable": subinterface.get("ipv6_enable"), "sflow": link.get("sflow"), "flow_tracker": link.get("flow_tracker"), @@ -269,7 +272,7 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: for interface_name in natural_sort(subif_parent_interface_names): parent_interface = { "name": interface_name, - "type": "routed", + "switchport": {"enabled": False}, "peer_type": "l3_interface", "shutdown": False, } @@ -282,34 +285,75 @@ def ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: context_keys=["name", "peer", "peer_interface"], ) - # WAN HA interfaces for direct connection - if self.shared_utils.use_uplinks_for_wan_ha is False: - direct_wan_ha_links_flow_tracker = get( - self.shared_utils.switch_data_combined, - "wan_ha.flow_tracker", - default=self.shared_utils.get_flow_tracker(None, "direct_wan_ha_links"), + # WAN HA interface(s) for direct connection + for wan_ha_interface in self._get_direct_ha_ethernet_interfaces(): + append_if_not_duplicate( + list_of_dicts=ethernet_interfaces, + primary_key="name", + new_dict=wan_ha_interface, + context=f"L3 Interfaces defined under {self.shared_utils.node_type_key_data['key']} wan_ha.ha_interfaces", + context_keys=["name", "peer", "peer_interface"], ) - for index, interface in enumerate(get(self.shared_utils.switch_data_combined, "wan_ha.ha_interfaces", required=True)): - ha_interface = { - "name": interface, - "type": "routed", - "peer_type": "l3_interface", - "peer": self.shared_utils.wan_ha_peer, - "shutdown": False, - "description": "DIRECT LAN HA LINK", - "ip_address": self.shared_utils.wan_ha_ip_addresses[index], - "flow_tracker": direct_wan_ha_links_flow_tracker, - } - - append_if_not_duplicate( - list_of_dicts=ethernet_interfaces, - primary_key="name", - new_dict=ha_interface, - context=f"L3 Interfaces defined under {self.shared_utils.node_type_key_data['key']} wan_ha_interfaces", - context_keys=["name", "peer", "peer_interface"], - ) if ethernet_interfaces: return ethernet_interfaces return None + + def _get_direct_ha_ethernet_interfaces(self: AvdStructuredConfigUnderlay) -> list: + """ + Return a list of ethernet interfaces to be configured for WAN direct HA. + + Caters for the scenarii where either a port-channel is used or a single l3_interface. + """ + if self.shared_utils.use_uplinks_for_wan_ha: + return [] + + direct_wan_ha_interfaces = [] + + direct_wan_ha_links_flow_tracker = self.shared_utils.get_flow_tracker(get(self.shared_utils.switch_data_combined, "wan_ha"), "direct_wan_ha_links") + + for index, interface in enumerate(get(self.shared_utils.switch_data_combined, "wan_ha.ha_interfaces", required=True)): + description = self.shared_utils.interface_descriptions.wan_ha_ethernet_interface( + InterfaceDescriptionData( + shared_utils=self.shared_utils, + interface=interface, + peer=self.shared_utils.wan_ha_peer, + peer_interface=interface, + ), + ) + if self.shared_utils.use_port_channel_for_direct_ha: + direct_wan_ha_interfaces.append( + { + "name": interface, + "peer_type": "wan_ha_peer", + "peer_interface": interface, + "peer": self.shared_utils.wan_ha_peer, + "description": description, + "shutdown": False, + "channel_group": { + "id": self.shared_utils.wan_ha_port_channel_id, + "mode": "active", + }, + # TODO: do we need speed? + # TODO: do we need mtu + "mtu": self.shared_utils.configured_wan_ha_mtu, + } + ) + else: + # Using direct l3 interface + direct_wan_ha_interfaces.append( + { + "name": interface, + "switchport": {"enabled": False}, + "peer_type": "l3_interface", + "peer": self.shared_utils.wan_ha_peer, + "shutdown": False, + "description": description, + "ip_address": self.shared_utils.wan_ha_ip_addresses[index], + "flow_tracker": direct_wan_ha_links_flow_tracker, + "mtu": self.shared_utils.configured_wan_ha_mtu, + } + ) + + return direct_wan_ha_interfaces diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/loopback_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/loopback_interfaces.py index d1aa60bf5e5..bdb28336759 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/loopback_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/loopback_interfaces.py @@ -7,7 +7,7 @@ from typing import TYPE_CHECKING from pyavd._errors import AristaAvdMissingVariableError -from pyavd._utils import get +from pyavd._utils import default, get from pyavd.api.interface_descriptions import InterfaceDescriptionData from .utils import UtilsMixin @@ -35,7 +35,11 @@ def loopback_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: "name": "Loopback0", "description": self.shared_utils.interface_descriptions.router_id_loopback_interface( InterfaceDescriptionData( - shared_utils=self.shared_utils, interface="Loopback0", description=get(self._hostvars, "overlay_loopback_description") + shared_utils=self.shared_utils, + interface="Loopback0", + description=default( + get(self._hostvars, "router_id_loopback_description"), get(self._hostvars, "overlay_loopback_description"), "ROUTER_ID" + ), ), ), "shutdown": False, @@ -73,7 +77,11 @@ def loopback_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: vtep_loopback = { "name": self.shared_utils.vtep_loopback, "description": self.shared_utils.interface_descriptions.vtep_loopback_interface( - InterfaceDescriptionData(shared_utils=self.shared_utils, interface=self.shared_utils.vtep_loopback) + InterfaceDescriptionData( + shared_utils=self.shared_utils, + interface=self.shared_utils.vtep_loopback, + description=get(self._hostvars, "vtep_loopback_description", default="VXLAN_TUNNEL_SOURCE"), + ) ), "shutdown": False, "ip_address": f"{self.shared_utils.vtep_ip}/32", diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/port_channel_interfaces.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/port_channel_interfaces.py index ad60ac42e7c..f1d144177a0 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/port_channel_interfaces.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/port_channel_interfaces.py @@ -6,7 +6,7 @@ from functools import cached_property from typing import TYPE_CHECKING -from pyavd._utils import get, short_esi_to_route_target +from pyavd._utils import append_if_not_duplicate, get, short_esi_to_route_target, strip_null_from_data from pyavd.api.interface_descriptions import InterfaceDescriptionData from .utils import UtilsMixin @@ -46,27 +46,32 @@ def port_channel_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: interface=port_channel_name, peer=link["peer"], peer_channel_group_id=link["peer_channel_group_id"], + port_channel_id=link["channel_group_id"], port_channel_description=link.get("channel_description"), ), ), - "type": "switched", + "switchport": { + "enabled": True, + "mode": "trunk", + "trunk": { + "native_vlan": link.get("native_vlan"), + }, + }, "shutdown": False, - "mode": "trunk", "service_profile": self.shared_utils.p2p_uplinks_qos_profile, "link_tracking_groups": link.get("link_tracking_groups"), - "native_vlan": link.get("native_vlan"), "sflow": link.get("sflow"), "flow_tracker": link.get("flow_tracker"), "spanning_tree_portfast": link.get("spanning_tree_portfast"), } if (trunk_groups := link.get("trunk_groups")) is not None: - port_channel_interface["trunk_groups"] = trunk_groups + port_channel_interface["switchport"]["trunk"]["groups"] = trunk_groups elif (vlans := link.get("vlans")) is not None: - port_channel_interface["vlans"] = vlans + port_channel_interface["switchport"]["trunk"]["allowed_vlan"] = vlans # Configure MLAG on MLAG switches if either 'mlag_on_orphan_port_channel_downlink' or 'link.mlag' is True - if self.shared_utils.mlag is True and any([get(self._hostvars, "mlag_on_orphan_port_channel_downlink", default=True), link.get("mlag", True)]): + if self.shared_utils.mlag is True and any([get(self._hostvars, "mlag_on_orphan_port_channel_downlink", default=False), link.get("mlag", True)]): port_channel_interface["mlag"] = int(link.get("channel_group_id")) if (short_esi := link.get("short_esi")) is not None: @@ -98,11 +103,52 @@ def port_channel_interfaces(self: AvdStructuredConfigUnderlay) -> list | None: port_channel_interface["struct_cfg"] = link.get("structured_config") # Remove None values - port_channel_interface = {key: value for key, value in port_channel_interface.items() if value is not None} + port_channel_interface = strip_null_from_data(port_channel_interface, strip_values_tuple=(None, "", {})) port_channel_interfaces.append(port_channel_interface) + # WAN HA interface for direct connection + if (port_channel_interface := self._get_direct_ha_port_channel_interface()) is not None: + append_if_not_duplicate( + list_of_dicts=port_channel_interfaces, + primary_key="name", + new_dict=port_channel_interface, + context="Port-Channel interface for WAN direct HA.", + context_keys=["name", "peer", "peer_interface"], + ) + if port_channel_interfaces: return port_channel_interfaces return None + + def _get_direct_ha_port_channel_interface(self: AvdStructuredConfigUnderlay) -> dict | None: + """Return a dict containing the port-channel interface for direct HA.""" + if not self.shared_utils.use_port_channel_for_direct_ha: + return None + + direct_wan_ha_links_flow_tracker = self.shared_utils.get_flow_tracker(get(self.shared_utils.switch_data_combined, "wan_ha"), "direct_wan_ha_links") + + port_channel_name = f"Port-Channel{self.shared_utils.wan_ha_port_channel_id}" + description = self.shared_utils.interface_descriptions.wan_ha_port_channel_interface( + InterfaceDescriptionData( + shared_utils=self.shared_utils, + interface=port_channel_name, + peer=self.shared_utils.wan_ha_peer, + peer_interface=port_channel_name, + ), + ) + + return { + "name": port_channel_name, + "switchport": {"enabled": False}, + "peer_type": "l3_interface", + # TODO: if different interfaces used across nodes it will fail just like for mlag. + "peer_interface": port_channel_name, + "peer": self.shared_utils.wan_ha_peer, + "shutdown": False, + "description": description, + "ip_address": self.shared_utils.wan_ha_ip_addresses[0], + "flow_tracker": direct_wan_ha_links_flow_tracker, + "mtu": self.shared_utils.configured_wan_ha_mtu, + } diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/router_isis.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/router_isis.py index 73cc274c8bd..d0b96da35c6 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/router_isis.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/router_isis.py @@ -76,11 +76,14 @@ def router_isis(self: AvdStructuredConfigUnderlay) -> dict | None: @cached_property def _isis_net(self: AvdStructuredConfigUnderlay) -> str | None: - if get(self._hostvars, "isis_system_id_format", default="node_id") == "node_id": + if get(self._hostvars, "isis_system_id_format") == "node_id": isis_system_id_prefix = get(self.shared_utils.switch_data_combined, "isis_system_id_prefix") - if isis_system_id_prefix is None: - # TODO: Raise for this situation if underlay is ISIS. - return None + if self.shared_utils.underlay_isis is True and isis_system_id_prefix is None: + msg = ( + f"'isis_system_id_prefix' is required when 'isis_system_id_format' is set to 'node_id'." + f" 'isis_system_id_prefix' was not set for '{self.shared_utils.hostname}'" + ) + raise AristaAvdMissingVariableError(msg) if self.shared_utils.id is None: msg = f"'id' is not set on '{self.shared_utils.hostname}' and is required to set ISIS NET address using the node ID" diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/router_ospf.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/router_ospf.py index b143c800bda..04633c2d83e 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/router_ospf.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/router_ospf.py @@ -48,7 +48,7 @@ def router_ospf(self: AvdStructuredConfigUnderlay) -> dict | None: if self.shared_utils.overlay_routing_protocol == "none": process["redistribute"] = { - "connected": {}, + "connected": {"enabled": True}, } # Strip None values from process before adding to list diff --git a/python-avd/pyavd/_eos_designs/structured_config/underlay/utils.py b/python-avd/pyavd/_eos_designs/structured_config/underlay/utils.py index fab419f1d3c..c44d5f839c8 100644 --- a/python-avd/pyavd/_eos_designs/structured_config/underlay/utils.py +++ b/python-avd/pyavd/_eos_designs/structured_config/underlay/utils.py @@ -144,7 +144,6 @@ def _uplinks(self: AvdStructuredConfigUnderlay) -> list: def _get_l3_interface_cfg(self: AvdStructuredConfigUnderlay, l3_interface: dict) -> dict | None: """Returns structured_configuration for one L3 interface.""" interface_name = get(l3_interface, "name", required=True, org_key=f"...[node={self.shared_utils.hostname}].l3_interfaces[].name]") - iface_type = "l3dot1q" if "." in interface_name else "routed" interface_description = l3_interface.get("description") if not interface_description: @@ -174,7 +173,7 @@ def _get_l3_interface_cfg(self: AvdStructuredConfigUnderlay, l3_interface: dict) "peer_interface": l3_interface.get("peer_interface"), "ip_address": ip_address, "shutdown": not l3_interface.get("enabled", True), - "type": iface_type, + "switchport": {"enabled": False if "." not in interface_name else None}, "description": interface_description, "speed": l3_interface.get("speed"), "service_profile": l3_interface.get("qos_profile"), @@ -185,8 +184,11 @@ def _get_l3_interface_cfg(self: AvdStructuredConfigUnderlay, l3_interface: dict) "flow_tracker": self.shared_utils.get_flow_tracker(l3_interface, "l3_interfaces"), } - if iface_type == "l3dot1q": - interface["encapsulation_dot1q_vlan"] = int(get(l3_interface, "encapsulation_dot1q_vlan", default=interface_name.split(".")[-1])) + if self.shared_utils.fabric_sflow_l3_interfaces is not None: + interface["sflow"] = {"enable": self.shared_utils.fabric_sflow_l3_interfaces} + + if "." in interface_name: + interface["encapsulation_dot1q"] = {"vlan": int(get(l3_interface, "encapsulation_dot1q_vlan", default=interface_name.split(".")[-1]))} if ip_address == "dhcp" and l3_interface.get("dhcp_accept_default_route", True): interface["dhcp_client_accept_default_route"] = True @@ -225,7 +227,7 @@ def _get_l3_uplink_with_l2_as_subint(self: AvdStructuredConfigUnderlay, link: di # If we have the main interface covered, we can just exclude it from the list and return as main interface. # Otherwise we return an almost empty dict as the main interface since it was already covered by the calling function. - main_interface = get_item(interfaces, "name", link["interface"], default={"type": "routed", "mtu": self.shared_utils.p2p_uplinks_mtu}) + main_interface = get_item(interfaces, "name", link["interface"], default={"switchport": {"enabled": False}, "mtu": self.shared_utils.p2p_uplinks_mtu}) main_interface.pop("description", None) if (mtu := main_interface.get("mtu", 1500)) != self.shared_utils.p2p_uplinks_mtu: @@ -253,8 +255,8 @@ def _get_l2_as_subint(self: AvdStructuredConfigUnderlay, link: dict, svi: dict, "peer_type": link["peer_type"], "description": default(svi.get("description"), svi["name"]), "shutdown": not (svi.get("enabled", False)), - "type": "routed" if is_native else "l3dot1q", - "encapsulation_dot1q_vlan": None if is_native else svi_id, + "switchport": {"enabled": False if is_native else None}, + "encapsulation_dot1q": {"vlan": None if is_native else svi_id}, "vrf": vrf["name"] if vrf["name"] != "default" else None, "ip_address": svi.get("ip_address"), "ipv6_address": svi.get("ipv6_address"), diff --git a/python-avd/pyavd/_errors/__init__.py b/python-avd/pyavd/_errors/__init__.py index c3c178bd6b5..0bb246f9f51 100644 --- a/python-avd/pyavd/_errors/__init__.py +++ b/python-avd/pyavd/_errors/__init__.py @@ -1,7 +1,6 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -import jsonschema class AristaAvdError(Exception): @@ -9,7 +8,7 @@ def __init__(self, message: str = "An Error has occurred in an arista.avd plugin self.message = message super().__init__(self.message) - def _json_path_to_string(self, json_path: list) -> str: + def _json_path_to_string(self, json_path: list[str | int]) -> str: path = "" for index, elem in enumerate(json_path): if isinstance(elem, int): @@ -27,22 +26,19 @@ class AristaAvdMissingVariableError(AristaAvdError): class AvdSchemaError(AristaAvdError): - def __init__(self, message: str = "Schema Error", error: jsonschema.ValidationError | None = None) -> None: - if isinstance(error, jsonschema.SchemaError): - self.message = f"'Schema Error: {self._json_path_to_string(error.absolute_path)}': {error.message}" - else: - self.message = message - super().__init__(self.message) + def __init__(self, message: str = "Schema Error", path: list[str | int] | None = None) -> None: + if path is not None: + self.path = self._json_path_to_string(path) + message = f"'Validation Error: {self.path}': {message}" + super().__init__(message) class AvdValidationError(AristaAvdError): - def __init__(self, message: str = "Schema Error", error: Exception | None = None) -> None: - if isinstance(error, (jsonschema.ValidationError)): - self.path = self._json_path_to_string(error.absolute_path) - self.message = f"'Validation Error: {self.path}': {error.message}" - else: - self.message = message - super().__init__(self.message) + def __init__(self, message: str = "Schema Error", path: list[str | int] | None = None) -> None: + if path is not None: + self.path = self._json_path_to_string(path) + message = f"'Validation Error: {self.path}': {message}" + super().__init__(message) class AvdDeprecationWarning(AristaAvdError): # noqa: N818 diff --git a/python-avd/pyavd/_schema/avd_meta_schema.json b/python-avd/pyavd/_schema/avd_meta_schema.json index 296009b63cf..bc97a16186d 100644 --- a/python-avd/pyavd/_schema/avd_meta_schema.json +++ b/python-avd/pyavd/_schema/avd_meta_schema.json @@ -7,7 +7,9 @@ "type": "object", "oneOf": [ { - "required": [ "type" ], + "required": [ + "type" + ], "properties": { "type": { "type": "string", @@ -44,18 +46,34 @@ "type": "number" } }, - "display_name": { "$ref": "#/$defs/display_name" }, - "description": { "$ref": "#/$defs/description" }, - "required": { "$ref": "#/$defs/required" }, - "dynamic_valid_values": { "$ref": "#/$defs/dynamic_valid_values" }, - "deprecation": { "$ref": "#/$defs/deprecation" }, - "$ref": { "$ref": "#/$defs/$ref" }, - "documentation_options": { "$ref": "#/$defs/documentation_options" } + "display_name": { + "$ref": "#/$defs/display_name" + }, + "description": { + "$ref": "#/$defs/description" + }, + "required": { + "$ref": "#/$defs/required" + }, + "dynamic_valid_values": { + "$ref": "#/$defs/dynamic_valid_values" + }, + "deprecation": { + "$ref": "#/$defs/deprecation" + }, + "$ref": { + "$ref": "#/$defs/$ref" + }, + "documentation_options": { + "$ref": "#/$defs/documentation_options" + } }, "additionalProperties": false }, { - "required": [ "type" ], + "required": [ + "type" + ], "properties": { "type": { "type": "string", @@ -85,18 +103,34 @@ "type": "boolean" } }, - "display_name": { "$ref": "#/$defs/display_name" }, - "description": { "$ref": "#/$defs/description" }, - "required": { "$ref": "#/$defs/required" }, - "dynamic_valid_values": { "$ref": "#/$defs/dynamic_valid_values" }, - "deprecation": { "$ref": "#/$defs/deprecation" }, - "$ref": { "$ref": "#/$defs/$ref" }, - "documentation_options": { "$ref": "#/$defs/documentation_options" } + "display_name": { + "$ref": "#/$defs/display_name" + }, + "description": { + "$ref": "#/$defs/description" + }, + "required": { + "$ref": "#/$defs/required" + }, + "dynamic_valid_values": { + "$ref": "#/$defs/dynamic_valid_values" + }, + "deprecation": { + "$ref": "#/$defs/deprecation" + }, + "$ref": { + "$ref": "#/$defs/$ref" + }, + "documentation_options": { + "$ref": "#/$defs/documentation_options" + } }, "additionalProperties": false }, { - "required": [ "type" ], + "required": [ + "type" + ], "properties": { "type": { "type": "string", @@ -104,7 +138,7 @@ "str" ] }, - "convert_to_lower_case" : { + "convert_to_lower_case": { "description": "Convert string value to lower case before performing validation", "type": "boolean", "default": false @@ -147,7 +181,6 @@ "type": "string", "format": "regex", "description": " A regular expression which will be matched on the variable value.\nThe regular expression should be valid according to the ECMA 262 dialect\nRemember to use double escapes" - }, "valid_values": { "type": "array", @@ -156,18 +189,34 @@ "type": "string" } }, - "display_name": { "$ref": "#/$defs/display_name" }, - "description": { "$ref": "#/$defs/description" }, - "required": { "$ref": "#/$defs/required" }, - "dynamic_valid_values": { "$ref": "#/$defs/dynamic_valid_values" }, - "deprecation": { "$ref": "#/$defs/deprecation" }, - "$ref": { "$ref": "#/$defs/$ref" }, - "documentation_options": { "$ref": "#/$defs/documentation_options" } + "display_name": { + "$ref": "#/$defs/display_name" + }, + "description": { + "$ref": "#/$defs/description" + }, + "required": { + "$ref": "#/$defs/required" + }, + "dynamic_valid_values": { + "$ref": "#/$defs/dynamic_valid_values" + }, + "deprecation": { + "$ref": "#/$defs/deprecation" + }, + "$ref": { + "$ref": "#/$defs/$ref" + }, + "documentation_options": { + "$ref": "#/$defs/documentation_options" + } }, "additionalProperties": false }, { - "required": [ "type" ], + "required": [ + "type" + ], "properties": { "type": { "type": "string", @@ -176,8 +225,16 @@ ] }, "default": { - "description": "Default value", - "type": "array" + "oneOf": [ + { + "description": "Default value", + "type": "array" + }, + { + "description": "Default value", + "type": "null" + } + ] }, "items": { "description": "Schema for list items", @@ -210,17 +267,31 @@ "type": "boolean", "description": "Set to True to allow duplicate primary_key values for a list of dicts. Useful when primary key is only used for triggering documentation. NOTE! Should only be used in eos_designs inputs since we cannot merge on primary key if there are duplicate entries." }, - "display_name": { "$ref": "#/$defs/display_name" }, - "description": { "$ref": "#/$defs/description" }, - "required": { "$ref": "#/$defs/required" }, - "deprecation": { "$ref": "#/$defs/deprecation" }, - "$ref": { "$ref": "#/$defs/$ref" }, - "documentation_options": { "$ref": "#/$defs/documentation_options" } + "display_name": { + "$ref": "#/$defs/display_name" + }, + "description": { + "$ref": "#/$defs/description" + }, + "required": { + "$ref": "#/$defs/required" + }, + "deprecation": { + "$ref": "#/$defs/deprecation" + }, + "$ref": { + "$ref": "#/$defs/$ref" + }, + "documentation_options": { + "$ref": "#/$defs/documentation_options" + } }, "additionalProperties": false }, { - "required": [ "type" ], + "required": [ + "type" + ], "properties": { "type": { "type": "string", @@ -257,15 +328,33 @@ "default": false, "description": "Allow keys in the dictionary which are not defined in the schema." }, - "display_name": { "$ref": "#/$defs/display_name" }, - "description": { "$ref": "#/$defs/description" }, - "required": { "$ref": "#/$defs/required" }, - "deprecation": { "$ref": "#/$defs/deprecation" }, - "$ref": { "$ref": "#/$defs/$ref" }, - "documentation_options": { "$ref": "#/$defs/documentation_options_dict" }, - "$schema": { "type": "string" }, - "$id": { "type": "string" }, - "$defs": { "$ref": "#/$defs/$defs" } + "display_name": { + "$ref": "#/$defs/display_name" + }, + "description": { + "$ref": "#/$defs/description" + }, + "required": { + "$ref": "#/$defs/required" + }, + "deprecation": { + "$ref": "#/$defs/deprecation" + }, + "$ref": { + "$ref": "#/$defs/$ref" + }, + "documentation_options": { + "$ref": "#/$defs/documentation_options_dict" + }, + "$schema": { + "type": "string" + }, + "$id": { + "type": "string" + }, + "$defs": { + "$ref": "#/$defs/$defs" + } }, "additionalProperties": false } @@ -287,8 +376,11 @@ "description": "Key is required" }, "dynamic_valid_values": { - "type": "string", - "description": "Path to variable under the parent dictionary containing valid values.\nVariable path use dot-notation and variable path must be relative to the parent dictionary.\nIf an element of the variable path is a list, every list item will be unpacked.\nNote that this is building the schema from values in the _data_ being validated!" + "type": "array", + "items": { + "type": "string", + "description": "Path to variable under the parent dictionary containing valid values.\nVariable path use dot-notation and variable path must be relative to the parent dictionary.\nIf an element of the variable path is a list, every list item will be unpacked.\nNote that this is building the schema from values in the _data_ being validated!" + } }, "$ref": { "type": "string", @@ -310,7 +402,9 @@ "type": "object", "description": "Special options used for generating documentation", "properties": { - "table": { "$ref": "#/$defs/documentation_options/properties/table" }, + "table": { + "$ref": "#/$defs/documentation_options/properties/table" + }, "hide_keys": { "type": "boolean", "description": "Prevent keys of the dict from being displayed in the generated documentation.\nThis is used for structured_config where we wish to avoid displaying the full eos_cli_config_gen schema everywhere." @@ -331,7 +425,9 @@ "deprecation": { "type": "object", "description": "Deprecation settings", - "required": ["warning"], + "required": [ + "warning" + ], "properties": { "warning": { "type": "boolean", @@ -364,4 +460,4 @@ }, "title": "Arista AVD Schema", "$ref": "#/$defs/avd_schema_var" -} +} \ No newline at end of file diff --git a/python-avd/pyavd/_schema/avddataconverter.py b/python-avd/pyavd/_schema/avddataconverter.py index bcad36750ee..1410361f649 100644 --- a/python-avd/pyavd/_schema/avddataconverter.py +++ b/python-avd/pyavd/_schema/avddataconverter.py @@ -8,6 +8,8 @@ from pyavd._errors import AvdDeprecationWarning from pyavd._utils import get_all +from .utils import get_instance_with_defaults + SCHEMA_TO_PY_TYPE_MAP = { "str": str, "int": int, @@ -25,14 +27,12 @@ if TYPE_CHECKING: from collections.abc import Generator - from .avdschema import AvdSchema - class AvdDataConverter: """AvdDataConverter is used to convert AVD Data Types based on schema options.""" - def __init__(self, avdschema: AvdSchema) -> None: - self._avdschema = avdschema + def __init__(self, schema: dict) -> None: + self.schema = schema # We run through all the regular keys first, to ensure that all data has been converted # in case some of it is referenced in "dynamic_keys" below @@ -43,12 +43,14 @@ def __init__(self, avdschema: AvdSchema) -> None: "deprecation": self.deprecation, } - def convert_data(self, data: Any, schema: dict, path: list[str] | None = None) -> Generator: + def convert_data(self, data: Any, schema: dict | None = None, path: list[str] | None = None) -> Generator: """ Perform in-place conversion of data according to the provided schema. Main entry function which is recursively called from the child functions performing the actual conversion of keys/items. """ + if schema is None: + schema = self.schema if path is None: path = [] @@ -92,7 +94,8 @@ def convert_dynamic_keys(self, dynamic_keys: dict, data: dict, schema: dict, pat # Resolve "keys" from schema "dynamic_keys" by looking for the dynamic key in data. keys = {} for dynamic_key, childschema in dynamic_keys.items(): - resolved_keys = get_all(data, dynamic_key) + data_with_defaults = get_instance_with_defaults(data, dynamic_key, schema) + resolved_keys = get_all(data_with_defaults, dynamic_key) for resolved_key in resolved_keys: keys.setdefault(resolved_key, childschema) diff --git a/python-avd/pyavd/_schema/avdschema.py b/python-avd/pyavd/_schema/avdschema.py index b235dbfb910..076b22c108b 100644 --- a/python-avd/pyavd/_schema/avdschema.py +++ b/python-avd/pyavd/_schema/avdschema.py @@ -3,12 +3,9 @@ # that can be found in the LICENSE file. from __future__ import annotations -from typing import TYPE_CHECKING, Any, NoReturn +from typing import TYPE_CHECKING, Any -import jsonschema -from deepmerge import always_merger - -from pyavd._errors import AristaAvdError, AvdSchemaError, AvdValidationError +from pyavd._errors import AristaAvdError, AvdSchemaError from .avddataconverter import AvdDataConverter from .avdvalidator import AvdValidator @@ -42,14 +39,8 @@ class AvdSchema: def __init__(self, schema: dict | None = None, schema_id: str | None = None, load_store_from_yaml: bool = False) -> None: self.store = create_store(load_from_yaml=load_store_from_yaml) - self._schema_validator = jsonschema.Draft7Validator(self.store["avd_meta_schema"]) self.load_schema(schema, schema_id) - def validate_schema(self, schema: dict) -> Generator: - validation_errors = self._schema_validator.iter_errors(schema) - for validation_error in validation_errors: - yield self._error_handler(validation_error) - def load_schema(self, schema: dict | None = None, schema_id: str | None = None) -> None: """ Load schema from dict or the ID of a builtin schema. @@ -64,61 +55,28 @@ def load_schema(self, schema: dict | None = None, schema_id: str | None = None) schema_id : str, optional ID of AVD Schema. Either 'eos_cli_config_gen' or 'eos_designs' """ - if schema: - # Validate the schema - for validation_error in self.validate_schema(schema): - # TODO: Find a way to wrap multiple schema errors in a single raise - raise validation_error - elif schema_id: + if not schema and schema_id: if schema_id not in self.store: msg = f"Schema id {schema_id} not found in store. Must be one of {self.store.keys()}" raise AristaAvdError(msg) schema = self.store[schema_id] - else: + elif not schema: schema = DEFAULT_SCHEMA self._schema = schema try: - self._validator = AvdValidator(schema, self.store) - self._dataconverter = AvdDataConverter(self) + self._validator = AvdValidator(schema) + self._dataconverter = AvdDataConverter(schema) except Exception as e: msg = "An error occurred during creation of the validator" raise AristaAvdError(msg) from e - def extend_schema(self, schema: dict) -> NoReturn: - for validation_error in self.validate_schema(schema): - raise validation_error - always_merger.merge(self._schema, schema) - for validation_error in self.validate_schema(self._schema): - raise validation_error - def validate(self, data: Any) -> Generator: - validation_errors = self._validator.iter_errors(data) - - try: - for validation_error in validation_errors: - yield self._error_handler(validation_error) - except Exception as error: # pylint: disable=broad-exception-caught - yield self._error_handler(error) + yield from self._validator.validate(data) def convert(self, data: Any) -> Generator: - conversion_errors = self._dataconverter.convert_data(data, self._schema) - - try: - for conversion_error in conversion_errors: - yield self._error_handler(conversion_error) - except Exception as error: # pylint: disable=broad-exception-caught - yield self._error_handler(error) - - def _error_handler(self, error: Exception) -> Exception: - if isinstance(error, AristaAvdError): - return error - if isinstance(error, jsonschema.ValidationError): - return AvdValidationError(error=error) - if isinstance(error, jsonschema.SchemaError): - return AvdSchemaError(error=error) - return error + yield from self._dataconverter.convert_data(data) def subschema(self, datapath: list) -> dict: """ @@ -194,6 +152,18 @@ def recursive_function(datapath: list, schema: dict) -> dict: # Falling through here in case the schema is not covering the requested datapath msg = f"The datapath '{datapath}' could not be found in the schema" - raise AvdSchemaError(msg) + raise AvdSchemaError(msg, path=datapath) return recursive_function(datapath, schema) + + def get_default_value(self, datapath: list) -> Any: + """Return the default value of a key given the datapath as a list. + + Raises: + ------- + AvdSchemaError if no default value is defined. + """ + if "default" not in (subschema := self.subschema(datapath)): + msg = f"The datapath '{datapath}' does not have a default value" + raise AvdSchemaError(msg) + return subschema["default"] diff --git a/python-avd/pyavd/_schema/avdvalidator.py b/python-avd/pyavd/_schema/avdvalidator.py index a75c1474055..8456fcaccb7 100644 --- a/python-avd/pyavd/_schema/avdvalidator.py +++ b/python-avd/pyavd/_schema/avdvalidator.py @@ -3,191 +3,230 @@ # that can be found in the LICENSE file. from collections import ChainMap from collections.abc import Generator -from typing import Any, NoReturn - -import jsonschema -import jsonschema._types -import jsonschema.validators - -# Special handling of jsonschema <4.18 vs. >=4.18 -try: - import jsonschema._validators as jsonschema_validators -except ImportError: - import jsonschema._keywords as jsonschema_validators +from re import fullmatch, match +from typing import Any, Literal, NoReturn +from pyavd._errors import AvdValidationError from pyavd._utils import get_all, get_all_with_path, get_indices_of_duplicate_items - -def _unique_keys_validator(validator: object, unique_keys: list[str], instance: list, _schema: dict) -> Generator: - if not validator.is_type(unique_keys, "list"): - return - - if not validator.is_type(instance, "list") or not instance: - return - - if not all(validator.is_type(element, "dict") for element in instance): - return - - for unique_key in unique_keys: - if not (paths_and_values := tuple(get_all_with_path(instance, unique_key))): - # No values matching the unique key, check the next unique_key - continue - - # Separate all paths and values - paths, values = zip(*paths_and_values, strict=False) - - key = unique_key.split(".")[-1] - is_nested_key = unique_key != key - - # Find any duplicate values and emit errors for each index. - for duplicate_value, duplicate_indices in get_indices_of_duplicate_items(values): - for duplicate_index in duplicate_indices: - yield jsonschema.ValidationError( - f"The value '{duplicate_value}' is not unique between all {'nested ' if is_nested_key else ''}list items as required.", - path=[*paths[duplicate_index], key], - schema_path=["items"], - ) - - -def _primary_key_validator(validator: object, primary_key: str, instance: list, schema: dict) -> Generator: - if not validator.is_type(primary_key, "str"): - return - - if not validator.is_type(instance, "list") or not instance: - return - - if not all(validator.is_type(element, "dict") for element in instance): - return - - if not all(element.get(primary_key) is not None for element in instance): - yield jsonschema.ValidationError(f"Primary key '{primary_key}' is not set on all items as required.") - - if not schema.get("allow_duplicate_primary_key"): - # Reusing the unique keys validator - yield from _unique_keys_validator(validator, [primary_key], instance, schema) - - -def _keys_validator(validator: object, keys: dict, instance: dict, schema: dict) -> Generator: - """ - This function validates each key with the relevant subschema. - - It also includes various child key validations, - which can only be implemented with access to the parent "keys" instance. - - Expand dynamic_keys - - Validate "allow_other_keys" (default is false) - - Validate "required" under child keys - - Expand "dynamic_valid_values" under child keys (don't perform validation). - """ - if not validator.is_type(instance, "object"): - return - - # Compile schema_dynamic_keys and add to "dynamic_keys" - schema_dynamic_keys = schema.get("dynamic_keys", {}) - dynamic_keys = {} - for dynamic_key, childschema in schema_dynamic_keys.items(): - resolved_keys = get_all(instance, dynamic_key) - for resolved_key in resolved_keys: - dynamic_keys.setdefault(resolved_key, childschema) - - all_keys = ChainMap(keys, dynamic_keys) - - # Validation of "allow_other_keys" - if not schema.get("allow_other_keys", False): - # Check that instance only contains the schema keys - invalid_keys = ", ".join([key for key in instance if key not in all_keys and key[0] != "_"]) - if invalid_keys: - yield jsonschema.ValidationError(f"Unexpected key(s) '{invalid_keys}' found in dict.") - - # Run over child keys and check for required and update child schema with dynamic valid values before - # descending into validation of child schema. - for key, childschema in all_keys.items(): - if instance.get(key) is None: - # Validation of "required" on child keys - if childschema.get("required"): - yield jsonschema.ValidationError(f"Required key '{key}' is not set in dict.") - - # Skip further validation since there is nothing to validate. - continue - - # Expand "dynamic_valid_values" in child schema and add to "valid_values" - if "dynamic_valid_values" in childschema: - childschema.setdefault("valid_values", []).extend(get_all(instance, childschema["dynamic_valid_values"])) - - # Perform regular validation of the child schema. - yield from validator.descend( - instance[key], - childschema, - path=key, - schema_path=key, - ) - - -def _dynamic_keys_validator(validator: object, _dynamic_keys: dict, instance: dict, schema: dict) -> Generator: - """This function triggers the regular "keys" validator in case only dynamic_keys is set.""" - if "keys" not in schema: - yield from _keys_validator(validator, {}, instance, schema) - - -def _ref_validator(_validator: object, _ref: str, _instance: dict, _schema: dict) -> NoReturn: - msg = "$ref must be resolved before using AvdValidator" - raise NotImplementedError(msg) - - -def _valid_values_validator(_validator: object, valid_values: list, instance: Any, _schema: dict) -> Generator: - """This function validates if the instance conforms to the "valid_values".""" - if instance not in valid_values: - yield jsonschema.ValidationError(f"'{instance}' is not one of {valid_values}") - - -def _is_dict(_validator: object, instance: Any) -> bool: - return isinstance(instance, (dict, ChainMap)) +from .utils import get_instance_with_defaults class AvdValidator: - def __new__(cls, schema: dict, store: dict) -> object: + def __init__(self, schema: dict) -> None: + self.schema = schema + self.validators = { + # Note type_validator is not included here since we first check that before spending energy on the rest + "max": self.max_validator, + "min": self.min_validator, + "max_length": self.max_length_validator, + "min_length": self.min_length_validator, + "format": self.format_validator, + "pattern": self.pattern_validator, + "valid_values": self.valid_values_validator, + "keys": self.keys_validator, + "dynamic_keys": self.dynamic_keys_validator, + "items": self.items_validator, + "primary_key": self.primary_key_validator, + "unique_keys": self.unique_keys_validator, + "$ref": self.ref_validator, + } + + def validate(self, instance: Any, schema: dict | None = None, path: list[str | int] | None = None) -> Generator: + if schema is None: + schema = self.schema + if path is None: + path = [] + + type_errors = list(self.type_validator(schema["type"], instance, schema, path)) + if type_errors: + yield from (type_error for type_error in type_errors) + # Skip further validation since the type is wrong. + return + + for schema_key, schema_value in schema.items(): + if (validator := self.validators.get(schema_key)) is None or schema_value is None: + continue + yield from validator(schema_value, instance, schema, path) + + def type_validator(self, schema_type: str, instance: Any, _schema: dict, path: list[str | int]) -> Generator: + if not self.is_type(instance, schema_type): + yield AvdValidationError( + f"Invalid type '{type(instance).__name__}'. Expected a '{schema_type}'.", + path=path, + ) + + def unique_keys_validator(self, unique_keys: list[str], instance: list, _schema: dict, path: list[str | int]) -> Generator: + if not instance: + return + + if not all(self.is_type(element, "dict") for element in instance): + return + + for unique_key in unique_keys: + if not (paths_and_values := tuple(get_all_with_path(instance, unique_key))): + # No values matching the unique key, check the next unique_key + continue + + # Separate all paths and values + paths, values = zip(*paths_and_values, strict=False) + + key = unique_key.split(".")[-1] + is_nested_key = unique_key != key + + # Find any duplicate values and emit errors for each index. + for duplicate_value, duplicate_indices in get_indices_of_duplicate_items(values): + for duplicate_index in duplicate_indices: + yield AvdValidationError( + f"The value '{duplicate_value}' is not unique between all {'nested ' if is_nested_key else ''}list items as required.", + path=[*path, *paths[duplicate_index], key], + ) + + def primary_key_validator(self, primary_key: str, instance: list, schema: dict, path: list[str | int]) -> Generator: + if not instance: + return + + if not all(self.is_type(element, "dict") for element in instance): + return + + if not all(element.get(primary_key) is not None for element in instance): + yield AvdValidationError(f"Primary key '{primary_key}' is not set on all items as required.", path=path) + + if not schema.get("allow_duplicate_primary_key"): + # Reusing the unique keys validator + yield from self.unique_keys_validator([primary_key], instance, schema, path) + + def keys_validator(self, keys: dict, instance: dict, schema: dict, path: list[str | int]) -> Generator: """ - AvdSchemaValidator is used to validate AVD Data. - - It uses a combination of our own validators and builtin jsonschema validators - mapped to our own keywords. - We have extra type checkers not covered by the AVD_META_SCHEMA (array, boolean etc) - since the same TypeChecker is used by the validators themselves. + This function validates each key with the relevant subschema. + + It also includes various child key validations, + which can only be implemented with access to the parent "keys" instance. + - Expand dynamic_keys + - Validate "allow_other_keys" (default is false) + - Validate "required" under child keys + - Expand "dynamic_valid_values" under child keys (don't perform validation). """ - validator_cls = jsonschema.validators.create( - meta_schema=store["avd_meta_schema"], - validators={ - "$ref": _ref_validator, - "type": jsonschema_validators.type, - "max": jsonschema_validators.maximum, - "min": jsonschema_validators.minimum, - "valid_values": _valid_values_validator, - "format": jsonschema_validators.format, - "max_length": jsonschema_validators.maxLength, - "min_length": jsonschema_validators.minLength, - "pattern": jsonschema_validators.pattern, - "items": jsonschema_validators.items, - "primary_key": _primary_key_validator, - "unique_keys": _unique_keys_validator, - "keys": _keys_validator, - "dynamic_keys": _dynamic_keys_validator, - }, - type_checker=jsonschema.TypeChecker( - { - "any": jsonschema._types.is_any, - "array": jsonschema._types.is_array, - "boolean": jsonschema._types.is_bool, - "integer": jsonschema._types.is_integer, - "object": jsonschema._types.is_object, - "null": jsonschema._types.is_null, - "None": jsonschema._types.is_null, - "number": jsonschema._types.is_number, - "string": jsonschema._types.is_string, - "dict": _is_dict, - "str": jsonschema._types.is_string, - "bool": jsonschema._types.is_bool, - "list": jsonschema._types.is_array, - "int": jsonschema._types.is_integer, - }, - ), - ) - return validator_cls(schema) + # Compile schema_dynamic_keys and add to "dynamic_keys" + schema_dynamic_keys = schema.get("dynamic_keys", {}) + dynamic_keys = {} + for dynamic_key, childschema in schema_dynamic_keys.items(): + instance_with_defaults = get_instance_with_defaults(instance, dynamic_key, schema) + resolved_keys = get_all(instance_with_defaults, dynamic_key) + for resolved_key in resolved_keys: + dynamic_keys.setdefault(resolved_key, childschema) + + all_keys = ChainMap(keys, dynamic_keys) + + # Validation of "allow_other_keys" + if not schema.get("allow_other_keys", False): + # Check that instance only contains the schema keys + invalid_keys = ", ".join([key for key in instance if key not in all_keys and key[0] != "_"]) + if invalid_keys: + yield AvdValidationError(f"Unexpected key(s) '{invalid_keys}' found in dict.", path=path) + + # Run over child keys and check for required and update child schema with dynamic valid values before + # descending into validation of child schema. + for key in all_keys: + childschema = all_keys[key].copy() + if instance.get(key) is None: + # Validation of "required" on child keys + if childschema.get("required"): + yield AvdValidationError(f"Required key '{key}' is not set in dict.", path=path) + + # Skip further validation since there is nothing to validate. + continue + + # Expand "dynamic_valid_values" in child schema and add to "valid_values" + if "dynamic_valid_values" in childschema: + for dynamic_valid_value in childschema["dynamic_valid_values"]: + instance_with_defaults = get_instance_with_defaults(instance, dynamic_valid_value, schema) + childschema.setdefault("valid_values", []).extend(get_all(instance_with_defaults, dynamic_valid_value)) + + # Perform regular validation of the child schema. + yield from self.validate( + instance[key], + childschema, + path=[*path, key], + ) + + def dynamic_keys_validator(self, _dynamic_keys: dict, instance: dict, schema: dict, path: list[str | int]) -> Generator: + """This function triggers the regular "keys" validator in case only dynamic_keys is set.""" + if "keys" not in schema: + yield from self.keys_validator({}, instance, schema, path=path) + + def items_validator(self, items: dict, instance: list, _schema: dict, path: list[str | int]) -> Generator: + for index, item in enumerate(instance): + yield from self.validate(item, items, path=[*path, index]) + + def ref_validator(self, _ref: str, _instance: dict, _schema: dict, _path: list[str | int]) -> NoReturn: + msg = "$ref must be resolved before using AvdValidator" + raise NotImplementedError(msg) + + def max_validator(self, schema_max: int, instance: int, _schema: dict, path: list[str | int]) -> Generator: + if instance > schema_max: + yield AvdValidationError(f"'{instance}' is higher than the allowed maximum of {schema_max}.", path=path) + + def min_validator(self, schema_min: int, instance: int, _schema: dict, path: list[str | int]) -> Generator: + if instance < schema_min: + yield AvdValidationError(f"'{instance}' is lower than the allowed minimum of {schema_min}.", path=path) + + def max_length_validator(self, schema_max_length: int, instance: str | list, _schema: dict, path: list[str | int]) -> Generator: + if len(instance) > schema_max_length: + yield AvdValidationError(f"The value is longer ({len(instance)}) than the allowed maximum of {schema_max_length}.", path=path) + + def min_length_validator(self, schema_min_length: int, instance: str | list, _schema: dict, path: list[str | int]) -> Generator: + if len(instance) < schema_min_length: + yield AvdValidationError(f"The value is shorter ({len(instance)}) than the allowed minimum of {schema_min_length}.", path=path) + + def valid_values_validator(self, valid_values: list, instance: Any, _schema: dict, path: list[str | int]) -> Generator: + """This function validates if the instance conforms to the "valid_values".""" + if instance not in valid_values: + yield AvdValidationError(f"'{instance}' is not one of {valid_values}", path=path) + + def format_validator(self, schema_format: str, instance: str, _schema: dict, path: list[str | int]) -> Generator: + match schema_format: + case "ipv4": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "ipv4_cidr": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "ipv6": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "ipv6_cidr": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "ip": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "cidr": + # TODO: Figure out how to do this efficiently since ipaddress is slow + return + case "mac": + # Matching for format 01:23:45:67:89:AB + if fullmatch(r"([0-9a-fA-F]{2}:){5}[0-9a-fA-F]{2}|([0-9a-fA-F]{4}.){2}[0-9a-fA-F]{4}", instance) is None: + yield AvdValidationError( + f"The value '{instance}' is not a valid MAC address (Expecting bytes separated by colons like 01:23:45:67:89:AB).", path=path + ) + + def pattern_validator(self, pattern: str, instance: str, _schema: dict, path: list[str | int]) -> Generator: + if match(pattern, instance) is None: + yield AvdValidationError(f"The value '{instance}' is not matching the pattern '{pattern}'.", path=path) + + def is_type(self, instance: Any, type_str: Literal["dict", "int", "str", "bool"]) -> bool: + match type_str: + case "int": + return isinstance(instance, int) + case "str": + return isinstance(instance, str) + case "bool": + return isinstance(instance, bool) + case "dict": + return isinstance(instance, (dict, ChainMap)) + case "list": + return isinstance(instance, list) + + msg = f"Unable to check type '{type_str}'" + raise NotImplementedError(msg) diff --git a/python-avd/pyavd/_schema/utils.py b/python-avd/pyavd/_schema/utils.py new file mode 100644 index 00000000000..418296d3b45 --- /dev/null +++ b/python-avd/pyavd/_schema/utils.py @@ -0,0 +1,29 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from collections import ChainMap + +from pyavd._utils import get + + +def get_instance_with_defaults(instance: dict, dynamic_key_path: str, schema: dict) -> dict | ChainMap: + """ + Returns the instance including any default value of the given dynamic key path. + + If the dynamic key path is already in the instance, the instance is returned as-is. + """ + dynamic_root_key = dynamic_key_path.split(".", maxsplit=1)[0] + + if dynamic_root_key in instance: + # The key is already set, so no need to find the default value. + return instance + + if dynamic_root_key == "node_type_keys": + # TODO: AVD6.0.0 remove this if block when we remove the reliance on design.type. + from pyavd._eos_designs.shared_utils.node_type_keys import DEFAULT_NODE_TYPE_KEYS + + design_type = get(instance, "design.type", default="l3ls-evpn") + return ChainMap(instance, {"node_type_keys": DEFAULT_NODE_TYPE_KEYS[design_type]}) + + # Fetch default value from schema + return ChainMap(instance, {dynamic_root_key: get(schema, f"keys.{dynamic_root_key}.default")}) diff --git a/python-avd/pyavd/_utils/__init__.py b/python-avd/pyavd/_utils/__init__.py index 10a9fcec931..285dae80421 100644 --- a/python-avd/pyavd/_utils/__init__.py +++ b/python-avd/pyavd/_utils/__init__.py @@ -5,6 +5,7 @@ from .batch import batch from .compare_dicts import compare_dicts from .default import default +from .format_string import AvdStringFormatter from .get import get, get_v2 from .get_all import get_all, get_all_with_path from .get_indices_of_duplicate_items import get_indices_of_duplicate_items @@ -22,6 +23,7 @@ from .unique import unique __all__ = [ + "AvdStringFormatter", "append_if_not_duplicate", "batch", "compare_dicts", diff --git a/python-avd/pyavd/_utils/format_string.py b/python-avd/pyavd/_utils/format_string.py new file mode 100644 index 00000000000..0a68cb79a14 --- /dev/null +++ b/python-avd/pyavd/_utils/format_string.py @@ -0,0 +1,160 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from collections.abc import Iterable +from string import Formatter + + +class AvdStringFormatter(Formatter): + """ + Custom string formatter class to provide extra protection from malicious format strings and support for prefixes and suffixes per field. + + The regular Python syntax is "{" [field_name] ["!" conversion] [":" format_spec] "}" + This class supports "{" [field_name] ["?"] ["<" prefix] [">" suffix] ["!" conversion] [":" format_spec] "}" + + where + ? ::= The literal ? signals that the field is optional and will not be printed if the value is missing or None. + prefix ::= string including spaces which will be inserted before the field value. + Most useful in combination with ?. Prefix should not contain "<", ">", "!" or ":". + suffix ::= string including spaces which will be inserted after the field value. + Most useful in combination with ?. Suffix should not contain "<", ">", "!" or ":". + conversion ::= "!u" for "upper()" (The regular Python conversions "!r", "!s", "!a" have been removed). + + Note the order of syntax field matters! + """ + + def _vformat(self, format_string: str, args: list, kwargs: dict, used_args: set, recursion_depth: int, auto_arg_index: int = 0) -> tuple[str, int]: + """ + Perform the actual formatting. + + Mostly a copy from the base class, but adding support for using "optional", "prefix" and "suffix" from the .parse() method. + + This should not be called directly. Instead call AvdStringFormatter().format(format_string, /, *args, **kwargs) + """ + if recursion_depth < 0: + msg = "Max string recursion exceeded" + raise ValueError(msg) + result = [] + for literal_text, org_field_name, org_format_spec, conversion, optional, prefix, suffix in self.parse(format_string): + # Make ruff happy. + field_name = org_field_name + format_spec = org_format_spec + + # output the literal text + if literal_text: + result.append(literal_text) + + # if there's a field, output it + if field_name is not None: + # this is some markup, find the object and do the formatting + + # handle arg indexing when empty field_names are given. + if field_name == "": + if auto_arg_index is False: + msg = "cannot switch from manual field specification to automatic field numbering" + raise ValueError(msg) + field_name = str(auto_arg_index) + auto_arg_index += 1 + elif field_name.isdigit(): + if auto_arg_index: + msg = "cannot switch from manual field specification to automatic field numbering" + raise ValueError(msg) + # disable auto arg incrementing, if it gets + # used later on, then an exception will be raised + auto_arg_index = False + + # given the field_name, find the object it references + # and the argument it came from + if optional: + try: + obj, arg_used = self.get_field(field_name, args, kwargs) + except (IndexError, KeyError): + # Skip this field if it is optional and not existing. + continue + if obj is None: + # Skip this field if it is optional and None. + continue + else: + obj, arg_used = self.get_field(field_name, args, kwargs) + + used_args.add(arg_used) + + # do any conversion on the resulting object + obj = self.convert_field(obj, conversion) + + # expand the format spec, if needed + format_spec, auto_arg_index = self._vformat(format_spec, args, kwargs, used_args, recursion_depth - 1, auto_arg_index=auto_arg_index) + + # Append prefix if set + if prefix: + result.append(prefix) + + # format the object and append to the result + result.append(self.format_field(obj, format_spec)) + + # Append suffix if set + if suffix: + result.append(suffix) + + return "".join(result), auto_arg_index + + def parse(self, format_string: str) -> Iterable[tuple[str, str | None, str | None, str | None, bool | None, str | None, str | None]]: + """ + Parse the format_string and yield elements back. + + Mostly a copy from the base class, but also returning "optional", "prefix" and "suffix" for every field. + """ + for literal_text, field_name, format_spec, conversion in super().parse(format_string): + if not field_name or not ("?" in field_name or ">" in field_name or "<" in field_name): + yield (literal_text, field_name, format_spec, conversion, None, None, None) + continue + + tmp_field_name = field_name + # Doing suffix first so the split will keep a potential prefix in the tmp_field_name + if ">" in tmp_field_name: + tmp_field_name, suffix = tmp_field_name.split(">", maxsplit=1) + else: + suffix = None + + if "<" in tmp_field_name: + tmp_field_name, prefix = tmp_field_name.split("<", maxsplit=1) + else: + prefix = None + + optional = tmp_field_name.endswith("?") + tmp_field_name = tmp_field_name.removesuffix("?") + + yield (literal_text, tmp_field_name, format_spec, conversion, optional, prefix, suffix) + + def convert_field(self, value: object, conversion: str | None) -> object: + """ + Convert the value according to the given conversion instruction. + + Mostly a copy from the base class, but only supporting !u for upper(). + """ + # do any conversion on the resulting object + if conversion is None: + return value + if conversion == "u": + return str(value).upper() + msg = f"Unknown conversion specifier {conversion!s}" + raise ValueError(msg) + + def get_field(self, field_name: str, args: list, kwargs: dict) -> tuple[object, str]: + """ + Get field value including parsing attributes/keys. + + Reusing base class after guarding against accessing attributes leading with underscore. + This protects against access to dunders etc. + """ + if not field_name or "_" not in field_name: + return super().get_field(field_name, args, kwargs) + + if any(attr.startswith("_") for attr in field_name.split(".")): + msg = f"Unsupported field name '{field_name}'. Avoid attributes starting with underscore." + raise ValueError(msg) + if any(key_and_more.startswith("_") for key_and_more in field_name.split("[")): + msg = f"Unsupported field name '{field_name}'. Avoid keys starting with underscore." + raise ValueError(msg) + + return super().get_field(field_name, args, kwargs) diff --git a/python-avd/pyavd/_utils/get_all.py b/python-avd/pyavd/_utils/get_all.py index 3cc85dd7d55..ec9eb438359 100644 --- a/python-avd/pyavd/_utils/get_all.py +++ b/python-avd/pyavd/_utils/get_all.py @@ -3,6 +3,7 @@ # that can be found in the LICENSE file. from __future__ import annotations +from collections import ChainMap from typing import TYPE_CHECKING, Any from pyavd._errors import AristaAvdMissingVariableError @@ -50,7 +51,7 @@ def get_all(data: Any, path: str, required: bool = False, org_path: str | None = return output - if isinstance(data, dict): + if isinstance(data, (dict, ChainMap)): value = data.get(path_elements[0]) if value is None: @@ -96,7 +97,7 @@ def get_all_with_path(data: Any, path: str, _current_path: list[str | int] | Non for index, data_item in enumerate(data): yield from get_all_with_path(data_item, path, _current_path=[*_current_path, index]) - elif isinstance(data, dict): + elif isinstance(data, (dict, ChainMap)): value = data.get(path_elements[0]) if value is None: diff --git a/python-avd/pyavd/api/interface_descriptions/__init__.py b/python-avd/pyavd/api/interface_descriptions/__init__.py index 44212f332a2..8435a00f168 100644 --- a/python-avd/pyavd/api/interface_descriptions/__init__.py +++ b/python-avd/pyavd/api/interface_descriptions/__init__.py @@ -6,10 +6,10 @@ from __future__ import annotations from collections import ChainMap -from functools import cached_property from typing import TYPE_CHECKING, Any from pyavd._eos_designs.avdfacts import AvdFacts +from pyavd._utils import AvdStringFormatter, default, strip_null_from_data if TYPE_CHECKING: from pyavd._eos_designs.shared_utils import SharedUtils @@ -88,6 +88,7 @@ def underlay_port_channel_interface(self, data: InterfaceDescriptionData) -> str Available data: - peer - peer_channel_group_id + - port_channel_id - port_channel_description - mpls_overlay_role - mpls_lsr @@ -99,6 +100,7 @@ def underlay_port_channel_interface(self, data: InterfaceDescriptionData) -> str template_path, link={ "peer": data.peer, + "channel_group_id": data.port_channel_id, "peer_channel_group_id": data.peer_channel_group_id, "channel_description": data.port_channel_description, }, @@ -116,47 +118,163 @@ def mlag_ethernet_interface(self, data: InterfaceDescriptionData) -> str: Build an MLAG Ethernet interface description. If a jinja template is configured, use it. - If not default to MLAG_PEER__ + If not, use the default template as a format string template. Available data: + - interface - peer_interface + - mlag_peer + - mlag_port_channel_id + - mlag_peer_port_channel_id - mpls_overlay_role - mpls_lsr - overlay_routing_protocol - type. """ if template_path := self.shared_utils.interface_descriptions_templates.get("mlag_ethernet_interfaces"): - return self._template(template_path, mlag_interface=data.peer_interface) + return self._template( + template_path, + mlag_interface=data.interface, + mlag_peer=data.mlag_peer, + ) - return f"MLAG_PEER_{data.mlag_peer}_{data.peer_interface}" + return AvdStringFormatter().format( + self.shared_utils.mlag_member_description, + **strip_null_from_data( + { + "mlag_peer": data.mlag_peer, + "interface": data.interface, + "peer_interface": data.peer_interface, + "mlag_port_channel_id": data.mlag_port_channel_id, + "mlag_peer_port_channel_id": data.mlag_peer_port_channel_id, + } + ), + ) def mlag_port_channel_interface(self, data: InterfaceDescriptionData) -> str: """ Build an MLAG Port-Channel interface description. If a jinja template is configured, use it. - If not, use MLAG_PEER__Po + If not, use the default template as a format string template. Available data: + - interface + - peer_interface + - mlag_peer + - mlag_port_channel_id + - mlag_peer_port_channel_id - mpls_overlay_role - mpls_lsr - overlay_routing_protocol - type. """ if template_path := self.shared_utils.interface_descriptions_templates.get("mlag_port_channel_interfaces"): - return self._template(template_path) + return self._template( + template_path, + mlag_interfaces=data.mlag_interfaces, + mlag_peer=data.mlag_peer, + mlag_port_channel_id=data.mlag_port_channel_id, + ) + + return AvdStringFormatter().format( + self.shared_utils.mlag_port_channel_description, + **strip_null_from_data( + { + "mlag_peer": data.mlag_peer, + "interface": data.interface, + "peer_interface": data.peer_interface, + "mlag_port_channel_id": data.mlag_port_channel_id, + "mlag_peer_port_channel_id": data.mlag_peer_port_channel_id, + } + ), + ) - return f"MLAG_PEER_{data.mlag_peer}_Po{data.mlag_port_channel_id}" + def mlag_peer_svi(self, data: InterfaceDescriptionData) -> str: + """ + Build an MLAG Peering SVI description. + + Available data: + - interface + - mlag_peer + - mlag_peer_vlan + - mpls_overlay_role + - mpls_lsr + - overlay_routing_protocol + - type. + """ + return AvdStringFormatter().format( + self.shared_utils.mlag_peer_svi_description, + **strip_null_from_data( + { + "mlag_peer": data.mlag_peer, + "interface": data.interface, + "mlag_peer_vlan": data.mlag_peer_vlan, + } + ), + ) + + def mlag_peer_l3_svi(self, data: InterfaceDescriptionData) -> str: + """ + Build an MLAG Peering SVI description. + + Available data: + - interface + - mlag_peer + - mlag_peer_l3_vlan + - mpls_overlay_role + - mpls_lsr + - overlay_routing_protocol + - type. + """ + return AvdStringFormatter().format( + self.shared_utils.mlag_peer_l3_svi_description, + **strip_null_from_data( + { + "mlag_peer": data.mlag_peer, + "interface": data.interface, + "mlag_peer_l3_vlan": data.mlag_peer_l3_vlan, + } + ), + ) + + def mlag_peer_l3_vrf_svi(self, data: InterfaceDescriptionData) -> str: + """ + Build an MLAG Peering SVI description. + + Available data: + - interface + - vlan + - vrf + - mlag_peer + - mpls_overlay_role + - mpls_lsr + - overlay_routing_protocol + - type. + """ + return AvdStringFormatter().format( + self.shared_utils.mlag_peer_l3_vrf_svi_description, + **strip_null_from_data( + { + "mlag_peer": data.mlag_peer, + "interface": data.interface, + "vlan": data.vlan, + "vrf": data.vrf, + } + ), + ) def connected_endpoints_ethernet_interface(self, data: InterfaceDescriptionData) -> str: """ Build a connected endpoint Ethernet interface description. If a jinja template is configured, use it. - If not, use the adapter.description or default to _ + If not, use the adapter.description as a format string template if set. + Finally fall back to default templates depending on this being a network_port or not. Available data: - peer + - peer_type - peer_interface - description - mpls_overlay_role @@ -165,25 +283,46 @@ def connected_endpoints_ethernet_interface(self, data: InterfaceDescriptionData) - type. """ if template_path := self.shared_utils.interface_descriptions_templates.get("connected_endpoints_ethernet_interfaces"): - return self._template(template_path, peer=data.peer, peer_interface=data.peer_interface, adapter_description=data.description) + return self._template( + template_path, + peer=data.peer, + peer_interface=data.peer_interface, + adapter_description=data.description, + peer_type=data.peer_type, + ) if data.description: - return data.description - - elements = [data.peer, data.peer_interface] - return "_".join([str(element) for element in elements if element is not None]) + description = data.description + elif data.peer_type == "network_port": + description = self.shared_utils.default_network_ports_description + else: + description = self.shared_utils.default_connected_endpoints_description + + return AvdStringFormatter().format( + description, + **strip_null_from_data( + { + "endpoint": data.peer, + "endpoint_port": data.peer_interface, + "endpoint_type": data.peer_type, + } + ), + ) def connected_endpoints_port_channel_interface(self, data: InterfaceDescriptionData) -> str: """ Build a connected endpoint Port-channel description. If a jinja template is configured, use it. - If not, return the _ or - default to _ + If not, use the port_channel.description as a format string template if set. + Finally fall back to default templates depending on this being a network_port or not. Available data: - peer + - peer_interface + - peer_type - description + - port_channel_id - port_channel_description - mpls_overlay_role - mpls_lsr @@ -194,12 +333,47 @@ def connected_endpoints_port_channel_interface(self, data: InterfaceDescriptionD return self._template( template_path, peer=data.peer, + adapter_port_channel_id=data.port_channel_id, adapter_port_channel_description=data.port_channel_description, adapter_description=data.description, ) - elements = [data.description or data.peer, data.port_channel_description] - return "_".join([str(element) for element in elements if element is not None]) + if data.port_channel_description: + port_channel_description = data.port_channel_description + elif data.peer_type == "network_port": + port_channel_description = self.shared_utils.default_network_ports_port_channel_description + else: + port_channel_description = self.shared_utils.default_connected_endpoints_port_channel_description + + # Template the adapter description in case it is being referenced in the port_channel_description + adapter_description = ( + AvdStringFormatter().format( + data.description, + **strip_null_from_data( + { + "endpoint": data.peer, + "endpoint_port": data.peer_interface, + "endpoint_type": data.peer_type, + } + ), + ) + if data.description and "adapter_description" in port_channel_description + else data.description + ) + + return AvdStringFormatter().format( + port_channel_description, + **strip_null_from_data( + { + "endpoint": data.peer, + "endpoint_port_channel": data.peer_interface, + "endpoint_type": data.peer_type, + "port_channel_id": data.port_channel_id, + "adapter_description": adapter_description, + "adapter_description_or_endpoint": adapter_description or data.peer, + } + ), + ) def router_id_loopback_interface(self, data: InterfaceDescriptionData) -> str: """ @@ -212,45 +386,59 @@ def router_id_loopback_interface(self, data: InterfaceDescriptionData) -> str: - overlay_routing_protocol - type. """ - if template_path := self.shared_utils.interface_descriptions_templates.get("overlay_loopback_interface"): - return self._template(template_path, overlay_loopback_description=data.description) + if template_path := default( + self.shared_utils.interface_descriptions_templates.get("router_id_loopback_interface"), + self.shared_utils.interface_descriptions_templates.get("overlay_loopback_interface"), + ): + return self._template(template_path, overlay_loopback_description=data.description, router_id_loopback_description=data.description) - if data.description is not None: - return data.description + return data.description - if data.mpls_overlay_role in ["server", "client"]: - return "MPLS_Overlay_peering" + def vtep_loopback_interface(self, data: InterfaceDescriptionData) -> str: + """ + Build VTEP loopback interface description. - if data.mpls_lsr is True: - return "LSR_Router_ID" + Available data: + - description + - mpls_overlay_role + - mpls_lsr + - overlay_routing_protocol + - type + """ + if template_path := self.shared_utils.interface_descriptions_templates.get("vtep_loopback_interface"): + return self._template(template_path, vtep_loopback_description=data.description) - if self.shared_utils.is_wan_router: - return "Router_ID" + return data.description - # Covers L2LS - if data.overlay_routing_protocol == "none": - return "Router_ID" + def wan_ha_ethernet_interface(self, data: InterfaceDescriptionData) -> str: + """ + Build WAN HA ethernet interface description. - # Note that the current code will render this for HER and others - return "EVPN_Overlay_Peering" + Available data: + - interface + - peer + - peer_interface + - mpls_overlay_role + - mpls_lsr + - overlay_routing_protocol + - type + """ + return f"WAN_HA_{data.peer}_{data.peer_interface}" - def vtep_loopback_interface( - self, - data: InterfaceDescriptionData, # pylint: disable=unused-argument # NOSONAR # noqa: ARG002 - ) -> str: + def wan_ha_port_channel_interface(self, data: InterfaceDescriptionData) -> str: """ - Build VTEP loopback interface description. + Build WAN HA port-channel interface description. Available data: + - interface + - peer + - peer_interface - mpls_overlay_role - mpls_lsr - overlay_routing_protocol - type """ - if template_path := self.shared_utils.interface_descriptions_templates.get("vtep_loopback_interface"): - return self._template(template_path) - - return "VTEP_VXLAN_Tunnel_Source" + return f"WAN_HA_{data.peer}_{data.peer_interface}" class InterfaceDescriptionData: @@ -279,8 +467,14 @@ class InterfaceDescriptionData: """Interface of peer""" peer_channel_group_id: int | None """Port channel ID of peer""" + peer_type: str | None + """Type of peer""" + port_channel_id: int | None + """Port channel ID""" port_channel_description: str | None """Set description for port-channel""" + vlan: int | None + """VLAN ID""" vrf: str | None """Interface VRF""" wan_carrier: str | None @@ -297,7 +491,10 @@ def __init__( peer: str | None = None, peer_interface: str | None = None, peer_channel_group_id: int | None = None, + peer_type: str | None = None, + port_channel_id: int | None = None, port_channel_description: str | None = None, + vlan: int | None = None, vrf: str | None = None, wan_carrier: str | None = None, wan_circuit_id: str | None = None, @@ -309,31 +506,50 @@ def __init__( self.peer = peer self.peer_interface = peer_interface self.peer_channel_group_id = peer_channel_group_id + self.peer_type = peer_type + self.port_channel_id = port_channel_id self.port_channel_description = port_channel_description + self.vlan = vlan self.vrf = vrf self.wan_carrier = wan_carrier self.wan_circuit_id = wan_circuit_id - @cached_property - def mpls_overlay_role(self) -> str: + @property + def mpls_overlay_role(self) -> str | None: return self._shared_utils.mpls_overlay_role - @cached_property + @property def overlay_routing_protocol(self) -> str: return self._shared_utils.overlay_routing_protocol - @cached_property + @property + def mlag_interfaces(self) -> list: + return self._shared_utils.mlag_interfaces + + @property def mlag_peer(self) -> str: return self._shared_utils.mlag_peer - @cached_property - def mlag_port_channel_id(self) -> str: + @property + def mlag_port_channel_id(self) -> int: return self._shared_utils.mlag_port_channel_id - @cached_property - def mpls_lsr(self) -> str: + @property + def mlag_peer_port_channel_id(self) -> int: + return self._shared_utils.mlag_peer_port_channel_id + + @property + def mlag_peer_vlan(self) -> int: + return self._shared_utils.mlag_peer_vlan + + @property + def mlag_peer_l3_vlan(self) -> int | None: + return self._shared_utils.mlag_peer_l3_vlan + + @property + def mpls_lsr(self) -> bool: return self._shared_utils.mpls_lsr - @cached_property + @property def type(self) -> str: return self._shared_utils.type diff --git a/python-avd/pyavd/_eos_designs/ip_addressing/__init__.py b/python-avd/pyavd/api/ip_addressing/__init__.py similarity index 91% rename from python-avd/pyavd/_eos_designs/ip_addressing/__init__.py rename to python-avd/pyavd/api/ip_addressing/__init__.py index b90127e3316..352bb60e778 100644 --- a/python-avd/pyavd/_eos_designs/ip_addressing/__init__.py +++ b/python-avd/pyavd/api/ip_addressing/__init__.py @@ -314,16 +314,12 @@ def vrf_loopback_ip(self, pool: str) -> str: def evpn_underlay_l3_multicast_group( self, underlay_l3_multicast_group_ipv4_pool: str, - vrf_vni: int, - vrf_id: int, # pylint: disable=unused-argument # noqa: ARG002 + vrf_vni: int, # pylint: disable=unused-argument # noqa: ARG002 + vrf_id: int, evpn_underlay_l3_multicast_group_ipv4_pool_offset: int, ) -> str: - """ - Return IP address to be used for EVPN underlay L3 multicast group. - - TODO: Change algorithm to use VRF ID instead of VRF VNI as offset. - """ - offset = vrf_vni - 1 + evpn_underlay_l3_multicast_group_ipv4_pool_offset + """Return IP address to be used for EVPN underlay L3 multicast group.""" + offset = vrf_id - 1 + evpn_underlay_l3_multicast_group_ipv4_pool_offset return get_ip_from_pool(underlay_l3_multicast_group_ipv4_pool, 32, offset, 0) def evpn_underlay_l2_multicast_group( @@ -335,3 +331,27 @@ def evpn_underlay_l2_multicast_group( """Return IP address to be used for EVPN underlay L2 multicast group.""" offset = vlan_id - 1 + underlay_l2_multicast_group_ipv4_pool_offset return get_ip_from_pool(underlay_l2_multicast_group_ipv4_pool, 32, offset, 0) + + def wan_ha_ip(self) -> str: + """Return the WAN HA local IP address.""" + wan_ha_ipv4_pool = self.shared_utils.wan_ha_ipv4_pool + prefixlen = self.shared_utils.fabric_ip_addressing_wan_ha_ipv4_prefix_length + + if self.shared_utils.is_first_ha_peer: + ip_address = get_ip_from_pool(wan_ha_ipv4_pool, prefixlen, 0, 0) + else: + ip_address = get_ip_from_pool(wan_ha_ipv4_pool, prefixlen, 0, 1) + + return f"{ip_address}/{prefixlen}" + + def wan_ha_peer_ip(self) -> str: + """Return the WAN HA peer IP.""" + wan_ha_ipv4_pool = self.shared_utils.wan_ha_ipv4_pool + prefixlen = self.shared_utils.fabric_ip_addressing_wan_ha_ipv4_prefix_length + + if self.shared_utils.is_first_ha_peer: + ip_address = get_ip_from_pool(wan_ha_ipv4_pool, prefixlen, 0, 1) + else: + ip_address = get_ip_from_pool(wan_ha_ipv4_pool, prefixlen, 0, 0) + + return f"{ip_address}/{prefixlen}" diff --git a/python-avd/pyavd/_eos_designs/ip_addressing/utils.py b/python-avd/pyavd/api/ip_addressing/utils.py similarity index 100% rename from python-avd/pyavd/_eos_designs/ip_addressing/utils.py rename to python-avd/pyavd/api/ip_addressing/utils.py diff --git a/python-avd/pyavd/avd_schema_tools.py b/python-avd/pyavd/avd_schema_tools.py index 9c71b54b480..9c6deb44684 100644 --- a/python-avd/pyavd/avd_schema_tools.py +++ b/python-avd/pyavd/avd_schema_tools.py @@ -5,6 +5,10 @@ from typing import TYPE_CHECKING +from typing_extensions import Self + +from .constants import EOS_CLI_CONFIG_GEN_SCHEMA_ID, EOS_DESIGNS_SCHEMA_ID + if TYPE_CHECKING: from collections.abc import Generator @@ -124,3 +128,21 @@ def convert_and_validate_data(self, data: dict) -> dict: self.convert_data(data) res = self.validate_data(data) return {"failed": res.failed, "errors": res.validation_errors} + + +class EosDesignsAvdSchemaTools(AvdSchemaTools): + """Singleton AvdSchemaTools instance for eos_designs schema.""" + + def __new__(cls) -> Self: + if not hasattr(cls, "instance"): + cls.instance = AvdSchemaTools(schema_id=EOS_DESIGNS_SCHEMA_ID) + return cls.instance + + +class EosCliConfigGenAvdSchemaTools(AvdSchemaTools): + """Singleton AvdSchemaTools instance for eos_cli_config_gen schema.""" + + def __new__(cls) -> Self: + if not hasattr(cls, "instance"): + cls.instance = AvdSchemaTools(schema_id=EOS_CLI_CONFIG_GEN_SCHEMA_ID) + return cls.instance diff --git a/python-avd/pyavd/constants.py b/python-avd/pyavd/constants.py index 490f5b66043..dbd65ccea82 100644 --- a/python-avd/pyavd/constants.py +++ b/python-avd/pyavd/constants.py @@ -6,8 +6,10 @@ RUNNING_FROM_SRC = Path(__file__).parent.joinpath("running_from_src.txt").exists() EOS_CLI_CONFIG_GEN_SCHEMA_ID = "eos_cli_config_gen" EOS_DESIGNS_SCHEMA_ID = "eos_designs" -JINJA2_CONFIG_TEMPLATE = "eos-intended-config.j2" -JINJA2_DOCUMENTAITON_TEMPLATE = "eos-device-documentation.j2" +EOS_CLI_CONFIG_GEN_JINJA2_CONFIG_TEMPLATE = "eos-intended-config.j2" +EOS_CLI_CONFIG_GEN_JINJA2_DOCUMENTAITON_TEMPLATE = "eos-device-documentation.j2" JINJA2_EXTENSIONS = ["jinja2.ext.loopcontrols", "jinja2.ext.do", "jinja2.ext.i18n"] -JINJA2_PRECOMPILED_TEMPLATE_PATH = Path(__file__).parent.joinpath("_eos_cli_config_gen/j2templates", "compiled_templates") -JINJA2_TEMPLATE_PATHS = [Path(__file__).parent.joinpath("_eos_cli_config_gen/j2templates")] +EOS_CLI_CONFIG_GEN_JINJA2_TEMPLATE_PATH = Path(__file__).parent.joinpath("_eos_cli_config_gen/j2templates") +EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH = EOS_CLI_CONFIG_GEN_JINJA2_TEMPLATE_PATH.joinpath("compiled_templates") +EOS_DESIGNS_JINJA2_TEMPLATE_PATH = Path(__file__).parent.joinpath("_eos_designs/j2templates") +EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH = EOS_DESIGNS_JINJA2_TEMPLATE_PATH.joinpath("compiled_templates") diff --git a/python-avd/pyavd/get_avd_facts.py b/python-avd/pyavd/get_avd_facts.py index 7132141dc0c..09ce29e94cc 100644 --- a/python-avd/pyavd/get_avd_facts.py +++ b/python-avd/pyavd/get_avd_facts.py @@ -68,6 +68,7 @@ def _create_avd_switch_facts_instances(all_inputs: dict[str, dict]) -> dict: # pylint: disable=import-outside-toplevel from ._eos_designs.eos_designs_facts import EosDesignsFacts from ._eos_designs.shared_utils import SharedUtils + from .avd_schema_tools import EosDesignsAvdSchemaTools # pylint: enable=import-outside-toplevel @@ -81,7 +82,7 @@ def _create_avd_switch_facts_instances(all_inputs: dict[str, dict]) -> dict: ) # Initialize SharedUtils class to be passed to each python_module below. - shared_utils = SharedUtils(hostvars=mapped_hostvars, templar=None) + shared_utils = SharedUtils(hostvars=mapped_hostvars, templar=None, schema=EosDesignsAvdSchemaTools().avdschema) # Notice templar is set as None, so any calls to jinja templates will fail with Nonetype has no "_loader" attribute avd_switch_facts[hostname] = {"switch": EosDesignsFacts(hostvars=mapped_hostvars, shared_utils=shared_utils)} diff --git a/python-avd/pyavd/get_device_config.py b/python-avd/pyavd/get_device_config.py index 249d294487e..f353067ed28 100644 --- a/python-avd/pyavd/get_device_config.py +++ b/python-avd/pyavd/get_device_config.py @@ -15,10 +15,10 @@ def get_device_config(structured_config: dict) -> str: Device configuration in EOS CLI format. """ # pylint: disable=import-outside-toplevel - from .constants import JINJA2_CONFIG_TEMPLATE + from .constants import EOS_CLI_CONFIG_GEN_JINJA2_CONFIG_TEMPLATE, EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH from .templater import Templar # pylint: enable=import-outside-toplevel - templar = Templar() - return templar.render_template_from_file(JINJA2_CONFIG_TEMPLATE, structured_config) + templar = Templar(precompiled_templates_path=EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH) + return templar.render_template_from_file(EOS_CLI_CONFIG_GEN_JINJA2_CONFIG_TEMPLATE, structured_config) diff --git a/python-avd/pyavd/get_device_doc.py b/python-avd/pyavd/get_device_doc.py index 47cfd87aae2..81abf5173b0 100644 --- a/python-avd/pyavd/get_device_doc.py +++ b/python-avd/pyavd/get_device_doc.py @@ -16,14 +16,14 @@ def get_device_doc(structured_config: dict, add_md_toc: bool = False) -> str: Device documentation in Markdown format. """ # pylint: disable=import-outside-toplevel - from .constants import JINJA2_DOCUMENTAITON_TEMPLATE + from .constants import EOS_CLI_CONFIG_GEN_JINJA2_DOCUMENTAITON_TEMPLATE, EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH from .j2filters import add_md_toc as filter_add_md_toc from .templater import Templar # pylint: enable=import-outside-toplevel - templar = Templar() - result: str = templar.render_template_from_file(JINJA2_DOCUMENTAITON_TEMPLATE, structured_config) + templar = Templar(precompiled_templates_path=EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH) + result: str = templar.render_template_from_file(EOS_CLI_CONFIG_GEN_JINJA2_DOCUMENTAITON_TEMPLATE, structured_config) if add_md_toc: return filter_add_md_toc(result, skip_lines=3) diff --git a/python-avd/pyavd/get_device_structured_config.py b/python-avd/pyavd/get_device_structured_config.py index 053ca166347..66c6be3bc49 100644 --- a/python-avd/pyavd/get_device_structured_config.py +++ b/python-avd/pyavd/get_device_structured_config.py @@ -21,7 +21,7 @@ def get_device_structured_config(hostname: str, inputs: dict, avd_facts: dict) - from ._eos_designs.structured_config import get_structured_config from ._errors import AristaAvdError from .avd_schema_tools import AvdSchemaTools - from .constants import EOS_CLI_CONFIG_GEN_SCHEMA_ID + from .constants import EOS_CLI_CONFIG_GEN_SCHEMA_ID, EOS_DESIGNS_SCHEMA_ID # pylint: enable=import-outside-toplevel # @@ -36,17 +36,18 @@ def get_device_structured_config(hostname: str, inputs: dict, avd_facts: dict) - inputs, ) - # We do not validate input variables in this stage (done in "validate_inputs") - # So we feed the vendored code an empty schema to avoid failures. - input_schema_tools = AvdSchemaTools(schema={}) + input_schema_tools = AvdSchemaTools(schema_id=EOS_DESIGNS_SCHEMA_ID) output_schema_tools = AvdSchemaTools(schema_id=EOS_CLI_CONFIG_GEN_SCHEMA_ID) result = {} + + # We do not validate input variables in this stage (done in "validate_inputs") structured_config = get_structured_config( vars=mapped_hostvars, input_schema_tools=input_schema_tools, output_schema_tools=output_schema_tools, result=result, templar=None, + validate=False, ) if result.get("failed"): msg = f"{[str(error) for error in result['errors']]}" diff --git a/python-avd/pyavd/get_fabric_documentation.py b/python-avd/pyavd/get_fabric_documentation.py new file mode 100644 index 00000000000..cd44c22e5f2 --- /dev/null +++ b/python-avd/pyavd/get_fabric_documentation.py @@ -0,0 +1,106 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. + +from pyavd._eos_designs.fabric_documentation_facts import FabricDocumentationFacts + + +class FabricDocumentation: + fabric_documentation: str = "" + topology_csv: str = "" + p2p_links_csv: str = "" + + +def get_fabric_documentation( + avd_facts: dict[str, dict], + structured_configs: dict[str, dict], + fabric_name: str, + fabric_documentation: bool = True, + include_connected_endpoints: bool = False, + topology_csv: bool = False, + p2p_links_csv: bool = False, +) -> FabricDocumentation: + """ + Build and return the AVD fabric documentation. + + The returned object will contain the content of the requested documentation areas: + - Fabric documentation as Markdown, optionally including connected endpoints. + - Topology CSV containing the physical interface connections for every device. + - P2P links CSV containing the Routed point-to-point links. + + Args: + avd_facts: Dictionary of avd_facts as returned from `pyavd.get_avd_facts`. + structured_configs: Dictionary of structured configurations for all devices, keyed by hostname. + fabric_name: Name of the fabric. Only used for the main heading in the Markdown documentation. + fabric_documentation: Returns fabric documentation when set to True. + include_connected_endpoints: Includes connected endpoints in the fabric documentation when set to True. + topology_csv: Returns topology CSV when set to True. + p2p_links_csv: Returns P2P links CSV when set to True. + + Returns: + FabricDocumentation object containing the requested documentation areas. + """ + # pylint: disable=import-outside-toplevel + from pyavd.j2filters import add_md_toc + + from .constants import EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH + from .templater import Templar + # pylint: enable=import-outside-toplevel + + fabric_documentation_facts = FabricDocumentationFacts(avd_facts, structured_configs, fabric_name, include_connected_endpoints) + result = FabricDocumentation() + doc_templar = Templar(precompiled_templates_path=EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH) + if fabric_documentation: + fabric_documentation_facts_dict = fabric_documentation_facts.render() + result.fabric_documentation = doc_templar.render_template_from_file("fabric_documentation.j2", fabric_documentation_facts_dict) + if include_connected_endpoints: + result.fabric_documentation += "\n" + doc_templar.render_template_from_file("connected_endpoints_documentation.j2", fabric_documentation_facts_dict) + + result.fabric_documentation = add_md_toc(result.fabric_documentation, skip_lines=3) + + if topology_csv: + result.topology_csv = _get_topology_csv(fabric_documentation_facts) + if p2p_links_csv: + result.p2p_links_csv = _get_p2p_links_csv(fabric_documentation_facts) + return result + + +def _get_topology_csv(fabric_documentation_facts: FabricDocumentationFacts) -> str: + # pylint: disable=import-outside-toplevel + from csv import writer + from io import StringIO + # pylint: enable=import-outside-toplevel + + csv_content = StringIO() + csv_writer = writer(csv_content, lineterminator="\n") + csv_writer.writerow(("Node Type", "Node", "Node Interface", "Peer Type", "Peer Node", "Peer Interface", "Node Interface Enabled")) + csv_writer.writerows(fabric_documentation_facts.get_physical_links()) + csv_content.seek(0) + return csv_content.read() + + +def _get_p2p_links_csv(fabric_documentation_facts: FabricDocumentationFacts) -> str: + # pylint: disable=import-outside-toplevel + from csv import writer + from io import StringIO + # pylint: enable=import-outside-toplevel + + csv_content = StringIO() + csv_writer = writer(csv_content, lineterminator="\n") + csv_writer.writerow(("Type", "Node", "Node Interface", "Leaf IP Address", "Peer Type", "Peer Node", "Peer Interface", "Peer IP Address")) + csv_writer.writerows( + ( + topology_link["type"], + topology_link["node"], + topology_link["node_interface"], + topology_link["node_ip_address"], + topology_link["peer_type"], + topology_link["peer"], + topology_link["peer_interface"], + topology_link["peer_ip_address"], + ) + for topology_link in fabric_documentation_facts.topology_links + if topology_link["routed"] + ) + csv_content.seek(0) + return csv_content.read() diff --git a/python-avd/pyavd/j2filters/add_md_toc.py b/python-avd/pyavd/j2filters/add_md_toc.py index 49f332cf745..60ec9c12be8 100644 --- a/python-avd/pyavd/j2filters/add_md_toc.py +++ b/python-avd/pyavd/j2filters/add_md_toc.py @@ -10,12 +10,12 @@ def add_md_toc(md_input: str, skip_lines: int = 0, toc_levels: int = 3, toc_marker: str = "") -> str: - """Parse the input MarkDown and add a TOC between the toc_markers. + """Parse the input Markdown and add a TOC between the toc_markers. Parameters ---------- md_input: str - MarkDown which will be processed + Markdown which will be processed skip_lines: int, optional Skip first x lines when parsing MD file default: 0 @@ -65,7 +65,7 @@ def add_md_toc(md_input: str, skip_lines: int = 0, toc_levels: int = 3, toc_mark if re.match(HEADING_PATTERN, line): # This is a heading. # First get info for this line, including building an anchor and adding this anchor to all_anchor_ids. - # This is important, since skipped headings will still be associated with an anchor-id during parsing of the final MarkDown file. + # This is important, since skipped headings will still be associated with an anchor-id during parsing of the final Markdown file. level, text, anchor_id = _get_line_info(line, all_anchor_ids) # Do not create a TOC line if we are skipping or at a deeper level than we want. @@ -113,7 +113,7 @@ def _get_anchor_id(text: str, all_anchor_ids: list[str]) -> str: """ Returns a unique anchor_id after adding it to 'all_anchor_ids'. - The logic here follow the auto-id generation algorithm of the MarkDown spec. + The logic here follow the auto-id generation algorithm of the Markdown spec. Parameters ---------- diff --git a/python-avd/pyavd/j2filters/range_expand.py b/python-avd/pyavd/j2filters/range_expand.py index d37a8afad6d..303625beed0 100644 --- a/python-avd/pyavd/j2filters/range_expand.py +++ b/python-avd/pyavd/j2filters/range_expand.py @@ -52,7 +52,7 @@ def expand_interfaces(interface_string: str, data: InterfaceData) -> list: def expand_parent_interfaces(interface_string: str, data: InterfaceData) -> list: result = [] - if data.last_parent_interface: + if data.last_parent_interface is not None: if data.first_parent_interface > data.last_parent_interface: msg = ( f"Range {data.one_range} could not be expanded because the first interface {data.first_parent_interface} is larger than last" @@ -68,7 +68,7 @@ def expand_parent_interfaces(interface_string: str, data: InterfaceData) -> list def expand_module(interface_string: str, data: InterfaceData) -> list: result = [] - if data.last_module: + if data.last_module is not None: if data.first_module > data.last_module: msg = ( f"Range {data.one_range} could not be expanded because the first module {data.first_module} is larger than last module" diff --git a/python-avd/pyavd/templater.py b/python-avd/pyavd/templater.py index cbd7b39c0d8..b46692e414e 100644 --- a/python-avd/pyavd/templater.py +++ b/python-avd/pyavd/templater.py @@ -8,7 +8,7 @@ from jinja2 import ChoiceLoader, Environment, FileSystemLoader, ModuleLoader, StrictUndefined -from .constants import JINJA2_EXTENSIONS, JINJA2_PRECOMPILED_TEMPLATE_PATH, JINJA2_TEMPLATE_PATHS, RUNNING_FROM_SRC +from .constants import JINJA2_EXTENSIONS, RUNNING_FROM_SRC if TYPE_CHECKING: import os @@ -42,15 +42,14 @@ def __contains__(self, _item: int) -> Undefined: class Templar: - def __init__(self, searchpaths: list[str] | None = None) -> None: + def __init__(self, precompiled_templates_path: str, searchpaths: list[str] | None = None) -> None: if not RUNNING_FROM_SRC: - self.loader = ModuleLoader(JINJA2_PRECOMPILED_TEMPLATE_PATH) + self.loader = ModuleLoader(precompiled_templates_path) else: searchpaths = searchpaths or [] - searchpaths.extend(JINJA2_TEMPLATE_PATHS) self.loader = ChoiceLoader( [ - ModuleLoader(JINJA2_PRECOMPILED_TEMPLATE_PATH), + ModuleLoader(precompiled_templates_path), FileSystemLoader(searchpaths), ], ) @@ -113,7 +112,7 @@ def import_filters_and_tests(self) -> None: def render_template_from_file(self, template_file: str, template_vars: dict) -> str: return self.environment.get_template(template_file).render(template_vars) - def compile_templates_in_paths(self, searchpaths: list[str]) -> None: + def compile_templates_in_paths(self, precompiled_templates_path: str, searchpaths: list[str]) -> None: """ Compile the Jinja2 templates in the path. @@ -128,7 +127,7 @@ def compile_templates_in_paths(self, searchpaths: list[str]) -> None: self.environment.compile_templates( zip=None, log_function=print, - target=JINJA2_PRECOMPILED_TEMPLATE_PATH, + target=precompiled_templates_path, ignore_errors=False, ) self.environment.loader = self.loader diff --git a/python-avd/pyavd/validate_inputs.py b/python-avd/pyavd/validate_inputs.py index cb6652145e3..0c8bf3ba14a 100644 --- a/python-avd/pyavd/validate_inputs.py +++ b/python-avd/pyavd/validate_inputs.py @@ -8,8 +8,6 @@ if TYPE_CHECKING: from .validation_result import ValidationResult -eos_designs_schema_tools = None - def validate_inputs(inputs: dict) -> ValidationResult: """ @@ -24,24 +22,11 @@ def validate_inputs(inputs: dict) -> ValidationResult: Validation result object with any validation errors or deprecation warnings. """ # pylint: disable=import-outside-toplevel - from ._eos_designs.shared_utils import SharedUtils - from .avd_schema_tools import AvdSchemaTools - from .constants import EOS_DESIGNS_SCHEMA_ID + from .avd_schema_tools import EosDesignsAvdSchemaTools # pylint: enable=import-outside-toplevel - # Initialize a global instance of eos_designs_schema_tools - global eos_designs_schema_tools # noqa: PLW0603 TODO: improve code without global - if eos_designs_schema_tools is None: - eos_designs_schema_tools = AvdSchemaTools(schema_id=EOS_DESIGNS_SCHEMA_ID) - - # Initialize SharedUtils class to fetch default variables below. - shared_utils = SharedUtils(hostvars=inputs, templar=None) - - # Insert dynamic keys into the input data if not set. - # These keys are required by the schema, but the default values are set inside shared_utils. - inputs.setdefault("node_type_keys", shared_utils.node_type_keys) - inputs.setdefault("connected_endpoints_keys", shared_utils.connected_endpoints_keys) - inputs.setdefault("network_services_keys", shared_utils.network_services_keys) + + eos_designs_schema_tools = EosDesignsAvdSchemaTools() # Inplace conversion of data deprecation_warnings = eos_designs_schema_tools.convert_data(inputs) diff --git a/python-avd/pyavd/validate_structured_config.py b/python-avd/pyavd/validate_structured_config.py index 102e159e3df..a8d0c17ce51 100644 --- a/python-avd/pyavd/validate_structured_config.py +++ b/python-avd/pyavd/validate_structured_config.py @@ -8,8 +8,6 @@ if TYPE_CHECKING: from .validation_result import ValidationResult -eos_cli_config_gen_schema_tools = None - def validate_structured_config(structured_config: dict) -> ValidationResult: """ @@ -24,15 +22,11 @@ def validate_structured_config(structured_config: dict) -> ValidationResult: Validation result object with any validation errors or deprecation warnings. """ # pylint: disable=import-outside-toplevel - from .avd_schema_tools import AvdSchemaTools - from .constants import EOS_CLI_CONFIG_GEN_SCHEMA_ID + from .avd_schema_tools import EosCliConfigGenAvdSchemaTools # pylint: enable=import-outside-toplevel - # Initialize a global instance of eos_cli_config_gen_schema_tools - global eos_cli_config_gen_schema_tools # noqa: PLW0603 TODO: improve code to avoid globals - if eos_cli_config_gen_schema_tools is None: - eos_cli_config_gen_schema_tools = AvdSchemaTools(schema_id=EOS_CLI_CONFIG_GEN_SCHEMA_ID) + eos_cli_config_gen_schema_tools = EosCliConfigGenAvdSchemaTools() # Inplace conversion of data deprecation_warnings = eos_cli_config_gen_schema_tools.convert_data(structured_config) diff --git a/python-avd/pyproject.toml b/python-avd/pyproject.toml index d251bbca1d7..fa675005a9c 100644 --- a/python-avd/pyproject.toml +++ b/python-avd/pyproject.toml @@ -23,7 +23,6 @@ dependencies = [ "cryptography>=38.0.4", "deepmerge>=1.1.0", "Jinja2>=3.0", - "jsonschema>=4.10.3", "requests>=2.27.0", ] @@ -38,7 +37,7 @@ ansible = [ ] ansible-collection = [ "anta>=1.0.0", - "cvprac>=1.3.1", + "cvprac>=1.4.0", "netaddr>=0.7.19", "PyYAML>=6.0.0", "treelib>=1.5.5", diff --git a/python-avd/schema_tools/generate_docs/tablerowgen.py b/python-avd/schema_tools/generate_docs/tablerowgen.py index a94df9d4a9a..c43c0c02f6a 100644 --- a/python-avd/schema_tools/generate_docs/tablerowgen.py +++ b/python-avd/schema_tools/generate_docs/tablerowgen.py @@ -210,7 +210,7 @@ def get_restrictions(self) -> list: restrictions = [] valid_values = [] if getattr(self.schema, "dynamic_valid_values", None): - valid_values.append(f"") + valid_values.extend(f"" for dynamic_valid_value in self.schema.dynamic_valid_values) if getattr(self.schema, "valid_values", None): valid_values.extend(self.schema.valid_values) diff --git a/python-avd/schema_tools/generate_docs/yamllinegen.py b/python-avd/schema_tools/generate_docs/yamllinegen.py index affe12ff446..45d3c7f2b4a 100644 --- a/python-avd/schema_tools/generate_docs/yamllinegen.py +++ b/python-avd/schema_tools/generate_docs/yamllinegen.py @@ -217,7 +217,7 @@ def get_restrictions(self) -> list: restrictions = [] valid_values = [] if getattr(self.schema, "dynamic_valid_values", None): - valid_values.append(f"") + valid_values.extend(f"" for dynamic_valid_value in self.schema.dynamic_valid_values) if getattr(self.schema, "valid_values", None): valid_values.extend(self.schema.valid_values) diff --git a/python-avd/schema_tools/metaschema/meta_schema_model.py b/python-avd/schema_tools/metaschema/meta_schema_model.py index 8fd52221adf..8f625c2426d 100644 --- a/python-avd/schema_tools/metaschema/meta_schema_model.py +++ b/python-avd/schema_tools/metaschema/meta_schema_model.py @@ -242,9 +242,9 @@ class ConvertType(str, Enum): """Maximum value""" valid_values: list[int] | None = None """List of valid values""" - dynamic_valid_values: str | None = None + dynamic_valid_values: list[str] | None = None """ - Path to variable under the parent dictionary containing valid values. + List of path to variable under the parent dictionary containing valid values. Variable path use dot-notation and variable path must be relative to the parent dictionary. If an element of the variable path is a list, every list item will be unpacked. Note that this is building the schema from values in the _data_ being validated! @@ -277,9 +277,9 @@ class ConvertType(str, Enum): """Default value""" valid_values: list[bool] | None = None """List of valid values""" - dynamic_valid_values: str | None = None + dynamic_valid_values: list[str] | None = None """ - Path to variable under the parent dictionary containing valid values. + List of paths to variable under the parent dictionary containing valid values. Variable path use dot-notation and variable path must be relative to the parent dictionary. If an element of the variable path is a list, every list item will be unpacked. Note that this is building the schema from values in the _data_ being validated! @@ -339,9 +339,9 @@ def __str__(self) -> str: """ valid_values: list[str] | None = None """List of valid values""" - dynamic_valid_values: str | None = None + dynamic_valid_values: list[str] | None = None """ - Path to variable under the parent dictionary containing valid values. + List of paths to variable under the parent dictionary containing valid values. Variable path use dot-notation and variable path must be relative to the parent dictionary. If an element of the variable path is a list, every list item will be unpacked. Note that this is building the schema from values in the _data_ being validated! diff --git a/python-avd/scripts/build-schemas.py b/python-avd/scripts/build-schemas.py index 7ab8ebe52c2..80df8fd5b7e 100755 --- a/python-avd/scripts/build-schemas.py +++ b/python-avd/scripts/build-schemas.py @@ -6,6 +6,7 @@ from sys import path from textwrap import indent +import jsonschema from deepmerge import always_merger from yaml import CSafeDumper, CSafeLoader from yaml import dump as yaml_dump @@ -45,6 +46,14 @@ def combine_schemas() -> None: schema_stream.write(yaml_dump(schema, Dumper=CSafeDumper, sort_keys=False)) +def validate_schemas(schema_store: dict) -> None: + """Validate schemas according to metaschema.""" + schema_validator = jsonschema.Draft7Validator(schema_store["avd_meta_schema"]) + for schema_name in SCHEMA_FRAGMENTS_PATHS: + print(f"Validating schema '{schema_name}'") + schema_validator.validate(schema_store[schema_name]) + + def build_schema_tables(schema_store: dict) -> None: """Build schema tables.""" for schema_name in SCHEMA_PATHS: @@ -76,6 +85,7 @@ def main() -> None: combine_schemas() print("Rebuilding pickled schemas") schema_store = create_store(force_rebuild=True) + validate_schemas(schema_store) build_schema_tables(schema_store) diff --git a/python-avd/scripts/compile_templates.py b/python-avd/scripts/compile_templates.py index 3b051c50707..ba74aad8f4c 100755 --- a/python-avd/scripts/compile_templates.py +++ b/python-avd/scripts/compile_templates.py @@ -8,8 +8,17 @@ # Override global path to load pyavd from pwd instead of any installed version. path.insert(0, str(Path(__file__).parent.parent)) -from pyavd.constants import JINJA2_TEMPLATE_PATHS +from pyavd.constants import ( + EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH, + EOS_CLI_CONFIG_GEN_JINJA2_TEMPLATE_PATH, + EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH, + EOS_DESIGNS_JINJA2_TEMPLATE_PATH, +) from pyavd.templater import Templar -templar = Templar() -templar.compile_templates_in_paths(JINJA2_TEMPLATE_PATHS) +templar = Templar(precompiled_templates_path=EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH, searchpaths=[EOS_CLI_CONFIG_GEN_JINJA2_TEMPLATE_PATH]) +templar.compile_templates_in_paths( + precompiled_templates_path=EOS_CLI_CONFIG_GEN_JINJA2_PRECOMPILED_TEMPLATE_PATH, searchpaths=[EOS_CLI_CONFIG_GEN_JINJA2_TEMPLATE_PATH] +) +templar = Templar(precompiled_templates_path=EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH, searchpaths=[EOS_DESIGNS_JINJA2_TEMPLATE_PATH]) +templar.compile_templates_in_paths(precompiled_templates_path=EOS_DESIGNS_JINJA2_PRECOMPILED_TEMPLATE_PATH, searchpaths=[EOS_DESIGNS_JINJA2_TEMPLATE_PATH]) diff --git a/python-avd/tests/pyavd/cv/client/test_async_decorators.py b/python-avd/tests/pyavd/cv/client/test_async_decorators.py new file mode 100644 index 00000000000..b0326bc82f3 --- /dev/null +++ b/python-avd/tests/pyavd/cv/client/test_async_decorators.py @@ -0,0 +1,109 @@ +# Copyright (c) 2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +import pytest + +from pyavd._cv.client.async_decorators import LimitCvVersion, grpc_msg_size_handler +from pyavd._cv.client.exceptions import CVMessageSizeExceeded +from pyavd._cv.client.versioning import CVAAS_VERSION_STRING, CvVersion + +INVALID_VERSION_TESTS = [ + # version , expected_exception + pytest.param("2023.1.0", LookupError("Unsupported version of CloudVision: '2023.1.0'."), id="invalid_version"), + pytest.param("223.1.0", ValueError("Invalid CV Version '223.1.0'. The version must conform to the pattern '.+'"), id="invalid_version_syntax_1"), + pytest.param("cvaas", ValueError("Invalid CV Version 'cvaas'. The version must conform to the pattern '.+'"), id="invalid_version_syntax_2"), +] + +VALID_VERSION_TESTS = [ + # Format: version , expected_response (matched_min_ver, matched_max_ver) + pytest.param("2024.1.0", ("2024.1.0", "2024.1.99"), id="valid_version_1"), + pytest.param("2024.1.5", ("2024.1.0", "2024.1.99"), id="valid_version_2"), + pytest.param("2025.42.25", ("2025.1.0", "2025.99.99"), id="valid_version_3"), + pytest.param(CVAAS_VERSION_STRING, (CVAAS_VERSION_STRING, CVAAS_VERSION_STRING), id="valid_version_4"), +] + +MSG_SIZE_HANDLER_TESTS = [ + # Format: data, max_len, expected_response (list of ints where each entry is one execution and the int is the number of entries covered) + pytest.param([1, 2, 3, 4, 5, 6, 7, 8, 9, 10], 5, [5, 5], id="equal_sized_chunks_1"), + pytest.param([1, 2, 3, 4, 5, 6, 7, 8, 9], 3, [3, 3, 3], id="equal_sized_chunks_2"), + pytest.param([1, 2, 3, 4, 5, 6, 7, 8, 9], 1, [1, 1, 1, 1, 1, 1, 1, 1, 1], id="equal_sized_chunks_3"), + # The items are chunked by calculating a ratio. This ratio rounds up, so the number of items per message is rounded down. So numbers below can look funny. + # This is on purpose since this is actually variable sized items in bytes fitting into messages of 10MB. + # We wish to pack many but also avoid many attempts stepping over the boundary. + pytest.param([1, 2, 3, 4, 5, 6, 7, 8, 9], 4, [3, 3, 3], id="variable_sized_chunks_1"), + pytest.param([1, 2, 3, 4, 5, 6, 7, 8, 9], 5, [4, 4, 1], id="variable_sized_chunks_2"), +] + + +class TestClass: + _cv_version: CvVersion + + def __init__(self, version: CvVersion) -> None: + self._cv_version = version + + @LimitCvVersion(min_ver="2024.1.0", max_ver="2024.1.99") + async def version_limited_method(self) -> tuple[str, str]: + return ("2024.1.0", "2024.1.99") + + @LimitCvVersion(min_ver="2024.2.0", max_ver="2024.99.99") + async def version_limited_method(self) -> tuple[str, str]: # noqa: F811 + return ("2024.2.0", "2024.99.99") + + @LimitCvVersion(min_ver="2025.1.0", max_ver="2025.99.99") + async def version_limited_method(self) -> tuple[str, str]: # noqa: F811 + return ("2025.1.0", "2025.99.99") + + @LimitCvVersion(min_ver=CVAAS_VERSION_STRING, max_ver=CVAAS_VERSION_STRING) + async def version_limited_method(self) -> tuple[str, str]: # noqa: F811 + return (CVAAS_VERSION_STRING, CVAAS_VERSION_STRING) + + @grpc_msg_size_handler(list_field="field") + async def msgsize_limited_method(self, field: list, max_accepted_len: int) -> list[bool]: + # Check if the number of entries is higher than the max accepted length and raise. + if len(field) > max_accepted_len: + e = CVMessageSizeExceeded("Too long") + e.max_size = max_accepted_len + e.size = len(field) + raise e + + # return list with len of fields for this execution. + return [len(field)] + + +@pytest.mark.asyncio +@pytest.mark.parametrize(("version", "expected_exception"), INVALID_VERSION_TESTS) +async def test_invalid_versions(version: str, expected_exception: Exception) -> None: + with pytest.raises(type(expected_exception), match=expected_exception.args[0]): + await TestClass(CvVersion(version)).version_limited_method() + + +@pytest.mark.asyncio +@pytest.mark.parametrize(("version", "expected_response"), VALID_VERSION_TESTS) +async def test_valid_versions(version: str, expected_response: tuple[str, str]) -> None: + resp = await TestClass(CvVersion(version)).version_limited_method() + assert resp == expected_response + + +@pytest.mark.asyncio +@pytest.mark.parametrize(("data", "max_len", "expected_response"), MSG_SIZE_HANDLER_TESTS) +async def test_msg_size_handler(data: list, max_len: int, expected_response: list[int]) -> None: + resp = await TestClass(CvVersion(CVAAS_VERSION_STRING)).msgsize_limited_method(field=data, max_accepted_len=max_len) + assert resp == expected_response + + +@pytest.mark.asyncio +async def test_msg_size_handler_invalid_fuction_return_type() -> None: + def function_not_returning_list(_field: list) -> str: + return "foo" + + with pytest.raises(TypeError, match="grpc_msg_size_handler decorator is unable to bind to the function .+"): + await grpc_msg_size_handler(list_field="_field")(function_not_returning_list)(["foo", "bar"]) + + +@pytest.mark.asyncio +async def test_msg_size_handler_invalid_fuction_list_field() -> None: + def function_with_wrong_arg(_wrong_field: list) -> list: + return ["foo"] + + with pytest.raises(KeyError, match="grpc_msg_size_handler decorator is unable to find the list_field .+"): + await grpc_msg_size_handler(list_field="_field")(function_with_wrong_arg)(["foo", "bar"]) diff --git a/python-avd/tests/pyavd/eos_cli_config_gen/conftest.py b/python-avd/tests/pyavd/eos_cli_config_gen/conftest.py index 149100b6e0d..79787a99201 100644 --- a/python-avd/tests/pyavd/eos_cli_config_gen/conftest.py +++ b/python-avd/tests/pyavd/eos_cli_config_gen/conftest.py @@ -1,32 +1,28 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from glob import iglob from pathlib import Path import pytest -from ...utils import read_file, read_vars +from tests.utils import read_file, read_vars VARS_PATH = Path(Path(__file__).parent, "../artifacts/eos_cli_config_gen/vars") CONFIGS_PATH = Path(Path(__file__).parent, "../artifacts/eos_cli_config_gen/configs") DOCS_PATH = Path(Path(__file__).parent, "../artifacts/eos_cli_config_gen/documentation") -def get_hostnames(): +def get_hostnames() -> list: assert Path(VARS_PATH).is_dir() - hostnames = [] - for device_var_file in iglob(f"{VARS_PATH}/*"): - hostnames.append(Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json")) - - return hostnames + return [Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json") for device_var_file in Path(VARS_PATH).glob("*")] @pytest.fixture(scope="module") def all_inputs() -> dict[str, dict]: """ - Return dict with all inputs like + Return dict with all inputs. + { "hostname1": dict "hostname2": dict @@ -36,7 +32,7 @@ def all_inputs() -> dict[str, dict]: assert Path(VARS_PATH).is_dir() inputs = {} - for device_var_file in iglob(f"{VARS_PATH}/*"): + for device_var_file in Path(VARS_PATH).glob("*"): hostname = Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json") inputs[hostname] = read_vars(device_var_file) @@ -44,15 +40,15 @@ def all_inputs() -> dict[str, dict]: @pytest.fixture(scope="module", params=get_hostnames()) -def hostname(request) -> dict: - hostname = request.param - return hostname +def hostname(request: pytest.FixtureRequest) -> dict: + return request.param @pytest.fixture(scope="module") def configs() -> dict: """ - Return dict with all configs like + Return dict with all configs. + { "hostname1": str "hostname2": str @@ -62,7 +58,7 @@ def configs() -> dict: assert Path(CONFIGS_PATH).is_dir() result = {} - for filename in iglob(f"{CONFIGS_PATH}/*"): + for filename in Path(CONFIGS_PATH).glob("*"): hostname = Path(filename).name.removesuffix(".cfg") result[hostname] = read_file(filename) @@ -72,7 +68,8 @@ def configs() -> dict: @pytest.fixture(scope="module") def device_docs() -> dict: """ - Return dict with all docs like + Return dict with all docs. + { "hostname1": str "hostname2": str @@ -82,7 +79,7 @@ def device_docs() -> dict: assert Path(DOCS_PATH).is_dir() result = {} - for filename in iglob(f"{DOCS_PATH}/*"): + for filename in Path(DOCS_PATH).glob("*"): hostname = Path(filename).name.removesuffix(".md") result[hostname] = read_file(filename) diff --git a/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_config.py b/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_config.py index 2714f855843..3cdc9636034 100644 --- a/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_config.py +++ b/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_config.py @@ -2,14 +2,15 @@ # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. from pyavd import get_device_config, validate_structured_config +from pyavd._utils import get -def test_get_device_config(hostname: str, all_inputs: dict, configs: dict): - """ - Test get_device_config - """ - +def test_get_device_config(hostname: str, all_inputs: dict, configs: dict) -> None: + """Test get_device_config.""" structured_config: dict = all_inputs[hostname] + if not get(structured_config, "eos_cli_config_gen_configuration.enable", True): + return + expected_config: str = configs[hostname] # run validation on structured_config to ensure it is converted @@ -18,6 +19,5 @@ def test_get_device_config(hostname: str, all_inputs: dict, configs: dict): device_config = get_device_config(structured_config) assert isinstance(device_config, str) - # assert f"hostname {hostname}\n" in eos_config assert device_config == expected_config diff --git a/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_doc.py b/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_doc.py index 29d2a4abc38..cec72efd4dd 100644 --- a/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_doc.py +++ b/python-avd/tests/pyavd/eos_cli_config_gen/test_get_device_doc.py @@ -1,18 +1,19 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from pyavd import get_device_doc +from pyavd import get_device_doc, validate_structured_config +from pyavd._utils import get -def test_get_device_doc(hostname: str, all_inputs: dict, device_docs: dict): - """ - Test get_device_config - """ - +def test_get_device_doc(hostname: str, all_inputs: dict, device_docs: dict) -> None: + """Test get_device_config.""" structured_config: dict = all_inputs[hostname] - if not structured_config.get("generate_device_documentation", True): + if not get(structured_config, "eos_cli_config_gen_documentation.enable", True): return + # run validation on structured_config to ensure it is covered + validate_structured_config(structured_config) + expected_doc: str = device_docs.get(hostname, "") device_doc = get_device_doc(structured_config, add_md_toc=True) diff --git a/python-avd/tests/pyavd/eos_cli_config_gen/test_validate_structured_config.py b/python-avd/tests/pyavd/eos_cli_config_gen/test_validate_structured_config.py index b63b6554dd1..47499a0a351 100644 --- a/python-avd/tests/pyavd/eos_cli_config_gen/test_validate_structured_config.py +++ b/python-avd/tests/pyavd/eos_cli_config_gen/test_validate_structured_config.py @@ -8,20 +8,18 @@ SCHEMA = AvdSchemaTools(schema_id="eos_cli_config_gen").avdschema._schema -def test_validate_structured_config_with_valid_data(hostname: str, all_inputs: dict): - """ - Test validate_structured_config - """ +def test_validate_structured_config_with_valid_data(hostname: str, all_inputs: dict) -> None: + """Test validate_structured_config.""" structured_config = all_inputs[hostname] validation_result = validate_structured_config(structured_config) - assert hostname and validation_result.validation_errors == [] - assert hostname and validation_result.failed is False + assert hostname + assert validation_result.validation_errors == [] + assert hostname + assert validation_result.failed is False -def test_validate_structured_config_with_invalid_data(hostname: str, all_inputs: dict): - """ - Test validate_structured_config - """ +def test_validate_structured_config_with_invalid_data(hostname: str, all_inputs: dict) -> None: + """Test validate_structured_config.""" structured_config: dict = all_inputs[hostname] updated = False diff --git a/python-avd/tests/pyavd/eos_designs/conftest.py b/python-avd/tests/pyavd/eos_designs/conftest.py index bc045a68180..6afc0fe5b6c 100644 --- a/python-avd/tests/pyavd/eos_designs/conftest.py +++ b/python-avd/tests/pyavd/eos_designs/conftest.py @@ -1,34 +1,29 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from glob import iglob from pathlib import Path import pytest from pyavd import get_avd_facts - -from ...utils import read_file, read_vars +from tests.utils import read_file, read_vars VARS_PATH = Path(Path(__file__).parent, "../artifacts/eos_designs_unit_tests/vars") STRUCTURED_CONFIGS_PATH = Path(Path(__file__).parent, "../artifacts/eos_designs_unit_tests/structured_configs") CONFIGS_PATH = Path(Path(__file__).parent, "../artifacts/eos_designs_unit_tests/configs") -def get_hostnames(): +def get_hostnames() -> list: assert Path(VARS_PATH).is_dir() - hostnames = [] - for device_var_file in iglob(f"{VARS_PATH}/*"): - hostnames.append(Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json")) - - return hostnames + return [Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json") for device_var_file in Path(VARS_PATH).glob("*")] @pytest.fixture(scope="module") def all_inputs() -> dict[str, dict]: """ - Return dict with all inputs like + Return dict with all inputs. + { "hostname1": dict "hostname2": dict @@ -38,7 +33,7 @@ def all_inputs() -> dict[str, dict]: assert Path(VARS_PATH).is_dir() inputs = {} - for device_var_file in iglob(f"{VARS_PATH}/*"): + for device_var_file in Path(VARS_PATH).glob("*"): hostname = Path(device_var_file).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json") inputs[hostname] = read_vars(device_var_file) @@ -46,23 +41,21 @@ def all_inputs() -> dict[str, dict]: @pytest.fixture(scope="module") -def avd_facts(all_inputs: dict): - """ - Test get_avd_facts - """ +def avd_facts(all_inputs: dict) -> dict: + """Test get_avd_facts.""" return get_avd_facts(all_inputs) @pytest.fixture(scope="module", params=get_hostnames()) -def hostname(request) -> dict: - hostname = request.param - return hostname +def hostname(request: pytest.FixtureRequest) -> dict: + return request.param @pytest.fixture(scope="module") def structured_configs() -> dict: """ - Return dict with all structured_configs like + Return dict with all structured_configs. + { "hostname1": dict "hostname2": dict @@ -72,7 +65,7 @@ def structured_configs() -> dict: assert Path(STRUCTURED_CONFIGS_PATH).is_dir() result = {} - for filename in iglob(f"{STRUCTURED_CONFIGS_PATH}/*"): + for filename in Path(STRUCTURED_CONFIGS_PATH).glob("*"): hostname = Path(filename).name.removesuffix(".yaml").removesuffix(".yml").removesuffix(".json") result[hostname] = read_vars(filename) @@ -82,7 +75,8 @@ def structured_configs() -> dict: @pytest.fixture(scope="module") def configs() -> dict: """ - Return dict with all configs like + Return dict with all configs. + { "hostname1": str "hostname2": str @@ -92,7 +86,7 @@ def configs() -> dict: assert Path(CONFIGS_PATH).is_dir() result = {} - for filename in iglob(f"{CONFIGS_PATH}/*"): + for filename in Path(CONFIGS_PATH).glob("*"): hostname = Path(filename).name.removesuffix(".cfg") result[hostname] = read_file(filename) diff --git a/python-avd/tests/pyavd/eos_designs/test_get_avd_facts.py b/python-avd/tests/pyavd/eos_designs/test_get_avd_facts.py index a0dddef8f95..faf545c9c20 100644 --- a/python-avd/tests/pyavd/eos_designs/test_get_avd_facts.py +++ b/python-avd/tests/pyavd/eos_designs/test_get_avd_facts.py @@ -4,10 +4,8 @@ from pyavd import get_avd_facts -def test_get_avd_facts(all_inputs: dict): - """ - Test get_avd_facts - """ +def test_get_avd_facts(all_inputs: dict) -> None: + """Test get_avd_facts.""" avd_facts = get_avd_facts(all_inputs) assert isinstance(avd_facts, dict) diff --git a/python-avd/tests/pyavd/eos_designs/test_get_device_config.py b/python-avd/tests/pyavd/eos_designs/test_get_device_config.py index a15e756ca12..5bbc5f18d97 100644 --- a/python-avd/tests/pyavd/eos_designs/test_get_device_config.py +++ b/python-avd/tests/pyavd/eos_designs/test_get_device_config.py @@ -4,11 +4,8 @@ from pyavd import get_device_config, validate_structured_config -def test_get_device_config(hostname: str, all_inputs: dict, structured_configs: dict, configs: dict): - """ - Test get_device_config - """ - +def test_get_device_config(hostname: str, all_inputs: dict, structured_configs: dict, configs: dict) -> None: + """Test get_device_config.""" # Loading inputs first and then updating structured config on top. # This is how Ansible behaves, so we need this to generate the same configs. # The underlying cause is eos_cli_config_gen inputs being set in eos_designs molecule vars, diff --git a/python-avd/tests/pyavd/eos_designs/test_get_device_structured_config.py b/python-avd/tests/pyavd/eos_designs/test_get_device_structured_config.py index c78d7cb35a8..7d78598aaf4 100644 --- a/python-avd/tests/pyavd/eos_designs/test_get_device_structured_config.py +++ b/python-avd/tests/pyavd/eos_designs/test_get_device_structured_config.py @@ -4,10 +4,8 @@ from pyavd import get_device_structured_config, validate_inputs -def test_get_device_structured_config(hostname: str, all_inputs: dict, avd_facts: dict, structured_configs: dict): - """ - Test get_device_structured_config - """ +def test_get_device_structured_config(hostname: str, all_inputs: dict, avd_facts: dict, structured_configs: dict) -> None: + """Test get_device_structured_config.""" inputs = all_inputs[hostname] # run validation on inputs to ensure it is converted diff --git a/python-avd/tests/pyavd/eos_designs/test_validate_inputs.py b/python-avd/tests/pyavd/eos_designs/test_validate_inputs.py index e82230d83be..9d9578f2f12 100644 --- a/python-avd/tests/pyavd/eos_designs/test_validate_inputs.py +++ b/python-avd/tests/pyavd/eos_designs/test_validate_inputs.py @@ -4,11 +4,11 @@ from pyavd import validate_inputs -def test_validate_inputs_with_valid_inputs(hostname: str, all_inputs: dict): - """ - Test validate_inputs - """ +def test_validate_inputs_with_valid_inputs(hostname: str, all_inputs: dict) -> None: + """Test validate_inputs.""" inputs = all_inputs[hostname] validation_result = validate_inputs(inputs) - assert hostname and validation_result.validation_errors == [] - assert hostname and validation_result.failed is False + assert hostname + assert validation_result.validation_errors == [] + assert hostname + assert validation_result.failed is False diff --git a/python-avd/tests/pyavd/eos_designs/test_validate_structured_config.py b/python-avd/tests/pyavd/eos_designs/test_validate_structured_config.py index 09caae8e5b8..790e8ab9925 100644 --- a/python-avd/tests/pyavd/eos_designs/test_validate_structured_config.py +++ b/python-avd/tests/pyavd/eos_designs/test_validate_structured_config.py @@ -8,20 +8,18 @@ SCHEMA = AvdSchemaTools(schema_id="eos_cli_config_gen").avdschema._schema -def test_validate_structured_config_with_valid_data(hostname: str, structured_configs: dict): - """ - Test validate_structured_config - """ +def test_validate_structured_config_with_valid_data(hostname: str, structured_configs: dict) -> None: + """Test validate_structured_config.""" structured_config = structured_configs[hostname] validation_result = validate_structured_config(structured_config) - assert hostname and validation_result.validation_errors == [] - assert hostname and validation_result.failed is False + assert hostname + assert validation_result.validation_errors == [] + assert hostname + assert validation_result.failed is False -def test_validate_structured_config_with_invalid_data(hostname: str, structured_configs: dict): - """ - Test validate_structured_config - """ +def test_validate_structured_config_with_invalid_data(hostname: str, structured_configs: dict) -> None: + """Test validate_structured_config.""" structured_config = structured_configs[hostname] updated = False @@ -35,7 +33,7 @@ def test_validate_structured_config_with_invalid_data(hostname: str, structured_ # No dict found, so we insert our own instead if not updated: - structured_config.update({"bgp_peer_groups": {"invalid_key": "some_value"}}) + structured_config.update({"router_bgp": {"invalid_key": "some_value"}}) validation_result = validate_structured_config(structured_config) assert validation_result.failed is True diff --git a/python-avd/tests/pyavd/j2filters/test_add_md_toc.py b/python-avd/tests/pyavd/j2filters/test_add_md_toc.py index 2495efe55b5..bb8af659f94 100644 --- a/python-avd/tests/pyavd/j2filters/test_add_md_toc.py +++ b/python-avd/tests/pyavd/j2filters/test_add_md_toc.py @@ -1,9 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type from pathlib import Path @@ -25,46 +23,51 @@ class TestAddMdTocFilter: """Class to test add_md_toc filter.""" @pytest.mark.parametrize("skip_lines", SKIP_LINES_LIST) - def test_add_md_toc(self, skip_lines): + def test_add_md_toc(self, skip_lines: int) -> None: """Test add_md_toc success scenarii.""" with Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file: resp = add_md_toc(input_file.read(), skip_lines=skip_lines, toc_levels=VALID_TOC_LEVEL, toc_marker=TOC_MARKER) - with open(EXPECTED_TOC, "r", encoding="UTF-8") as input_file: + with Path(EXPECTED_TOC).open(encoding="UTF-8") as input_file: expected_toc = input_file.read() assert resp.strip() != expected_toc.strip() - def test_add_md_toc_invalid_skip_lines(self): + def test_add_md_toc_invalid_skip_lines(self) -> None: """Test add_md_toc with invalid skip_lines.""" - with Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file: - with pytest.raises(TypeError, match="add_md_toc 'skip_lines' argument must be an integer."): - add_md_toc(input_file.read(), skip_lines="Not an int") + with ( + Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file, + pytest.raises(TypeError, match="add_md_toc 'skip_lines' argument must be an integer."), + ): + add_md_toc(input_file.read(), skip_lines="Not an int") - def test_add_md_toc_invalid_toc_level(self): + def test_add_md_toc_invalid_toc_level(self) -> None: """Test add_md_toc with invalid toc level.""" - with Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file: - with pytest.raises(TypeError): - add_md_toc(input_file.read(), toc_levels=INVALID_TOC_LEVEL) + with Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file, pytest.raises(TypeError): + add_md_toc(input_file.read(), toc_levels=INVALID_TOC_LEVEL) - def test_add_md_toc_invalid_toc_marker(self): + def test_add_md_toc_invalid_toc_marker(self) -> None: """Test add_md_toc with invalid toc_marker.""" - with Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file: - with pytest.raises(TypeError, match="add_md_toc 'toc_marker' argument must be a non-empty string."): - add_md_toc(input_file.read(), toc_marker=["Not_as_string"]) + with ( + Path(MD_INPUT_VALID).open("r", encoding="UTF-8") as input_file, + pytest.raises(TypeError, match="add_md_toc 'toc_marker' argument must be a non-empty string."), + ): + add_md_toc(input_file.read(), toc_marker=["Not_as_string"]) - def test_add_md_toc_invalid_md_input_type(self): + def test_add_md_toc_invalid_md_input_type(self) -> None: """Test add_md_toc with invalid md_inpuT_type.""" with pytest.raises(TypeError, match="add_md_toc expects a string."): add_md_toc(["not_as_string"]) - def test_add_md_toc_invalid(self): + def test_add_md_toc_invalid(self) -> None: """Test add_md_toc with invalid input file.""" - with Path(MD_INPUT_INVALID).open("r", encoding="UTF-8") as md_input_toc_invalid: - with pytest.raises(ValueError, match="add_md_toc expects exactly two occurrences of the toc marker"): - add_md_toc(md_input_toc_invalid.read()) + with ( + Path(MD_INPUT_INVALID).open("r", encoding="UTF-8") as md_input_toc_invalid, + pytest.raises(ValueError, match="add_md_toc expects exactly two occurrences of the toc marker"), + ): + add_md_toc(md_input_toc_invalid.read()) - def test_add_md_toc_btw_specific_markers(self): + def test_add_md_toc_btw_specific_markers(self) -> None: """Test to add the TOC at the end of the file using the specific markers features.""" with DIR_PATH.joinpath("markers_at_bottom.md").open("r", encoding="UTF-8") as input_file: resp = add_md_toc(input_file.read(), skip_lines=0, toc_levels=2, toc_marker=TOC_MARKER) diff --git a/python-avd/tests/pyavd/j2filters/test_decrypt.py b/python-avd/tests/pyavd/j2filters/test_decrypt.py index 0d4b0d735f6..ef7ecfe7bbc 100644 --- a/python-avd/tests/pyavd/j2filters/test_decrypt.py +++ b/python-avd/tests/pyavd/j2filters/test_decrypt.py @@ -11,7 +11,7 @@ @pytest.mark.parametrize( - "password, passwd_type, key, kwargs, expected_raise", + ("password", "passwd_type", "key", "kwargs", "expected_raise"), [ pytest.param("dummy", None, "dummy", {}, pytest.raises(TypeError), id="Missing Type"), pytest.param("dummy", "eigrp", "dummy", {}, pytest.raises(KeyError), id="Wrong Type"), @@ -27,7 +27,7 @@ ), ], ) -def test_decrypt(password, passwd_type, key, kwargs, expected_raise): +def test_decrypt(password: str, passwd_type: str | None, key: str, kwargs: dict, expected_raise: object) -> None: """Test decrypt method for non existing and existing type.""" with expected_raise: decrypt(password, passwd_type=passwd_type, key=key, **kwargs) diff --git a/python-avd/tests/pyavd/j2filters/test_default.py b/python-avd/tests/pyavd/j2filters/test_default.py index 984251aa2b4..56abad50161 100644 --- a/python-avd/tests/pyavd/j2filters/test_default.py +++ b/python-avd/tests/pyavd/j2filters/test_default.py @@ -1,6 +1,8 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. +from typing import Any + import pytest from jinja2.runtime import Undefined @@ -13,7 +15,7 @@ class TestDefaultFilter: @pytest.mark.parametrize("primary_value", PRIMARY_VALUE_LIST) @pytest.mark.parametrize("default_value", DEFAULT_VALUE_LIST) - def test_default(self, primary_value, default_value): + def test_default(self, primary_value: Any, default_value: Any) -> None: resp = default(primary_value, *default_value) if isinstance(primary_value, Undefined) or primary_value is None and len(DEFAULT_VALUE_LIST) >= 1: for i in default_value: diff --git a/python-avd/tests/pyavd/j2filters/test_encrypt.py b/python-avd/tests/pyavd/j2filters/test_encrypt.py index 9a9ab91cab1..05858e32521 100644 --- a/python-avd/tests/pyavd/j2filters/test_encrypt.py +++ b/python-avd/tests/pyavd/j2filters/test_encrypt.py @@ -11,7 +11,7 @@ @pytest.mark.parametrize( - "password, passwd_type, key, kwargs, expected_raise", + ("password", "passwd_type", "key", "kwargs", "expected_raise"), [ pytest.param("dummy", None, "dummy", {}, pytest.raises(TypeError), id="Missing Type"), pytest.param("dummy", "eigrp", "dummy", {}, pytest.raises(KeyError), id="Wrong Type"), @@ -21,9 +21,7 @@ pytest.param("arista", "ospf_message_digest", "Ethernet1", {"hash_algorithm": "sha512", "key_id": 66}, does_not_raise(), id="Implemented Type OSPF MD"), ], ) -def test_encrypt(password, passwd_type, key, kwargs, expected_raise): - """ - Test encrypt method for non-existing and existing type. - """ +def test_encrypt(password: str | int, passwd_type: str | None, key: str, kwargs: dict, expected_raise: object) -> None: + """Test encrypt method for non-existing and existing type.""" with expected_raise: encrypt(password, passwd_type=passwd_type, key=key, **kwargs) diff --git a/python-avd/tests/pyavd/j2filters/test_hide_passwords.py b/python-avd/tests/pyavd/j2filters/test_hide_passwords.py index 531537c751c..a13f522f331 100644 --- a/python-avd/tests/pyavd/j2filters/test_hide_passwords.py +++ b/python-avd/tests/pyavd/j2filters/test_hide_passwords.py @@ -1,9 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type import pytest @@ -19,15 +17,13 @@ class TestHidePasswordsFilter: - @pytest.mark.parametrize("value, hide_passwords_flag, hidden_password", VALID_INPUT_HIDE_PASSWORDS) - def test_hide_passwords_valid(self, value, hide_passwords_flag, hidden_password): - """ - Test hide_passwords - """ + @pytest.mark.parametrize(("value", "hide_passwords_flag", "hidden_password"), VALID_INPUT_HIDE_PASSWORDS) + def test_hide_passwords_valid(self, value: str | None, hide_passwords_flag: bool, hidden_password: str) -> None: + """Test hide_passwords.""" assert hide_passwords(value, hide_passwords_flag) == hidden_password - @pytest.mark.parametrize("value, hide_passwords_flag, error_msg", INVALID_INPUT_HIDE_PASSWORDS) - def test_hide_passwords_invalid(self, value, hide_passwords_flag, error_msg): + @pytest.mark.parametrize(("value", "hide_passwords_flag", "error_msg"), INVALID_INPUT_HIDE_PASSWORDS) + def test_hide_passwords_invalid(self, value: str | None, hide_passwords_flag: bool, error_msg: str) -> None: with pytest.raises(TypeError) as exc_info: hide_passwords(value, hide_passwords_flag) assert str(exc_info.value) == error_msg diff --git a/python-avd/tests/pyavd/j2filters/test_is_in_filter.py b/python-avd/tests/pyavd/j2filters/test_is_in_filter.py index bc3e6845fbd..2267399418f 100644 --- a/python-avd/tests/pyavd/j2filters/test_is_in_filter.py +++ b/python-avd/tests/pyavd/j2filters/test_is_in_filter.py @@ -1,7 +1,6 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function import pytest @@ -23,7 +22,7 @@ class TestIsInFilter: - @pytest.mark.parametrize("hostname, hostname_filter, res_is_in_filter", IS_IN_FILTER_TEST_CASES) - def test_is_in_filter(self, hostname, hostname_filter, res_is_in_filter): + @pytest.mark.parametrize(("hostname", "hostname_filter", "res_is_in_filter"), IS_IN_FILTER_TEST_CASES) + def test_is_in_filter(self, hostname: str, hostname_filter: list | str, res_is_in_filter: bool) -> None: res = is_in_filter(hostname=hostname, hostname_filter=hostname_filter) assert res == res_is_in_filter diff --git a/python-avd/tests/pyavd/j2filters/test_list_compress.py b/python-avd/tests/pyavd/j2filters/test_list_compress.py index 1c9a6837ee3..1a70740ab87 100644 --- a/python-avd/tests/pyavd/j2filters/test_list_compress.py +++ b/python-avd/tests/pyavd/j2filters/test_list_compress.py @@ -1,9 +1,9 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type + +from typing import Any import pytest @@ -25,13 +25,13 @@ class TestListCompressFilter: - @pytest.mark.parametrize("invalid_list_to_compress, error_msg", LIST_COMPRESS_INVALID_TESTS) - def test_list_compress_invalid(self, invalid_list_to_compress, error_msg): + @pytest.mark.parametrize(("invalid_list_to_compress", "error_msg"), LIST_COMPRESS_INVALID_TESTS) + def test_list_compress_invalid(self, invalid_list_to_compress: Any, error_msg: str) -> None: with pytest.raises(TypeError) as exc_info: list_compress(invalid_list_to_compress) assert str(exc_info.value) == error_msg - @pytest.mark.parametrize("valid_list_to_compress, compressed_string", LIST_COMPRESS_VALID_TESTS) - def test_list_compress_valid(self, valid_list_to_compress, compressed_string): + @pytest.mark.parametrize(("valid_list_to_compress", "compressed_string"), LIST_COMPRESS_VALID_TESTS) + def test_list_compress_valid(self, valid_list_to_compress: list, compressed_string: str) -> None: resp = list_compress(valid_list_to_compress) assert resp in compressed_string diff --git a/python-avd/tests/pyavd/j2filters/test_natural_sort.py b/python-avd/tests/pyavd/j2filters/test_natural_sort.py index da9d05a6e94..a05b27123c9 100644 --- a/python-avd/tests/pyavd/j2filters/test_natural_sort.py +++ b/python-avd/tests/pyavd/j2filters/test_natural_sort.py @@ -3,6 +3,7 @@ # that can be found in the LICENSE file. from contextlib import nullcontext as does_not_raise +from typing import Any import pytest @@ -11,7 +12,7 @@ class TestNaturalSortFilter: @pytest.mark.parametrize( - ("item_to_convert, converted_item, ignore_case"), + ("item_to_convert", "converted_item", "ignore_case"), [ ("100", 100, True), ("200", 200, True), @@ -19,12 +20,12 @@ class TestNaturalSortFilter: ("ABC", "ABC", False), ], ) - def test_convert(self, item_to_convert, converted_item, ignore_case): + def test_convert(self, item_to_convert: str, converted_item: int | str, ignore_case: bool) -> None: resp = convert(item_to_convert, ignore_case) assert resp == converted_item @pytest.mark.parametrize( - ("item_to_natural_sort, sort_key, strict, ignore_case, sorted_list, expected_raise"), + ("item_to_natural_sort", "sort_key", "strict", "ignore_case", "sorted_list", "expected_raise"), [ pytest.param(None, None, False, True, [], does_not_raise(), id="None"), pytest.param([], None, False, True, [], does_not_raise(), id="empty-list"), @@ -135,7 +136,9 @@ def test_convert(self, item_to_convert, converted_item, ignore_case): ), ], ) - def test_natural_sort(self, item_to_natural_sort, sort_key, strict, ignore_case, sorted_list, expected_raise): + def test_natural_sort( + self, item_to_natural_sort: Any, sort_key: str | None, strict: bool | None, ignore_case: bool | None, sorted_list: list | None, expected_raise: object + ) -> None: with expected_raise: resp = natural_sort(item_to_natural_sort, sort_key, strict=strict, ignore_case=ignore_case) assert resp == sorted_list diff --git a/python-avd/tests/pyavd/j2filters/test_range_expand.py b/python-avd/tests/pyavd/j2filters/test_range_expand.py index 405bf532c1b..6803835bbcc 100644 --- a/python-avd/tests/pyavd/j2filters/test_range_expand.py +++ b/python-avd/tests/pyavd/j2filters/test_range_expand.py @@ -4,6 +4,8 @@ from __future__ import annotations +from typing import Any + import pytest from pyavd.j2filters import range_expand @@ -38,54 +40,40 @@ ), ] -RANGE_TO_EXPAND_VALID_VALUES = [ - "Ethernet1", - "Ethernet1-2", - "Eth 3-5,7-8", - "et2-6,po1-2", - ["Ethernet1"], - ["Ethernet 1-2", "Eth3-5", "7-8"], - ["Ethernet2-6", "Port-channel1-2"], - ["Ethernet1/1-2", "Eth1-2/3-5,5/1-2"], - ["Eth1.1,9-10.1", "Eth2.2-3", "Eth3/1-2.3-4"], - "1-3", - ["1", "2", "3"], - "vlan1-3", - "Et1-2/3-4/5-6", - "65100.0", - "65100.0-4", - "65100.0-2,65200.1-2", - "1-2.0-1", -] - -EXPECTED_RESULT_VALID_VALUES = [ - ["Ethernet1"], - ["Ethernet1", "Ethernet2"], - ["Eth 3", "Eth 4", "Eth 5", "Eth 7", "Eth 8"], - ["et2", "et3", "et4", "et5", "et6", "po1", "po2"], - ["Ethernet1"], - ["Ethernet 1", "Ethernet 2", "Eth3", "Eth4", "Eth5", "7", "8"], - ["Ethernet2", "Ethernet3", "Ethernet4", "Ethernet5", "Ethernet6", "Port-channel1", "Port-channel2"], - ["Ethernet1/1", "Ethernet1/2", "Eth1/3", "Eth1/4", "Eth1/5", "Eth2/3", "Eth2/4", "Eth2/5", "Eth5/1", "Eth5/2"], - ["Eth1.1", "Eth9.1", "Eth10.1", "Eth2.2", "Eth2.3", "Eth3/1.3", "Eth3/1.4", "Eth3/2.3", "Eth3/2.4"], - ["1", "2", "3"], - ["1", "2", "3"], - ["vlan1", "vlan2", "vlan3"], - ["Et1/3/5", "Et1/3/6", "Et1/4/5", "Et1/4/6", "Et2/3/5", "Et2/3/6", "Et2/4/5", "Et2/4/6"], - ["65100.0"], - ["65100.0", "65100.1", "65100.2", "65100.3", "65100.4"], - ["65100.0", "65100.1", "65100.2", "65200.1", "65200.2"], - ["1.0", "1.1", "2.0", "2.1"], +RANGE_TO_EXPAND_VALID_TESTS = [ + # (, ) + pytest.param("Ethernet1", ["Ethernet1"]), + pytest.param("Ethernet1-2", ["Ethernet1", "Ethernet2"]), + pytest.param("Eth 3-5,7-8", ["Eth 3", "Eth 4", "Eth 5", "Eth 7", "Eth 8"]), + pytest.param("et2-6,po1-2", ["et2", "et3", "et4", "et5", "et6", "po1", "po2"]), + pytest.param(["Ethernet1"], ["Ethernet1"]), + pytest.param(["Ethernet 1-2", "Eth3-5", "7-8"], ["Ethernet 1", "Ethernet 2", "Eth3", "Eth4", "Eth5", "7", "8"]), + pytest.param(["Ethernet2-6", "Port-channel1-2"], ["Ethernet2", "Ethernet3", "Ethernet4", "Ethernet5", "Ethernet6", "Port-channel1", "Port-channel2"]), + pytest.param( + ["Ethernet1/1-2", "Eth1-2/3-5,5/1-2"], ["Ethernet1/1", "Ethernet1/2", "Eth1/3", "Eth1/4", "Eth1/5", "Eth2/3", "Eth2/4", "Eth2/5", "Eth5/1", "Eth5/2"] + ), + pytest.param( + ["Eth1.1,9-10.1", "Eth2.2-3", "Eth3/1-2.3-4"], ["Eth1.1", "Eth9.1", "Eth10.1", "Eth2.2", "Eth2.3", "Eth3/1.3", "Eth3/1.4", "Eth3/2.3", "Eth3/2.4"] + ), + pytest.param("1-3", ["1", "2", "3"]), + pytest.param(["1", "2", "3"], ["1", "2", "3"]), + pytest.param("vlan1-3", ["vlan1", "vlan2", "vlan3"]), + pytest.param("Et1-2/3-4/5-6", ["Et1/3/5", "Et1/3/6", "Et1/4/5", "Et1/4/6", "Et2/3/5", "Et2/3/6", "Et2/4/5", "Et2/4/6"]), + pytest.param("65100.0", ["65100.0"]), + pytest.param("65100.0-4", ["65100.0", "65100.1", "65100.2", "65100.3", "65100.4"]), + pytest.param("65100.0-2,65200.1-2", ["65100.0", "65100.1", "65100.2", "65200.1", "65200.2"]), + pytest.param("1-2.0-1", ["1.0", "1.1", "2.0", "2.1"]), + pytest.param("Gi1/0/1-2", ["Gi1/0/1", "Gi1/0/2"]), ] class TestRangeExpandFilter: - @pytest.mark.parametrize("input_value, expected_raise, expected_raise_message", RANGE_TO_EXPAND_INVALID_VALUES) - def test_range_expand_invalid(self, input_value, expected_raise, expected_raise_message): + @pytest.mark.parametrize(("input_value", "expected_raise", "expected_raise_message"), RANGE_TO_EXPAND_INVALID_VALUES) + def test_range_expand_invalid(self, input_value: Any, expected_raise: Exception, expected_raise_message: str) -> None: with pytest.raises(expected_raise, match=expected_raise_message): range_expand(input_value) - @pytest.mark.parametrize("RANGE_TO_EXPAND_VALID", RANGE_TO_EXPAND_VALID_VALUES) - def test_range_expand_valid(self, RANGE_TO_EXPAND_VALID): - resp = range_expand(RANGE_TO_EXPAND_VALID) - assert resp in EXPECTED_RESULT_VALID_VALUES + @pytest.mark.parametrize(("range_to_expand", "expected_output"), RANGE_TO_EXPAND_VALID_TESTS) + def test_range_expand_valid(self, range_to_expand: list | str, expected_output: list) -> None: + resp = range_expand(range_to_expand) + assert resp == expected_output diff --git a/python-avd/tests/pyavd/j2filters/test_snmp_hash.py b/python-avd/tests/pyavd/j2filters/test_snmp_hash.py index 6714e018030..fc9a768a777 100644 --- a/python-avd/tests/pyavd/j2filters/test_snmp_hash.py +++ b/python-avd/tests/pyavd/j2filters/test_snmp_hash.py @@ -1,9 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type from contextlib import nullcontext as does_not_raise @@ -18,7 +16,7 @@ ("sha256", "sha256", does_not_raise()), ("sha384", "sha384", does_not_raise()), ("sha512", "sha512", does_not_raise()), - ("toto", None, pytest.raises(ValueError)), + ("toto", None, pytest.raises(ValueError)), # noqa: PT011 ] KEY_FROM_PASSPHRASE_TEST_CASES = [ @@ -34,7 +32,7 @@ "c005b901a9a29e140e2749bb5d51789bba97f614c3c8060a1c080d775f12494ba6d968dc22526bb06532e96e2e4d3bd0e746f2696439a4a034d040e1c7de0aaa", does_not_raise(), ), - ("testauth", "toto", None, pytest.raises(ValueError)), + ("testauth", "toto", None, pytest.raises(ValueError)), # noqa: PT011 ] LOCALIZE_PASSPHRASE_TEST_CASES = [ @@ -59,31 +57,31 @@ "bccbd436115c60540422ad8e98b8373dee507fd9e77730372f03dcf8e8a074a43d9f04bd6b7be64eb806bdbaeff43ccd1ca93c4606ab46eb797720e4c59abcc7", does_not_raise(), ), - ("testauth", "toto", "424242424242424242", None, None, pytest.raises(ValueError)), + ("testauth", "toto", "424242424242424242", None, None, pytest.raises(ValueError)), # noqa: PT011 # only testing priv with one auth algorithm, the longest, to verify key length ("testpriv", "sha512", "424242424242424242", "des", "ca5e54b5c49e7addba0046c591f8f541", does_not_raise()), ("testpriv", "sha512", "424242424242424242", "aes", "ca5e54b5c49e7addba0046c591f8f541", does_not_raise()), ("testpriv", "sha512", "424242424242424242", "aes192", "ca5e54b5c49e7addba0046c591f8f5417338cdc1043068ab", does_not_raise()), ("testpriv", "sha512", "424242424242424242", "aes256", "ca5e54b5c49e7addba0046c591f8f5417338cdc1043068abf8c2a7ab751f13dc", does_not_raise()), - ("testpriv", "sha512", "424242424242424242", "toto", None, pytest.raises(ValueError)), + ("testpriv", "sha512", "424242424242424242", "toto", None, pytest.raises(ValueError)), # noqa: PT011 # non hex engine_id - ("testpriv", "sha512", "zzzzzzzzzzzz", "toto", None, pytest.raises(ValueError)), + ("testpriv", "sha512", "zzzzzzzzzzzz", "toto", None, pytest.raises(ValueError)), # noqa: PT011 ] class TestSNMPHashFilter: - @pytest.mark.parametrize("auth_type, result, expectation", GET_HASH_OBJECT_TEST_CASES) - def test_get_hash_object(self, auth_type, result, expectation): + @pytest.mark.parametrize(("auth_type", "result", "expectation"), GET_HASH_OBJECT_TEST_CASES) + def test_get_hash_object(self, auth_type: str, result: str, expectation: object) -> None: with expectation: assert _get_hash_object(auth_type).name == result - @pytest.mark.parametrize("passphrase, auth_type, result, expectation", KEY_FROM_PASSPHRASE_TEST_CASES) - def test_key_from_passphrase(self, passphrase, auth_type, result, expectation): + @pytest.mark.parametrize(("passphrase", "auth_type", "result", "expectation"), KEY_FROM_PASSPHRASE_TEST_CASES) + def test_key_from_passphrase(self, passphrase: str, auth_type: str, result: str, expectation: object) -> None: with expectation: assert _key_from_passphrase(passphrase, auth_type) == result - @pytest.mark.parametrize("passphrase, auth_type, engine_id, priv_type, result, expectation", LOCALIZE_PASSPHRASE_TEST_CASES) - def test_localize_passphrase(self, passphrase, auth_type, engine_id, priv_type, result, expectation): + @pytest.mark.parametrize(("passphrase", "auth_type", "engine_id", "priv_type", "result", "expectation"), LOCALIZE_PASSPHRASE_TEST_CASES) + def test_localize_passphrase(self, passphrase: str, auth_type: str, engine_id: str, priv_type: str, result: str, expectation: object) -> None: with expectation: localized_passphrase = _localize_passphrase(passphrase, auth_type, engine_id, priv_type=priv_type) assert localized_passphrase == result diff --git a/python-avd/tests/pyavd/j2filters/test_status_render.py b/python-avd/tests/pyavd/j2filters/test_status_render.py index 66f30f03aa2..3e113ffb553 100644 --- a/python-avd/tests/pyavd/j2filters/test_status_render.py +++ b/python-avd/tests/pyavd/j2filters/test_status_render.py @@ -11,7 +11,7 @@ class TestMarkdownRenderingFilter: - @pytest.mark.parametrize("state_string, rendering, markdown_code", STATE_STRINGS) - def test_status_render_valid(self, state_string, rendering, markdown_code): + @pytest.mark.parametrize(("state_string", "rendering", "markdown_code"), STATE_STRINGS) + def test_status_render_valid(self, state_string: str, rendering: str, markdown_code: str) -> None: resp = status_render(state_string, rendering) assert resp == markdown_code diff --git a/python-avd/tests/pyavd/j2tests/test_contains.py b/python-avd/tests/pyavd/j2tests/test_contains.py index 6b68e60a433..96fa63ecfdd 100644 --- a/python-avd/tests/pyavd/j2tests/test_contains.py +++ b/python-avd/tests/pyavd/j2tests/test_contains.py @@ -5,6 +5,8 @@ from __future__ import annotations +from typing import Any + import pytest from jinja2.runtime import Undefined @@ -27,7 +29,7 @@ class TestContainsTest: """Test Contains.""" - @pytest.mark.parametrize(("value, test_value, expected_result"), TEST_DATA) - def test_contains(self, value, test_value, expected_result): + @pytest.mark.parametrize(("value", "test_value", "expected_result"), TEST_DATA) + def test_contains(self, value: Any, test_value: Any, expected_result: bool) -> None: """Test the contains function.""" assert contains(value, test_value) == expected_result diff --git a/python-avd/tests/pyavd/j2tests/test_defined_plugin.py b/python-avd/tests/pyavd/j2tests/test_defined_plugin.py index aaac0eaf3d1..20b748909de 100644 --- a/python-avd/tests/pyavd/j2tests/test_defined_plugin.py +++ b/python-avd/tests/pyavd/j2tests/test_defined_plugin.py @@ -4,6 +4,7 @@ from __future__ import annotations import warnings +from typing import Any import pytest from jinja2.runtime import Undefined @@ -19,7 +20,16 @@ class TestDefinedPlugin: - def defined_function(self, value, test_value=None, var_type=None, fail_action=None, var_name=None, err_msg=None, warn_msg=None): + def defined_function( + self, + value: Any, + test_value: Any = None, + var_type: str | None = None, + fail_action: str | None = None, + var_name: str | None = None, + err_msg: str | None = None, + warn_msg: str | None = None, + ) -> None: if str(fail_action).lower() == "warning": with warnings.catch_warnings(record=True) as w: resp, warning = defined(value, test_value=test_value, var_type=var_type, fail_action=fail_action, var_name=var_name, run_tests=True) @@ -27,101 +37,97 @@ def defined_function(self, value, test_value=None, var_type=None, fail_action=No assert isinstance(w[0].message, UserWarning) if warn_msg: assert warning is not None - warn = str(list(warning.keys())[0]).replace("[WARNING]: ", "").strip().replace("\n", " ") + warn = str(next(iter(warning.keys()))).replace("[WARNING]: ", "").strip().replace("\n", " ") assert warn == warn_msg assert str(w[0].message) == warn_msg assert resp is False elif str(fail_action).lower() == "error": - with pytest.raises(ValueError) as e: + with pytest.raises(ValueError) as e: # noqa: PT011 resp, warning = defined(value, test_value=test_value, var_type=var_type, fail_action=fail_action, var_name=var_name, run_tests=True) assert str(e.value) == err_msg - @pytest.mark.parametrize("VALUE", VALUE_LIST) - @pytest.mark.parametrize("FAIL_ACTION", FAIL_ACTION_LIST) - @pytest.mark.parametrize("VAR_NAME", VAR_NAME_LIST) - def test_defined_plugin_value_undefined_or_none(self, VALUE, FAIL_ACTION, VAR_NAME): - if isinstance(VALUE, Undefined) or VALUE is None: - if str(FAIL_ACTION).lower() == "warning": - if VAR_NAME is not None: - warn_msg = f"{VAR_NAME} was expected but not set. Output may be incorrect or incomplete!" + @pytest.mark.parametrize("value", VALUE_LIST) + @pytest.mark.parametrize("fail_action", FAIL_ACTION_LIST) + @pytest.mark.parametrize("var_name", VAR_NAME_LIST) + def test_defined_plugin_value_undefined_or_none(self, value: Any, fail_action: str | None, var_name: str | None) -> None: + if isinstance(value, Undefined) or value is None: + if str(fail_action).lower() == "warning": + if var_name is not None: + warn_msg = f"{var_name} was expected but not set. Output may be incorrect or incomplete!" else: warn_msg = "A variable was expected but not set. Output may be incorrect or incomplete!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, warn_msg=warn_msg) - elif str(FAIL_ACTION).lower() == "error": - if VAR_NAME is not None: - err_msg = f"{VAR_NAME} was expected but not set!" - else: - err_msg = "A variable was expected but not set!" + self.defined_function(value, fail_action=fail_action, var_name=var_name, warn_msg=warn_msg) + elif str(fail_action).lower() == "error": + err_msg = f"{var_name} was expected but not set!" if var_name is not None else "A variable was expected but not set!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, err_msg=err_msg) + self.defined_function(value, fail_action=fail_action, var_name=var_name, err_msg=err_msg) - @pytest.mark.parametrize("VALUE", VALUE_LIST) - def test_defined_plugin_value_not_none_and_define(self, VALUE): - if not isinstance(VALUE, Undefined) and VALUE is not None: - resp = defined(VALUE) + @pytest.mark.parametrize("value", VALUE_LIST) + def test_defined_plugin_value_not_none_and_define(self, value: Any) -> None: + if not isinstance(value, Undefined) and value is not None: + resp = defined(value) assert resp is True - @pytest.mark.parametrize("VALUE", VALUE_LIST) - @pytest.mark.parametrize("FAIL_ACTION", FAIL_ACTION_LIST) - @pytest.mark.parametrize("VAR_NAME", VAR_NAME_LIST) - @pytest.mark.parametrize("TEST_VALUE", TEST_VALUE_LIST) - def test_defined_plugin_test_value_not_none(self, VALUE, FAIL_ACTION, VAR_NAME, TEST_VALUE): - if (not isinstance(VALUE, Undefined) and VALUE is not None) and TEST_VALUE is not None and VALUE != TEST_VALUE: - if str(FAIL_ACTION).lower() == "warning": - if VAR_NAME is not None: - warn_msg = f"{VAR_NAME} was set to {VALUE} but we expected {TEST_VALUE}. Output may be incorrect or incomplete!" + @pytest.mark.parametrize("value", VALUE_LIST) + @pytest.mark.parametrize("fail_action", FAIL_ACTION_LIST) + @pytest.mark.parametrize("var_name", VAR_NAME_LIST) + @pytest.mark.parametrize("test_value", TEST_VALUE_LIST) + def test_defined_plugin_test_value_not_none(self, value: Any, fail_action: str | None, var_name: str | None, test_value: Any) -> None: + if (not isinstance(value, Undefined) and value is not None) and test_value is not None and value != test_value: + if str(fail_action).lower() == "warning": + if var_name is not None: + warn_msg = f"{var_name} was set to {value} but we expected {test_value}. Output may be incorrect or incomplete!" else: - warn_msg = f"A variable was set to {VALUE} but we expected {TEST_VALUE}. Output may be incorrect or incomplete!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, test_value=TEST_VALUE, warn_msg=warn_msg) - elif str(FAIL_ACTION).lower() == "error": - if VAR_NAME is not None: - err_msg = f"{VAR_NAME} was set to {VALUE} but we expected {TEST_VALUE}!" + warn_msg = f"A variable was set to {value} but we expected {test_value}. Output may be incorrect or incomplete!" + self.defined_function(value, fail_action=fail_action, var_name=var_name, test_value=test_value, warn_msg=warn_msg) + elif str(fail_action).lower() == "error": + if var_name is not None: + err_msg = f"{var_name} was set to {value} but we expected {test_value}!" else: - err_msg = f"A variable was set to {VALUE} but we expected {TEST_VALUE}!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, test_value=TEST_VALUE, err_msg=err_msg) + err_msg = f"A variable was set to {value} but we expected {test_value}!" + self.defined_function(value, fail_action=fail_action, var_name=var_name, test_value=test_value, err_msg=err_msg) - @pytest.mark.parametrize("VALUE", VALUE_LIST) - @pytest.mark.parametrize("FAIL_ACTION", FAIL_ACTION_LIST) - @pytest.mark.parametrize("VAR_NAME", VAR_NAME_LIST) - @pytest.mark.parametrize("VAR_TYPE", VAR_TYPE_LIST) - def test_defined_plugin_var_type(self, VALUE, FAIL_ACTION, VAR_NAME, VAR_TYPE): + @pytest.mark.parametrize("value", VALUE_LIST) + @pytest.mark.parametrize("fail_action", FAIL_ACTION_LIST) + @pytest.mark.parametrize("var_name", VAR_NAME_LIST) + @pytest.mark.parametrize("var_type", VAR_TYPE_LIST) + def test_defined_plugin_var_type(self, value: Any, fail_action: str | None, var_name: str | None, var_type: Any) -> None: type_list = ["float", "int", "str", "list", "dict", "tuple", "bool"] - if not isinstance(VALUE, Undefined) and VALUE is not None: - if str(VAR_TYPE).lower() in type_list and str(VAR_TYPE).lower() != type(VALUE).__name__: - if str(FAIL_ACTION).lower() == "warning": - if VAR_NAME is not None: - warn_msg = f"{VAR_NAME} was a {type(VALUE).__name__} but we expected a {str(VAR_TYPE).lower()}. Output may be incorrect or incomplete!" - else: - warn_msg = f"A variable was a {type(VALUE).__name__} but we expected a {str(VAR_TYPE).lower()}. Output may be incorrect or incomplete!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, var_type=VAR_TYPE, warn_msg=warn_msg) - elif str(FAIL_ACTION).lower() == "error": - if VAR_NAME is not None: - err_msg = f"{VAR_NAME} was a {type(VALUE).__name__} but we expected a {str(VAR_TYPE).lower()}!" - else: - err_msg = f"A variable was a {type(VALUE).__name__} but we expected a {str(VAR_TYPE).lower()}!" - self.defined_function(VALUE, fail_action=FAIL_ACTION, var_name=VAR_NAME, var_type=VAR_TYPE, err_msg=err_msg) + if not isinstance(value, Undefined) and value is not None and str(var_type).lower() in type_list and str(var_type).lower() != type(value).__name__: + if str(fail_action).lower() == "warning": + if var_name is not None: + warn_msg = f"{var_name} was a {type(value).__name__} but we expected a {str(var_type).lower()}. Output may be incorrect or incomplete!" + else: + warn_msg = f"A variable was a {type(value).__name__} but we expected a {str(var_type).lower()}. Output may be incorrect or incomplete!" + self.defined_function(value, fail_action=fail_action, var_name=var_name, var_type=var_type, warn_msg=warn_msg) + elif str(fail_action).lower() == "error": + if var_name is not None: + err_msg = f"{var_name} was a {type(value).__name__} but we expected a {str(var_type).lower()}!" + else: + err_msg = f"A variable was a {type(value).__name__} but we expected a {str(var_type).lower()}!" + self.defined_function(value, fail_action=fail_action, var_name=var_name, var_type=var_type, err_msg=err_msg) - @pytest.mark.parametrize("VALUE", VALUE_LIST) - @pytest.mark.parametrize("TEST_VALUE", TEST_VALUE_LIST) - @pytest.mark.parametrize("INVALID_FAIL_ACTION", INVALID_FAIL_ACTION_LIST) - def test_defined_plugin_fail_action_None(self, VALUE, TEST_VALUE, INVALID_FAIL_ACTION): - resp = defined(VALUE, test_value=TEST_VALUE, fail_action=INVALID_FAIL_ACTION) - if not isinstance(VALUE, Undefined) and VALUE is not None: - if TEST_VALUE is not None and VALUE != TEST_VALUE: + @pytest.mark.parametrize("value", VALUE_LIST) + @pytest.mark.parametrize("test_value", TEST_VALUE_LIST) + @pytest.mark.parametrize("invalid_fail_action", INVALID_FAIL_ACTION_LIST) + def test_defined_plugin_fail_action_none(self, value: Any, test_value: Any, invalid_fail_action: str | None) -> None: + resp = defined(value, test_value=test_value, fail_action=invalid_fail_action) + if not isinstance(value, Undefined) and value is not None: + if test_value is not None and value != test_value: assert resp is False else: assert resp is True else: assert resp is False - @pytest.mark.parametrize("VALUE", VALUE_LIST) - @pytest.mark.parametrize("VAR_TYPE", VAR_TYPE_LIST) - def test_defined_plugin_var_type_fail_action_None(self, VALUE, VAR_TYPE): + @pytest.mark.parametrize("value", VALUE_LIST) + @pytest.mark.parametrize("var_type", VAR_TYPE_LIST) + def test_defined_plugin_var_type_fail_action_none(self, value: Any, var_type: str | None) -> None: type_list = ["float", "int", "str", "list", "dict", "tuple", "bool"] - if not isinstance(VALUE, Undefined) and VALUE is not None: - resp = defined(VALUE, var_type=VAR_TYPE) - if str(VAR_TYPE).lower() in type_list and type(VALUE).__name__ != str(VAR_TYPE).lower(): + if not isinstance(value, Undefined) and value is not None: + resp = defined(value, var_type=var_type) + if str(var_type).lower() in type_list and type(value).__name__ != str(var_type).lower(): assert resp is False else: assert resp is True diff --git a/python-avd/tests/pyavd/schema/test_avdschema.py b/python-avd/tests/pyavd/schema/test_avdschema.py index 5806317ea64..6370ee4679b 100644 --- a/python-avd/tests/pyavd/schema/test_avdschema.py +++ b/python-avd/tests/pyavd/schema/test_avdschema.py @@ -1,7 +1,8 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -import os +from pathlib import Path +from typing import Any import pytest import yaml @@ -10,20 +11,18 @@ from pyavd._errors import AvdValidationError from pyavd._schema.avdschema import DEFAULT_SCHEMA, AvdSchema -script_dir = os.path.dirname(__file__) -with open(f"{script_dir}/access_lists.schema.yml", "r", encoding="utf-8") as schema_file: +script_dir = Path(__file__).parent +with Path(script_dir, "access_lists.schema.yml").open(encoding="utf-8") as schema_file: acl_schema = yaml.load(schema_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/ipv6_standard_access_lists.schema.yml", "r", encoding="utf-8") as schema_file: +with Path(script_dir, "ipv6_standard_access_lists.schema.yml").open(encoding="utf-8") as schema_file: ipv6_acl_schema = yaml.load(schema_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/combined.schema.yml", "r", encoding="utf-8") as schema_file: +with Path(script_dir, "combined.schema.yml").open(encoding="utf-8") as schema_file: combined_schema = yaml.load(schema_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/acl.yml", "r", encoding="utf-8") as data_file: +with Path(script_dir, "acl.yml").open(encoding="utf-8") as data_file: acl_test_data = yaml.load(data_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/ipv6-access-lists.yml", "r", encoding="utf-8") as data_file: +with Path(script_dir, "ipv6-access-lists.yml").open(encoding="utf-8") as data_file: ipv6_acl_test_data = yaml.load(data_file, Loader=yaml.SafeLoader) -INVALID_SCHEMA = {"type": "something_invalid"} - VALID_TEST_SCHEMAS = [DEFAULT_SCHEMA, acl_schema, ipv6_acl_schema, combined_schema] combined_data = {} @@ -110,98 +109,46 @@ class TestAvdSchema: - def test_avd_schema_init_without_schema(self): + def test_avd_schema_init_without_schema(self) -> None: avdschema = AvdSchema() assert isinstance(avdschema, AvdSchema) assert avdschema._schema == DEFAULT_SCHEMA @pytest.mark.parametrize("test_schema", VALID_TEST_SCHEMAS) - def test_avd_schema_init_with_schema(self, test_schema): + def test_avd_schema_init_with_schema(self, test_schema: dict) -> None: avdschema = AvdSchema(test_schema) assert isinstance(avdschema, AvdSchema) assert avdschema._schema == test_schema - def test_avd_schema_init_with_invalid_schema(self): - with pytest.raises(AvdValidationError): - AvdSchema(INVALID_SCHEMA) - - @pytest.mark.parametrize("test_schema", VALID_TEST_SCHEMAS) - def test_avd_schema_validate_schema(self, test_schema): - try: - for validation_error in AvdSchema().validate_schema(test_schema): - assert False, f"Validation Error '{validation_error.message}' returned" - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema().validate_schema(TEST_SCHEMA) raised an exception: {e}" - - def test_avd_schema_validate_invalid_schema(self): - try: - for validation_error in AvdSchema().validate_schema(INVALID_SCHEMA): - assert isinstance(validation_error, AvdValidationError) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema().validate_schema(INVALID_SCHEMA) raised an exception: {e}" - @pytest.mark.parametrize("test_data", TEST_DATA_SETS) - def test_avd_schema_validate_without_schema(self, test_data): - try: - list(AvdSchema().validate(test_data)) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema().validate(TEST_DATA) raised an exception: {e}" + def test_avd_schema_validate_without_schema(self, test_data: Any) -> None: + validation_errors = list(AvdSchema().validate(test_data)) + assert not validation_errors @pytest.mark.parametrize("test_schema", VALID_TEST_SCHEMAS) @pytest.mark.parametrize("test_data", TEST_DATA_SETS) - def test_avd_schema_validate_with_loaded_schema(self, test_schema, test_data): - try: - for validation_error in AvdSchema(test_schema).validate(test_data): - assert False, f"Validation Error '{validation_error.message}' returned" - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema(TEST_SCHEMA).validate(TEST_DATA) raised an exception: {e}" + def test_avd_schema_validate_with_loaded_schema(self, test_schema: dict, test_data: Any) -> None: + validation_errors = list(AvdSchema(test_schema).validate(test_data)) + assert not validation_errors @pytest.mark.parametrize("invalid_data", INVALID_ACL_DATA) - def test_avd_schema_validate_with_invalid_data(self, invalid_data): - try: - for validation_error in AvdSchema(combined_schema).validate(invalid_data): - assert isinstance(validation_error, AvdValidationError) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema(combined_schema).validate(INVALID_DATA) raised an exception: {e}" + def test_avd_schema_validate_with_invalid_data(self, invalid_data: Any) -> None: + validation_errors = list(AvdSchema(combined_schema).validate(invalid_data)) + assert len(validation_errors) > 0 + for validation_error in validation_errors: + assert isinstance(validation_error, AvdValidationError) @pytest.mark.parametrize("test_schema", VALID_TEST_SCHEMAS) - def test_avd_schema_load_valid_schema(self, test_schema): - try: - avdschema = AvdSchema() - avdschema.load_schema(test_schema) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"load_schema(TEST_SCHEMA) raised an exception: {e}" + def test_avd_schema_load_valid_schema(self, test_schema: dict) -> None: + avdschema = AvdSchema() + avdschema.load_schema(test_schema) assert avdschema._schema == test_schema - def test_avd_schema_load_invalid_schema(self): - with pytest.raises(AvdValidationError): - avdschema = AvdSchema() - avdschema.load_schema(INVALID_SCHEMA) - - @pytest.mark.parametrize("test_schema", VALID_TEST_SCHEMAS) - def test_avd_schema_extend_valid_schema(self, test_schema): - expected_schema = {} - expected_schema = always_merger.merge(expected_schema, DEFAULT_SCHEMA) - expected_schema = always_merger.merge(expected_schema, test_schema) - try: - avdschema = AvdSchema() - avdschema.extend_schema(test_schema) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"extend_schema(TEST_SCHEMA) raised an exception: {e}" - assert avdschema._schema == expected_schema - - def test_avd_schema_extend_invalid_schema(self): - with pytest.raises(AvdValidationError): - avdschema = AvdSchema() - avdschema.extend_schema(INVALID_SCHEMA) - @pytest.mark.parametrize("test_path", TEST_DATA_PATHS) - def test_avd_schema_subschema_with_loaded_schema(self, test_path): - try: - avdschema = AvdSchema(combined_schema) - subschema = avdschema.subschema(test_path) - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"subschema(TEST_PATH) raised an exception: {e}" + def test_avd_schema_subschema_with_loaded_schema(self, test_path: list) -> None: + avdschema = AvdSchema(combined_schema) + subschema = avdschema.subschema(test_path) + if len(test_path) == 0: assert subschema == EXPECTED_SUBSCHEMAS["_empty"] else: @@ -209,23 +156,14 @@ def test_avd_schema_subschema_with_loaded_schema(self, test_path): @pytest.mark.parametrize("test_schema", UNIQUE_KEYS_SCHEMAS) @pytest.mark.parametrize("test_data", UNIQUE_KEYS_VALID_DATA) - def test_avd_schema_validate_unique_keys_valid_data(self, test_schema, test_data): - try: - for validation_error in AvdSchema(test_schema).validate(test_data): - assert False, f"Validation Error '{validation_error.message}' returned" - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema(UNIQUE_KEYS_SCHEMAS).validate(UNIQUE_KEYS_VALID_DATA) raised an exception: {e}" + def test_avd_schema_validate_unique_keys_valid_data(self, test_schema: dict, test_data: Any) -> None: # NOSONAR + validation_errors = list(AvdSchema(test_schema).validate(test_data)) + assert not validation_errors @pytest.mark.parametrize("test_schema", UNIQUE_KEYS_SCHEMAS) @pytest.mark.parametrize("invalid_data", UNIQUE_KEYS_INVALID_DATA) - def test_avd_schema_validate_unique_keys_invalid_data(self, test_schema, invalid_data): - try: - validation_errors = tuple(AvdSchema(test_schema).validate(invalid_data)) - if not validation_errors: - assert False, "did NOT fail validation" - for validation_error in validation_errors: - assert isinstance(validation_error, AvdValidationError) - assert validation_error.path.endswith((".key", ".nested_list_key")) - - except Exception as e: # pylint: disable=broad-exception-caught - assert False, f"AvdSchema(UNIQUE_KEYS_SCHEMAS).validate(UNIQUE_KEYS_INVALID_DATA) raised an exception: {e}" + def test_avd_schema_validate_unique_keys_invalid_data(self, test_schema: dict, invalid_data: Any) -> None: # NOSONAR + validation_errors = list(AvdSchema(test_schema).validate(invalid_data)) + assert len(validation_errors) > 0 + for validation_error in validation_errors: + assert isinstance(validation_error, AvdValidationError) diff --git a/python-avd/tests/pyavd/schema/test_avdschema_bool.py b/python-avd/tests/pyavd/schema/test_avdschema_bool.py new file mode 100644 index 00000000000..73813ec4d19 --- /dev/null +++ b/python-avd/tests/pyavd/schema/test_avdschema_bool.py @@ -0,0 +1,65 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path +from sys import path +from typing import Any + +import pytest + +# Override global path to load schema from source instead of any installed version. +path.insert(0, str(Path(__file__).parents[3])) + +from pyavd._errors import AvdValidationError +from pyavd._schema.avdschema import AvdSchema + +# TODO: Test default value with required False. + +TEST_SCHEMA = { + "type": "dict", + "keys": { + "test_value": { + "type": "bool", + "convert_types": ["int", "str"], # Part of meta schema but not implemented in converter + "default": True, + "valid_values": [True], + "dynamic_valid_values": ["valid_booleans"], # Part of meta schema but not implemented in converter + "required": True, + "description": "Some boolean", + "display_name": "Boolean", + }, + }, +} + +TESTS = [ + # (test_value, expected_errors: tuple, expected_error_messages: tuple) + (True, None, None), # Valid value. No errors. + (False, (AvdValidationError,), ("'Validation Error: test_value': 'False' is not one of [True]",)), # Valid value. Not a valid value. + (11.0123, (AvdValidationError,), ("'Validation Error: test_value': Invalid type 'float'. Expected a 'bool'.",)), # Invalid value. + (None, (AvdValidationError,), ("'Validation Error: ': Required key 'test_value' is not set in dict.",)), # Required is set, so None is not ignored. + ("11", None, None), # Converted to True. No errors. + ("", (AvdValidationError,), ("'Validation Error: test_value': 'False' is not one of [True]",)), # Converted to False. Not a valid value. + (12, None, None), # Converted to True. No errors. + (0, (AvdValidationError,), ("'Validation Error: test_value': 'False' is not one of [True]",)), # Converted to False. Not a valid value. +] + + +@pytest.fixture(scope="module") +def avd_schema() -> AvdSchema: + return AvdSchema(TEST_SCHEMA) + + +@pytest.mark.parametrize(("test_value", "expected_errors", "expected_error_messages"), TESTS) +def test_generated_schema(test_value: Any, expected_errors: tuple | None, expected_error_messages: tuple | None, avd_schema: AvdSchema) -> None: + instance = {"test_value": test_value} + list(avd_schema.convert(instance)) + validation_errors = list(avd_schema.validate(instance)) + if expected_errors: + for validation_error in validation_errors: + assert isinstance(validation_error, expected_errors) + assert str(validation_error) in expected_error_messages + + assert len(validation_errors) == len(expected_error_messages) + else: + # No errors expected. + assert not validation_errors diff --git a/python-avd/tests/pyavd/schema/test_avdschema_dict.py b/python-avd/tests/pyavd/schema/test_avdschema_dict.py new file mode 100644 index 00000000000..8fe0c41b435 --- /dev/null +++ b/python-avd/tests/pyavd/schema/test_avdschema_dict.py @@ -0,0 +1,68 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path +from sys import path +from typing import Any + +import pytest + +# Override global path to load schema from source instead of any installed version. +path.insert(0, str(Path(__file__).parents[3])) + +from pyavd._errors import AvdValidationError +from pyavd._schema.avdschema import AvdSchema + +# TODO: Test default value with required False. +# Test dynamic keys + +TEST_SCHEMA = { + "type": "dict", + "keys": { + "test_value": { + "type": "dict", + "default": {"pri": 1, "foo": "foo1"}, + "required": True, + "description": "Some string", + "display_name": "String", + "keys": { + "pri": {"type": "int", "convert_types": ["str"]}, + "foo": {"type": "str", "convert_types": ["int"]}, + }, + }, + }, +} + +TESTS = [ + # (test_value, expected_errors: tuple, expected_error_messages: tuple) + ({"pri": 1, "foo": "foo1"}, None, None), # Valid value. No errors. + ({"pri": "1", "foo": 123}, None, None), # Valid value after conversion. No errors. + ({}, None, None), # Valid value. No errors. + ( + None, + (AvdValidationError,), + ("'Validation Error: ': Required key 'test_value' is not set in dict.",), + ), # Required is set, so None is not ignored. + ("a", (AvdValidationError,), ("'Validation Error: test_value': Invalid type 'str'. Expected a 'dict'.",)), # Invalid type. +] + + +@pytest.fixture(scope="module") +def avd_schema() -> AvdSchema: + return AvdSchema(TEST_SCHEMA) + + +@pytest.mark.parametrize(("test_value", "expected_errors", "expected_error_messages"), TESTS) +def test_generated_schema(test_value: Any, expected_errors: tuple | None, expected_error_messages: tuple | None, avd_schema: AvdSchema) -> None: + instance = {"test_value": test_value} + list(avd_schema.convert(instance)) + validation_errors = list(avd_schema.validate(instance)) + if expected_errors: + for validation_error in validation_errors: + assert isinstance(validation_error, expected_errors) + assert str(validation_error) in expected_error_messages + + assert len(validation_errors) == len(expected_error_messages) + else: + # No errors expected. + assert not validation_errors diff --git a/python-avd/tests/pyavd/schema/test_avdschema_int.py b/python-avd/tests/pyavd/schema/test_avdschema_int.py new file mode 100644 index 00000000000..61caacd0dbc --- /dev/null +++ b/python-avd/tests/pyavd/schema/test_avdschema_int.py @@ -0,0 +1,78 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path +from sys import path +from typing import Any + +import pytest + +# Override global path to load schema from source instead of any installed version. +path.insert(0, str(Path(__file__).parents[3])) + +from pyavd._errors import AvdValidationError +from pyavd._schema.avdschema import AvdSchema + +# TODO: Test Dynamic valid values. +# Test default value with required False. + +TEST_SCHEMA = { + "type": "dict", + "keys": { + "test_value": { + "type": "int", + "convert_types": ["bool", "str", "float"], + "default": 11, + "min": 2, + "max": 20, + "valid_values": [0, 11, 22], + "dynamic_valid_values": ["valid_values"], # Part of meta schema but not implemented in converter + "required": True, + "description": "Some integer", + "display_name": "Integer", + }, + }, +} + +TESTS = [ + # (test_value, expected_errors: tuple, expected_error_messages: tuple) + (11, None, None), # Valid value. No errors. + ( + False, + (AvdValidationError,), + ("'Validation Error: test_value': '0' is lower than the allowed minimum of 2.",), + ), # False is converted to 0 which is valid but below min. + ( + True, + (AvdValidationError,), + ("'Validation Error: test_value': '1' is lower than the allowed minimum of 2.", "'Validation Error: test_value': '1' is not one of [0, 11, 22]"), + ), # True is converted to 1 which is not valid. + ("11", None, None), # Converted to 11. No errors. + (11.0123, None, None), # Converted to 11. No errors. + (None, (AvdValidationError,), ("'Validation Error: ': Required key 'test_value' is not set in dict.",)), # Required is set, so None is not ignored. + (12, (AvdValidationError,), ("'Validation Error: test_value': '12' is not one of [0, 11, 22]",)), # Invalid value. + ([], (AvdValidationError,), ("'Validation Error: test_value': Invalid type 'list'. Expected a 'int'.",)), # Invalid type. + (0, (AvdValidationError,), ("'Validation Error: test_value': '0' is lower than the allowed minimum of 2.",)), # Valid but below min. + (22, (AvdValidationError,), ("'Validation Error: test_value': '22' is higher than the allowed maximum of 20.",)), # Valid but above max. +] + + +@pytest.fixture(scope="module") +def avd_schema() -> AvdSchema: + return AvdSchema(TEST_SCHEMA) + + +@pytest.mark.parametrize(("test_value", "expected_errors", "expected_error_messages"), TESTS) +def test_generated_schema(test_value: Any, expected_errors: tuple | None, expected_error_messages: tuple | None, avd_schema: AvdSchema) -> None: + instance = {"test_value": test_value} + list(avd_schema.convert(instance)) + validation_errors = list(avd_schema.validate(instance)) + if expected_errors: + for validation_error in validation_errors: + assert isinstance(validation_error, expected_errors) + assert str(validation_error) in expected_error_messages + + assert len(validation_errors) == len(expected_error_messages) + else: + # No errors expected. + assert not validation_errors diff --git a/python-avd/tests/pyavd/schema/test_avdschema_list.py b/python-avd/tests/pyavd/schema/test_avdschema_list.py new file mode 100644 index 00000000000..4ed834f97f7 --- /dev/null +++ b/python-avd/tests/pyavd/schema/test_avdschema_list.py @@ -0,0 +1,85 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path +from sys import path +from typing import Any + +import pytest + +# Override global path to load schema from source instead of any installed version. +path.insert(0, str(Path(__file__).parents[3])) + +from pyavd._errors import AvdValidationError +from pyavd._schema.avdschema import AvdSchema + +# TODO: Test default value with required False. + +TEST_SCHEMA = { + "type": "dict", + "keys": { + "test_value": { + "type": "list", + "default": [{"pri": 1, "foo": "foo1"}, {"pri": 2, "foo": "foo2"}, {"pri": 3, "foo": "foo3"}], + "max_length": 3, + "min_length": 1, + "required": True, + "description": "Some string", + "display_name": "String", + "primary_key": "pri", + "unique_keys": ["foo"], + "items": { + "type": "dict", + "keys": { + "pri": {"type": "int", "convert_types": ["str"]}, + "foo": {"type": "str", "convert_types": ["int"]}, + }, + }, + }, + }, +} + +TESTS = [ + # (test_value, expected_errors: tuple, expected_error_messages: tuple) + ([{"pri": 1, "foo": "foo1"}, {"pri": 2, "foo": "foo2"}], None, None), # Valid value. No errors. + ([{"pri": "1", "foo": 123}, {"pri": 2, "foo": "234"}], None, None), # Valid value after conversion. No errors. + ( + [{"pri": 1, "foo": "123"}, {"pri": "1", "foo": 123}], + (AvdValidationError,), + ( + "'Validation Error: test_value[0].pri': The value '1' is not unique between all list items as required.", + "'Validation Error: test_value[1].pri': The value '1' is not unique between all list items as required.", + "'Validation Error: test_value[0].foo': The value '123' is not unique between all list items as required.", + "'Validation Error: test_value[1].foo': The value '123' is not unique between all list items as required.", + ), + ), # Collision on both primary_key and unique_keys + (None, (AvdValidationError,), ("'Validation Error: ': Required key 'test_value' is not set in dict.",)), # Required is set, so None is not ignored. + ([], (AvdValidationError,), ("'Validation Error: test_value': The value is shorter (0) than the allowed minimum of 1.",)), # Valid but below min length. + ( + [{"pri": 1, "foo": "foo1"}, {"pri": 2, "foo": "foo2"}, {"pri": 3, "foo": "foo3"}, {"pri": 4, "foo": "foo4"}], + (AvdValidationError,), + ("'Validation Error: test_value': The value is longer (4) than the allowed maximum of 3.",), + ), # Valid but amove max length. + ("a", (AvdValidationError,), ("'Validation Error: test_value': Invalid type 'str'. Expected a 'list'.",)), # Invalid type. +] + + +@pytest.fixture(scope="module") +def avd_schema() -> AvdSchema: + return AvdSchema(TEST_SCHEMA) + + +@pytest.mark.parametrize(("test_value", "expected_errors", "expected_error_messages"), TESTS) +def test_generated_schema(test_value: Any, expected_errors: tuple | None, expected_error_messages: tuple | None, avd_schema: AvdSchema) -> None: + instance = {"test_value": test_value} + list(avd_schema.convert(instance)) + validation_errors = list(avd_schema.validate(instance)) + if expected_errors: + for validation_error in validation_errors: + assert isinstance(validation_error, expected_errors) + assert str(validation_error) in expected_error_messages + + assert len(validation_errors) == len(expected_error_messages) + else: + # No errors expected. + assert not validation_errors diff --git a/python-avd/tests/pyavd/schema/test_avdschema_str.py b/python-avd/tests/pyavd/schema/test_avdschema_str.py new file mode 100644 index 00000000000..fcbf94a3e6d --- /dev/null +++ b/python-avd/tests/pyavd/schema/test_avdschema_str.py @@ -0,0 +1,102 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. +from pathlib import Path +from sys import path +from typing import Any + +import pytest + +# Override global path to load schema from source instead of any installed version. +path.insert(0, str(Path(__file__).parents[3])) + +from pyavd._errors import AvdValidationError +from pyavd._schema.avdschema import AvdSchema + +# TODO: Test dynamic valid values. +# Test formats once that is implemented - replacing format. +# Test format +# Test default value with required False. + +TEST_SCHEMA = { + "type": "dict", + "keys": { + "test_value": { + "type": "str", + "convert_types": ["bool", "int", "float"], + "default": "foo", + "valid_values": ["a", "foo", "zoo", "baaar", "1.0", "42", "true"], + "convert_to_lower_case": True, + "max_length": 4, + "min_length": 2, + "dynamic_valid_values": ["valid_strings"], # Part of meta schema but not implemented in converter + "pattern": "[abf14t].*", + "required": True, + "description": "Some string", + "display_name": "String", + }, + }, +} + +TESTS = [ + # (test_value, expected_errors: tuple, expected_error_messages: tuple) + ("foo", None, None), # Valid value. No errors. + ("FoO", None, None), # Lowered to "foo" which is valid. + (True, None, None), # True is converted and lowered to "true" which is valid. + ( + False, + (AvdValidationError,), + ( + "'Validation Error: test_value': 'false' is not one of ['a', 'foo', 'zoo', 'baaar', '1.0', '42', 'true']", + "'Validation Error: test_value': The value is longer (5) than the allowed maximum of 4.", + ), + ), # False is converted and lowered to "false" which is not valid. + (42, None, None), # Converted to "42". No errors. + (1.000, None, None), # Converted to "1.0". No errors. + ( + None, + (AvdValidationError,), + ("'Validation Error: ': Required key 'test_value' is not set in dict.",), + ), # Required is set, so None is not ignored. + ([], (AvdValidationError,), ("'Validation Error: test_value': Invalid type 'list'. Expected a 'str'.",)), # Invalid type. + ("a", (AvdValidationError,), ("'Validation Error: test_value': The value is shorter (1) than the allowed minimum of 2.",)), # Valid but below min length. + ( + "baaar", + (AvdValidationError,), + ("'Validation Error: test_value': The value is longer (5) than the allowed maximum of 4.",), + ), # Valid but below min length. + ( + 22, + (AvdValidationError,), + ( + "'Validation Error: test_value': '22' is not one of ['a', 'foo', 'zoo', 'baaar', '1.0', '42', 'true']", + "'Validation Error: test_value': The value '22' is not matching the pattern '[abf14t].*'.", + ), + ), # Converted to "22" which is not valid. + ( + "zoo", + (AvdValidationError,), + ("'Validation Error: test_value': The value 'zoo' is not matching the pattern '[abf14t].*'.",), + ), # Valid value but does not match pattern. +] + + +@pytest.fixture(scope="module") +def avd_schema() -> AvdSchema: + return AvdSchema(TEST_SCHEMA) + + +@pytest.mark.parametrize(("test_value", "expected_errors", "expected_error_messages"), TESTS) +def test_generated_schema(test_value: Any, expected_errors: tuple | None, expected_error_messages: tuple | None, avd_schema: AvdSchema) -> None: + instance = {"test_value": test_value} + list(avd_schema.convert(instance)) + validation_errors = list(avd_schema.validate(instance)) + if expected_errors: + for validation_error in validation_errors: + assert isinstance(validation_error, expected_errors) + assert str(validation_error) in expected_error_messages + + assert len(validation_errors) == len(expected_error_messages) + else: + # No errors expected. + assert not validation_errors diff --git a/python-avd/tests/pyavd/utils/merge/test_merge.py b/python-avd/tests/pyavd/utils/merge/test_merge.py index 8ac457da051..908cefda47d 100644 --- a/python-avd/tests/pyavd/utils/merge/test_merge.py +++ b/python-avd/tests/pyavd/utils/merge/test_merge.py @@ -1,11 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function - -__metaclass__ = type - -import os +from pathlib import Path import pytest import yaml @@ -13,32 +9,31 @@ from pyavd._schema.avdschema import AvdSchema from pyavd._utils import merge -script_dir = os.path.dirname(__file__) -with open(f"{script_dir}/access_lists.schema.yml", "r", encoding="utf-8") as schema_file: +script_dir = Path(__file__).parent +with Path(script_dir, "access_lists.schema.yml").open(encoding="utf-8") as schema_file: acl_schema = yaml.load(schema_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/acl1.yml", "r", encoding="utf-8") as data_file: +with Path(script_dir, "acl1.yml").open(encoding="utf-8") as data_file: acl1 = yaml.load(data_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/acl2.yml", "r", encoding="utf-8") as data_file: +with Path(script_dir, "acl2.yml").open(encoding="utf-8") as data_file: acl2 = yaml.load(data_file, Loader=yaml.SafeLoader) -with open(f"{script_dir}/acl_merged.yml", "r", encoding="utf-8") as data_file: +with Path(script_dir, "acl_merged.yml").open(encoding="utf-8") as data_file: acl_merged = yaml.load(data_file, Loader=yaml.SafeLoader) class TestMerge: - def test_merge_of_lists_with_primary_keys(self): + def test_merge_of_lists_with_primary_keys(self) -> None: merge_result = {} schema = AvdSchema(acl_schema) merge(merge_result, acl1, acl2, schema=schema) - # print(yaml.dump(merge_result, indent=2)) assert merge_result == acl_merged @pytest.mark.parametrize("schema", [None, AvdSchema(acl_schema)]) - def test_list_merge_replace(self, schema): + def test_list_merge_replace(self, schema: dict) -> None: """ Testing with list_merge="replace" with or without schema. + Expecting acl2 as result since we only have lists in the input. """ merge_result = {} merge(merge_result, acl1, acl2, list_merge="replace", schema=schema) - # print(yaml.dump(merge_result, indent=2)) assert merge_result == acl2 diff --git a/python-avd/tests/pyavd/utils/password/test_password.py b/python-avd/tests/pyavd/utils/password/test_password.py index de785336093..a717f2afdfb 100644 --- a/python-avd/tests/pyavd/utils/password/test_password.py +++ b/python-avd/tests/pyavd/utils/password/test_password.py @@ -59,36 +59,28 @@ OSPF_MESSAGE_DIGEST_HASH_ALGORITHMS = ["md5", "sha1", "sha256", "sha384", "sha512"] -@pytest.mark.parametrize("key, password, expected", BGP_INPUT_DICT_ENCRYPT_EXPECTED) -def test_bgp_encrypt(key, password, expected): - """ - Test bgp_encrypt - """ +@pytest.mark.parametrize(("key", "password", "expected"), BGP_INPUT_DICT_ENCRYPT_EXPECTED) +def test_bgp_encrypt(key: str, password: str, expected: str) -> None: + """Test bgp_encrypt.""" assert bgp_encrypt(password, key=key) == expected -@pytest.mark.parametrize("key, password,, expected", BGP_VALID_INPUT_DICT_DECRYPT_EXPECTED) -def test_bgp_decrypt_success(key, password, expected): - """ - Test bgp_decrypt successful cases - """ +@pytest.mark.parametrize(("key", "password", "expected"), BGP_VALID_INPUT_DICT_DECRYPT_EXPECTED) +def test_bgp_decrypt_success(key: str, password: str, expected: str) -> None: + """Test bgp_decrypt successful cases.""" assert bgp_decrypt(password, key=key) == expected -@pytest.mark.parametrize("key, password", BGP_INVALID_INPUT_DICT_DECRYPT) -def test_bgp_decrypt_failure(key, password): - """ - Test bgp_decrypt failure cases - """ - with pytest.raises(ValueError): +@pytest.mark.parametrize(("key", "password"), BGP_INVALID_INPUT_DICT_DECRYPT) +def test_bgp_decrypt_failure(key: str, password: str) -> None: + """Test bgp_decrypt failure cases.""" + with pytest.raises(ValueError): # noqa: PT011 bgp_decrypt(password, key=key) -@pytest.mark.parametrize("key, password, expected", BGP_MOLECULE_PASSWORDS_TEST) -def test_molecule_bgp_encrypt(key, password, expected): - """ - Test bgp_encrypt - """ +@pytest.mark.parametrize(("key", "password", "expected"), BGP_MOLECULE_PASSWORDS_TEST) +def test_molecule_bgp_encrypt(key: str, password: str, expected: str) -> None: + """Test bgp_encrypt.""" assert bgp_encrypt(password, key=key) == expected @@ -123,57 +115,43 @@ def test_molecule_bgp_encrypt(key, password, expected): # The following list uses all the molecule OSPF passwords available # and the expected encryption # The password is always arista123 -# TODO -# OSPF_MOLECULE_PASSWORDS_TEST = [] +# TODO: OSPF_MOLECULE_PASSWORDS_TEST = [] -@pytest.mark.parametrize("key, password, expected", OSPF_INPUT_SIMPLE_DICT_ENCRYPT_EXPECTED) -def test_ospf_simple_encrypt(key, password, expected): - """ - Test ospf_simple_encrypt - """ +@pytest.mark.parametrize(("key", "password", "expected"), OSPF_INPUT_SIMPLE_DICT_ENCRYPT_EXPECTED) +def test_ospf_simple_encrypt(key: str, password: str, expected: str) -> None: + """Test ospf_simple_encrypt.""" assert ospf_simple_encrypt(password, key=key) == expected -@pytest.mark.parametrize("key, password, expected", OSPF_VALID_INPUT_SIMPLE_DICT_DECRYPT_EXPECTED) -def test_ospf_simple_decrypt_success(key, password, expected): - """ - Test ospf_simple_decrypt successful cases - """ +@pytest.mark.parametrize(("key", "password", "expected"), OSPF_VALID_INPUT_SIMPLE_DICT_DECRYPT_EXPECTED) +def test_ospf_simple_decrypt_success(key: str, password: str, expected: str) -> None: + """Test ospf_simple_decrypt successful cases.""" assert ospf_simple_decrypt(password, key=key) == expected -@pytest.mark.parametrize("key, password", OSPF_INVALID_INPUT_SIMPLE_DICT_DECRYPT) -def test_ospf_simple_decrypt_failure(key, password): - """ - Test ospf_simple_decrypt failure cases - """ - with pytest.raises(ValueError): +@pytest.mark.parametrize(("key", "password"), OSPF_INVALID_INPUT_SIMPLE_DICT_DECRYPT) +def test_ospf_simple_decrypt_failure(key: str, password: str) -> None: + """Test ospf_simple_decrypt failure cases.""" + with pytest.raises(ValueError): # noqa: PT011 ospf_simple_decrypt(password, key=key) -@pytest.mark.parametrize("key, password, hash_algorithm, key_id, expected", OSPF_INPUT_MD_DICT_ENCRYPT_EXPECTED) -def test_ospf_message_digest_encrypt(key, password, expected, hash_algorithm, key_id): - """ - Test ospf_message_digest_encrypt - """ +@pytest.mark.parametrize(("key", "password", "hash_algorithm", "key_id", "expected"), OSPF_INPUT_MD_DICT_ENCRYPT_EXPECTED) +def test_ospf_message_digest_encrypt(key: str, password: str, expected: str, hash_algorithm: str, key_id: str) -> None: + """Test ospf_message_digest_encrypt.""" assert ospf_message_digest_encrypt(password, key=key, hash_algorithm=hash_algorithm, key_id=key_id) == expected -@pytest.mark.parametrize("key, password, hash_algorithm, key_id, expected", OSPF_VALID_INPUT_MD_DICT_DECRYPT_EXPECTED) -def test_ospf_message_digest_decrypt_success(key, password, hash_algorithm, key_id, expected): - """ - Test ospf_message_digest_decrypt successful cases - """ +@pytest.mark.parametrize(("key", "password", "hash_algorithm", "key_id", "expected"), OSPF_VALID_INPUT_MD_DICT_DECRYPT_EXPECTED) +def test_ospf_message_digest_decrypt_success(key: str, password: str, hash_algorithm: str, key_id: str, expected: str) -> None: + """Test ospf_message_digest_decrypt successful cases.""" assert ospf_message_digest_decrypt(password, key=key, hash_algorithm=hash_algorithm, key_id=key_id) == expected -@pytest.mark.parametrize("key, password, hash_algorithm, key_id", OSPF_INVALID_INPUT_MD_DICT_DECRYPT) -def test_ospf_message_digest_decrypt_failure(key, password, hash_algorithm, key_id): - """ - Test ospf_message_digest_decrypt failure cases - """ - +@pytest.mark.parametrize(("key", "password", "hash_algorithm", "key_id"), OSPF_INVALID_INPUT_MD_DICT_DECRYPT) +def test_ospf_message_digest_decrypt_failure(key: str, password: str, hash_algorithm: str, key_id: str) -> None: + """Test ospf_message_digest_decrypt failure cases.""" if hash_algorithm is None or key_id is None: with pytest.raises(ValueError, match="For OSPF message digest keys, both hash_algorithm and key_id are required"): ospf_message_digest_encrypt(password, key=key, hash_algorithm=hash_algorithm, key_id=key_id) @@ -213,26 +191,20 @@ def test_ospf_message_digest_decrypt_failure(key, password, hash_algorithm, key_ ] -@pytest.mark.parametrize("key, mode, password, encrypted_password", ISIS_INPUT_EXPECTED) -def test_isis_encrypt(key, mode, password, encrypted_password): - """ - Test isis_encrypt - """ +@pytest.mark.parametrize(("key", "mode", "password", "encrypted_password"), ISIS_INPUT_EXPECTED) +def test_isis_encrypt(key: str, mode: str, password: str, encrypted_password: str) -> None: + """Test isis_encrypt.""" assert isis_encrypt(password, key=key, mode=mode) == encrypted_password -@pytest.mark.parametrize("key, mode, password, encrypted_password", ISIS_INPUT_EXPECTED) -def test_isis_decrypt_success(key, mode, password, encrypted_password): - """ - Test isis_decrypt successful cases - """ +@pytest.mark.parametrize(("key", "mode", "password", "encrypted_password"), ISIS_INPUT_EXPECTED) +def test_isis_decrypt_success(key: str, mode: str, password: str, encrypted_password: str) -> None: + """Test isis_decrypt successful cases.""" assert isis_decrypt(encrypted_password, key=key, mode=mode) == password -@pytest.mark.parametrize("key, mode, password", ISIS_INVALID_INPUT_DECRYPT) -def test_isis_decrypt_failure(key, mode, password): - """ - Test isis_decrypt failure cases - """ - with pytest.raises(ValueError): +@pytest.mark.parametrize(("key", "mode", "password"), ISIS_INVALID_INPUT_DECRYPT) +def test_isis_decrypt_failure(key: str, mode: str, password: str) -> None: + """Test isis_decrypt failure cases.""" + with pytest.raises(ValueError): # noqa: PT011 isis_decrypt(password, key=key, mode=mode) diff --git a/python-avd/tests/pyavd/utils/password/test_password_utils.py b/python-avd/tests/pyavd/utils/password/test_password_utils.py index d891f06d2b4..1e14da92a07 100644 --- a/python-avd/tests/pyavd/utils/password/test_password_utils.py +++ b/python-avd/tests/pyavd/utils/password/test_password_utils.py @@ -12,52 +12,42 @@ INVALID_PASSWORD_KEY_PAIRS = [("10.42.42.43", b"3QGcqpU2YTwKh2jVQ4Vj/A=="), ("AVD-TEST-DUMMY", b"bM7t58t04qSqLHAfZR/Szg==")] -@pytest.mark.parametrize("key, expected", VALID_PASSWORD_KEY_PAIRS) -def test_cbc_encrypt(key, expected): - """ - Valid cases for both neighbor IP and peer group name - """ +@pytest.mark.parametrize(("key", "expected"), VALID_PASSWORD_KEY_PAIRS) +def test_cbc_encrypt(key: str, expected: str) -> None: + """Valid cases for both neighbor IP and peer group name.""" augmented_key = bytes(f"{key}_passwd", encoding="utf-8") assert cbc_encrypt(augmented_key, b"arista") == expected -@pytest.mark.parametrize("key, password", VALID_PASSWORD_KEY_PAIRS) -def test_cbc_decrypt(key, password): - """ - Valid cases for both neighbor IP and peer group name - """ +@pytest.mark.parametrize(("key", "password"), VALID_PASSWORD_KEY_PAIRS) +def test_cbc_decrypt(key: str, password: str) -> None: + """Valid cases for both neighbor IP and peer group name.""" augmented_key = bytes(f"{key}_passwd", encoding="utf-8") assert cbc_decrypt(augmented_key, password) == b"arista" @pytest.mark.parametrize( - "key, password, expected_raise", + ("key", "password", "expected_raise"), [ pytest.param("TOTO", b"3QGcqpU2YTwKh2jVQ4Vj/A==", ValueError, id="ValueError"), ], ) -def test_cbc_decrypt_failure(key, password, expected_raise): - """ - Valid cases for both neighbor IP and peer group name - """ +def test_cbc_decrypt_failure(key: str, password: str, expected_raise: Exception) -> None: + """Valid cases for both neighbor IP and peer group name.""" augmented_key = bytes(f"{key}_passwd", encoding="utf-8") with pytest.raises(expected_raise): cbc_decrypt(augmented_key, password) -@pytest.mark.parametrize("key, password", VALID_PASSWORD_KEY_PAIRS) -def test_cbc_check_password_success(key, password): - """ - Valid cases for both neighbor IP and peer group name - """ +@pytest.mark.parametrize(("key", "password"), VALID_PASSWORD_KEY_PAIRS) +def test_cbc_check_password_success(key: str, password: str) -> None: + """Valid cases for both neighbor IP and peer group name.""" augmented_key = bytes(f"{key}_passwd", encoding="utf-8") assert cbc_check_password(augmented_key, password) is True -@pytest.mark.parametrize("key, password", INVALID_PASSWORD_KEY_PAIRS) -def test_cbc_check_password_invalid_values(key, password): - """ - Invalid cases for both neighbor IP and peer group name - """ +@pytest.mark.parametrize(("key", "password"), INVALID_PASSWORD_KEY_PAIRS) +def test_cbc_check_password_invalid_values(key: str, password: str) -> None: + """Invalid cases for both neighbor IP and peer group name.""" augmented_key = bytes(f"{key}_passwd", encoding="utf-8") assert cbc_check_password(augmented_key, password) is False diff --git a/python-avd/tests/pyavd/utils/test_format_string.py b/python-avd/tests/pyavd/utils/test_format_string.py new file mode 100644 index 00000000000..4cd2cf52678 --- /dev/null +++ b/python-avd/tests/pyavd/utils/test_format_string.py @@ -0,0 +1,109 @@ +# Copyright (c) 2023-2024 Arista Networks, Inc. +# Use of this source code is governed by the Apache License 2.0 +# that can be found in the LICENSE file. + +from __future__ import annotations + +import pytest + +from pyavd._utils import AvdStringFormatter + + +class DummyClass: + _private = "private" + public = "public" + + +FORMAT_STRING_TESTS = [ + # (, , , ) + # no fields + pytest.param("Ethernet1", (), {}, "Ethernet1", id="no_fields"), + pytest.param("Ethernet1", (), {"foo": "bar"}, "Ethernet1", id="no_fields_with_args"), + pytest.param("{{Ethernet1}}", (), {}, "{Ethernet1}", id="escaped_curly_brace"), + # named fields with upper + pytest.param("{interface!u}", (), {"interface": "Ethernet1"}, "ETHERNET1", id="field_with_existing_arg_and_upper"), + pytest.param("{interface?!u}", (), {}, "", id="optional_field_with_missing_arg_and_upper"), + pytest.param("{interface?!u}", (), {"interface": None}, "", id="optional_field_with_none_arg_and_upper"), + pytest.param("{interface?!u}", (), {"interface": "Ethernet1"}, "ETHERNET1", id="optional_field_with_existing_arg_and_upper"), + pytest.param("{interface.public?!u}", (), {"interface": DummyClass()}, "PUBLIC", id="optional_field_with_attribute_and_upper"), + # positional fields with upper + pytest.param("{!u}", ("Ethernet1",), {}, "ETHERNET1", id="positional_field_with_existing_arg_and_upper"), + pytest.param("{?!u}", (), {}, "", id="positional_optional_field_with_missing_arg_and_upper"), + pytest.param("{?!u}", (None,), {}, "", id="positional_optional_field_with_none_arg_and_upper"), + pytest.param("{?!u}", ("Ethernet1",), {}, "ETHERNET1", id="positional_optional_field_with_existing_arg_and_upper"), + pytest.param("{0?!u}{1?!u}{0?!u}", ("foo", "bar"), {}, "FOOBARFOO", id="positional_optional_repeated_fields_with_existing_args_and_upper"), + pytest.param("{0.public?!u}", (DummyClass(),), {}, "PUBLIC", id="positional_optional_field_with_attribute_and_upper"), + # named fields with prefix + pytest.param("{interfacefoo }", (), {"interface": "Ethernet1"}, "Ethernet1foo ", id="field_with_suffix_existing_arg"), + pytest.param("{interface?>foo}", (), {}, "", id="optional_field_with_suffix_missing_arg"), + pytest.param("{interface?> f o o }", (), {"interface": None}, "", id="optional_field_with_suffix_none_arg"), + pytest.param("{interface?> f o o }", (), {"interface": "Ethernet1"}, "Ethernet1 f o o ", id="optional_field_with_suffix_existing_arg"), + pytest.param("{interface.public?>foo}", (), {"interface": DummyClass()}, "publicfoo", id="optional_field_with_prefix_attribute"), + # positional fields with suffix + pytest.param("{>foo }", ("Ethernet1",), {}, "Ethernet1foo ", id="positional_field_with_suffix_existing_arg"), + pytest.param("{?>foo}", (), {}, "", id="positional_optional_field_with_suffix_missing_arg"), + pytest.param("{?> f o o }", (None,), {}, "", id="positional_optional_field_with_suffix_none_arg"), + pytest.param("{?> f o o }", ("Ethernet1",), {}, "Ethernet1 f o o ", id="positional_optional_field_with_suffix_existing_arg"), + pytest.param("{0>one}{1>two}{0>three}", ("foo", "bar"), {}, "fooonebartwofoothree", id="positional_repeated_fields_with_suffix_existing_args"), + # named fields with prefix and suffix + pytest.param("{interfacebar }", (), {"interface": "Ethernet1"}, "foo Ethernet1bar ", id="field_with_prefix_and_suffix_existing_arg"), + pytest.param("{interface?bar}", (), {}, "", id="optional_field_with_prefix_and_suffix_missing_arg"), + pytest.param("{interface?< f o o > b a r }", (), {"interface": None}, "", id="optional_field_with_prefix_and_suffix_none_arg"), + pytest.param( + "{interface?< f o o > b a r }", (), {"interface": "Ethernet1"}, " f o o Ethernet1 b a r ", id="optional_field_with_prefix_and_suffix_existing_arg" + ), + pytest.param("{interface.publicbar}", (), {"interface": DummyClass()}, "foopublicbar", id="field_with_prefix_attribute"), + # positional fields with prefix and suffix + pytest.param("{bar }", ("Ethernet1",), {}, "foo Ethernet1bar ", id="positional_field_with_prefix_and_suffix_existing_arg"), + pytest.param("{?bar}", (), {}, "", id="positional_optional_field_with_prefix_and_suffix_missing_arg"), + pytest.param("{?< f o o > b a r }", (None,), {}, "", id="positional_optional_field_with_prefix_and_suffix_none_arg"), + pytest.param("{?< f o o > b a r }", ("Ethernet1",), {}, " f o o Ethernet1 b a r ", id="positional_optional_field_with_prefix_and_suffix_existing_arg"), + pytest.param( + "{0one}_{1two}_{0three}", + ("foo", "bar"), + {}, + "aaafooone_bbbbartwo_cccfoothree", + id="positional_repeated_fields_with_prefix_and_suffix_existing_args", + ), + # positional fields with prefix and suffix and upper + pytest.param("{bar !u}", ("Ethernet1",), {}, "foo ETHERNET1bar ", id="positional_field_with_prefix_and_suffix_existing_arg_and_upper"), + pytest.param("{?bar!u}", (), {}, "", id="positional_optional_field_with_prefix_and_suffix_missing_arg_and_upper"), + pytest.param("{?< f o o > b a r !u}", (None,), {}, "", id="positional_optional_field_with_prefix_and_suffix_none_arg_and_upper"), + pytest.param( + "{?< f o o > b a r !u}", ("Ethernet1",), {}, " f o o ETHERNET1 b a r ", id="positional_optional_field_with_prefix_and_suffix_existing_arg_and_upper" + ), +] + + +SAFETY_TESTS = [ + # (, , ) + pytest.param("{foo.__class__.__name__}", (), {"foo": "bar"}, id="kwarg_dunder"), + pytest.param("{_foo}", (), {"_foo": "bar"}, id="kwarg_private"), + pytest.param("{foo._private}", (), {"foo": DummyClass()}, id="kwarg_private_attribute"), + pytest.param("{0.__class__.__name__}", ("foo",), {}, id="arg_dunder"), + pytest.param("{0._private}", (DummyClass(),), {}, id="arg_private_attribute"), +] + + +class TestAvdStringFormatter: + @pytest.mark.parametrize(("format_string", "args", "kwargs", "expected_output"), FORMAT_STRING_TESTS) + def test_avd_formatter(self, format_string: str, args: tuple, kwargs: dict, expected_output: list) -> None: + resp = AvdStringFormatter().format(format_string, *args, **kwargs) + assert resp == expected_output + + @pytest.mark.parametrize(("format_string", "args", "kwargs"), SAFETY_TESTS) + def test_avd_formatter_safety(self, format_string: str, args: tuple, kwargs: dict) -> None: + with pytest.raises(ValueError, match=r"Unsupported field name '.+'. Avoid (attributes|keys) starting with underscore."): + AvdStringFormatter().format(format_string, *args, **kwargs) diff --git a/python-avd/tests/pyavd/utils/test_get.py b/python-avd/tests/pyavd/utils/test_get.py index 75740f90008..4d70533ed0b 100644 --- a/python-avd/tests/pyavd/utils/test_get.py +++ b/python-avd/tests/pyavd/utils/test_get.py @@ -1,11 +1,10 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type import re +from collections.abc import Generator from contextlib import contextmanager import pytest @@ -15,7 +14,7 @@ @contextmanager -def does_not_raise(): +def does_not_raise() -> Generator: yield @@ -94,8 +93,8 @@ def does_not_raise(): class TestUtils: - @pytest.mark.parametrize("DATA", GET_DATA) - def test_get(self, DATA): - with DATA["expected_exception"]: - res = get(DATA["dictionary"], DATA["key"], DATA["default"], DATA["required"], DATA["org_key"], DATA["separator"]) - assert res == DATA["expected_result"] + @pytest.mark.parametrize("data", GET_DATA) + def test_get(self, data: dict) -> None: + with data["expected_exception"]: + res = get(data["dictionary"], data["key"], data["default"], data["required"], data["org_key"], data["separator"]) + assert res == data["expected_result"] diff --git a/python-avd/tests/pyavd/utils/test_get_ip_from_pool.py b/python-avd/tests/pyavd/utils/test_get_ip_from_pool.py index a2e477e3a3e..fc572a80673 100644 --- a/python-avd/tests/pyavd/utils/test_get_ip_from_pool.py +++ b/python-avd/tests/pyavd/utils/test_get_ip_from_pool.py @@ -12,7 +12,7 @@ @pytest.mark.parametrize( - "pool, prefixlen, subnet_offset, ip_offset, expected", + ("pool", "prefixlen", "subnet_offset", "ip_offset", "expected"), [ ("1.2.3.0/32", PREFIXLEN, SUBNET_OFFSET, IP_OFFSET, f"Unable to get {SUBNET_OFFSET + 1} /{PREFIXLEN} subnets from pool 1.2.3.0/32"), (POOL, 8, SUBNET_OFFSET, IP_OFFSET, "Prefix length 8 is smaller than pool network prefix length"), @@ -20,17 +20,15 @@ (POOL, PREFIXLEN, SUBNET_OFFSET, 1, "Unable to get 2 hosts in subnet"), ], ) -def test_get_ip_from_pool_invalid(pool, prefixlen, subnet_offset, ip_offset, expected): - """ - Invalid cases for get_ip_from_pool. - """ +def test_get_ip_from_pool_invalid(pool: str, prefixlen: int, subnet_offset: int, ip_offset: int, expected: str) -> None: + """Invalid cases for get_ip_from_pool.""" with pytest.raises(AristaAvdError) as exc_info: get_ip_from_pool(pool, prefixlen, subnet_offset, ip_offset) assert expected in str(exc_info.value) @pytest.mark.parametrize( - "pool, prefixlen, subnet_offset, ip_offset, expected", + ("pool", "prefixlen", "subnet_offset", "ip_offset", "expected"), [ ("1.2.3.0/31", PREFIXLEN, SUBNET_OFFSET, IP_OFFSET, "1.2.3.1"), (POOL, 25, SUBNET_OFFSET, IP_OFFSET, "1.2.3.129"), @@ -39,10 +37,7 @@ def test_get_ip_from_pool_invalid(pool, prefixlen, subnet_offset, ip_offset, exp (POOL, 31, SUBNET_OFFSET, 1, "1.2.3.3"), ], ) -def test_get_ip_from_pool_valid(pool, prefixlen, subnet_offset, ip_offset, expected): - """ - Valid cases for get_ip_from_pool with default values. - """ - +def test_get_ip_from_pool_valid(pool: str, prefixlen: int, subnet_offset: int, ip_offset: int, expected: str) -> None: + """Valid cases for get_ip_from_pool with default values.""" resp = get_ip_from_pool(pool, prefixlen, subnet_offset, ip_offset) assert resp == expected diff --git a/python-avd/tests/pyavd/utils/test_short_esi_to_route_target.py b/python-avd/tests/pyavd/utils/test_short_esi_to_route_target.py index 1c1d6726270..eef59a56cb9 100644 --- a/python-avd/tests/pyavd/utils/test_short_esi_to_route_target.py +++ b/python-avd/tests/pyavd/utils/test_short_esi_to_route_target.py @@ -1,9 +1,7 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type import pytest @@ -20,7 +18,7 @@ class TestGenerateRouteTargetFilter: - @pytest.mark.parametrize("short_esi, route_target", ESI_TO_RT_TEST_CASES) - def test_short_esi_to_route_target(self, short_esi, route_target): + @pytest.mark.parametrize(("short_esi", "route_target"), ESI_TO_RT_TEST_CASES) + def test_short_esi_to_route_target(self, short_esi: str, route_target: str) -> None: resp = short_esi_to_route_target(short_esi) assert resp == route_target diff --git a/python-avd/tests/pyavd/utils/test_strip_empties.py b/python-avd/tests/pyavd/utils/test_strip_empties.py index 86716ce3407..0ab7cfaaccb 100644 --- a/python-avd/tests/pyavd/utils/test_strip_empties.py +++ b/python-avd/tests/pyavd/utils/test_strip_empties.py @@ -1,9 +1,9 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -from __future__ import absolute_import, division, print_function -__metaclass__ = type + +from typing import Any import pytest @@ -31,7 +31,7 @@ class TestStripEmpties: - def strip_empties_checks(self, output): + def strip_empties_checks(self, output: Any) -> None: assert None not in output assert "" not in output assert [] not in output @@ -42,15 +42,15 @@ def strip_empties_checks(self, output): if isinstance(entry, dict): self.strip_empties_checks(entry.values()) - @pytest.mark.parametrize("DATA", STRIP_EMPTIES.values(), ids=STRIP_EMPTIES.keys()) - def test_strip_empties_string(self, DATA): - output = strip_null_from_data(DATA) - assert output == DATA + @pytest.mark.parametrize("data", STRIP_EMPTIES.values(), ids=STRIP_EMPTIES.keys()) + def test_strip_empties_string(self, data: Any) -> None: + output = strip_null_from_data(data) + assert output == data - @pytest.mark.parametrize("DATA", STRIP_EMPTIES_LIST.values(), ids=STRIP_EMPTIES_LIST.keys()) - def test_strip_empties_list(self, DATA): + @pytest.mark.parametrize("data", STRIP_EMPTIES_LIST.values(), ids=STRIP_EMPTIES_LIST.keys()) + def test_strip_empties_list(self, data: Any) -> None: output = strip_null_from_data( - DATA, + data, strip_values_tuple=( None, "", @@ -60,10 +60,10 @@ def test_strip_empties_list(self, DATA): ) self.strip_empties_checks(output) - @pytest.mark.parametrize("DATA", STRIP_EMPTIES_DICT.values(), ids=STRIP_EMPTIES_DICT.keys()) - def test_strip_empties_dict(self, DATA): + @pytest.mark.parametrize("data", STRIP_EMPTIES_DICT.values(), ids=STRIP_EMPTIES_DICT.keys()) + def test_strip_empties_dict(self, data: Any) -> None: output = strip_null_from_data( - DATA, + data, strip_values_tuple=( None, "", diff --git a/python-avd/tests/schema_tools/artifacts/eos_designs.schema.yml b/python-avd/tests/schema_tools/artifacts/eos_designs.schema.yml index e462b3cfa83..574120fcab8 100644 --- a/python-avd/tests/schema_tools/artifacts/eos_designs.schema.yml +++ b/python-avd/tests/schema_tools/artifacts/eos_designs.schema.yml @@ -1117,7 +1117,7 @@ keys: description: 'Management interface description. ' - default: oob_management + default: OOB_MANAGEMENT mgmt_interface_vrf: documentation_options: table: management-interface-settings @@ -2639,7 +2639,8 @@ keys: documentation_options: table: type-setting type: str - dynamic_valid_values: node_type_keys.type + dynamic_valid_values: + - node_type_keys.type description: 'The `type:` variable needs to be defined for each device in the fabric. diff --git a/python-avd/tests/schema_tools/conftest.py b/python-avd/tests/schema_tools/conftest.py index 4bcef50c469..3170037e3c4 100644 --- a/python-avd/tests/schema_tools/conftest.py +++ b/python-avd/tests/schema_tools/conftest.py @@ -12,9 +12,9 @@ # The schemas are read of test artifacts which are frozen copies of the regular schemas. # We keep a frozen copy of the schemas here, so the expected outputs don't change as the schemas evolve. -with open(EOS_CLI_CONFIG_GEN_SCHEMA_PATH, encoding="UTF-8") as file: +with Path(EOS_CLI_CONFIG_GEN_SCHEMA_PATH).open(encoding="UTF-8") as file: test_eos_cli_config_gen_schema = safe_load(file) -with open(EOS_DESIGNS_SCHEMA_PATH, encoding="UTF-8") as file: +with Path(EOS_DESIGNS_SCHEMA_PATH).open(encoding="UTF-8") as file: test_eos_designs_schema = safe_load(file) @@ -31,11 +31,12 @@ def output_path() -> Path: @pytest.fixture(scope="module") def schema_store() -> dict[str, dict]: """ - Return dict with schemas + Return dict with schemas. + { "eos_cli_config_gen": dict "eos_designs": dict - } + }. """ return { "eos_cli_config_gen": test_eos_cli_config_gen_schema, @@ -46,11 +47,12 @@ def schema_store() -> dict[str, dict]: @pytest.fixture(scope="module") def schema_paths() -> dict[str, dict]: """ - Return dict with schema paths + Return dict with schema paths. + { "eos_cli_config_gen": Path "eos_designs": Path - } + }. """ return { "eos_cli_config_gen": EOS_CLI_CONFIG_GEN_SCHEMA_PATH, diff --git a/python-avd/tests/schema_tools/generate_docs/test_mdtabsgen.py b/python-avd/tests/schema_tools/generate_docs/test_mdtabsgen.py index 2691a46901f..ba5ede5eb4b 100644 --- a/python-avd/tests/schema_tools/generate_docs/test_mdtabsgen.py +++ b/python-avd/tests/schema_tools/generate_docs/test_mdtabsgen.py @@ -16,9 +16,10 @@ @pytest.mark.parametrize("table_name", ["network-services-multicast-settings"]) -def test_get_md_tabs(table_name: str, schema_store, artifacts_path, output_path): +def test_get_md_tabs(table_name: str, schema_store: dict, artifacts_path: Path, output_path: Path) -> None: """ Loads the schema with the resolved $refs and generated md_tabs. + Write the resulting md_tabs to a file. Compare the output with the expected file. """ @@ -27,14 +28,14 @@ def test_get_md_tabs(table_name: str, schema_store, artifacts_path, output_path) output_file = output_path.joinpath(f"{table_name}.md") expected_file = artifacts_path.joinpath(f"expected-{table_name}.md") - def mocked_create_store(): + def mocked_create_store() -> dict: return schema_store with patch("schema_tools.metaschema.resolvemodel.create_store", new=mocked_create_store): schema = AristaAvdSchema(resolve_schema=True, **raw_schema) md_tabs = get_md_tabs(schema, table_name) - with open(output_file, mode="w", encoding="UTF-8") as file: + with Path(output_file).open(mode="w", encoding="UTF-8") as file: file.write(md_tabs) - with open(expected_file, mode="r", encoding="UTF-8") as file: + with Path(expected_file).open(encoding="UTF-8") as file: assert md_tabs == file.read() diff --git a/python-avd/tests/schema_tools/metaschema/test_meta_schema_model.py b/python-avd/tests/schema_tools/metaschema/test_meta_schema_model.py index 4e6d9de2e1d..9d74b868a63 100644 --- a/python-avd/tests/schema_tools/metaschema/test_meta_schema_model.py +++ b/python-avd/tests/schema_tools/metaschema/test_meta_schema_model.py @@ -4,6 +4,7 @@ import json from pathlib import Path from sys import path +from typing import Any import yaml @@ -18,15 +19,16 @@ class NoAliasDumper(yaml.Dumper): - """Dump YAML without generating aliases and anchors for reused ids""" + """Dump YAML without generating aliases and anchors for reused ids.""" - def ignore_aliases(self, _): + def ignore_aliases(self, _: Any) -> bool: return True -def test_pydantic_dump_matches_original_yaml(): +def test_pydantic_dump_matches_original_yaml() -> None: """ Loads the schema _without_ resolving the $ref and then dumps the schema again as json. + Then compares the input schema with the dumped schema. """ pydantic_schema = AristaAvdSchema(resolve_schema=False, **raw_schema) diff --git a/python-avd/tests/utils.py b/python-avd/tests/utils.py index 92c302a9bbf..ff768263bd7 100644 --- a/python-avd/tests/utils.py +++ b/python-avd/tests/utils.py @@ -1,9 +1,9 @@ # Copyright (c) 2023-2024 Arista Networks, Inc. # Use of this source code is governed by the Apache License 2.0 # that can be found in the LICENSE file. -import os from json import JSONDecodeError from json import loads as json_loads +from pathlib import Path from sys import stdin from yaml import unsafe_load as yaml_load @@ -11,12 +11,12 @@ def read_file(filename: str) -> str: if filename == "/dev/stdin" and stdin.isatty(): - print("Write variables in YAML or JSON format and end with ctrl+d to exit") - with open(filename, "r", encoding="UTF-8") as file: + print("Write variables in YAML or JSON format and end with ctrl+d to exit") # noqa: T201 accepting print for stdin inputs + with Path.open(filename, encoding="UTF-8") as file: return file.read() -def read_vars(filename: str): +def read_vars(filename: str) -> dict: data = read_file(filename) try: @@ -27,25 +27,28 @@ def read_vars(filename: str): return yaml_load(data) or {} -def write_result(filename, result): +def write_result(filename: str, result: str) -> None: mode = "w+" if filename == "/dev/stdout": mode = "w" - with open(filename, mode, encoding="UTF-8") as file: + with Path.open(filename, mode, encoding="UTF-8") as file: file.write(result) -def create_common_vars(common_varfiles): +def create_common_vars(common_varfiles: list) -> dict: common_vars = {} for file in common_varfiles: common_vars.update(read_vars(file)) return common_vars -def get_files_in_folder(folder_path): - files = [] - for root, _, filenames in os.walk(folder_path): - for filename in filenames: - files.append(os.path.join(root, filename)) - return files +def get_files_in_folder(folder_path: str) -> list: + return [ + Path( + root, + filename, + ) + for root, _, filenames in Path(folder_path).walk() + for filename in filenames + ]